last executing test programs: 21.715568934s ago: executing program 2 (id=1770): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x21) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x21) (async) 21.585851204s ago: executing program 2 (id=1771): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'cpuacct'}, {0x2b, 'rdma'}, {0x2d, 'cpuacct'}, {0x2d, 'net_cls'}, {0x2d, 'cpu'}, {0x2d, 'net'}, {0x2b, 'hugetlb'}, {0x0, 'perf_event'}, {0x2b, 'pids'}, {0x2b, 'rdma'}]}, 0x4c) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfb, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x80000}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x51, 0x0, 0x5a, 0xe}]}, {0x0, [0x2e, 0x30, 0x30, 0x61, 0x5f]}}, &(0x7f0000000640)=""/150, 0x43, 0x96, 0x1, 0x9}, 0x28) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%ps \x00'}, 0x20) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x10, 0x10}, 0xc) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0xd, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, @alu={0x4, 0x1, 0x5, 0xb, 0x0, 0x40, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe2, &(0x7f00000001c0)=""/226, 0x41100, 0x40, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000740)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000900)=[r5, r6, r7], &(0x7f0000000940)=[{0x5, 0x5, 0x1, 0x9}, {0x10, 0x1, 0x1, 0x8}], 0x10, 0xa36a}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000cc0)={r8, 0x0, 0xf4, 0x46, &(0x7f0000000a40)="f9aa403606a47b1f20148f575a9a0fb94a9700c519151de98f6310886835bde57e48f5771f7e0421814720590a0014de125a04ce60d0334fc7e2b009483a8214ef6b093be5acb20526cc51ad6342fce997b7d76771d9f060b88b1a3ba3abc2716da4f17ef5e8e627bfc8dc9ae9bcc7902b1ddb2a91e90af9d63127a3f61c38bd5d29003a51ff48b7e5a03486c53e256608abefe7eda6e1f5e00435c5d1348d8c463e8652158add0b9e769a2d874ed4013860d89a8caa13eb8ef1aae68fdc92291b971bc5404b9fd20576fcfc0107b3e2adc6dc1df88fb3f51029bba34e77d2db7053e7d1f3b7e4e512883075c396ee824ae419f9", &(0x7f0000000b40)=""/70, 0x3, 0x0, 0x30, 0xa3, &(0x7f0000000bc0)="93227bc7eef38a9cb9d3ba248b792bf30fdc73cb770b664bbc7f01316d4ac96a85e1a0e2d5b8ea7f66f37684d0ae4c4d", &(0x7f0000000c00)="61dbe4dc3fc5e25051c09a977d688d0e9ad302e4691df7a0ce149e276b4ef79c561bb46b8c24a567ebbc1be9adf317bff657395ac2704d9d9c1bd4922064ec313fffa1fb213718d7c2d582adef5fb0875ea3857d17ae03cd370b826c97ef3b546c1a38517872edbc08773303389e4b351dfb6966133b582731b9aa79de617f1f289f489b46d675b4ba68686de7463f14b7da5e8f8b8033ee0b9bbd31e1e1619c6f5821", 0x0, 0x0, 0x3}, 0x50) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000d40)=@can={0x1d, r2}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000dc0)="2c85d2d454a9ffb2d35ba352a1c2760b9bea0592ed3f302b", 0x18}, {&(0x7f0000000e00)="f875b1296c98082500577a8e7d2f4304f937f3e253f3aaaecdc0e4034c34406d", 0x20}, {&(0x7f0000000e40)="ff71ae1a3722d3a044fb256e4d1344f1ca6d6a527c45fad1a0614deb5e1c715f47a2dd8c2259e7ab44baf64217b5f8673dafc0bb704f77acffb1ad2583094f06e33526b71e20ff42b95ff71ce083c1ce710a8b2d0355b16676e67e4154bceeacdfa75ea7ffe4047d99b90db5da75002235030d856c435674f3e4426d5d553b50ce2310a79530826e963d905552243477725cefe26c489a85566416af92d9699f3f8b9daaaa20a6863c4a39cb70936918b892527d584931604a65188f010b79bfeb4641046c7be0a546f1d04ff59ff3ec9811f1c7117ce73f38f05db9ea80e5cbde0e27602b5131c0", 0xe8}, {&(0x7f0000000f40)="07ae27ac585eef49b501b5b44d8bb838d2927bcb1264353bc59e66b1a6f78c7da90304f11f33e48b", 0x28}], 0x4, &(0x7f0000000fc0)=[{0x78, 0x111, 0x4, "6c915c5edc18fecd8bc5edc616512c4ed2121ae8f36e1567ad7628400c813ada07208578a6f0b56a2383815b71d0f16eaa45100b945ee5e1930b1f92b35deb4edc0bde8e126d73a80744fa1c69bf0be64935c312138b09aae58476289e886918e12c5b47e02fb3"}, {0x98, 0x10c, 0x8, "0e23b2a2b6679a45591313024283e4fed0ff746083f79d538e6f981b2ac9a5f4aca5d5fb2292934344c16dcfa931b54dd68ebce36c8489887b1ec209e06cf9de13e68a9fb251565a015939bcdce5320050eb50579dfd1a2d438b1beacc6246674e6748bef9a9dcc68a517d4b5fd893bbf45bec056c1f152f55e80fbdc520d3cd15"}, {0xe0, 0x6, 0x3, "c8ee64a1385f6a5e7c789b67c2fbf4d213d8411e72077c61f0c9572ef996710dbf8c0355bb6b1b40e94be8a4e4dcba2d3a43751d2efbcb344567d5b9b757c4ef5d0db9f1e0585f482d67fe29ddb8796ca6f84eb6bc475d5ad30c3e140a54305939da1e528826c2e56cfb374d64dbc78dde97efa6c7a1e8cc9657dcb354beb584214f849e5ea8c541d2a2f921f93d75f497c310f5ef8afe03c912ea6d83d1d0c4550ad6a94d5253a5b9ffa02b4d50fa9ce2cfcb67b95b5bfbff3ae0786dcbe87b1745313b1cefba7bba2121e893eb"}, {0x108, 0x103, 0xb, "22547e44f31ef4546ba2d204f811686580e6260055c210b57890260e72b33536cc697a47e5ea1a36840b1a0f19f8a7a8de551dad69f06ebbdbfcb229277bda63b8d4571fb4de52f8a3202c9968a7b3228a9cd4229e1f356be4614504201df59d98735d1dae4da80556d95269c0699af70dcc453501c7f34e2decd66c01843a957626c20b79afeb4d60bb4818a53a73d2dacad9f71b47aa6529f165a20eb6538162e5c48d1cd40f1971f7c74d1a8ebd4cc2ff37d619275512bd2ee36fb35aa0b7848c2c18d029518311ed00ce1810713dbaf2b27eee398360f01fdf10656631c2a985b0c47999244ce8ad9314a23b2bb3de"}, {0x1010, 0x88, 0x2, "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"}, {0x30, 0x3a, 0x7, "c5f07e43df1a8ffab6184affae25b2d91862ba33b20d5d582db729"}, {0x48, 0x102, 0xed4, "cad113b7bbc327ec3787d7945f9f8dd2fa1e0a1cb0a46120123a3b623b3559f2c3bb51e4adc0c24e6376403c964eccda5e1c"}], 0x1380}, 0x80) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0xffffff7f, '\x00', r2, r4, 0x4, 0x4, 0x3}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002500)={@ifindex=r2, 0xd, 0x1, 0x6, &(0x7f0000002400)=[0x0], 0x1, 0x0, &(0x7f0000002440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000024c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) r12 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002580)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002540)={@fallback=r8, r8, 0x2, 0x2000, 0x0, @value=r12, @void, @void, @void, r11}, 0x20) openat$cgroup_pressure(r0, &(0x7f00000025c0)='io.pressure\x00', 0x2, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=@base={0x1c, 0x2, 0x1, 0xffffffff, 0x20420, r5, 0x9, '\x00', r2, r4, 0x3, 0x4, 0x2}, 0x50) (async) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002740)={&(0x7f0000002680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x7, [@ptr={0xb, 0x0, 0x0, 0x2, 0x3}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x2f, 0x0, 0x25, 0x1}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x30, 0x0, 0x64, 0x6}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x10}, {0xe, 0x2}, {0x8, 0x2}, {0x4, 0x5}]}]}, {0x0, [0x2e, 0x2e, 0x4f, 0x0, 0x30]}}, &(0x7f0000002700)=""/57, 0x77, 0x39, 0x0, 0x40}, 0x28) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002a80)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000002780)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xffffff59}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x781, 0x0, 0x0, 0x0, 0xfcd2}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000002880)='syzkaller\x00', 0x2, 0xc7, &(0x7f00000028c0)=""/199, 0x40f00, 0x4, '\x00', r2, 0x1b, r12, 0x8, &(0x7f00000029c0)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r3, 0x0, 0x1, &(0x7f0000002a00)=[r6, r5, r5, r9, r7], &(0x7f0000002a40)=[{0x3, 0x3, 0x5, 0x3}], 0x10, 0x327}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000002e40)={0x6, 0x15, &(0x7f0000002b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x2, 0x4, 0x4, 0x40, 0x4}, @generic={0x5, 0xa, 0x4, 0x4, 0xa2}, @jmp={0x5, 0x1, 0xb, 0xa, 0x7, 0xfffffffffffffffc, 0x8}]}, &(0x7f0000002c40)='GPL\x00', 0x247e, 0x65, &(0x7f0000002c80)=""/101, 0x41100, 0x4, '\x00', r10, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000002d00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000002d40)={0x3, 0x10, 0x4, 0x9}, 0x10, r3, 0xffffffffffffffff, 0x6, &(0x7f0000002d80)=[r9, r7, r6], &(0x7f0000002dc0)=[{0x1, 0x5, 0xd, 0x8}, {0x4, 0x4, 0x3, 0x1}, {0x5, 0x4, 0xe, 0x1}, {0x1, 0x5, 0xe, 0x6}, {0x5, 0x1, 0x4, 0xb}, {0x3, 0x3, 0x3, 0x2019fcb863a0ec18}], 0x10, 0x40397996}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002b40)={@cgroup, r8, 0x26, 0x0, r15, @void, @value=r16, @void, @void, r11}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003200)={0x6, 0x27, &(0x7f0000002f00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0x2, 0x2, 0x2, 0x1, 0xfffffffffffffff8, 0x13a56a019b05679}, @jmp={0x5, 0x0, 0xd, 0x1, 0x2, 0x0, 0x1}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003040)='GPL\x00', 0x5, 0x75, &(0x7f0000003080)=""/117, 0x100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003100)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x1, 0xb, 0x0, 0x401}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000003180)=[r6, r7, r13, r7], &(0x7f00000031c0)=[{0x0, 0x4, 0xd, 0x1}, {0x0, 0x4, 0x7, 0x7}, {0x4, 0x5, 0x4, 0x9}, {0x5, 0x2, 0xf}], 0x10, 0x6}, 0x94) (async) r17 = bpf$ITER_CREATE(0x21, &(0x7f00000032c0)={r12}, 0x8) r18 = syz_clone(0x40000000, &(0x7f0000003300)="5a41c8e6b2eaaf3c923e91df57186d3067b27dd0ebd258cf66b06f21e49bebd4e86af4880913c16dfe04d9a6e3c6c13c042fa7ebca2074713641636710b2bcd7da9b9e0d2ee66a3b9b7917fa38b33cace2255bab702d99c89ad048d9dab36962b19795c2297a2632fdde04c74bb60bf31eac8a5820288cd84c58d4fa4be759a3adef11147c50bc225c3a79f38210c4a6efae7fb512b54465146b68eac6f8d9a78fb4a42ae948018028e1961a5ddd42c8b26e06fec380fe014d2aa7d43947cb53824b0ccabaeedbd8cdeff9bea59d4998fd6a96c462b541d76e6c03f9313b14942fa40d321238d0bccfd4edbb7cff6c028d102bf324813dc047cfe25c0bba", 0xfe, &(0x7f0000003400), &(0x7f0000003440), &(0x7f0000003480)="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") syz_open_procfs$namespace(r18, &(0x7f0000004480)='ns/net\x00') (async) r19 = bpf$ITER_CREATE(0x21, &(0x7f00000044c0)={r17}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004580)={{r5}, &(0x7f0000004500), &(0x7f0000004540)='%+9llu \x00'}, 0x20) ioctl$TUNGETVNETLE(r19, 0x800454dd, &(0x7f00000045c0)) (async) openat$cgroup_procs(r19, &(0x7f0000004600)='cgroup.procs\x00', 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r17, 0x1, 0x32, &(0x7f0000004640)=r15, 0x4) 21.10343943s ago: executing program 0 (id=1772): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffff801, 0x3c0b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x0, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0x7}, 0x2, 0x7, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200020000060800000081000000800000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="e00500000087dbe9abc8d24470e7", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYBLOB="0000000040ffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000014006b03000000d86e6c1d00028409fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6aee6d700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$sock(r5, &(0x7f00000005c0)={&(0x7f0000000300)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000015c0)="58091a", 0x3}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, 0x0, 0x0}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 21.10302931s ago: executing program 1 (id=1773): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="6b1108b2b8765c9c1782dc196ff9711803731b99db4aad2ce3d1bae7650431530edb50fc976c4ef74d95b14dc4824de8ccffcf298e4c2c4d84eaf16f8879885420b28e69a831f27f14cd6979179a1c51ed9eea623c3230c71cc8f0df2dca004eea8ef8c549b59d7c08c7b6e8469e02b9f83c7cae5df351492732ee7689c4f6cb240e90f7d8f4a3a37673d629b371831af3046f3bad09a3da3a652466de58876f5e57e0e3d62779e1d809", 0xaa}, {0x0}, {&(0x7f0000000540)="3dbef7410a1726186c0615aead293e4c6914f00d19dedd9ab4370fe5638c4cef79f95adfdcc13fa6ddff0b02d1fbee78a7d6bc6edace5a8602ffdca8e9b844ba02d377594fdd655d696a970adbc341ff7cf31639fcb8405cdd66a57976a09ac2c3b7aa87b66a253061a1ae5638ab4086e89e19a6a5dcdef492be59763e403e3db47f684b822eed0fe1a5eae393418717ed55026894c5fdfda3c28e3c9b0ade4dd76c441c082713167cbb0e0d46a9237e3fdeed0d0d84dcc0498085341319f341366f1ce15a", 0xc5}, {&(0x7f0000000640)="2975176aee417a093976167193f3a94f56fa9fc9f0e9781551478e51d4d3d5f148fb288bf6ab06c51ad95d6332", 0x2d}], 0x4, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}, 0x40041) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000010181100007f", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="611276000000000061138c0000000000bf2000000000000016000700071b48013d030100000000009500020100000000bc26000000000000bf67080000000000070300000fff0700670200000c000000360600000ee600f0bf050000000000000f250000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586a51309834c1b8894af585e9134cf05d811"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffc44}, 0x48) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2007ffe}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r5, 0x58, &(0x7f0000000400)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1ffffffffffffdd5, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r7 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x95e}, {0x0}], 0x2, &(0x7f00000010c0)}, 0x0) 18.235639213s ago: executing program 0 (id=1776): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782dbe3ff040220080207000000040000a118000200e000000700000e1208000f0100810401a80016ea1f00040000005f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20040014) r4 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000700000000000000756d000085000000b6000000180000000700000000000000040000001800000008000000000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000c132eec8bb4ad2aeb7000000b70200000000000085000000860000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xb7, &(0x7f00000001c0)=""/183, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xe, 0x59, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x3, 0x1, 0xc}], 0x10, 0xd}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0xa118, 0x4a, &(0x7f0000000500)=""/74, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x6, 0xc, 0x1}, 0x10, 0x24988, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x3dc}, 0x94) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000940)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r7, 0x1, 0x1, 0x5, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000880)={0x5, 0x0}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000008c0)=0x400) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="170000008a000000760000000000000027000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@fallback=r4, r5, 0x21, 0x2031, r6, @void, @void, @value=r9, @void, r8}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x2, 0x0}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000500"}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r11, 0xffffffffffffffff, 0x7, 0x22, 0xffffffffffffffff, @void, @void, @void, @value=r12, r8}, 0x20) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@map=r1, r2, 0x7, 0x10, 0x0, @void, @value=r10, @void, @void, r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 18.149497686s ago: executing program 1 (id=1777): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf, 0x2, 0x5, 0xb, 0x0, 0x6, 0x80, 0xf, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, @perf_bp, 0xc00, 0xffff, 0x3, 0x4, 0xf1, 0x5, 0x35, 0x0, 0x6, 0x0, 0x7}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x10) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%ps \x00'}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0xf9, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xff, '\x00', r3, r5, 0x1, 0x1, 0x4}, 0x50) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r4, 0x4) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4e0c, '\x00', r3, r5, 0x2, 0x2, 0x5}, 0x50) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='GPL\x00', 0xfc, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x1b, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000740)=[r5, r6, r5, r1, r1, r1, r8, r5, r6], &(0x7f0000000780)=[{0x2, 0x4, 0xc, 0x7}], 0x10, 0x1}, 0x94) ioctl$TUNSETDEBUG(r5, 0x400454c9, &(0x7f0000000880)=0x7) socketpair(0x9, 0x2, 0x7, &(0x7f00000008c0)) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000900)={r5}, 0x8) (async) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x450801, 0x0) ioctl$TUNDETACHFILTER(r11, 0x401054d6, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r1, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) socketpair(0x8, 0x1, 0x38e, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000a80)='GPL\x00') (async) sendmsg$unix(r13, &(0x7f0000000c40)={&(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000b40)="f707860a8f9fe11830cc5edb5b2ffe893f4d4e7237e9f06cb678772151c6ca2cf27afc6e34bd0d4db6b5a92c82bfc320ccd62e20df016047225c749d46c00a2e65c0c973bbdfa087d59cedfbb9dda5f616bdab227f6e53b9d49be76ee4a3eb6032fbf92e5f151c787b5764180bf2bbbdd6fdf54ecce95178e37ce471", 0x7c}], 0x1, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x20008000}, 0x20040000) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d80)={@fallback=r8, 0xc, 0x1, 0x7, &(0x7f0000000c80)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000cc0)=[0x0, 0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000dc0)={@fallback=r10, r9, 0x1a, 0x24, 0x0, @void, @void, @void, @value=r2, r15}, 0x20) (async) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x8, [@enum64={0x6, 0x6, 0x0, 0x13, 0x1, 0x8, [{0x10, 0x100, 0x74e}, {0x8, 0x1, 0x81}, {0x4, 0x400, 0x4}, {0x2, 0x7fffffff, 0xffffffd8}, {0x1, 0x0, 0xbff7}, {0xa, 0x1d, 0xfffffff8}]}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0xf, 0x7}, {0x3, 0x4e85000}, {0xa, 0x4}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x4}, {0xf}, {0xf}, {0xa, 0x2}, {0x9, 0x3}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x2e, 0x2e, 0x0, 0x2e, 0x5f]}}, &(0x7f0000001040)=""/122, 0xe4, 0x7a, 0x1, 0xc, 0x10000, @value=r5}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_ext={0x1c, 0x7, &(0x7f0000000e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x57}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000e40)='syzkaller\x00', 0x10001, 0xb0, &(0x7f0000000e80)=""/176, 0x41000, 0x10, '\x00', r12, 0x0, r16, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001100)={0x1, 0x7, 0x4, 0x5}, 0x10, 0x2faf2, r10, 0x6, 0x0, &(0x7f0000001140)=[{0x2, 0x2, 0xc, 0x6}, {0x2, 0x3, 0x8, 0xc}, {0x5, 0x5, 0x8, 0x4}, {0x3, 0x2, 0xc, 0xb}, {0x1, 0x2, 0x0, 0x1}, {0x3, 0x3, 0x2, 0xa}], 0x10, 0xd}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001300)={{r14, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f00000012c0)=r10}, 0x20) (async) write$cgroup_subtree(r0, &(0x7f0000001340)={[{0x2b, 'rlimit'}]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001380)) (async) r18 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001400)=@generic={&(0x7f00000013c0)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={r10, 0xffffffffffffffff}, 0x4) (async) r20 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002600)=r4, 0x4) (async) r21 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002680)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', r12, r10, 0x1, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x1e, 0x21, &(0x7f0000001480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6b286c7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r19}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r17, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='syzkaller\x00', 0x100, 0x1000, &(0x7f0000001600)=""/4096, 0x41000, 0x7a, '\x00', 0x0, @fallback=0x31, r20, 0x8, &(0x7f0000002640)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, r14, 0x6, &(0x7f00000027c0)=[r8, r14, r1, r21, 0xffffffffffffffff, r1, r10, r1, r14, r8], &(0x7f0000002800)=[{0x3, 0x5, 0x4, 0xc}, {0x3, 0x3, 0x3, 0x8}, {0x2, 0x4, 0x0, 0xc}, {0x2, 0x2, 0xa, 0xc}, {0x1, 0x5, 0x1, 0x6}, {0x0, 0x5, 0x8, 0x3}], 0x10, 0xa0000000}, 0x94) 18.082929227s ago: executing program 3 (id=1778): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair(0x26, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x700, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) 18.037043234s ago: executing program 0 (id=1779): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x58, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x50, 0x8}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x0, 0xffffffff, 0x200, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x7}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x60, '\x00', r3, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x5, 0x8, 0x100}, 0x10, 0x2376c, r1, 0x0, &(0x7f0000000a00)=[r4, 0xffffffffffffffff, r5, r6, 0x1]}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d08", 0x13}], 0x1}, 0x4004) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) socket$kcm(0x10, 0x3, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdb, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x58, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x50, 0x8}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x0, 0xffffffff, 0x200, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x7}, 0x50) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xb0}, @func={0x85, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x60, '\x00', r3, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x5, 0x8, 0x100}, 0x10, 0x2376c, r1, 0x0, &(0x7f0000000a00)=[r4, 0xffffffffffffffff, r5, r6, 0x1]}, 0x94) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d08", 0x13}], 0x1}, 0x4004) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 18.036585554s ago: executing program 1 (id=1780): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x5, 0x2, 0xfffff271, 0x1, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) socket$kcm(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) 17.846009024s ago: executing program 3 (id=1781): r0 = socket$kcm(0x10, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="2e00000011008188040f80ec59acbc04138a81ee390000060000000000000002002d1f008ffd7311b0ed00080000", 0x2e}], 0x1}, 0x94) 17.801456161s ago: executing program 1 (id=1782): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xe7d}, 0x94) sendmsg(r0, &(0x7f0000000d80)={&(0x7f0000000600)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, 0x0, 0x0, &(0x7f00000007c0)=[{0x50, 0x1, 0x1, "b3ca79e642aa09fba389c66776a7785fe0bd9420704197837d6abbf6a2641c61a0025da0df9cc669cf07f7bf0193f90cccd0f47c64ec758889aa4482"}, {0x10, 0x10d, 0x2d62}, {0x70, 0x118, 0xfffffffe, "24454ead6919e228f89b6fe2b3d83dd798745d2a875c0c77f7014fa74973f8e918fb1681c354b0afd1eed2d6f6cb226a39864dd379c93753ff16aa3c4bcdea6e2415a55523081510a72e7a0ce4efc04c283239ef5d52bbd809b152ab2af1"}, {0x80, 0x101, 0x1ff, "d64d4b078522fb2164789e91e54641f9b5d898830bd94f53fba587047fcf4ccfb0424ad872c86584942851647492e1f4855c7570b12d2d5c3a04d97fd59a3ef1da3fec406566d04bc0b908cb65dc348b6a533c22b8f61049994b954f94c893d35a141cf1f0fdd337d6"}, {0x10, 0x104, 0x5}, {0x58, 0x108, 0x5, "d8037f44842c7db4f7c804175fb62cc860c399ade3c6fb7c7db1834951a6c02461e329677ff660f7b2ddd96f70f01359ae10796c023c510324cc79618cb72a3dd447124a223539"}, {0x40, 0x110, 0x2, "136827270141340750a8a5ebe93d136590415f8ccd5d65a570aaa7931032411823a0b0adf7c48de6a1c0aa2b1e4f9fea"}, {0x108, 0x102, 0x541, "4fb4874f13d69f2d7d6e1b56667fb5d37658df409b88a926dfcde449f08f716fa80cbf329e85c5e0dbebb7dace065f821728b3def02412ad59705a34277237115a77e98dc71391e3da1ecb4cd83b4e7240ecb9570b7966979ed26383d86bf8f9017e9a0cd668587f352bd1879ab8baf0ce1ed765e535b8d5974f525c808667f4c0e4c4b2a8f683cbfe3b4060bfaf83801ebce933c6322bd821744ba1f5d350446e937934948363ab0af7817472f0253f68fc84ee9cdb4662ddc4f509cb32e778ac8d70321c509e7645de97712b1e6e8104cdbd62aeef942ccaa1c8bf9869c65636e4ed07a227d9a6bf8a1a411449e9d8d18d20236eb557b9"}, {0x20, 0x113, 0x4, "b3e0aa6b527a3c8510e902"}], 0x320}, 0x40000) r2 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916320000000000bf67000000000000a406000007ff07006706000002000000070600000ee60000bf050000000000002e720000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}], 0x10}, 0x493e4dd4a2269370) socket$kcm(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r3, &(0x7f00000000c0), 0x0}, 0x20) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000000), 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, 0x0, 0x0) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0xd, 0x0, 0x5b) 17.798798002s ago: executing program 3 (id=1783): bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000340)="f2239db6348a13fcbd734f1f9a46f4e673072b1f850eb8e8ddf2766e543a9d480ae5ab72461fd1acbb435e84d668e2ca57e1c62af11449b5a4998294170adc86e2a7b049715c3ee142ddd8033518d6bb63aeb9d3679c34df67b9784a282a3c4bfa763fe42c1cec401722b7b7db7eea5892dda4608d36f1c087517c8e5fe04a6474d2d32bc53ae7d7930e0774f197b2934266bfd9cd972ab8c612cafdc65ac6827260607a0a05bf23a79d89fcd567e7c72ced3de86459714f7e84bccdc06facf115f8b78cd4ef7d74b79ed3fdfbb8d432047ebf00c624f0892ca81493688adc1967d8f3d422ac35a08725059643cbc2175d7631151cae2de251", &(0x7f0000000680)=""/237}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="18f7ffffff000001000000000c0000001811e200", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000001f40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xa6d}, 0x200, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x8e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000040)="ab00000031c203f4b76ffa24fc60100003df0900020005358ac137800500026ced000300"/46, 0x2e}, {&(0x7f0000001fc0)="c51260a8cbfae0c97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31652a005a85e988285af8f70ec763129dac5d3c4e5722f651778050e85eebb55b6e28b0023ec39da77a70fcc3a148fa6edc37169089bf94207176394", 0x63}, {&(0x7f00000019c0)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) r4 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x5452, &(0x7f00000006c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000040), 0x4) recvmsg$kcm(r3, &(0x7f0000000340)={&(0x7f00000000c0)=@ax25={{0x3, @default}, [@rose, @rose, @remote, @remote, @remote, @netrom, @rose, @bcast]}, 0x80, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000013c0)=""/244, 0xf4}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/32, 0x20}, {&(0x7f00000014c0)=""/221, 0xdd}, {&(0x7f00000015c0)=""/214, 0xd6}, {&(0x7f00000016c0)=""/181, 0xb5}], 0x8, &(0x7f0000001800)=""/148, 0x94}, 0x2) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x80, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x30, &(0x7f0000001a40)=ANY=[@ANYBLOB="1872da002492ffff000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001834000005000000000000000000000085000000bd000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186500000e00000000000000040000001800000002000000000000000000c000bd060c00fcffffff180000008700000000000000040000008cbbfcffffffffff180100002020782500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x11, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r4, &(0x7f00000033c0)={&(0x7f0000001b80)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x2, 0x4}}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001c00)="a188618f337fd220002795d641d25eb0114a5368036b0ad8065336ddbc746ede8f867bc654083009820edb9ba93bc02b8a12df0159acd1103495fc5e8d3a4a600ae1643107bae43e1d20382d97d1d733efc6ee372ecfc97151ecd2f07e958cfa03f6479b6015f329bf64445922fa70d3b1af780c4e51487398e45cbb79941eeb9daba444f2d386035cf9eb2ea83198a1cdf17e1ebd431dacea", 0x99}], 0x1, &(0x7f0000002100)=[{0x20, 0x109, 0xfffffffc, "fef4ae890f7b0b7570a4e94eedd6384d"}, {0xb0, 0x10a, 0x4, "6eda4b88c04d7a5a4223aecac83fea589f84135fa0cd26d94fb95ad85b094841b11a2ff6627567322d4e951d7819f645e11df2c3b748af8eaf1ce679ae4be0d3e9e5795759c0a7305048c2d4397f2a68e99a32c56db8a1d1332dc3bdeb16cf96113065a58b82ec25f07abaf66c14a6ddd4c4ea00846ffed74b5163e9e4ea872816e4baa7a784ac5c04239d37b3ad11e1afc6a6a59f33d97804024861485dad"}, {0x1010, 0x29, 0x0, "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"}, {0xd8, 0x116, 0x7f, "d784e0414245ee07412a388c90beda606c8aa2f5be028f125f99a93322c7a1920f2f7c767e6bbd94074a4604fb0d51e46016187867774f9b88bbd5ed793fb215c68f4dc1e5f4ae8a20c4dd1250dce75359849f9964634529aa20bffffc2f656e6d91afe534dcc374a7566d113870ec8c7061f2e552ca24e83fd36594309c970877e1984841665ecd9219d8ed8ca4a78a0b7fd7e2894dc160f2437929f00b194d0fcce94d58c701029849f4def876fd842f2a50b298f707f786af516b7e2f19723ea16a1db0b1"}, {0x28, 0x119, 0x7, "1dde94df32351671578acc05cf042f22f739c8fd8a2d"}, {0xc0, 0x103, 0x5, "ea14bec9ada0815412b2704d23ec18d3a2bf6469c86f5c2bb189f8570822753e0fbeeaa3bba580a57ae5b95e0f2bf7d756d26958c58435cb5a99e3ed76d47093ba1eb5f13bc2850148790ef652aa6e5f3d1ecc6f2176d5afb2b94e2b0707ffd9dde9d04937752b391baad2c25f624a02dfc58519eb80002ed443d567f46e999cd8403d2e74321fe53f83f621cbfc28fda19c150c892fc933d342e279a19f0ddca3e035e1560129dfad977639179444"}], 0x12a0}, 0x40804) r8 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(r5, &(0x7f0000001f00)={0xffffffffffffffff, 0x0, &(0x7f0000001a00)=[{&(0x7f0000002080)=""/1, 0x1}, {&(0x7f0000001cc0)=""/134, 0x86}, {&(0x7f0000001d80)=""/217, 0xd9}], 0x3, &(0x7f0000001e80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x1) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0xfffffd65, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8c1200f90429fc5a010f5dd9", 0x14}], 0x1}, 0x0) close(r8) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) mkdir(&(0x7f0000001980)='./file0\x00', 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x8, 0x0, 0x0, 0xe, 0x9}]}, {0x0, [0x2e, 0x61, 0x30]}}, &(0x7f0000000280)=""/26, 0x2d, 0x1a, 0x1, 0x7, 0x10000, @value=r9}, 0x28) 17.74845661s ago: executing program 0 (id=1784): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181d0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001c000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x16) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000009000000dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359caa1af3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae2acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da31290bce645451b851111dd98ac4d8da9317c2c082020e0b2d634086785f3fe41a3053645cc413790faf7e229c78284"], 0x0, 0x5, 0xa8, &(0x7f0000000640)=""/168, 0x0, 0x40, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x500}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 17.341713193s ago: executing program 1 (id=1785): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4206}, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, &(0x7f0000000040), 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r0, &(0x7f00000002c0)="ff86fc5d6a664454c5f1e11329a30029e3c4c104ae646f6cea300e6412c822e489cec5e6797380ba4aab718e368db162a39b41f0b778911b453d80e74804bc1c6d0b1c3004ec44bf6666f583d502989f962bd2c9aa4dab9530fe3b6e1261f2f691b83be6aa0c4cff38ce175107fb889f92731e4d7174da7e65ff7928427a0517db2581108eeb7861bbb20399d54c7e2efa574a32f5e94c343265482d5859e831a9ccd08a", &(0x7f0000000380)=""/14}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000007600000000000000270a0000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) 17.293874451s ago: executing program 2 (id=1786): socketpair(0x26, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 17.1738837s ago: executing program 0 (id=1787): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782dbe3ff040220080207000000040000a118000200e000000700000e1208000f0100810401a80016ea1f00040000005f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20040014) r4 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000700000000000000756d000085000000b6000000180000000700000000000000040000001800000008000000000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000c132eec8bb4ad2aeb7000000b70200000000000085000000860000"], &(0x7f0000000180)='GPL\x00', 0x2, 0xb7, &(0x7f00000001c0)=""/183, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xe, 0x59, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x3, 0x3, 0x1, 0xc}], 0x10, 0xd}, 0x94) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000004c0)='GPL\x00', 0xa118, 0x4a, &(0x7f0000000500)=""/74, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x6, 0xc, 0x1}, 0x10, 0x24988, 0xffffffffffffffff, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], 0x0, 0x10, 0x3dc}, 0x94) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000940)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@cgroup=r7, 0x1, 0x1, 0x5, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000880)={0x5, 0x0}, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000008c0)=0x400) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="170000008a000000760000000000000027000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@fallback=r4, r5, 0x21, 0x2031, r6, @void, @void, @value=r9, @void, r8}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000500"}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@map=r11, 0xffffffffffffffff, 0x7, 0x22, 0xffffffffffffffff, @void, @void, @void, @value, r8}, 0x20) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@map=r1, r2, 0x7, 0x10, 0x0, @void, @value=r10, @void, @void, r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.959656424s ago: executing program 3 (id=1788): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x23, 0x5, 0x0) sendmsg(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x40c0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x1e2f7d48a4148413) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002bf0900053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x600300) 16.865929619s ago: executing program 2 (id=1789): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000007f440000000000006b0ab0fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cde538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82684d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6f}}, &(0x7f0000000000)='GPL\x00'}, 0x94) 16.802377769s ago: executing program 0 (id=1790): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x5, 0x2, 0xfffff271, 0x1, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) socket$kcm(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x1, 0x1, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) 16.73468694s ago: executing program 2 (id=1791): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair(0x26, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa800, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) 16.648981233s ago: executing program 3 (id=1792): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) (async) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/4085, 0xff5}], 0x1}, 0x0) (async) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91724fc60100005000a000200053582c137153e37000c0680040002000a00", 0x33fe0}], 0x1}, 0x0) 16.646648683s ago: executing program 1 (id=1793): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x9, 0x6, 0x812, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000007000000000000000080000095b10b8979cbbe7dfa00000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 16.517175344s ago: executing program 2 (id=1794): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0x4, 0xd, 0x0, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22029, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x70, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8}, 0x48) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a600e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 16.338627022s ago: executing program 3 (id=1795): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x7ffffc, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r1}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x18}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500eb0000000000858c9b571a614497ff0f8b4229db6d97477c511a51f7eeffe2e6f821874bd59023b374f5b43eab69c8b27b0a88354bdf8869fc26b1cdcfe43189"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r6, 0xffffffffffffff7a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, 0x4d, 0x8, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002400000008000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r8, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x7ff, 0x80, 0x8, 0x1000, 0x1, 0x5, '\x00', r9, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@map_fd={0x18, 0x5, 0x1, 0x0, r2}, @cb_func, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8755961f}}]}, &(0x7f0000000580)='syzkaller\x00', 0xa777, 0x48, &(0x7f00000005c0)=""/72, 0x40f00, 0xa, '\x00', r9, 0x25, r5, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r7, r7, r7, r7, r7, r7], &(0x7f00000006c0)=[{0x3, 0x3, 0x10}], 0x10, 0x3}, 0x94) close(r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r2, r6}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000800)=0xffffffffffffff62, 0x12) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001c40)) 1.661760988s ago: executing program 32 (id=1790): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x5, 0x2, 0xfffff271, 0x1, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) socket$kcm(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x1, 0x1, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) 371.765512ms ago: executing program 33 (id=1793): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x9, 0x6, 0x812, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000007000000000000000080000095b10b8979cbbe7dfa00000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 200.689788ms ago: executing program 34 (id=1794): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0x4, 0xd, 0x0, 0x1}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22029, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x70, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8}, 0x48) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a600e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async, rerun: 64) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 0s ago: executing program 35 (id=1795): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x7ffffc, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r1}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x18}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500eb0000000000858c9b571a614497ff0f8b4229db6d97477c511a51f7eeffe2e6f821874bd59023b374f5b43eab69c8b27b0a88354bdf8869fc26b1cdcfe43189"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r6, 0xffffffffffffff7a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, 0x4d, 0x8, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002400000008000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r8, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x7ff, 0x80, 0x8, 0x1000, 0x1, 0x5, '\x00', r9, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@map_fd={0x18, 0x5, 0x1, 0x0, r2}, @cb_func, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8755961f}}]}, &(0x7f0000000580)='syzkaller\x00', 0xa777, 0x48, &(0x7f00000005c0)=""/72, 0x40f00, 0xa, '\x00', r9, 0x25, r5, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r7, r7, r7, r7, r7, r7], &(0x7f00000006c0)=[{0x3, 0x3, 0x10}], 0x10, 0x3}, 0x94) close(r4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r2, r6}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r11, &(0x7f0000000800)=0xffffffffffffff62, 0x12) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001c40)) kernel console output (not intermixed with test programs): s leftover after parsing attributes in process `syz.0.919'. [ 252.340407][ T5772] Bluetooth: hci0: Malformed LE Event: 0x0d [ 252.603699][ T8798] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.923'. [ 252.666020][ T8801] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.925'. [ 252.832206][ T8807] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.926'. [ 252.874353][ T8812] netlink: 'syz.0.928': attribute type 3 has an invalid length. [ 253.024311][ T8818] IPv6: Can't replace route, no match found [ 253.221814][ T8823] netlink: 'syz.0.931': attribute type 10 has an invalid length. [ 253.230288][ T8823] netlink: 2 bytes leftover after parsing attributes in process `syz.0.931'. [ 253.303063][ T8825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.600847][ T8832] netlink: 'syz.2.934': attribute type 7 has an invalid length. [ 253.734913][ T8834] syzkaller0: entered promiscuous mode [ 253.780166][ T8834] syzkaller0: entered allmulticast mode [ 255.091757][ T78] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.829882][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.840557][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.251348][ T8857] netlink: 'syz.2.941': attribute type 10 has an invalid length. [ 256.259467][ T8857] netlink: 2 bytes leftover after parsing attributes in process `syz.2.941'. [ 256.451652][ T5772] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 256.770257][ T8871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.837585][ T8870] netlink: 'syz.2.946': attribute type 10 has an invalid length. [ 256.877462][ T8870] netlink: 2 bytes leftover after parsing attributes in process `syz.2.946'. [ 257.227860][ T8888] IPv6: Can't replace route, no match found [ 257.473184][ T8893] syzkaller0: entered promiscuous mode [ 257.479047][ T8893] syzkaller0: entered allmulticast mode [ 257.706330][ T5772] Bluetooth: hci1: Malformed LE Event: 0x0d [ 259.520633][ T8906] netlink: 'syz.1.959': attribute type 10 has an invalid length. [ 259.532754][ T8906] netlink: 2 bytes leftover after parsing attributes in process `syz.1.959'. [ 259.581593][ T8910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.058639][ T8920] netlink: 'syz.3.965': attribute type 10 has an invalid length. [ 260.073436][ T8920] netlink: 2 bytes leftover after parsing attributes in process `syz.3.965'. [ 260.364403][ T5772] Bluetooth: hci2: Malformed LE Event: 0x0d [ 260.424658][ T8930] syzkaller0: entered promiscuous mode [ 260.430377][ T8930] syzkaller0: entered allmulticast mode [ 261.124329][ T8944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.544594][ T8936] IPv6: Can't replace route, no match found [ 262.550714][ T8948] netlink: 'syz.1.977': attribute type 7 has an invalid length. [ 262.806833][ T8957] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.980'. [ 263.162324][ T5772] Bluetooth: hci1: Malformed LE Event: 0x0d [ 263.202589][ T8966] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 263.211820][ T8966] netlink: 2 bytes leftover after parsing attributes in process `syz.3.983'. [ 263.306517][ T8971] netlink: 'syz.0.986': attribute type 7 has an invalid length. [ 263.434902][ T8975] IPv6: Can't replace route, no match found [ 263.466668][ T8974] netlink: 'syz.0.987': attribute type 3 has an invalid length. [ 263.474504][ T8974] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.987'. [ 263.549773][ T8974] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.987'. [ 263.770313][ T8978] syzkaller0: entered promiscuous mode [ 263.778673][ T8978] syzkaller0: entered allmulticast mode [ 263.869666][ T8980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.801141][ T8993] netlink: 'syz.0.995': attribute type 7 has an invalid length. [ 266.034180][ T9001] FAULT_INJECTION: forcing a failure. [ 266.034180][ T9001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.054912][ T9001] CPU: 0 PID: 9001 Comm: syz.1.996 Not tainted syzkaller #0 [ 266.062259][ T9001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 266.072365][ T9001] Call Trace: [ 266.075704][ T9001] [ 266.078681][ T9001] dump_stack_lvl+0x18c/0x250 [ 266.083446][ T9001] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.089680][ T9001] ? show_regs_print_info+0x20/0x20 [ 266.094952][ T9001] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.101195][ T9001] should_fail_ex+0x39d/0x4d0 [ 266.105972][ T9001] _copy_from_user+0x2f/0xe0 [ 266.110658][ T9001] __sys_bpf+0x23e/0x890 [ 266.114998][ T9001] ? bpf_link_show_fdinfo+0x390/0x390 [ 266.120505][ T9001] ? lock_chain_count+0x20/0x20 [ 266.125438][ T9001] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 266.131540][ T9001] __x64_sys_bpf+0x7c/0x90 [ 266.136046][ T9001] do_syscall_64+0x55/0xa0 [ 266.140545][ T9001] ? clear_bhb_loop+0x40/0x90 [ 266.145302][ T9001] ? clear_bhb_loop+0x40/0x90 [ 266.150075][ T9001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.156045][ T9001] RIP: 0033:0x7fe38819c819 [ 266.160557][ T9001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.180237][ T9001] RSP: 002b:00007fe389007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 266.188734][ T9001] RAX: ffffffffffffffda RBX: 00007fe388415fa0 RCX: 00007fe38819c819 [ 266.196755][ T9001] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 266.204789][ T9001] RBP: 00007fe389007090 R08: 0000000000000000 R09: 0000000000000000 [ 266.212833][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.220873][ T9001] R13: 00007fe388416038 R14: 00007fe388415fa0 R15: 00007ffc3238b558 [ 266.228921][ T9001] [ 266.285005][ T5772] Bluetooth: hci3: Malformed LE Event: 0x0d [ 266.423698][ T9006] netlink: 'syz.1.1001': attribute type 5 has an invalid length. [ 266.442363][ T9006] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1001'. [ 266.582413][ T9009] netlink: 'syz.2.1000': attribute type 10 has an invalid length. [ 266.591093][ T9009] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1000'. [ 266.863177][ T9018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.970568][ T9020] syzkaller0: entered promiscuous mode [ 266.976250][ T9020] syzkaller0: entered allmulticast mode [ 267.520189][ T5772] Bluetooth: hci1: Malformed LE Event: 0x0d [ 268.830709][ T9026] IPv6: Can't replace route, no match found [ 269.034353][ T9037] FAULT_INJECTION: forcing a failure. [ 269.034353][ T9037] name failslab, interval 1, probability 0, space 0, times 1 [ 269.079499][ T9037] CPU: 0 PID: 9037 Comm: syz.2.1013 Not tainted syzkaller #0 [ 269.086967][ T9037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 269.097065][ T9037] Call Trace: [ 269.100393][ T9037] [ 269.103370][ T9037] dump_stack_lvl+0x18c/0x250 [ 269.108107][ T9037] ? show_regs_print_info+0x20/0x20 [ 269.113366][ T9037] ? load_image+0x420/0x420 [ 269.117913][ T9037] ? __lock_acquire+0x7d40/0x7d40 [ 269.122986][ T9037] ? irqentry_enter+0x37/0x50 [ 269.127713][ T9037] should_fail_ex+0x39d/0x4d0 [ 269.132456][ T9037] should_failslab+0x9/0x20 [ 269.137014][ T9037] slab_pre_alloc_hook+0x59/0x310 [ 269.142089][ T9037] ? bpf_test_init+0x9f/0x140 [ 269.146815][ T9037] ? bpf_test_init+0x9f/0x140 [ 269.151535][ T9037] __kmem_cache_alloc_node+0x53/0x250 [ 269.156974][ T9037] ? bpf_test_init+0x9f/0x140 [ 269.161723][ T9037] __kmalloc+0xa4/0x230 [ 269.165933][ T9037] bpf_test_init+0x9f/0x140 [ 269.170600][ T9037] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 269.176049][ T9037] ? dev_put+0x80/0x80 [ 269.180187][ T9037] ? dev_put+0x80/0x80 [ 269.184321][ T9037] bpf_prog_test_run+0x321/0x390 [ 269.189346][ T9037] __sys_bpf+0x49d/0x890 [ 269.193641][ T9037] ? bpf_link_show_fdinfo+0x390/0x390 [ 269.199090][ T9037] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 269.205315][ T9037] __x64_sys_bpf+0x7c/0x90 [ 269.209794][ T9037] do_syscall_64+0x55/0xa0 [ 269.214251][ T9037] ? clear_bhb_loop+0x40/0x90 [ 269.219003][ T9037] ? clear_bhb_loop+0x40/0x90 [ 269.223737][ T9037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.229678][ T9037] RIP: 0033:0x7fe1f979c819 [ 269.234136][ T9037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.253791][ T9037] RSP: 002b:00007fe1fa6c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.262252][ T9037] RAX: ffffffffffffffda RBX: 00007fe1f9a15fa0 RCX: 00007fe1f979c819 [ 269.270268][ T9037] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 269.278296][ T9037] RBP: 00007fe1fa6c3090 R08: 0000000000000000 R09: 0000000000000000 [ 269.286324][ T9037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.294343][ T9037] R13: 00007fe1f9a16038 R14: 00007fe1f9a15fa0 R15: 00007ffdcb20f9c8 [ 269.302464][ T9037] [ 269.925399][ T9053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.679058][ T9056] netlink: 'syz.1.1018': attribute type 10 has an invalid length. [ 272.705414][ T9056] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1018'. [ 272.846605][ T5772] Bluetooth: hci3: Malformed LE Event: 0x0d [ 272.902461][ T9064] syzkaller0: entered promiscuous mode [ 272.908528][ T9064] syzkaller0: entered allmulticast mode [ 274.383312][ T9078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.903544][ T9087] FAULT_INJECTION: forcing a failure. [ 274.903544][ T9087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.917990][ T9087] CPU: 1 PID: 9087 Comm: syz.1.1031 Not tainted syzkaller #0 [ 274.925429][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 274.935539][ T9087] Call Trace: [ 274.938874][ T9087] [ 274.941865][ T9087] dump_stack_lvl+0x18c/0x250 [ 274.946613][ T9087] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 274.952850][ T9087] ? show_regs_print_info+0x20/0x20 [ 274.958135][ T9087] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 274.964434][ T9087] should_fail_ex+0x39d/0x4d0 [ 274.969205][ T9087] _copy_from_user+0x2f/0xe0 [ 274.973866][ T9087] bpf_test_init+0xde/0x140 [ 274.978541][ T9087] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 274.984081][ T9087] ? dev_put+0x80/0x80 [ 274.988286][ T9087] ? dev_put+0x80/0x80 [ 274.992430][ T9087] bpf_prog_test_run+0x321/0x390 [ 274.997539][ T9087] __sys_bpf+0x49d/0x890 [ 275.001864][ T9087] ? bpf_link_show_fdinfo+0x390/0x390 [ 275.007363][ T9087] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 275.013665][ T9087] __x64_sys_bpf+0x7c/0x90 [ 275.018163][ T9087] do_syscall_64+0x55/0xa0 [ 275.022643][ T9087] ? clear_bhb_loop+0x40/0x90 [ 275.027388][ T9087] ? clear_bhb_loop+0x40/0x90 [ 275.032145][ T9087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.038110][ T9087] RIP: 0033:0x7fe38819c819 [ 275.042594][ T9087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.062352][ T9087] RSP: 002b:00007fe389007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.070844][ T9087] RAX: ffffffffffffffda RBX: 00007fe388415fa0 RCX: 00007fe38819c819 [ 275.078865][ T9087] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 275.086881][ T9087] RBP: 00007fe389007090 R08: 0000000000000000 R09: 0000000000000000 [ 275.095091][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.103166][ T9087] R13: 00007fe388416038 R14: 00007fe388415fa0 R15: 00007ffc3238b558 [ 275.111208][ T9087] [ 276.311477][ T9083] IPv6: Can't replace route, no match found [ 276.643917][ T9098] netlink: 'syz.1.1035': attribute type 10 has an invalid length. [ 276.667175][ T9098] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1035'. [ 277.415460][ T9113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.534097][ T9115] netlink: 'syz.0.1042': attribute type 10 has an invalid length. [ 277.935663][ T9115] wg1: entered promiscuous mode [ 277.953286][ T9115] wg1: entered allmulticast mode [ 277.974181][ T9115] team0: Device wg1 is of different type [ 278.285379][ T9129] syzkaller0: entered promiscuous mode [ 278.302182][ T9129] syzkaller0: entered allmulticast mode [ 279.218456][ T9139] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1047'. [ 280.003687][ T9145] FAULT_INJECTION: forcing a failure. [ 280.003687][ T9145] name failslab, interval 1, probability 0, space 0, times 0 [ 280.033597][ T9145] CPU: 0 PID: 9145 Comm: syz.3.1049 Not tainted syzkaller #0 [ 280.041100][ T9145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 280.051216][ T9145] Call Trace: [ 280.054541][ T9145] [ 280.057521][ T9145] dump_stack_lvl+0x18c/0x250 [ 280.062272][ T9145] ? show_regs_print_info+0x20/0x20 [ 280.067536][ T9145] ? load_image+0x420/0x420 [ 280.072108][ T9145] ? __might_sleep+0xe0/0xe0 [ 280.076751][ T9145] ? __lock_acquire+0x7d40/0x7d40 [ 280.081829][ T9145] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 280.087870][ T9145] should_fail_ex+0x39d/0x4d0 [ 280.092617][ T9145] should_failslab+0x9/0x20 [ 280.097184][ T9145] slab_pre_alloc_hook+0x59/0x310 [ 280.102277][ T9145] ? lockdep_hardirqs_on+0x98/0x150 [ 280.107531][ T9145] ? kvmalloc_node+0x70/0x180 [ 280.112268][ T9145] ? kvmalloc_node+0x70/0x180 [ 280.117005][ T9145] __kmem_cache_alloc_node+0x53/0x250 [ 280.122445][ T9145] ? kvmalloc_node+0x70/0x180 [ 280.127181][ T9145] __kmalloc_node+0xa4/0x230 [ 280.131851][ T9145] kvmalloc_node+0x70/0x180 [ 280.136412][ T9145] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 280.141862][ T9145] ? 0xffffffffa0004740 [ 280.146063][ T9145] ? 0xffffffffa0004740 [ 280.150285][ T9145] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 280.156228][ T9145] ? 0xffffffffa0004740 [ 280.160429][ T9145] ? xdp_convert_md_to_buff+0x330/0x330 [ 280.166065][ T9145] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 280.172362][ T9145] ? xdp_convert_md_to_buff+0x5b/0x330 [ 280.177874][ T9145] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 280.183337][ T9145] ? dev_put+0x80/0x80 [ 280.187473][ T9145] ? dev_put+0x80/0x80 [ 280.191576][ T9145] bpf_prog_test_run+0x321/0x390 [ 280.196556][ T9145] __sys_bpf+0x49d/0x890 [ 280.200849][ T9145] ? bpf_link_show_fdinfo+0x390/0x390 [ 280.206270][ T9145] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 280.212500][ T9145] __x64_sys_bpf+0x7c/0x90 [ 280.216963][ T9145] do_syscall_64+0x55/0xa0 [ 280.221422][ T9145] ? clear_bhb_loop+0x40/0x90 [ 280.226158][ T9145] ? clear_bhb_loop+0x40/0x90 [ 280.230880][ T9145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.236819][ T9145] RIP: 0033:0x7fd040d9c819 [ 280.241264][ T9145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.260906][ T9145] RSP: 002b:00007fd041c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.269371][ T9145] RAX: ffffffffffffffda RBX: 00007fd041015fa0 RCX: 00007fd040d9c819 [ 280.277386][ T9145] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 280.285408][ T9145] RBP: 00007fd041c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 280.293419][ T9145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.301425][ T9145] R13: 00007fd041016038 R14: 00007fd041015fa0 R15: 00007ffeb065f088 [ 280.309456][ T9145] [ 281.926419][ T9114] delete_channel: no stack [ 281.967967][ T9158] netlink: 'syz.2.1052': attribute type 10 has an invalid length. [ 281.980980][ T9158] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1052'. [ 282.086396][ T9160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.515094][ T9171] IPv6: Can't replace route, no match found [ 282.890246][ T9181] netlink: 'syz.3.1061': attribute type 29 has an invalid length. [ 283.024798][ T9185] sock: sock_timestamping_bind_phc: sock not bind to device [ 283.056638][ T9183] syzkaller0: entered promiscuous mode [ 283.062246][ T9183] syzkaller0: entered allmulticast mode [ 283.423052][ T9191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.652400][ T9192] FAULT_INJECTION: forcing a failure. [ 283.652400][ T9192] name failslab, interval 1, probability 0, space 0, times 0 [ 283.685922][ T9192] CPU: 1 PID: 9192 Comm: syz.3.1065 Not tainted syzkaller #0 [ 283.693427][ T9192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 283.703549][ T9192] Call Trace: [ 283.706890][ T9192] [ 283.709886][ T9192] dump_stack_lvl+0x18c/0x250 [ 283.714657][ T9192] ? show_regs_print_info+0x20/0x20 [ 283.719961][ T9192] ? load_image+0x420/0x420 [ 283.724550][ T9192] ? __might_sleep+0xe0/0xe0 [ 283.729217][ T9192] ? __lock_acquire+0x7d40/0x7d40 [ 283.734325][ T9192] should_fail_ex+0x39d/0x4d0 [ 283.739090][ T9192] should_failslab+0x9/0x20 [ 283.743669][ T9192] slab_pre_alloc_hook+0x59/0x310 [ 283.748775][ T9192] ? kvmalloc_node+0x70/0x180 [ 283.753534][ T9192] ? kvmalloc_node+0x70/0x180 [ 283.758304][ T9192] __kmem_cache_alloc_node+0x53/0x250 [ 283.763780][ T9192] ? kvmalloc_node+0x70/0x180 [ 283.768551][ T9192] __kmalloc_node+0xa4/0x230 [ 283.773249][ T9192] kvmalloc_node+0x70/0x180 [ 283.777829][ T9192] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 283.783313][ T9192] ? bpf_dispatcher_xdp+0x800/0x1000 [ 283.788682][ T9192] ? bpf_dispatcher_xdp+0x800/0x1000 [ 283.794047][ T9192] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 283.800014][ T9192] ? bpf_dispatcher_xdp+0x800/0x1000 [ 283.805423][ T9192] ? xdp_convert_md_to_buff+0x330/0x330 [ 283.811141][ T9192] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 283.817468][ T9192] ? _copy_from_user+0xa5/0xe0 [ 283.822307][ T9192] ? bpf_test_init+0x119/0x140 [ 283.827132][ T9192] ? xdp_convert_md_to_buff+0x5b/0x330 [ 283.832680][ T9192] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 283.838185][ T9192] ? dev_put+0x80/0x80 [ 283.842360][ T9192] ? dev_put+0x80/0x80 [ 283.846493][ T9192] bpf_prog_test_run+0x321/0x390 [ 283.851481][ T9192] __sys_bpf+0x49d/0x890 [ 283.855769][ T9192] ? bpf_link_show_fdinfo+0x390/0x390 [ 283.861234][ T9192] ? lock_chain_count+0x20/0x20 [ 283.866175][ T9192] __x64_sys_bpf+0x7c/0x90 [ 283.870643][ T9192] do_syscall_64+0x55/0xa0 [ 283.875128][ T9192] ? clear_bhb_loop+0x40/0x90 [ 283.879863][ T9192] ? clear_bhb_loop+0x40/0x90 [ 283.884594][ T9192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.890540][ T9192] RIP: 0033:0x7fd040d9c819 [ 283.895006][ T9192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.914660][ T9192] RSP: 002b:00007fd041c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.923132][ T9192] RAX: ffffffffffffffda RBX: 00007fd041015fa0 RCX: 00007fd040d9c819 [ 283.931233][ T9192] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 283.939240][ T9192] RBP: 00007fd041c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 283.947268][ T9192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.955282][ T9192] R13: 00007fd041016038 R14: 00007fd041015fa0 R15: 00007ffeb065f088 [ 283.963354][ T9192] [ 285.648986][ T9199] IPv6: Can't replace route, no match found [ 285.655155][ T9202] netlink: 'syz.3.1070': attribute type 10 has an invalid length. [ 285.663143][ T9202] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1070'. [ 285.911365][ T5772] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 286.034115][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.082480][ T9217] sit0: entered promiscuous mode [ 286.088431][ T9217] sit0: entered allmulticast mode [ 286.293430][ T9224] netlink: 'syz.0.1079': attribute type 10 has an invalid length. [ 286.315389][ T9224] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1079'. [ 286.515948][ T9228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.765803][ T9231] FAULT_INJECTION: forcing a failure. [ 286.765803][ T9231] name failslab, interval 1, probability 0, space 0, times 0 [ 286.779297][ T9231] CPU: 0 PID: 9231 Comm: syz.3.1081 Not tainted syzkaller #0 [ 286.786731][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 286.796847][ T9231] Call Trace: [ 286.800175][ T9231] [ 286.803159][ T9231] dump_stack_lvl+0x18c/0x250 [ 286.807901][ T9231] ? show_regs_print_info+0x20/0x20 [ 286.813173][ T9231] ? load_image+0x420/0x420 [ 286.817751][ T9231] ? __might_sleep+0xe0/0xe0 [ 286.822389][ T9231] ? __lock_acquire+0x7d40/0x7d40 [ 286.827468][ T9231] should_fail_ex+0x39d/0x4d0 [ 286.832211][ T9231] should_failslab+0x9/0x20 [ 286.836766][ T9231] slab_pre_alloc_hook+0x59/0x310 [ 286.841841][ T9231] ? kvmalloc_node+0x70/0x180 [ 286.846604][ T9231] ? kvmalloc_node+0x70/0x180 [ 286.851367][ T9231] __kmem_cache_alloc_node+0x53/0x250 [ 286.856793][ T9231] ? kvmalloc_node+0x70/0x180 [ 286.861522][ T9231] __kmalloc_node+0xa4/0x230 [ 286.866173][ T9231] kvmalloc_node+0x70/0x180 [ 286.870727][ T9231] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 286.876174][ T9231] ? 0xffffffffa0004740 [ 286.880380][ T9231] ? 0xffffffffa0004740 [ 286.884574][ T9231] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 286.890519][ T9231] ? 0xffffffffa0004740 [ 286.894723][ T9231] ? xdp_convert_md_to_buff+0x330/0x330 [ 286.900356][ T9231] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 286.906656][ T9231] ? _copy_from_user+0xa5/0xe0 [ 286.911476][ T9231] ? bpf_test_init+0x119/0x140 [ 286.916283][ T9231] ? xdp_convert_md_to_buff+0x5b/0x330 [ 286.921789][ T9231] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 286.927229][ T9231] ? dev_put+0x80/0x80 [ 286.931356][ T9231] ? dev_put+0x80/0x80 [ 286.935477][ T9231] bpf_prog_test_run+0x321/0x390 [ 286.940465][ T9231] __sys_bpf+0x49d/0x890 [ 286.944753][ T9231] ? bpf_link_show_fdinfo+0x390/0x390 [ 286.950207][ T9231] ? lock_chain_count+0x20/0x20 [ 286.955110][ T9231] __x64_sys_bpf+0x7c/0x90 [ 286.959574][ T9231] do_syscall_64+0x55/0xa0 [ 286.964037][ T9231] ? clear_bhb_loop+0x40/0x90 [ 286.968764][ T9231] ? clear_bhb_loop+0x40/0x90 [ 286.973490][ T9231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.979447][ T9231] RIP: 0033:0x7fd040d9c819 [ 286.983908][ T9231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.003559][ T9231] RSP: 002b:00007fd041c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.012480][ T9231] RAX: ffffffffffffffda RBX: 00007fd041015fa0 RCX: 00007fd040d9c819 [ 287.020520][ T9231] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 287.028548][ T9231] RBP: 00007fd041c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 287.036567][ T9231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.044583][ T9231] R13: 00007fd041016038 R14: 00007fd041015fa0 R15: 00007ffeb065f088 [ 287.052633][ T9231] [ 287.260335][ T5772] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 287.371338][ T9236] syzkaller0: entered promiscuous mode [ 287.398509][ T9236] syzkaller0: entered allmulticast mode [ 287.447140][ T9243] IPv6: Can't replace route, no match found [ 287.820626][ T9252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.535297][ T9256] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 289.543197][ T9256] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1091'. [ 289.946687][ T5772] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 289.981282][ T9271] FAULT_INJECTION: forcing a failure. [ 289.981282][ T9271] name failslab, interval 1, probability 0, space 0, times 0 [ 290.000678][ T9271] CPU: 1 PID: 9271 Comm: syz.2.1098 Not tainted syzkaller #0 [ 290.008115][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 290.018204][ T9271] Call Trace: [ 290.021504][ T9271] [ 290.024463][ T9271] dump_stack_lvl+0x18c/0x250 [ 290.029237][ T9271] ? show_regs_print_info+0x20/0x20 [ 290.034486][ T9271] ? load_image+0x420/0x420 [ 290.039057][ T9271] ? __might_sleep+0xe0/0xe0 [ 290.043680][ T9271] ? __lock_acquire+0x7d40/0x7d40 [ 290.048739][ T9271] should_fail_ex+0x39d/0x4d0 [ 290.053478][ T9271] should_failslab+0x9/0x20 [ 290.058040][ T9271] slab_pre_alloc_hook+0x59/0x310 [ 290.063113][ T9271] ? kvmalloc_node+0x70/0x180 [ 290.067842][ T9271] ? kvmalloc_node+0x70/0x180 [ 290.072559][ T9271] __kmem_cache_alloc_node+0x53/0x250 [ 290.077981][ T9271] ? kvmalloc_node+0x70/0x180 [ 290.082694][ T9271] __kmalloc_node+0xa4/0x230 [ 290.087325][ T9271] kvmalloc_node+0x70/0x180 [ 290.091877][ T9271] page_pool_create+0x1eb/0x5c0 [ 290.096781][ T9271] bpf_test_run_xdp_live+0x203/0x1b20 [ 290.102196][ T9271] ? 0xffffffffa0004740 [ 290.106378][ T9271] ? 0xffffffffa0004740 [ 290.110581][ T9271] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 290.116527][ T9271] ? 0xffffffffa0004740 [ 290.120744][ T9271] ? xdp_convert_md_to_buff+0x330/0x330 [ 290.126360][ T9271] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 290.132650][ T9271] ? bpf_prog_change_xdp+0x12/0x30 [ 290.137817][ T9271] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 290.143242][ T9271] ? dev_put+0x80/0x80 [ 290.147367][ T9271] ? dev_put+0x80/0x80 [ 290.151486][ T9271] bpf_prog_test_run+0x321/0x390 [ 290.156462][ T9271] __sys_bpf+0x49d/0x890 [ 290.160766][ T9271] ? bpf_link_show_fdinfo+0x390/0x390 [ 290.166198][ T9271] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 290.172417][ T9271] __x64_sys_bpf+0x7c/0x90 [ 290.176903][ T9271] do_syscall_64+0x55/0xa0 [ 290.181391][ T9271] ? clear_bhb_loop+0x40/0x90 [ 290.186115][ T9271] ? clear_bhb_loop+0x40/0x90 [ 290.190843][ T9271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 290.196777][ T9271] RIP: 0033:0x7fe1f979c819 [ 290.201231][ T9271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.220878][ T9271] RSP: 002b:00007fe1fa6c3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 290.229325][ T9271] RAX: ffffffffffffffda RBX: 00007fe1f9a15fa0 RCX: 00007fe1f979c819 [ 290.237335][ T9271] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 290.245345][ T9271] RBP: 00007fe1fa6c3090 R08: 0000000000000000 R09: 0000000000000000 [ 290.253339][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.261349][ T9271] R13: 00007fe1f9a16038 R14: 00007fe1f9a15fa0 R15: 00007ffdcb20f9c8 [ 290.269375][ T9271] [ 290.283606][ T9271] page_pool_create() gave up with errno -12 [ 290.582089][ T9276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.686296][ T9285] IPv6: Can't replace route, no match found [ 290.857431][ T9293] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1106'. [ 290.900663][ T9294] FAULT_INJECTION: forcing a failure. [ 290.900663][ T9294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.902613][ T9291] syzkaller0: entered promiscuous mode [ 290.914080][ T9294] CPU: 0 PID: 9294 Comm: syz.2.1105 Not tainted syzkaller #0 [ 290.926796][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 290.935642][ T9291] syzkaller0: entered allmulticast mode [ 290.936880][ T9294] Call Trace: [ 290.936890][ T9294] [ 290.948742][ T9294] dump_stack_lvl+0x18c/0x250 [ 290.953475][ T9294] ? show_regs_print_info+0x20/0x20 [ 290.958738][ T9294] ? load_image+0x420/0x420 [ 290.963295][ T9294] ? __might_fault+0xaa/0x120 [ 290.968015][ T9294] ? __lock_acquire+0x7d40/0x7d40 [ 290.973075][ T9294] should_fail_ex+0x39d/0x4d0 [ 290.977810][ T9294] _copy_from_iter+0x1d9/0x12e0 [ 290.982715][ T9294] ? copyout_mc+0x70/0x70 [ 290.987095][ T9294] tun_get_user+0x38f/0x3ca0 [ 290.991736][ T9294] ? aa_file_perm+0x11b/0xee0 [ 290.996469][ T9294] ? rcu_read_unlock+0xa0/0xa0 [ 291.001282][ T9294] ? tun_get+0x1c/0x2e0 [ 291.005489][ T9294] ? __lock_acquire+0x7d40/0x7d40 [ 291.010582][ T9294] ? tun_get+0x1c/0x2e0 [ 291.014864][ T9294] tun_chr_write_iter+0x119/0x200 [ 291.019922][ T9294] vfs_write+0x46c/0x990 [ 291.024203][ T9294] ? file_end_write+0x250/0x250 [ 291.029081][ T9294] ? __fget_files+0x43d/0x4b0 [ 291.033784][ T9294] ? __fdget_pos+0x1d8/0x330 [ 291.038394][ T9294] ? ksys_write+0x75/0x260 [ 291.042839][ T9294] ksys_write+0x150/0x260 [ 291.047216][ T9294] ? __ia32_sys_read+0x90/0x90 [ 291.052004][ T9294] ? lockdep_hardirqs_on+0x98/0x150 [ 291.057252][ T9294] do_syscall_64+0x55/0xa0 [ 291.061699][ T9294] ? clear_bhb_loop+0x40/0x90 [ 291.066433][ T9294] ? clear_bhb_loop+0x40/0x90 [ 291.071252][ T9294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 291.077178][ T9294] RIP: 0033:0x7fe1f979c819 [ 291.081623][ T9294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.101266][ T9294] RSP: 002b:00007fe1fa6a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 291.109724][ T9294] RAX: ffffffffffffffda RBX: 00007fe1f9a16090 RCX: 00007fe1f979c819 [ 291.117744][ T9294] RDX: 000000000000ffdd RSI: 0000200000000140 RDI: 0000000000000005 [ 291.125824][ T9294] RBP: 00007fe1fa6a2090 R08: 0000000000000000 R09: 0000000000000000 [ 291.133814][ T9294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.141805][ T9294] R13: 00007fe1f9a16128 R14: 00007fe1f9a16090 R15: 00007ffdcb20f9c8 [ 291.149815][ T9294] [ 291.153493][ T9289] netlink: 'syz.3.1104': attribute type 10 has an invalid length. [ 291.164458][ T9289] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1104'. [ 291.357731][ T5772] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 293.630909][ T9319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.914325][ T9320] cgroup: fork rejected by pids controller in /syz2 [ 294.235686][ T9366] FAULT_INJECTION: forcing a failure. [ 294.235686][ T9366] name failslab, interval 1, probability 0, space 0, times 0 [ 294.254303][ T9366] CPU: 0 PID: 9366 Comm: syz.1.1117 Not tainted syzkaller #0 [ 294.261740][ T9366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 294.271840][ T9366] Call Trace: [ 294.275246][ T9366] [ 294.278206][ T9366] dump_stack_lvl+0x18c/0x250 [ 294.282946][ T9366] ? show_regs_print_info+0x20/0x20 [ 294.288187][ T9366] ? load_image+0x420/0x420 [ 294.292726][ T9366] ? __might_sleep+0xe0/0xe0 [ 294.297344][ T9366] ? __lock_acquire+0x7d40/0x7d40 [ 294.302394][ T9366] should_fail_ex+0x39d/0x4d0 [ 294.307101][ T9366] should_failslab+0x9/0x20 [ 294.311649][ T9366] slab_pre_alloc_hook+0x59/0x310 [ 294.316699][ T9366] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 294.322009][ T9366] __kmem_cache_alloc_node+0x53/0x250 [ 294.327430][ T9366] ? __asan_memset+0x22/0x40 [ 294.332049][ T9366] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 294.337378][ T9366] kmalloc_trace+0x2a/0xe0 [ 294.341841][ T9366] __xdp_reg_mem_model+0x1e4/0x5c0 [ 294.346984][ T9366] ? kvmalloc_node+0x70/0x180 [ 294.351689][ T9366] ? kvmalloc_node+0x70/0x180 [ 294.356391][ T9366] ? xdp_reg_mem_model+0x40/0x40 [ 294.361362][ T9366] xdp_reg_mem_model+0x22/0x40 [ 294.366156][ T9366] bpf_test_run_xdp_live+0x262/0x1b20 [ 294.371557][ T9366] ? 0xffffffffa0004740 [ 294.375733][ T9366] ? 0xffffffffa0004740 [ 294.379907][ T9366] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 294.385825][ T9366] ? 0xffffffffa0004740 [ 294.390002][ T9366] ? xdp_convert_md_to_buff+0x330/0x330 [ 294.395599][ T9366] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 294.401872][ T9366] ? xdp_convert_md_to_buff+0x5b/0x330 [ 294.407384][ T9366] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 294.412782][ T9366] ? lock_chain_count+0x20/0x20 [ 294.417664][ T9366] ? dev_put+0x80/0x80 [ 294.421765][ T9366] ? dev_put+0x80/0x80 [ 294.425858][ T9366] bpf_prog_test_run+0x321/0x390 [ 294.430837][ T9366] __sys_bpf+0x49d/0x890 [ 294.435106][ T9366] ? bpf_link_show_fdinfo+0x390/0x390 [ 294.440538][ T9366] ? lock_chain_count+0x20/0x20 [ 294.445421][ T9366] __x64_sys_bpf+0x7c/0x90 [ 294.449856][ T9366] do_syscall_64+0x55/0xa0 [ 294.454291][ T9366] ? clear_bhb_loop+0x40/0x90 [ 294.458994][ T9366] ? clear_bhb_loop+0x40/0x90 [ 294.463738][ T9366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 294.469677][ T9366] RIP: 0033:0x7fe38819c819 [ 294.474122][ T9366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.493766][ T9366] RSP: 002b:00007fe389007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 294.502222][ T9366] RAX: ffffffffffffffda RBX: 00007fe388415fa0 RCX: 00007fe38819c819 [ 294.510212][ T9366] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 294.518211][ T9366] RBP: 00007fe389007090 R08: 0000000000000000 R09: 0000000000000000 [ 294.526224][ T9366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.534223][ T9366] R13: 00007fe388416038 R14: 00007fe388415fa0 R15: 00007ffc3238b558 [ 294.542240][ T9366] [ 294.758935][ T5772] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 294.903902][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.031340][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.148532][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.265014][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.423428][ T9450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.327499][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.336881][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.345126][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.356480][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.364931][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 296.372598][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 296.446685][ T9446] IPv6: Can't replace route, no match found [ 296.846471][ T5781] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 296.859014][ T9464] FAULT_INJECTION: forcing a failure. [ 296.859014][ T9464] name failslab, interval 1, probability 0, space 0, times 0 [ 296.901210][ T9467] syzkaller0: entered promiscuous mode [ 296.906883][ T9467] syzkaller0: entered allmulticast mode [ 296.908272][ T9464] CPU: 1 PID: 9464 Comm: syz.3.1129 Not tainted syzkaller #0 [ 296.919943][ T9464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 296.930038][ T9464] Call Trace: [ 296.933362][ T9464] [ 296.936324][ T9464] dump_stack_lvl+0x18c/0x250 [ 296.941067][ T9464] ? show_regs_print_info+0x20/0x20 [ 296.946319][ T9464] ? load_image+0x420/0x420 [ 296.950874][ T9464] ? __might_sleep+0xe0/0xe0 [ 296.955536][ T9464] ? __lock_acquire+0x7d40/0x7d40 [ 296.960609][ T9464] ? perf_trace_lock_acquire+0x104/0x410 [ 296.966306][ T9464] should_fail_ex+0x39d/0x4d0 [ 296.971044][ T9464] should_failslab+0x9/0x20 [ 296.975594][ T9464] slab_pre_alloc_hook+0x59/0x310 [ 296.980692][ T9464] kmem_cache_alloc_node+0x60/0x320 [ 296.985938][ T9464] ? __alloc_skb+0x103/0x2c0 [ 296.990538][ T9464] __alloc_skb+0x103/0x2c0 [ 296.994962][ T9464] alloc_skb_with_frags+0xca/0x7b0 [ 297.000097][ T9464] ? __lock_acquire+0x7d40/0x7d40 [ 297.005131][ T9464] sock_alloc_send_pskb+0x883/0x9a0 [ 297.010396][ T9464] ? __might_fault+0xaa/0x120 [ 297.015110][ T9464] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 297.021722][ T9464] ? sock_kzfree_s+0x50/0x50 [ 297.026333][ T9464] ? iov_iter_advance+0x88/0x1a0 [ 297.031299][ T9464] tun_get_user+0x82c/0x3ca0 [ 297.035910][ T9464] ? aa_file_perm+0x11b/0xee0 [ 297.040647][ T9464] ? rcu_read_unlock+0xa0/0xa0 [ 297.045466][ T9464] ? tun_get+0x1c/0x2e0 [ 297.049654][ T9464] ? __lock_acquire+0x7d40/0x7d40 [ 297.054701][ T9464] ? tun_get+0x1c/0x2e0 [ 297.058883][ T9464] tun_chr_write_iter+0x119/0x200 [ 297.064040][ T9464] vfs_write+0x46c/0x990 [ 297.068301][ T9464] ? file_end_write+0x250/0x250 [ 297.073218][ T9464] ? __fget_files+0x43d/0x4b0 [ 297.077913][ T9464] ? __fdget_pos+0x1d8/0x330 [ 297.082532][ T9464] ? ksys_write+0x75/0x260 [ 297.086965][ T9464] ksys_write+0x150/0x260 [ 297.091299][ T9464] ? __ia32_sys_read+0x90/0x90 [ 297.096069][ T9464] ? lockdep_hardirqs_on+0x98/0x150 [ 297.101274][ T9464] do_syscall_64+0x55/0xa0 [ 297.105695][ T9464] ? clear_bhb_loop+0x40/0x90 [ 297.110421][ T9464] ? clear_bhb_loop+0x40/0x90 [ 297.115140][ T9464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.121075][ T9464] RIP: 0033:0x7fd040d9c819 [ 297.125497][ T9464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.145102][ T9464] RSP: 002b:00007fd041c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.153529][ T9464] RAX: ffffffffffffffda RBX: 00007fd041015fa0 RCX: 00007fd040d9c819 [ 297.161605][ T9464] RDX: 000000000000ffdd RSI: 0000200000000140 RDI: 0000000000000005 [ 297.169618][ T9464] RBP: 00007fd041c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 297.177597][ T9464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.185587][ T9464] R13: 00007fd041016038 R14: 00007fd041015fa0 R15: 00007ffeb065f088 [ 297.193580][ T9464] [ 298.385608][ T5781] Bluetooth: hci1: command tx timeout [ 299.160114][ T9475] syzkaller0: entered promiscuous mode [ 299.165837][ T9475] syzkaller0: entered allmulticast mode [ 300.475898][ T5781] Bluetooth: hci1: command tx timeout [ 300.942515][ T9496] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1134'. [ 301.027749][ T9505] syzkaller0: entered promiscuous mode [ 301.038677][ T9505] syzkaller0: entered allmulticast mode [ 301.239748][ T9511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.646625][ T5781] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 302.555425][ T5781] Bluetooth: hci1: command tx timeout [ 303.286068][ T9456] chnl_net:caif_netlink_parms(): no params data found [ 303.550064][ T9542] netlink: 'syz.1.1146': attribute type 2 has an invalid length. [ 303.558667][ T9542] netlink: 'syz.1.1146': attribute type 4 has an invalid length. [ 303.571390][ T9542] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1146'. [ 303.847236][ T9554] IPv6: Can't replace route, no match found [ 304.008790][ T9456] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.056548][ T9456] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.063897][ T9456] bridge_slave_0: entered allmulticast mode [ 304.134585][ T9561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.142806][ T9456] bridge_slave_0: entered promiscuous mode [ 304.276793][ T9456] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.284347][ T9456] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.292086][ T9456] bridge_slave_1: entered allmulticast mode [ 304.319567][ T9456] bridge_slave_1: entered promiscuous mode [ 304.331848][ T5781] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 304.540968][ T35] hsr_slave_0: left promiscuous mode [ 304.556130][ T35] hsr_slave_1: left promiscuous mode [ 304.562465][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.579431][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.596591][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.614931][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.625500][ T5781] Bluetooth: hci1: command tx timeout [ 304.768377][ T35] veth1_macvtap: left promiscuous mode [ 304.785735][ T35] veth0_macvtap: left promiscuous mode [ 304.791651][ T35] veth1_vlan: left promiscuous mode [ 304.797804][ T35] veth0_vlan: left promiscuous mode [ 305.518322][ T35] team0 (unregistering): Port device team_slave_1 removed [ 305.560250][ T35] team0 (unregistering): Port device C removed [ 305.604504][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.615087][ T35] bond_slave_1 (unregistering): left promiscuous mode [ 305.660541][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.670241][ T35] bond_slave_0 (unregistering): left promiscuous mode [ 305.984474][ T35] bond0 (unregistering): Released all slaves [ 306.070725][ T9576] syzkaller0: entered promiscuous mode [ 306.084389][ T9576] syzkaller0: entered allmulticast mode [ 306.128777][ T9456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.150025][ T9456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.938906][ T9456] team0: Port device team_slave_0 added [ 308.076092][ T9456] team0: Port device team_slave_1 added [ 308.198599][ T9456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.208058][ T9456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.255390][ T9608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.306677][ T9456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.341849][ T5781] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 308.352272][ T9456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.360321][ T9456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.446100][ T9456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.653423][ T9456] hsr_slave_0: entered promiscuous mode [ 308.683033][ T9456] hsr_slave_1: entered promiscuous mode [ 309.071978][ T9635] IPv6: Can't replace route, no match found [ 310.247967][ T5781] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 310.457181][ T9663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.031686][ T9456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.049897][ T9456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.166254][ T9676] syzkaller0: entered promiscuous mode [ 311.171829][ T9676] syzkaller0: entered allmulticast mode [ 311.184775][ T9456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.221785][ T9456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.852585][ T9686] IPv6: Can't replace route, no match found [ 313.101671][ T9456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.172520][ T9456] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.235571][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.242902][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.269323][ T5781] Bluetooth: hci2: Malformed LE Event: 0x0d [ 313.285409][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.292661][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.662735][ T9710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.013857][ T9456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.258838][ T9456] veth0_vlan: entered promiscuous mode [ 314.291371][ T9456] veth1_vlan: entered promiscuous mode [ 314.345850][ T9730] netlink: 'syz.1.1192': attribute type 10 has an invalid length. [ 314.353755][ T9730] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1192'. [ 314.403667][ T9730] net_ratelimit: 3319 callbacks suppressed [ 314.403685][ T9730] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 314.543638][ T9456] veth0_macvtap: entered promiscuous mode [ 314.592548][ T9456] veth1_macvtap: entered promiscuous mode [ 314.652780][ T9456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.670684][ T9456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.684831][ T9456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.703109][ T9456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.722375][ T9456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.753281][ T9456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.782022][ T9456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.818393][ T9456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.837259][ T9456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.853784][ T9456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.913568][ T9456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.941199][ T9456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.975309][ T9456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.994308][ T9456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.177087][ T9739] IPv6: Can't replace route, no match found [ 315.272030][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.303627][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.425129][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.455568][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.475990][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 315.909778][ T9760] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1200'. [ 316.011417][ T9766] netlink: 'syz.0.1202': attribute type 1 has an invalid length. [ 316.021771][ T9766] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1202'. [ 316.045481][ T9766] netlink: 'syz.0.1202': attribute type 1 has an invalid length. [ 316.244710][ T9764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.462391][ T9766] syzkaller0: entered promiscuous mode [ 316.480638][ T9766] syzkaller0: entered allmulticast mode [ 317.269370][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.275934][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.447791][ T5781] Bluetooth: hci1: Malformed LE Event: 0x0d [ 319.433785][ T9821] IPv6: Can't replace route, no match found [ 319.629200][ T9820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.040934][ T9864] netlink: 'syz.0.1224': attribute type 29 has an invalid length. [ 321.061211][ T5781] Bluetooth: hci2: Malformed LE Event: 0x0d [ 321.066688][ T9864] netlink: 'syz.0.1224': attribute type 29 has an invalid length. [ 321.116339][ T9869] netlink: 'syz.0.1224': attribute type 29 has an invalid length. [ 321.126021][ T9864] netlink: 'syz.0.1224': attribute type 29 has an invalid length. [ 321.548629][ T9879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.821614][ T9894] IPv6: Can't replace route, no match found [ 322.122096][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 322.687923][ T9907] netlink: 'syz.0.1237': attribute type 29 has an invalid length. [ 322.715821][ T9907] netlink: 'syz.0.1237': attribute type 29 has an invalid length. [ 322.752789][ T9907] netlink: 'syz.0.1237': attribute type 29 has an invalid length. [ 322.878432][ T9907] netlink: 'syz.0.1237': attribute type 29 has an invalid length. [ 322.922056][ T9912] netlink: 'syz.0.1237': attribute type 29 has an invalid length. [ 322.922155][ T9915] netlink: 'syz.0.1237': attribute type 29 has an invalid length. [ 323.124704][ T9919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.246618][ T5781] Bluetooth: hci2: Malformed LE Event: 0x0d [ 323.287554][ T9924] syzkaller0: entered promiscuous mode [ 323.293322][ T9924] syzkaller0: entered allmulticast mode [ 325.314522][ T9949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.297180][ T9929] IPv6: Can't replace route, no match found [ 326.543968][ T5781] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 326.880637][ T9970] IPv6: Can't replace route, no match found [ 327.092613][ T9973] netlink: 'syz.0.1264': attribute type 1 has an invalid length. [ 327.147080][ T9973] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1264'. [ 327.290994][ T9975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.518977][ T9982] netlink: 'syz.0.1267': attribute type 10 has an invalid length. [ 327.541437][ T9982] wlan1: mtu less than device minimum [ 327.911491][ T9988] netlink: 'syz.1.1270': attribute type 10 has an invalid length. [ 327.928311][ T9988] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1270'. [ 328.076824][ T5781] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 328.099370][ T9994] netlink: 'syz.0.1273': attribute type 21 has an invalid length. [ 328.108364][ T9994] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1273'. [ 328.319033][T10001] IPv6: Can't replace route, no match found [ 328.639400][T10010] netlink: 'syz.1.1278': attribute type 21 has an invalid length. [ 328.863452][T10010] netlink: set zone limit has 8 unknown bytes [ 328.895957][T10012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.272606][T10010] syzkaller0: entered promiscuous mode [ 329.283967][T10010] syzkaller0: entered allmulticast mode [ 329.497895][ T5781] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 330.327063][T10049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.054799][T10035] IPv6: Can't replace route, no match found [ 332.508356][ T5781] Bluetooth: hci2: Malformed LE Event: 0x0d [ 334.225428][T10090] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1302'. [ 334.611706][T10099] IPv6: Can't replace route, no match found [ 334.776913][T10101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.350992][T10108] syzkaller0: entered promiscuous mode [ 335.372900][T10108] syzkaller0: entered allmulticast mode [ 335.484030][ T5781] Bluetooth: hci1: Malformed LE Event: 0x0d [ 337.005772][T10139] netlink: 'syz.3.1317': attribute type 1 has an invalid length. [ 337.015047][T10139] netlink: 'syz.3.1317': attribute type 2 has an invalid length. [ 337.035584][T10139] netlink: 'syz.3.1317': attribute type 2 has an invalid length. [ 337.043570][T10139] netlink: 'syz.3.1317': attribute type 3 has an invalid length. [ 337.066935][T10139] netlink: 'syz.3.1317': attribute type 4 has an invalid length. [ 337.085464][T10139] netlink: 'syz.3.1317': attribute type 5 has an invalid length. [ 337.101870][T10139] netlink: 'syz.3.1317': attribute type 6 has an invalid length. [ 337.125654][T10139] netlink: 'syz.3.1317': attribute type 7 has an invalid length. [ 337.133915][T10139] netlink: 'syz.3.1317': attribute type 9 has an invalid length. [ 337.165923][T10139] netlink: 'syz.3.1317': attribute type 10 has an invalid length. [ 337.174368][T10139] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.1317'. [ 338.758890][T10136] IPv6: Can't replace route, no match found [ 339.461432][ T5781] Bluetooth: hci0: Malformed LE Event: 0x0d [ 339.477619][T10153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.855547][T10169] IPv6: Can't replace route, no match found [ 340.259655][ T5781] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 340.467384][T10181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.142824][T10204] IPv6: Can't replace route, no match found [ 341.334849][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 341.689916][T10219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.078581][T10231] validate_nla: 2 callbacks suppressed [ 342.078593][T10231] netlink: 'syz.3.1351': attribute type 21 has an invalid length. [ 342.101732][T10231] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1351'. [ 342.182827][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 342.231552][T10238] IPv6: Can't replace route, no match found [ 342.752813][T10250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.161659][T10256] netlink: 'syz.3.1361': attribute type 21 has an invalid length. [ 343.186053][T10256] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1361'. [ 343.210352][ T5781] Bluetooth: hci1: Malformed LE Event: 0x0d [ 343.777813][T10265] lo: entered allmulticast mode [ 343.833195][T10269] lo: entered promiscuous mode [ 343.847975][T10269] lo: left allmulticast mode [ 344.057255][T10265] syzkaller0: entered promiscuous mode [ 344.072831][T10265] syzkaller0: entered allmulticast mode [ 344.088885][T10274] IPv6: Can't replace route, no match found [ 344.535951][T10279] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.960325][T10284] netlink: set zone limit has 8 unknown bytes [ 347.033946][ T5781] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 347.406343][T10310] IPv6: Can't replace route, no match found [ 347.951677][T10319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.660805][ T5781] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 350.881017][T10339] netlink: 'syz.0.1389': attribute type 13 has an invalid length. [ 350.907551][T10339] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1389'. [ 350.930167][T10339] syz_tun: refused to change device tx_queue_len [ 350.952520][T10339] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 351.022043][T10341] IPv6: Can't replace route, no match found [ 351.522933][T10351] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.1392'. [ 351.654455][T10357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.359558][T10379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.686731][T10388] IPv6: Can't replace route, no match found [ 356.740017][T10405] netlink: 'syz.0.1412': attribute type 7 has an invalid length. [ 357.105712][T10409] FAULT_INJECTION: forcing a failure. [ 357.105712][T10409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.140579][T10409] CPU: 0 PID: 10409 Comm: syz.3.1414 Not tainted syzkaller #0 [ 357.148197][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 357.158346][T10409] Call Trace: [ 357.161709][T10409] [ 357.164735][T10409] dump_stack_lvl+0x18c/0x250 [ 357.169544][T10409] ? show_regs_print_info+0x20/0x20 [ 357.174858][T10409] ? load_image+0x420/0x420 [ 357.179507][T10409] ? __might_fault+0xaa/0x120 [ 357.184307][T10409] ? __lock_acquire+0x7d40/0x7d40 [ 357.189453][T10409] should_fail_ex+0x39d/0x4d0 [ 357.194268][T10409] _copy_from_user+0x2f/0xe0 [ 357.198971][T10409] ___sys_sendmsg+0x1c7/0x360 [ 357.203784][T10409] ? __sys_sendmsg+0x2a0/0x2a0 [ 357.208773][T10409] ? trace_call_bpf+0xc3/0x6c0 [ 357.213788][T10409] __se_sys_sendmsg+0x1c2/0x2b0 [ 357.218759][T10409] ? __x64_sys_sendmsg+0x80/0x80 [ 357.223891][T10409] ? lockdep_hardirqs_on+0x98/0x150 [ 357.229210][T10409] do_syscall_64+0x55/0xa0 [ 357.233710][T10409] ? clear_bhb_loop+0x40/0x90 [ 357.238484][T10409] ? clear_bhb_loop+0x40/0x90 [ 357.243273][T10409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.249256][T10409] RIP: 0033:0x7fd040d9c819 [ 357.253761][T10409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.273459][T10409] RSP: 002b:00007fd041c0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.281991][T10409] RAX: ffffffffffffffda RBX: 00007fd041015fa0 RCX: 00007fd040d9c819 [ 357.290051][T10409] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 357.298112][T10409] RBP: 00007fd041c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 357.306165][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.314213][T10409] R13: 00007fd041016038 R14: 00007fd041015fa0 R15: 00007ffeb065f088 [ 357.322362][T10409] [ 357.703422][T10417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.807245][T10415] netlink: 'syz.0.1416': attribute type 10 has an invalid length. [ 357.842064][T10415] .`: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 357.968319][T10425] netlink: 'syz.2.1420': attribute type 3 has an invalid length. [ 357.984926][T10425] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1420'. [ 358.145273][T10430] syzkaller0: entered promiscuous mode [ 358.151083][T10430] syzkaller0: entered allmulticast mode [ 358.163781][T10432] IPv6: Can't replace route, no match found [ 358.703986][T10443] FAULT_INJECTION: forcing a failure. [ 358.703986][T10443] name failslab, interval 1, probability 0, space 0, times 0 [ 358.725541][T10443] CPU: 1 PID: 10443 Comm: syz.3.1427 Not tainted syzkaller #0 [ 358.733080][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 358.743213][T10443] Call Trace: [ 358.746546][T10443] [ 358.749531][T10443] dump_stack_lvl+0x18c/0x250 [ 358.754323][T10443] ? show_regs_print_info+0x20/0x20 [ 358.759598][T10443] ? load_image+0x420/0x420 [ 358.764203][T10443] ? __might_sleep+0xe0/0xe0 [ 358.768853][T10443] ? __lock_acquire+0x7d40/0x7d40 [ 358.773951][T10443] should_fail_ex+0x39d/0x4d0 [ 358.778723][T10443] should_failslab+0x9/0x20 [ 358.783294][T10443] slab_pre_alloc_hook+0x59/0x310 [ 358.788396][T10443] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 358.794176][T10443] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 358.799950][T10443] __kmem_cache_alloc_node+0x53/0x250 [ 358.805420][T10443] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 358.811212][T10443] __kmalloc+0xa4/0x230 [ 358.815436][T10443] tomoyo_realpath_from_path+0xe3/0x5d0 [ 358.821081][T10443] tomoyo_path_number_perm+0x248/0x620 [ 358.826610][T10443] ? tomoyo_path_number_perm+0x217/0x620 [ 358.832309][T10443] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 358.837850][T10443] ? ksys_write+0x1c4/0x260 [ 358.842501][T10443] ? __fget_files+0x28/0x4b0 [ 358.847156][T10443] ? __fget_files+0x28/0x4b0 [ 358.851855][T10443] security_file_ioctl+0x70/0xa0 [ 358.856866][T10443] __se_sys_ioctl+0x48/0x170 [ 358.861536][T10443] do_syscall_64+0x55/0xa0 [ 358.866037][T10443] ? clear_bhb_loop+0x40/0x90 [ 358.870793][T10443] ? clear_bhb_loop+0x40/0x90 [ 358.875540][T10443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.881491][T10443] RIP: 0033:0x7fd040d9c819 [ 358.885960][T10443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.905632][T10443] RSP: 002b:00007fd041c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.914107][T10443] RAX: ffffffffffffffda RBX: 00007fd041015fa0 RCX: 00007fd040d9c819 [ 358.922153][T10443] RDX: 0000200000000040 RSI: 0000000040305829 RDI: 0000000000000007 [ 358.930179][T10443] RBP: 00007fd041c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 358.938216][T10443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.946234][T10443] R13: 00007fd041016038 R14: 00007fd041015fa0 R15: 00007ffeb065f088 [ 358.954307][T10443] [ 358.985333][T10443] ERROR: Out of memory at tomoyo_realpath_from_path. [ 359.208503][T10447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.402671][T10451] netlink: 'syz.3.1430': attribute type 27 has an invalid length. [ 361.410822][T10451] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1430'. [ 361.424403][T10451] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 361.455016][T10456] netlink: 'syz.1.1432': attribute type 7 has an invalid length. [ 361.706090][T10467] FAULT_INJECTION: forcing a failure. [ 361.706090][T10467] name failslab, interval 1, probability 0, space 0, times 0 [ 361.719726][T10467] CPU: 1 PID: 10467 Comm: syz.1.1437 Not tainted syzkaller #0 [ 361.727255][T10467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 361.737364][T10467] Call Trace: [ 361.740693][T10467] [ 361.743681][T10467] dump_stack_lvl+0x18c/0x250 [ 361.748445][T10467] ? show_regs_print_info+0x20/0x20 [ 361.753717][T10467] ? load_image+0x420/0x420 [ 361.758326][T10467] ? __might_sleep+0xe0/0xe0 [ 361.763005][T10467] ? __lock_acquire+0x7d40/0x7d40 [ 361.768125][T10467] should_fail_ex+0x39d/0x4d0 [ 361.772902][T10467] should_failslab+0x9/0x20 [ 361.777482][T10467] slab_pre_alloc_hook+0x59/0x310 [ 361.782608][T10467] ? __lock_acquire+0x7d40/0x7d40 [ 361.787698][T10467] kmem_cache_alloc_node+0x60/0x320 [ 361.792959][T10467] ? __alloc_skb+0x103/0x2c0 [ 361.797627][T10467] __alloc_skb+0x103/0x2c0 [ 361.802120][T10467] netlink_sendmsg+0x66a/0xbf0 [ 361.806949][T10467] ? perf_trace_lock+0x304/0x3b0 [ 361.811955][T10467] ? netlink_getsockopt+0x590/0x590 [ 361.817230][T10467] ? aa_sock_msg_perm+0x94/0x150 [ 361.822242][T10467] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 361.827589][T10467] ? security_socket_sendmsg+0x80/0xa0 [ 361.833105][T10467] ? netlink_getsockopt+0x590/0x590 [ 361.838389][T10467] ____sys_sendmsg+0x5ba/0x960 [ 361.843231][T10467] ? __asan_memset+0x22/0x40 [ 361.847903][T10467] ? __sys_sendmsg_sock+0x30/0x30 [ 361.852976][T10467] ? __import_iovec+0x5f2/0x850 [ 361.857909][T10467] ? import_iovec+0x73/0xa0 [ 361.862489][T10467] ___sys_sendmsg+0x2a6/0x360 [ 361.867331][T10467] ? __sys_sendmsg+0x2a0/0x2a0 [ 361.872219][T10467] ? __lock_acquire+0x7d40/0x7d40 [ 361.877363][T10467] __se_sys_sendmsg+0x1c2/0x2b0 [ 361.882280][T10467] ? __x64_sys_sendmsg+0x80/0x80 [ 361.887314][T10467] ? lockdep_hardirqs_on+0x98/0x150 [ 361.892596][T10467] do_syscall_64+0x55/0xa0 [ 361.897068][T10467] ? clear_bhb_loop+0x40/0x90 [ 361.901809][T10467] ? clear_bhb_loop+0x40/0x90 [ 361.906556][T10467] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.912507][T10467] RIP: 0033:0x7fe38819c819 [ 361.916976][T10467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.936661][T10467] RSP: 002b:00007fe389007028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.945132][T10467] RAX: ffffffffffffffda RBX: 00007fe388415fa0 RCX: 00007fe38819c819 [ 361.953146][T10467] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 361.961189][T10467] RBP: 00007fe389007090 R08: 0000000000000000 R09: 0000000000000000 [ 361.969216][T10467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.977231][T10467] R13: 00007fe388416038 R14: 00007fe388415fa0 R15: 00007ffc3238b558 [ 361.985287][T10467] [ 362.127792][T10470] netlink: 'syz.0.1438': attribute type 7 has an invalid length. [ 362.171555][T10473] IPv6: Can't replace route, no match found [ 362.502369][T10479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.626364][T10485] FAULT_INJECTION: forcing a failure. [ 362.626364][T10485] name failslab, interval 1, probability 0, space 0, times 0 [ 362.639519][T10485] CPU: 1 PID: 10485 Comm: syz.2.1444 Not tainted syzkaller #0 [ 362.647068][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 362.657171][T10485] Call Trace: [ 362.660500][T10485] [ 362.663483][T10485] dump_stack_lvl+0x18c/0x250 [ 362.668245][T10485] ? show_regs_print_info+0x20/0x20 [ 362.673527][T10485] ? load_image+0x420/0x420 [ 362.678124][T10485] ? __might_sleep+0xe0/0xe0 [ 362.682787][T10485] ? __lock_acquire+0x7d40/0x7d40 [ 362.687874][T10485] ? prepend_path+0x4b/0x960 [ 362.692535][T10485] should_fail_ex+0x39d/0x4d0 [ 362.697302][T10485] should_failslab+0x9/0x20 [ 362.701871][T10485] slab_pre_alloc_hook+0x59/0x310 [ 362.706958][T10485] ? __asan_memcpy+0x40/0x70 [ 362.711644][T10485] ? tomoyo_encode+0x28b/0x540 [ 362.716448][T10485] ? tomoyo_encode+0x28b/0x540 [ 362.721259][T10485] __kmem_cache_alloc_node+0x53/0x250 [ 362.726687][T10485] ? prepend_path+0x4b/0x960 [ 362.731320][T10485] ? tomoyo_encode+0x28b/0x540 [ 362.736117][T10485] __kmalloc+0xa4/0x230 [ 362.740332][T10485] tomoyo_encode+0x28b/0x540 [ 362.744968][T10485] tomoyo_realpath_from_path+0x592/0x5d0 [ 362.750668][T10485] tomoyo_path_number_perm+0x248/0x620 [ 362.756173][T10485] ? tomoyo_path_number_perm+0x217/0x620 [ 362.761849][T10485] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 362.767362][T10485] ? ksys_write+0x1c4/0x260 [ 362.771971][T10485] ? __fget_files+0x28/0x4b0 [ 362.776606][T10485] ? __fget_files+0x28/0x4b0 [ 362.781266][T10485] security_file_ioctl+0x70/0xa0 [ 362.786279][T10485] __se_sys_ioctl+0x48/0x170 [ 362.790915][T10485] do_syscall_64+0x55/0xa0 [ 362.795369][T10485] ? clear_bhb_loop+0x40/0x90 [ 362.800083][T10485] ? clear_bhb_loop+0x40/0x90 [ 362.804800][T10485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.810742][T10485] RIP: 0033:0x7f2664b9c819 [ 362.815206][T10485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.834845][T10485] RSP: 002b:00007f2665a8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.843299][T10485] RAX: ffffffffffffffda RBX: 00007f2664e15fa0 RCX: 00007f2664b9c819 [ 362.851305][T10485] RDX: 0000200000000040 RSI: 0000000040305829 RDI: 0000000000000007 [ 362.859310][T10485] RBP: 00007f2665a8b090 R08: 0000000000000000 R09: 0000000000000000 [ 362.867309][T10485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.875328][T10485] R13: 00007f2664e16038 R14: 00007f2664e15fa0 R15: 00007fffa87093d8 [ 362.883353][T10485] [ 362.895536][T10485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 363.500583][T10500] netlink: 'syz.0.1450': attribute type 7 has an invalid length. [ 364.369239][T10512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.517344][T10510] syzkaller0: entered promiscuous mode [ 364.525412][T10510] syzkaller0: entered allmulticast mode [ 366.353975][T10527] netlink: 'syz.0.1458': attribute type 7 has an invalid length. [ 366.559174][T10532] IPv6: Can't replace route, no match found [ 366.759436][T10539] FAULT_INJECTION: forcing a failure. [ 366.759436][T10539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.780287][T10539] CPU: 0 PID: 10539 Comm: syz.0.1463 Not tainted syzkaller #0 [ 366.787842][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 366.797960][T10539] Call Trace: [ 366.801290][T10539] [ 366.804275][T10539] dump_stack_lvl+0x18c/0x250 [ 366.809035][T10539] ? show_regs_print_info+0x20/0x20 [ 366.814307][T10539] ? load_image+0x420/0x420 [ 366.818882][T10539] ? __might_fault+0xaa/0x120 [ 366.823622][T10539] ? __lock_acquire+0x7d40/0x7d40 [ 366.828728][T10539] should_fail_ex+0x39d/0x4d0 [ 366.833517][T10539] _copy_from_user+0x2f/0xe0 [ 366.838173][T10539] do_vfs_ioctl+0x10dc/0x1cc0 [ 366.842939][T10539] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 366.848649][T10539] ? tomoyo_path_number_perm+0x217/0x620 [ 366.854340][T10539] ? tomoyo_path_number_perm+0x500/0x620 [ 366.860032][T10539] ? __kmem_cache_free+0xba/0x1e0 [ 366.865115][T10539] ? tomoyo_path_number_perm+0x5b4/0x620 [ 366.870818][T10539] ? tomoyo_path_number_perm+0x217/0x620 [ 366.876504][T10539] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 366.882058][T10539] ? __fget_files+0x28/0x4b0 [ 366.886687][T10539] ? __fget_files+0x28/0x4b0 [ 366.891340][T10539] ? bpf_lsm_file_ioctl+0x9/0x10 [ 366.896307][T10539] ? security_file_ioctl+0x80/0xa0 [ 366.901463][T10539] __se_sys_ioctl+0x83/0x170 [ 366.906109][T10539] do_syscall_64+0x55/0xa0 [ 366.910564][T10539] ? clear_bhb_loop+0x40/0x90 [ 366.915288][T10539] ? clear_bhb_loop+0x40/0x90 [ 366.920035][T10539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.925978][T10539] RIP: 0033:0x7f49ded9c819 [ 366.930418][T10539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.950060][T10539] RSP: 002b:00007f49dfcde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.958511][T10539] RAX: ffffffffffffffda RBX: 00007f49df015fa0 RCX: 00007f49ded9c819 [ 366.966510][T10539] RDX: 0000200000000040 RSI: 0000000040305829 RDI: 0000000000000007 [ 366.974512][T10539] RBP: 00007f49dfcde090 R08: 0000000000000000 R09: 0000000000000000 [ 366.982539][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.990572][T10539] R13: 00007f49df016038 R14: 00007f49df015fa0 R15: 00007ffc63de3368 [ 366.998623][T10539] [ 367.154746][T10542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.662044][T10551] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1467'. [ 367.693685][T10551] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1467'. [ 368.238602][T10564] syz.1.1470[10564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.238834][T10564] syz.1.1470[10564] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.432988][ T5781] Bluetooth: hci1: Malformed LE Event: 0x0d [ 368.456031][T10569] FAULT_INJECTION: forcing a failure. [ 368.456031][T10569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.479428][T10569] CPU: 0 PID: 10569 Comm: syz.3.1472 Not tainted syzkaller #0 [ 368.486957][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 368.497052][T10569] Call Trace: [ 368.500366][T10569] [ 368.503334][T10569] dump_stack_lvl+0x18c/0x250 [ 368.508064][T10569] ? show_regs_print_info+0x20/0x20 [ 368.513304][T10569] ? load_image+0x420/0x420 [ 368.517860][T10569] ? __might_fault+0xaa/0x120 [ 368.522575][T10569] ? __lock_acquire+0x7d40/0x7d40 [ 368.527644][T10569] should_fail_ex+0x39d/0x4d0 [ 368.532370][T10569] _copy_from_iter+0x1d9/0x12e0 [ 368.537261][T10569] ? slab_post_alloc_hook+0x8a/0x4b0 [ 368.542581][T10569] ? __virt_addr_valid+0x18c/0x540 [ 368.547732][T10569] ? __lock_acquire+0x7d40/0x7d40 [ 368.552796][T10569] ? rcu_is_watching+0x15/0xb0 [ 368.557622][T10569] ? copyout_mc+0x70/0x70 [ 368.562003][T10569] ? __virt_addr_valid+0x18c/0x540 [ 368.567169][T10569] ? __virt_addr_valid+0x18c/0x540 [ 368.572321][T10569] ? __virt_addr_valid+0x469/0x540 [ 368.577491][T10569] ? __check_object_size+0x506/0xa20 [ 368.582812][T10569] netlink_sendmsg+0x76b/0xbf0 [ 368.587635][T10569] ? perf_trace_lock+0x304/0x3b0 [ 368.592624][T10569] ? netlink_getsockopt+0x590/0x590 [ 368.597882][T10569] ? aa_sock_msg_perm+0x94/0x150 [ 368.602857][T10569] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 368.608195][T10569] ? security_socket_sendmsg+0x80/0xa0 [ 368.613721][T10569] ? netlink_getsockopt+0x590/0x590 [ 368.618973][T10569] ____sys_sendmsg+0x5ba/0x960 [ 368.623790][T10569] ? __asan_memset+0x22/0x40 [ 368.628426][T10569] ? __sys_sendmsg_sock+0x30/0x30 [ 368.633480][T10569] ? __import_iovec+0x5f2/0x850 [ 368.638377][T10569] ? import_iovec+0x73/0xa0 [ 368.642929][T10569] ___sys_sendmsg+0x2a6/0x360 [ 368.647643][T10569] ? __sys_sendmsg+0x2a0/0x2a0 [ 368.652488][T10569] ? __lock_acquire+0x7d40/0x7d40 [ 368.657594][T10569] __se_sys_sendmsg+0x1c2/0x2b0 [ 368.662483][T10569] ? __x64_sys_sendmsg+0x80/0x80 [ 368.667490][T10569] ? lockdep_hardirqs_on+0x98/0x150 [ 368.672739][T10569] do_syscall_64+0x55/0xa0 [ 368.677187][T10569] ? clear_bhb_loop+0x40/0x90 [ 368.681903][T10569] ? clear_bhb_loop+0x40/0x90 [ 368.686629][T10569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.692565][T10569] RIP: 0033:0x7fd040d9c819 [ 368.697018][T10569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.716741][T10569] RSP: 002b:00007fd041c0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.725198][T10569] RAX: ffffffffffffffda RBX: 00007fd041015fa0 RCX: 00007fd040d9c819 [ 368.733206][T10569] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 368.741204][T10569] RBP: 00007fd041c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 368.749202][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.757212][T10569] R13: 00007fd041016038 R14: 00007fd041015fa0 R15: 00007ffeb065f088 [ 368.765257][T10569] [ 368.947337][T10574] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1474'. [ 369.341637][T10578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.928638][T10587] IPv6: Can't replace route, no match found [ 369.961725][T10575] netlink: 'syz.1.1473': attribute type 7 has an invalid length. [ 370.414374][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 370.483110][T10602] FAULT_INJECTION: forcing a failure. [ 370.483110][T10602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.515638][T10602] CPU: 0 PID: 10602 Comm: syz.1.1482 Not tainted syzkaller #0 [ 370.523202][T10602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 370.533338][T10602] Call Trace: [ 370.536675][T10602] [ 370.539675][T10602] dump_stack_lvl+0x18c/0x250 [ 370.544436][T10602] ? show_regs_print_info+0x20/0x20 [ 370.549720][T10602] ? load_image+0x420/0x420 [ 370.554317][T10602] ? __might_fault+0xaa/0x120 [ 370.559080][T10602] ? __lock_acquire+0x7d40/0x7d40 [ 370.564212][T10602] should_fail_ex+0x39d/0x4d0 [ 370.568976][T10602] _copy_from_user+0x2f/0xe0 [ 370.573636][T10602] do_vfs_ioctl+0x10dc/0x1cc0 [ 370.578386][T10602] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 370.584101][T10602] ? tomoyo_path_number_perm+0x217/0x620 [ 370.589831][T10602] ? tomoyo_path_number_perm+0x500/0x620 [ 370.595530][T10602] ? __kmem_cache_free+0xba/0x1e0 [ 370.600614][T10602] ? tomoyo_path_number_perm+0x5b4/0x620 [ 370.606299][T10602] ? tomoyo_path_number_perm+0x217/0x620 [ 370.611971][T10602] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 370.617543][T10602] ? __fget_files+0x28/0x4b0 [ 370.622162][T10602] ? __fget_files+0x28/0x4b0 [ 370.626807][T10602] ? bpf_lsm_file_ioctl+0x9/0x10 [ 370.631779][T10602] ? security_file_ioctl+0x80/0xa0 [ 370.636925][T10602] __se_sys_ioctl+0x83/0x170 [ 370.641563][T10602] do_syscall_64+0x55/0xa0 [ 370.646012][T10602] ? clear_bhb_loop+0x40/0x90 [ 370.650729][T10602] ? clear_bhb_loop+0x40/0x90 [ 370.655462][T10602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.661420][T10602] RIP: 0033:0x7fe38819c819 [ 370.665876][T10602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.685566][T10602] RSP: 002b:00007fe389007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.694029][T10602] RAX: ffffffffffffffda RBX: 00007fe388415fa0 RCX: 00007fe38819c819 [ 370.702032][T10602] RDX: 0000200000000040 RSI: 0000000040305829 RDI: 0000000000000007 [ 370.710029][T10602] RBP: 00007fe389007090 R08: 0000000000000000 R09: 0000000000000000 [ 370.718027][T10602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.726026][T10602] R13: 00007fe388416038 R14: 00007fe388415fa0 R15: 00007ffc3238b558 [ 370.734052][T10602] [ 371.279705][T10617] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.412284][T10622] IPv6: Can't replace route, no match found [ 371.456766][T10623] FAULT_INJECTION: forcing a failure. [ 371.456766][T10623] name failslab, interval 1, probability 0, space 0, times 0 [ 371.522863][T10623] CPU: 1 PID: 10623 Comm: syz.3.1490 Not tainted syzkaller #0 [ 371.530420][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 371.540539][T10623] Call Trace: [ 371.543866][T10623] [ 371.546847][T10623] dump_stack_lvl+0x18c/0x250 [ 371.551608][T10623] ? show_regs_print_info+0x20/0x20 [ 371.556874][T10623] ? load_image+0x420/0x420 [ 371.561468][T10623] ? verify_lock_unused+0x140/0x140 [ 371.566726][T10623] ? perf_trace_lock+0x304/0x3b0 [ 371.571754][T10623] should_fail_ex+0x39d/0x4d0 [ 371.576529][T10623] should_failslab+0x9/0x20 [ 371.581105][T10623] slab_pre_alloc_hook+0x59/0x310 [ 371.586259][T10623] kmem_cache_alloc+0x5a/0x2d0 [ 371.591084][T10623] ? skb_clone+0x1eb/0x370 [ 371.595574][T10623] skb_clone+0x1eb/0x370 [ 371.599891][T10623] __netlink_deliver_tap+0x41c/0x830 [ 371.605281][T10623] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.610555][T10623] netlink_deliver_tap+0x19c/0x1b0 [ 371.615735][T10623] netlink_unicast+0x72c/0x8d0 [ 371.620593][T10623] netlink_sendmsg+0x8d0/0xbf0 [ 371.625432][T10623] ? perf_trace_lock+0x304/0x3b0 [ 371.630542][T10623] ? netlink_getsockopt+0x590/0x590 [ 371.635818][T10623] ? aa_sock_msg_perm+0x94/0x150 [ 371.640824][T10623] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 371.646175][T10623] ? security_socket_sendmsg+0x80/0xa0 [ 371.651688][T10623] ? netlink_getsockopt+0x590/0x590 [ 371.656970][T10623] ____sys_sendmsg+0x5ba/0x960 [ 371.661815][T10623] ? __asan_memset+0x22/0x40 [ 371.666483][T10623] ? __sys_sendmsg_sock+0x30/0x30 [ 371.671583][T10623] ? __import_iovec+0x5f2/0x850 [ 371.676521][T10623] ? import_iovec+0x73/0xa0 [ 371.681091][T10623] ___sys_sendmsg+0x2a6/0x360 [ 371.685841][T10623] ? __sys_sendmsg+0x2a0/0x2a0 [ 371.690716][T10623] ? __lock_acquire+0x7d40/0x7d40 [ 371.695866][T10623] __se_sys_sendmsg+0x1c2/0x2b0 [ 371.700806][T10623] ? __x64_sys_sendmsg+0x80/0x80 [ 371.705846][T10623] ? lockdep_hardirqs_on+0x98/0x150 [ 371.711113][T10623] do_syscall_64+0x55/0xa0 [ 371.715590][T10623] ? clear_bhb_loop+0x40/0x90 [ 371.720337][T10623] ? clear_bhb_loop+0x40/0x90 [ 371.725075][T10623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.731033][T10623] RIP: 0033:0x7fd040d9c819 [ 371.735510][T10623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.755169][T10623] RSP: 002b:00007fd041c0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.763639][T10623] RAX: ffffffffffffffda RBX: 00007fd041015fa0 RCX: 00007fd040d9c819 [ 371.771661][T10623] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 371.779692][T10623] RBP: 00007fd041c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 371.787718][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.795737][T10623] R13: 00007fd041016038 R14: 00007fd041015fa0 R15: 00007ffeb065f088 [ 371.803796][T10623] [ 371.875427][T10623] netlink: 'syz.3.1490': attribute type 7 has an invalid length. [ 372.011548][ T5781] Bluetooth: hci1: Malformed LE Event: 0x0d [ 372.108033][T10630] netlink: 'syz.3.1495': attribute type 7 has an invalid length. [ 372.259180][T10638] netlink: 'syz.1.1497': attribute type 1 has an invalid length. [ 372.299709][T10638] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1497'. [ 372.760598][T10650] FAULT_INJECTION: forcing a failure. [ 372.760598][T10650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.802449][T10650] CPU: 1 PID: 10650 Comm: syz.1.1500 Not tainted syzkaller #0 [ 372.810007][T10650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 372.820123][T10650] Call Trace: [ 372.823468][T10650] [ 372.826455][T10650] dump_stack_lvl+0x18c/0x250 [ 372.831222][T10650] ? show_regs_print_info+0x20/0x20 [ 372.836504][T10650] ? load_image+0x420/0x420 [ 372.841081][T10650] ? __might_fault+0xaa/0x120 [ 372.845835][T10650] ? __lock_acquire+0x7d40/0x7d40 [ 372.850935][T10650] should_fail_ex+0x39d/0x4d0 [ 372.855698][T10650] _copy_from_user+0x2f/0xe0 [ 372.860371][T10650] kstrtouint_from_user+0xde/0x170 [ 372.865568][T10650] ? kstrtol_from_user+0x190/0x190 [ 372.870799][T10650] proc_fail_nth_write+0x8f/0x250 [ 372.875908][T10650] ? proc_fail_nth_read+0x260/0x260 [ 372.881216][T10650] ? proc_fail_nth_read+0x260/0x260 [ 372.886504][T10650] vfs_write+0x296/0x990 [ 372.890846][T10650] ? file_end_write+0x250/0x250 [ 372.895782][T10650] ? __fget_files+0x28/0x4b0 [ 372.900462][T10650] ? __fget_files+0x28/0x4b0 [ 372.905138][T10650] ? __fget_files+0x43d/0x4b0 [ 372.910096][T10650] ? __fdget_pos+0x2a3/0x330 [ 372.914768][T10650] ? ksys_write+0x75/0x260 [ 372.919267][T10650] ksys_write+0x150/0x260 [ 372.923678][T10650] ? __ia32_sys_read+0x90/0x90 [ 372.928564][T10650] ? lockdep_hardirqs_on+0x98/0x150 [ 372.933839][T10650] do_syscall_64+0x55/0xa0 [ 372.938328][T10650] ? clear_bhb_loop+0x40/0x90 [ 372.943140][T10650] ? clear_bhb_loop+0x40/0x90 [ 372.947903][T10650] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.953869][T10650] RIP: 0033:0x7fe38815d04e [ 372.958339][T10650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 372.978106][T10650] RSP: 002b:00007fe389006fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 372.986605][T10650] RAX: ffffffffffffffda RBX: 00007fe3890076c0 RCX: 00007fe38815d04e [ 372.994638][T10650] RDX: 0000000000000001 RSI: 00007fe3890070a0 RDI: 0000000000000008 [ 373.002676][T10650] RBP: 00007fe389007090 R08: 0000000000000000 R09: 0000000000000000 [ 373.010712][T10650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.018754][T10650] R13: 00007fe388416038 R14: 00007fe388415fa0 R15: 00007ffc3238b558 [ 373.026851][T10650] [ 373.200524][T10657] netlink: 'syz.0.1501': attribute type 29 has an invalid length. [ 373.254112][T10657] netlink: 'syz.0.1501': attribute type 29 has an invalid length. [ 373.329853][T10655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.624828][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 373.735854][T10669] IPv6: Can't replace route, no match found [ 374.034853][T10674] netlink: 'syz.1.1509': attribute type 7 has an invalid length. [ 374.055718][T10674] FAULT_INJECTION: forcing a failure. [ 374.055718][T10674] name failslab, interval 1, probability 0, space 0, times 0 [ 374.133672][T10674] CPU: 0 PID: 10674 Comm: syz.1.1509 Not tainted syzkaller #0 [ 374.141246][T10674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 374.151457][T10674] Call Trace: [ 374.154792][T10674] [ 374.157775][T10674] dump_stack_lvl+0x18c/0x250 [ 374.162541][T10674] ? show_regs_print_info+0x20/0x20 [ 374.167817][T10674] ? load_image+0x420/0x420 [ 374.172408][T10674] ? __lock_acquire+0x7d40/0x7d40 [ 374.177542][T10674] should_fail_ex+0x39d/0x4d0 [ 374.182306][T10674] should_failslab+0x9/0x20 [ 374.186876][T10674] slab_pre_alloc_hook+0x59/0x310 [ 374.191992][T10674] ? fib_create_info+0xa61/0x2460 [ 374.197104][T10674] ? fib_create_info+0xa61/0x2460 [ 374.202200][T10674] __kmem_cache_alloc_node+0x53/0x250 [ 374.207739][T10674] ? fib_create_info+0xa61/0x2460 [ 374.212820][T10674] __kmalloc+0xa4/0x230 [ 374.217058][T10674] fib_create_info+0xa61/0x2460 [ 374.222047][T10674] fib_table_insert+0xc6/0x1b20 [ 374.226965][T10674] ? lwtunnel_valid_encap_type_attr+0x220/0x290 [ 374.233283][T10674] ? rtm_to_fib_config+0x1074/0x13b0 [ 374.238659][T10674] ? fib_new_table+0x10a/0x2d0 [ 374.243599][T10674] inet_rtm_newroute+0x14b/0x240 [ 374.248621][T10674] ? rcu_read_unlock+0xa0/0xa0 [ 374.253488][T10674] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 374.258675][T10674] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 374.263859][T10674] ? rcu_read_unlock+0xa0/0xa0 [ 374.268697][T10674] rtnetlink_rcv_msg+0x869/0xfa0 [ 374.273755][T10674] ? rtnetlink_bind+0x80/0x80 [ 374.278506][T10674] ? perf_trace_preemptirq_template+0xac/0x330 [ 374.284735][T10674] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 374.290608][T10674] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 374.296729][T10674] ? __dev_queue_xmit+0x265/0x3660 [ 374.301907][T10674] ? __dev_queue_xmit+0x265/0x3660 [ 374.307134][T10674] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 374.312953][T10674] ? perf_trace_lock+0x304/0x3b0 [ 374.317999][T10674] netlink_rcv_skb+0x241/0x4d0 [ 374.322841][T10674] ? rtnetlink_bind+0x80/0x80 [ 374.327598][T10674] ? netlink_ack+0x1180/0x1180 [ 374.332478][T10674] ? __lock_acquire+0x7d40/0x7d40 [ 374.337586][T10674] ? netlink_deliver_tap+0x2e/0x1b0 [ 374.342893][T10674] netlink_unicast+0x751/0x8d0 [ 374.347763][T10674] netlink_sendmsg+0x8d0/0xbf0 [ 374.352606][T10674] ? perf_trace_lock+0x304/0x3b0 [ 374.357637][T10674] ? netlink_getsockopt+0x590/0x590 [ 374.362929][T10674] ? aa_sock_msg_perm+0x94/0x150 [ 374.367956][T10674] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 374.373320][T10674] ? security_socket_sendmsg+0x80/0xa0 [ 374.378849][T10674] ? netlink_getsockopt+0x590/0x590 [ 374.384132][T10674] ____sys_sendmsg+0x5ba/0x960 [ 374.389024][T10674] ? __asan_memset+0x22/0x40 [ 374.393687][T10674] ? __sys_sendmsg_sock+0x30/0x30 [ 374.398776][T10674] ? __import_iovec+0x5f2/0x850 [ 374.403722][T10674] ? import_iovec+0x73/0xa0 [ 374.408300][T10674] ___sys_sendmsg+0x2a6/0x360 [ 374.413063][T10674] ? __sys_sendmsg+0x2a0/0x2a0 [ 374.418012][T10674] ? __lock_acquire+0x7d40/0x7d40 [ 374.423167][T10674] __se_sys_sendmsg+0x1c2/0x2b0 [ 374.428089][T10674] ? __x64_sys_sendmsg+0x80/0x80 [ 374.433141][T10674] ? lockdep_hardirqs_on+0x98/0x150 [ 374.438431][T10674] do_syscall_64+0x55/0xa0 [ 374.442903][T10674] ? clear_bhb_loop+0x40/0x90 [ 374.447646][T10674] ? clear_bhb_loop+0x40/0x90 [ 374.452400][T10674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.458360][T10674] RIP: 0033:0x7fe38819c819 [ 374.462841][T10674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.482516][T10674] RSP: 002b:00007fe389007028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.491016][T10674] RAX: ffffffffffffffda RBX: 00007fe388415fa0 RCX: 00007fe38819c819 [ 374.499140][T10674] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 374.507380][T10674] RBP: 00007fe389007090 R08: 0000000000000000 R09: 0000000000000000 [ 374.515407][T10674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.523483][T10674] R13: 00007fe388416038 R14: 00007fe388415fa0 R15: 00007ffc3238b558 [ 374.531563][T10674] [ 374.928752][T10683] netlink: 'syz.1.1510': attribute type 2 has an invalid length. [ 374.990911][T10687] netlink: 'syz.2.1511': attribute type 7 has an invalid length. [ 375.331090][T10697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.860639][ T5781] Bluetooth: hci1: Malformed LE Event: 0x0d [ 375.916597][T10711] syzkaller0: entered promiscuous mode [ 375.922297][T10711] syzkaller0: entered allmulticast mode [ 376.469101][T10719] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1520'. [ 378.090324][T10714] IPv6: Can't replace route, no match found [ 378.211151][T10722] netlink: 'syz.3.1522': attribute type 3 has an invalid length. [ 378.219346][T10722] netlink: 'syz.3.1522': attribute type 1 has an invalid length. [ 378.233116][T10722] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1522'. [ 378.246952][T10724] netlink: 'syz.2.1521': attribute type 7 has an invalid length. [ 378.255040][T10724] FAULT_INJECTION: forcing a failure. [ 378.255040][T10724] name failslab, interval 1, probability 0, space 0, times 0 [ 378.287327][T10724] CPU: 0 PID: 10724 Comm: syz.2.1521 Not tainted syzkaller #0 [ 378.294907][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 378.305023][T10724] Call Trace: [ 378.308359][T10724] [ 378.311336][T10724] dump_stack_lvl+0x18c/0x250 [ 378.316079][T10724] ? show_regs_print_info+0x20/0x20 [ 378.321325][T10724] ? load_image+0x420/0x420 [ 378.325894][T10724] ? __might_sleep+0xe0/0xe0 [ 378.330543][T10724] ? __lock_acquire+0x7d40/0x7d40 [ 378.335619][T10724] should_fail_ex+0x39d/0x4d0 [ 378.340362][T10724] should_failslab+0x9/0x20 [ 378.344920][T10724] slab_pre_alloc_hook+0x59/0x310 [ 378.350010][T10724] kmem_cache_alloc_node+0x60/0x320 [ 378.355266][T10724] ? __alloc_skb+0x103/0x2c0 [ 378.359911][T10724] __alloc_skb+0x103/0x2c0 [ 378.364375][T10724] netlink_ack+0x376/0x1180 [ 378.368973][T10724] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 378.374758][T10724] ? netlink_dump+0xe50/0xe50 [ 378.379521][T10724] ? perf_trace_lock+0x304/0x3b0 [ 378.384518][T10724] netlink_rcv_skb+0x2c5/0x4d0 [ 378.389330][T10724] ? rtnetlink_bind+0x80/0x80 [ 378.394081][T10724] ? netlink_ack+0x1180/0x1180 [ 378.398916][T10724] ? __lock_acquire+0x7d40/0x7d40 [ 378.403991][T10724] ? netlink_deliver_tap+0x2e/0x1b0 [ 378.409246][T10724] netlink_unicast+0x751/0x8d0 [ 378.414076][T10724] netlink_sendmsg+0x8d0/0xbf0 [ 378.418902][T10724] ? perf_trace_lock+0x304/0x3b0 [ 378.423900][T10724] ? netlink_getsockopt+0x590/0x590 [ 378.429150][T10724] ? aa_sock_msg_perm+0x94/0x150 [ 378.434136][T10724] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 378.439459][T10724] ? security_socket_sendmsg+0x80/0xa0 [ 378.444951][T10724] ? netlink_getsockopt+0x590/0x590 [ 378.450196][T10724] ____sys_sendmsg+0x5ba/0x960 [ 378.455009][T10724] ? __asan_memset+0x22/0x40 [ 378.459667][T10724] ? __sys_sendmsg_sock+0x30/0x30 [ 378.464729][T10724] ? __import_iovec+0x5f2/0x850 [ 378.469641][T10724] ? import_iovec+0x73/0xa0 [ 378.474189][T10724] ___sys_sendmsg+0x2a6/0x360 [ 378.478924][T10724] ? __sys_sendmsg+0x2a0/0x2a0 [ 378.483770][T10724] ? __lock_acquire+0x7d40/0x7d40 [ 378.488899][T10724] __se_sys_sendmsg+0x1c2/0x2b0 [ 378.493798][T10724] ? __x64_sys_sendmsg+0x80/0x80 [ 378.498813][T10724] ? lockdep_hardirqs_on+0x98/0x150 [ 378.504063][T10724] do_syscall_64+0x55/0xa0 [ 378.508533][T10724] ? clear_bhb_loop+0x40/0x90 [ 378.513263][T10724] ? clear_bhb_loop+0x40/0x90 [ 378.517988][T10724] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.523921][T10724] RIP: 0033:0x7f2664b9c819 [ 378.528376][T10724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.548035][T10724] RSP: 002b:00007f2665a8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 378.556490][T10724] RAX: ffffffffffffffda RBX: 00007f2664e15fa0 RCX: 00007f2664b9c819 [ 378.564532][T10724] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 378.572599][T10724] RBP: 00007f2665a8b090 R08: 0000000000000000 R09: 0000000000000000 [ 378.580606][T10724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.588621][T10724] R13: 00007f2664e16038 R14: 00007f2664e15fa0 R15: 00007fffa87093d8 [ 378.596680][T10724] [ 378.627395][T10726] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1523'. [ 378.639157][T10726] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1523'. [ 378.652535][T10726] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1523'. [ 378.719679][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.726172][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.003892][T10732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.494150][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 379.714759][T10741] netlink: 'syz.0.1529': attribute type 2 has an invalid length. [ 379.723325][T10741] netlink: 'syz.0.1529': attribute type 4 has an invalid length. [ 379.751167][T10741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1529'. [ 380.021578][T10750] IPv6: Can't replace route, no match found [ 380.289337][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 380.461947][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 380.621886][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 380.686423][T10771] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1539'. [ 380.980300][T10775] netlink: 'syz.3.1540': attribute type 2 has an invalid length. [ 380.996263][T10775] netlink: 'syz.3.1540': attribute type 4 has an invalid length. [ 381.004327][T10775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1540'. [ 381.005828][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 381.373205][T10787] IPv6: Can't replace route, no match found [ 381.541940][T10791] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 381.564171][T10791] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 381.599928][T10792] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 381.626512][T10793] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 381.640946][T10791] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 381.779579][T10792] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 382.027036][ T5781] Bluetooth: hci0: Malformed LE Event: 0x0d [ 382.576919][ T5781] Bluetooth: hci1: Malformed LE Event: 0x0d [ 382.755581][ T5781] Bluetooth: hci1: Malformed LE Event: 0x0d [ 383.536030][ T5781] Bluetooth: hci0: Malformed LE Event: 0x0d [ 383.599622][ T5781] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 383.635622][T10826] IPv6: Can't replace route, no match found [ 383.727261][T10828] netlink: 'syz.2.1561': attribute type 7 has an invalid length. [ 383.745968][T10830] netlink: 'syz.3.1560': attribute type 7 has an invalid length. [ 383.754301][T10830] FAULT_INJECTION: forcing a failure. [ 383.754301][T10830] name failslab, interval 1, probability 0, space 0, times 0 [ 383.785414][T10830] CPU: 1 PID: 10830 Comm: syz.3.1560 Not tainted syzkaller #0 [ 383.792969][T10830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 383.803069][T10830] Call Trace: [ 383.806389][T10830] [ 383.809364][T10830] dump_stack_lvl+0x18c/0x250 [ 383.814122][T10830] ? show_regs_print_info+0x20/0x20 [ 383.819387][T10830] ? load_image+0x420/0x420 [ 383.823977][T10830] ? verify_lock_unused+0x140/0x140 [ 383.829256][T10830] should_fail_ex+0x39d/0x4d0 [ 383.834012][T10830] should_failslab+0x9/0x20 [ 383.838577][T10830] slab_pre_alloc_hook+0x59/0x310 [ 383.843682][T10830] kmem_cache_alloc+0x5a/0x2d0 [ 383.848511][T10830] ? skb_clone+0x1eb/0x370 [ 383.852997][T10830] skb_clone+0x1eb/0x370 [ 383.857299][T10830] __netlink_deliver_tap+0x41c/0x830 [ 383.862673][T10830] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.867940][T10830] netlink_deliver_tap+0x19c/0x1b0 [ 383.873116][T10830] netlink_sendskb+0x68/0x130 [ 383.877864][T10830] netlink_ack+0xce1/0x1180 [ 383.882463][T10830] ? netlink_dump+0xe50/0xe50 [ 383.887220][T10830] ? perf_trace_lock+0x304/0x3b0 [ 383.892234][T10830] netlink_rcv_skb+0x2c5/0x4d0 [ 383.897062][T10830] ? rtnetlink_bind+0x80/0x80 [ 383.901791][T10830] ? netlink_ack+0x1180/0x1180 [ 383.906646][T10830] ? __lock_acquire+0x7d40/0x7d40 [ 383.911742][T10830] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.917005][T10830] netlink_unicast+0x751/0x8d0 [ 383.921834][T10830] netlink_sendmsg+0x8d0/0xbf0 [ 383.926628][T10830] ? perf_trace_lock+0x304/0x3b0 [ 383.931598][T10830] ? netlink_getsockopt+0x590/0x590 [ 383.936851][T10830] ? aa_sock_msg_perm+0x94/0x150 [ 383.941829][T10830] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 383.947138][T10830] ? security_socket_sendmsg+0x80/0xa0 [ 383.952618][T10830] ? netlink_getsockopt+0x590/0x590 [ 383.957855][T10830] ____sys_sendmsg+0x5ba/0x960 [ 383.962664][T10830] ? __asan_memset+0x22/0x40 [ 383.967292][T10830] ? __sys_sendmsg_sock+0x30/0x30 [ 383.972347][T10830] ? __import_iovec+0x5f2/0x850 [ 383.977256][T10830] ? import_iovec+0x73/0xa0 [ 383.981802][T10830] ___sys_sendmsg+0x2a6/0x360 [ 383.986528][T10830] ? __sys_sendmsg+0x2a0/0x2a0 [ 383.991390][T10830] ? __lock_acquire+0x7d40/0x7d40 [ 383.996489][T10830] __se_sys_sendmsg+0x1c2/0x2b0 [ 384.001387][T10830] ? __x64_sys_sendmsg+0x80/0x80 [ 384.006389][T10830] ? lockdep_hardirqs_on+0x98/0x150 [ 384.011654][T10830] do_syscall_64+0x55/0xa0 [ 384.016149][T10830] ? clear_bhb_loop+0x40/0x90 [ 384.020869][T10830] ? clear_bhb_loop+0x40/0x90 [ 384.025580][T10830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.031505][T10830] RIP: 0033:0x7fd040d9c819 [ 384.035947][T10830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.055592][T10830] RSP: 002b:00007fd041c0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.064040][T10830] RAX: ffffffffffffffda RBX: 00007fd041015fa0 RCX: 00007fd040d9c819 [ 384.072043][T10830] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 384.080048][T10830] RBP: 00007fd041c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 384.088052][T10830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.096078][T10830] R13: 00007fd041016038 R14: 00007fd041015fa0 R15: 00007ffeb065f088 [ 384.104108][T10830] [ 384.155331][ T5772] Bluetooth: hci3: Malformed LE Event: 0x0d [ 384.188026][T10835] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1563'. [ 384.590276][T10844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.616948][T10848] syzkaller0: entered promiscuous mode [ 384.649102][T10848] syzkaller0: entered allmulticast mode [ 384.721286][ T5772] Bluetooth: hci2: Malformed LE Event: 0x0d [ 385.433135][T10860] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1571'. [ 385.666043][ T5772] Bluetooth: hci3: command 0x0406 tx timeout [ 385.954140][ T5772] Bluetooth: hci2: Malformed LE Event: 0x0d [ 387.190556][T10855] IPv6: Can't replace route, no match found [ 387.197227][T10870] validate_nla: 2 callbacks suppressed [ 387.197240][T10870] netlink: 'syz.1.1574': attribute type 7 has an invalid length. [ 387.226055][T10870] FAULT_INJECTION: forcing a failure. [ 387.226055][T10870] name failslab, interval 1, probability 0, space 0, times 0 [ 387.264010][T10870] CPU: 1 PID: 10870 Comm: syz.1.1574 Not tainted syzkaller #0 [ 387.271573][T10870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 387.281669][T10870] Call Trace: [ 387.284987][T10870] [ 387.287961][T10870] dump_stack_lvl+0x18c/0x250 [ 387.292699][T10870] ? show_regs_print_info+0x20/0x20 [ 387.297963][T10870] ? load_image+0x420/0x420 [ 387.302522][T10870] ? verify_lock_unused+0x140/0x140 [ 387.307776][T10870] should_fail_ex+0x39d/0x4d0 [ 387.312514][T10870] should_failslab+0x9/0x20 [ 387.317098][T10870] slab_pre_alloc_hook+0x59/0x310 [ 387.322198][T10870] kmem_cache_alloc+0x5a/0x2d0 [ 387.327013][T10870] ? skb_clone+0x1eb/0x370 [ 387.331487][T10870] skb_clone+0x1eb/0x370 [ 387.335803][T10870] __netlink_deliver_tap+0x41c/0x830 [ 387.341156][T10870] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.346429][T10870] netlink_deliver_tap+0x19c/0x1b0 [ 387.351606][T10870] netlink_sendskb+0x68/0x130 [ 387.356349][T10870] netlink_ack+0xce1/0x1180 [ 387.360930][T10870] ? netlink_dump+0xe50/0xe50 [ 387.365667][T10870] ? perf_trace_lock+0x304/0x3b0 [ 387.370670][T10870] netlink_rcv_skb+0x2c5/0x4d0 [ 387.375492][T10870] ? rtnetlink_bind+0x80/0x80 [ 387.380220][T10870] ? netlink_ack+0x1180/0x1180 [ 387.385035][T10870] ? __lock_acquire+0x7d40/0x7d40 [ 387.390126][T10870] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.395385][T10870] netlink_unicast+0x751/0x8d0 [ 387.400216][T10870] netlink_sendmsg+0x8d0/0xbf0 [ 387.405033][T10870] ? perf_trace_lock+0x304/0x3b0 [ 387.410021][T10870] ? netlink_getsockopt+0x590/0x590 [ 387.415290][T10870] ? aa_sock_msg_perm+0x94/0x150 [ 387.420288][T10870] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 387.425622][T10870] ? security_socket_sendmsg+0x80/0xa0 [ 387.431111][T10870] ? netlink_getsockopt+0x590/0x590 [ 387.436364][T10870] ____sys_sendmsg+0x5ba/0x960 [ 387.441178][T10870] ? __asan_memset+0x22/0x40 [ 387.445814][T10870] ? __sys_sendmsg_sock+0x30/0x30 [ 387.450888][T10870] ? __import_iovec+0x5f2/0x850 [ 387.455791][T10870] ? import_iovec+0x73/0xa0 [ 387.460346][T10870] ___sys_sendmsg+0x2a6/0x360 [ 387.465114][T10870] ? __sys_sendmsg+0x2a0/0x2a0 [ 387.469946][T10870] ? __lock_acquire+0x7d40/0x7d40 [ 387.475054][T10870] __se_sys_sendmsg+0x1c2/0x2b0 [ 387.479972][T10870] ? __x64_sys_sendmsg+0x80/0x80 [ 387.484977][T10870] ? lockdep_hardirqs_on+0x98/0x150 [ 387.490226][T10870] do_syscall_64+0x55/0xa0 [ 387.494710][T10870] ? clear_bhb_loop+0x40/0x90 [ 387.499435][T10870] ? clear_bhb_loop+0x40/0x90 [ 387.504166][T10870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 387.510106][T10870] RIP: 0033:0x7fe38819c819 [ 387.514562][T10870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.534214][T10870] RSP: 002b:00007fe389007028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.542688][T10870] RAX: ffffffffffffffda RBX: 00007fe388415fa0 RCX: 00007fe38819c819 [ 387.550717][T10870] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 387.558751][T10870] RBP: 00007fe389007090 R08: 0000000000000000 R09: 0000000000000000 [ 387.566775][T10870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.574798][T10870] R13: 00007fe388416038 R14: 00007fe388415fa0 R15: 00007ffc3238b558 [ 387.582832][T10870] [ 387.594113][T10875] netlink: 'syz.2.1575': attribute type 2 has an invalid length. [ 387.604780][T10875] netlink: 'syz.2.1575': attribute type 4 has an invalid length. [ 387.620022][T10875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1575'. [ 387.802139][T10881] netlink: 'syz.1.1579': attribute type 27 has an invalid length. [ 387.980245][T10884] syzkaller0: entered promiscuous mode [ 387.989733][T10884] syzkaller0: entered allmulticast mode [ 387.999942][T10888] netlink: 'syz.3.1581': attribute type 10 has an invalid length. [ 388.143633][T10888] team0: Device wg1 is of different type [ 388.682343][T10900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.926033][T10887] delete_channel: no stack [ 390.503002][T10903] IPv6: Can't replace route, no match found [ 390.639024][T10909] netlink: 'syz.0.1588': attribute type 2 has an invalid length. [ 390.665986][T10909] netlink: 'syz.0.1588': attribute type 4 has an invalid length. [ 390.675883][T10909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1588'. [ 390.843362][T10907] syzkaller0: entered promiscuous mode [ 390.862962][T10907] syzkaller0: entered allmulticast mode [ 390.888953][T10915] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1591'. [ 391.376866][T10924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.938136][T10915] netlink: 'syz.2.1591': attribute type 7 has an invalid length. [ 393.114834][ T5772] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 393.207224][T10936] IPv6: Can't replace route, no match found [ 393.391431][T10941] netlink: 'syz.0.1598': attribute type 13 has an invalid length. [ 393.411743][T10941] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1598'. [ 393.905552][T10953] netlink: 'syz.1.1603': attribute type 39 has an invalid length. [ 393.947403][T10957] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.1605'. [ 394.226019][T10953] hsr_slave_1 (unregistering): left promiscuous mode [ 394.472516][T10957] netlink: 'syz.2.1605': attribute type 10 has an invalid length. [ 394.485544][T10957] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1605'. [ 394.774248][T10962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.185492][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 395.520190][ T5781] Bluetooth: hci1: ISO packet for unknown connection handle 31 [ 395.593113][T10972] syzkaller0: entered promiscuous mode [ 395.605331][T10972] syzkaller0: entered allmulticast mode [ 397.480410][T10978] IPv6: Can't replace route, no match found [ 397.559318][T10984] syzkaller0: entered promiscuous mode [ 397.564874][T10984] syzkaller0: entered allmulticast mode [ 397.631366][T10990] netlink: 'syz.2.1613': attribute type 2 has an invalid length. [ 397.639896][T10990] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 397.668670][T10990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.515390][T11002] netlink: 'syz.2.1618': attribute type 7 has an invalid length. [ 400.839248][T11017] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.1624'. [ 400.904502][T11017] netlink: 'syz.1.1624': attribute type 10 has an invalid length. [ 400.937765][T11017] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1624'. [ 401.661161][T11021] IPv6: Can't replace route, no match found [ 401.669919][T11029] netlink: 'syz.3.1629': attribute type 2 has an invalid length. [ 401.698809][T11029] netlink: 'syz.3.1629': attribute type 4 has an invalid length. [ 401.717872][T11029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1629'. [ 401.876404][T11037] netlink: 'syz.0.1630': attribute type 29 has an invalid length. [ 401.939287][T11043] netlink: 'syz.1.1633': attribute type 7 has an invalid length. [ 401.951325][T11037] netlink: 'syz.0.1630': attribute type 29 has an invalid length. [ 401.976872][T11044] netlink: 'syz.0.1630': attribute type 29 has an invalid length. [ 401.986087][T11040] sctp: [Deprecated]: syz.2.1632 (pid 11040) Use of int in maxseg socket option. [ 401.986087][T11040] Use struct sctp_assoc_value instead [ 402.004858][T11037] netlink: 'syz.0.1630': attribute type 29 has an invalid length. [ 402.346633][T11053] netlink: 'syz.0.1634': attribute type 29 has an invalid length. [ 402.725871][T11068] IPv6: Can't replace route, no match found [ 402.742067][T11070] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1639'. [ 403.520373][T11082] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1642'. [ 403.881969][T11088] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1644'. [ 403.929822][T11088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.589508][ T5781] Bluetooth: hci2: Malformed LE Event: 0x0d [ 404.689432][T11112] IPv6: Can't replace route, no match found [ 404.734462][T11110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1651'. [ 405.280568][T11121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.645529][T11125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.683917][ T5781] Bluetooth: hci1: Malformed LE Event: 0x0d [ 406.901634][T11141] validate_nla: 8 callbacks suppressed [ 406.901669][T11141] netlink: 'syz.0.1662': attribute type 2 has an invalid length. [ 406.925478][T11141] netlink: 'syz.0.1662': attribute type 4 has an invalid length. [ 406.942649][T11141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1662'. [ 407.037343][T11146] IPv6: Can't replace route, no match found [ 407.526921][T11160] IPv6: Can't replace route, no match found [ 408.450339][ T5781] Bluetooth: hci2: Malformed LE Event: 0x0d [ 408.505542][T11172] netlink: 'syz.0.1671': attribute type 7 has an invalid length. [ 408.941140][T11171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.954915][T11180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.031778][T11182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.499205][T11189] IPv6: Can't replace route, no match found [ 410.087802][ T5781] Bluetooth: hci3: Malformed LE Event: 0x0d [ 410.467734][T11209] netlink: 'syz.2.1684': attribute type 2 has an invalid length. [ 410.522974][T11209] netlink: 'syz.2.1684': attribute type 4 has an invalid length. [ 410.578808][T11209] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1684'. [ 410.630082][T11217] netlink: 'syz.0.1685': attribute type 10 has an invalid length. [ 410.653316][T11217] wlan1: mtu less than device minimum [ 410.882249][T11215] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.188208][ T5781] Bluetooth: hci2: Malformed LE Event: 0x0d [ 411.351359][T11210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.432304][T11232] netlink: 'syz.2.1695': attribute type 17 has an invalid length. [ 411.556522][T11241] netlink: 'syz.0.1696': attribute type 2 has an invalid length. [ 411.572313][T11241] netlink: 'syz.0.1696': attribute type 4 has an invalid length. [ 411.581766][T11241] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1696'. [ 412.614086][ T5781] Bluetooth: hci1: Malformed LE Event: 0x0d [ 415.586333][T11274] netlink: 'syz.0.1706': attribute type 2 has an invalid length. [ 415.594567][T11274] netlink: 'syz.0.1706': attribute type 4 has an invalid length. [ 415.615764][T11274] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1706'. [ 415.867323][T11291] IPv6: Can't replace route, no match found [ 415.968084][ T5781] Bluetooth: hci1: Malformed LE Event: 0x0d [ 416.885168][T11308] netlink: 'syz.2.1715': attribute type 10 has an invalid length. [ 419.732611][T11308] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.740594][T11308] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.818268][T11308] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.825739][T11308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.834070][T11308] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.841366][T11308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.893573][T11308] team0: Port device bridge0 added [ 420.280953][T11318] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1718'. [ 420.626945][T11325] netlink: 'syz.1.1720': attribute type 2 has an invalid length. [ 420.635030][T11325] netlink: 'syz.1.1720': attribute type 4 has an invalid length. [ 420.674102][T11325] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1720'. [ 420.707208][T11321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.965794][ T5772] Bluetooth: hci0: Malformed LE Event: 0x0d [ 421.023801][T11340] netlink: 'syz.2.1726': attribute type 10 has an invalid length. [ 421.056384][T11340] hsr_slave_0: left promiscuous mode [ 421.108968][T11340] hsr_slave_1: left promiscuous mode [ 421.220690][T11338] netlink: 'syz.1.1724': attribute type 2 has an invalid length. [ 421.228896][T11338] netlink: 'syz.1.1724': attribute type 8 has an invalid length. [ 421.237528][T11338] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1724'. [ 421.247933][T11336] netlink: 'syz.0.1725': attribute type 10 has an invalid length. [ 421.290657][T11336] bridge0: port 3(.`) entered blocking state [ 421.297490][T11336] bridge0: port 3(.`) entered forwarding state [ 421.305951][T11336] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.338688][T11336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.505094][T11336] bridge0: port 3(.`) entered disabled state [ 421.519393][T11336] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.561111][T11349] netlink: 'syz.3.1727': attribute type 4 has an invalid length. [ 421.575485][T11349] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1727'. [ 421.594575][T11349] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 421.747637][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 421.956549][T11367] netlink: 'syz.1.1732': attribute type 2 has an invalid length. [ 421.964612][T11367] netlink: 'syz.1.1732': attribute type 4 has an invalid length. [ 421.983078][T11367] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1732'. [ 422.245848][T11372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.309723][ T5781] Bluetooth: hci2: Malformed LE Event: 0x0d [ 422.369017][T11378] netlink: 'syz.3.1737': attribute type 29 has an invalid length. [ 422.597611][T11384] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.606807][T11384] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.847889][T11384] team0: Port device bridge0 removed [ 422.911694][T11384] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.921714][T11384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.932922][T11384] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.941019][T11384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.012581][T11384] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 423.024223][T11392] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1743'. [ 423.051863][T11395] IPv6: Can't replace route, no match found [ 423.689536][ T5781] Bluetooth: hci2: Malformed LE Event: 0x0d [ 423.696364][T11408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 424.407813][T11428] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1754'. [ 424.545726][T11431] bridge0: port 4(hsr0) entered disabled state [ 424.578349][T11431] bridge0: port 3(.`) entered disabled state [ 424.633047][T11431] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.658338][T11431] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.894432][T11431] .`: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.988437][T11431] bridge0: port 4(hsr0) entered blocking state [ 424.998435][T11431] bridge0: port 4(hsr0) entered listening state [ 425.009481][T11431] bridge0: port 3(.`) entered blocking state [ 425.017207][T11431] bridge0: port 3(.`) entered listening state [ 425.027722][T11431] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.045428][T11431] bridge0: port 2(bridge_slave_1) entered listening state [ 425.059043][T11431] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.069994][T11431] bridge0: port 1(bridge_slave_0) entered listening state [ 425.226499][ T5781] Bluetooth: hci0: Malformed LE Event: 0x0d [ 425.263244][T11431] bridge0: port 4(hsr0) entered disabled state [ 425.269854][T11431] bridge0: port 3(.`) entered disabled state [ 425.276159][T11431] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.283421][T11431] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.322868][T11438] IPv6: Can't replace route, no match found [ 425.433024][T11443] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1759'. [ 425.518613][T11448] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 425.543265][T11448] syzkaller0: entered promiscuous mode [ 425.599335][T11448] syzkaller0: entered allmulticast mode [ 425.619889][T11445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 427.802585][T11457] validate_nla: 9 callbacks suppressed [ 427.802606][T11457] netlink: 'syz.2.1763': attribute type 10 has an invalid length. [ 427.862546][T11465] netlink: 'syz.1.1765': attribute type 2 has an invalid length. [ 427.872646][T11465] netlink: 'syz.1.1765': attribute type 4 has an invalid length. [ 427.880525][T11465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1765'. [ 428.130350][T11474] IPv6: Can't replace route, no match found [ 428.156834][ T5781] Bluetooth: hci2: Malformed LE Event: 0x0d [ 428.514792][T11472] netlink: 'syz.0.1767': attribute type 39 has an invalid length. [ 428.984675][T11491] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1773'. [ 429.242227][T11494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.891588][T11507] netlink: 'syz.0.1776': attribute type 2 has an invalid length. [ 431.900056][T11507] netlink: 'syz.0.1776': attribute type 4 has an invalid length. [ 431.913792][T11507] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1776'. [ 432.037159][T11513] IPv6: Can't replace route, no match found [ 432.102155][ T5781] Bluetooth: hci2: Malformed LE Event: 0x0d [ 432.552116][T11526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.014413][T11538] netlink: 'syz.0.1787': attribute type 2 has an invalid length. [ 433.027464][T11538] netlink: 'syz.0.1787': attribute type 4 has an invalid length. [ 433.052646][T11538] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1787'. [ 433.189817][T11542] netlink: 'syz.3.1788': attribute type 9 has an invalid length. [ 433.236146][T11542] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.1788'. [ 433.370312][T11549] IPv6: Can't replace route, no match found [ 433.646433][ T5781] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 448.875921][ T5772] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 448.885065][ T5772] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 448.895588][ T5772] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 448.904527][ T5772] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 448.912911][ T5772] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 448.921445][ T5772] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 449.303987][T11572] chnl_net:caif_netlink_parms(): no params data found [ 449.493890][T11572] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.510952][T11572] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.520171][T11572] bridge_slave_0: entered allmulticast mode [ 449.531878][T11572] bridge_slave_0: entered promiscuous mode [ 449.543482][T11572] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.555022][T11572] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.564069][T11572] bridge_slave_1: entered allmulticast mode [ 449.577917][T11572] bridge_slave_1: entered promiscuous mode [ 449.670232][T11572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.710572][T11572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.908726][T11572] team0: Port device team_slave_0 added [ 449.968234][T11572] team0: Port device team_slave_1 added [ 450.181180][T11572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.235437][T11572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.380540][T11572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.444047][T11572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.490414][T11572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.615267][T11572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.025644][ T5772] Bluetooth: hci4: command tx timeout [ 451.271956][ T5781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 451.282011][ T5781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 451.290985][ T5781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 451.299770][ T5781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 451.308277][ T5781] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 451.315845][ T5781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 451.576868][ T5781] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 451.587440][ T5781] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 451.595738][ T5781] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 451.606549][ T5781] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 451.615860][ T5781] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 451.623354][ T5781] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 451.756556][ T5781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 451.766382][ T5781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 451.774757][ T5781] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 451.783778][ T5781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 451.792019][ T5781] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 451.800168][ T5781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 453.105343][ T5781] Bluetooth: hci4: command tx timeout [ 453.426907][ T5781] Bluetooth: hci5: command tx timeout [ 453.665444][ T5781] Bluetooth: hci6: command tx timeout [ 453.826669][ T5781] Bluetooth: hci7: command tx timeout [ 455.185275][ T5781] Bluetooth: hci4: command tx timeout [ 455.506399][ T5781] Bluetooth: hci5: command tx timeout [ 455.745659][ T5781] Bluetooth: hci6: command tx timeout [ 455.906519][ T5781] Bluetooth: hci7: command tx timeout [ 457.265321][ T5781] Bluetooth: hci4: command tx timeout [ 457.585417][ T5781] Bluetooth: hci5: command tx timeout [ 457.825303][ T5781] Bluetooth: hci6: command tx timeout [ 457.985374][ T5781] Bluetooth: hci7: command tx timeout [ 459.665319][ T5781] Bluetooth: hci5: command tx timeout [ 459.905245][ T5781] Bluetooth: hci6: command tx timeout [ 460.065335][ T5781] Bluetooth: hci7: command tx timeout [ 484.385429][ T23] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 509.556618][T11596] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 509.566456][T11596] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 509.574450][T11596] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 509.583536][T11596] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 509.591525][T11596] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 509.599472][T11596] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 510.822284][ T5781] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 510.832203][ T5781] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 510.840745][ T5781] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 510.849149][ T5781] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 510.857022][ T5781] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 510.864444][ T5781] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 510.945031][T11596] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 510.955711][T11596] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 510.965412][T11596] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 510.974603][T11596] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 510.983638][T11596] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 510.991391][T11596] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 511.085347][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.091928][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.601268][T11596] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 511.611021][T11596] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 511.619671][T11596] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 511.633957][T11596] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 511.642431][T11596] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 511.655777][T11596] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 511.665359][T11596] Bluetooth: hci8: command tx timeout [ 512.945363][T11596] Bluetooth: hci9: command tx timeout [ 513.109575][T11596] Bluetooth: hci10: command tx timeout [ 513.745341][ T5781] Bluetooth: hci8: command tx timeout [ 513.754047][T11596] Bluetooth: hci11: command tx timeout [ 515.025293][T11596] Bluetooth: hci9: command tx timeout [ 515.186393][T11596] Bluetooth: hci10: command tx timeout [ 515.825325][ T5781] Bluetooth: hci8: command tx timeout [ 515.832024][T11596] Bluetooth: hci11: command tx timeout [ 517.105290][T11596] Bluetooth: hci9: command tx timeout [ 517.267615][T11596] Bluetooth: hci10: command tx timeout [ 517.905315][T11596] Bluetooth: hci11: command tx timeout [ 517.910895][ T5781] Bluetooth: hci8: command tx timeout [ 519.185320][ T5781] Bluetooth: hci9: command tx timeout [ 519.345295][ T5781] Bluetooth: hci10: command tx timeout [ 519.985302][ T5781] Bluetooth: hci11: command tx timeout [ 538.685132][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 538.691949][ C0] rcu: 0-....: (10500 ticks this GP) idle=e474/1/0x4000000000000000 softirq=40881/40881 fqs=5244 [ 538.703538][ C0] rcu: hardirqs softirqs csw/system [ 538.709964][ C0] rcu: number: 1223783 0 0 [ 538.716381][ C0] rcu: cputime: 17731 34758 71 ==> 52500(ms) [ 538.724232][ C0] rcu: (t=10502 jiffies g=58649 q=1954 ncpus=2) [ 538.730622][ C0] CPU: 0 PID: 11553 Comm: syz.1.1793 Not tainted syzkaller #0 [ 538.738121][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 538.748205][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x60 [ 538.754293][ C0] Code: 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d 1c f5 03 0d 48 89 de 5b e9 e3 67 57 00 cc cc cc f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0d b0 93 7c 7e 65 8b 15 b1 93 7c 7e 81 e2 00 01 ff 00 74 [ 538.773910][ C0] RSP: 0018:ffffc90000007370 EFLAGS: 00000246 [ 538.779990][ C0] RAX: ffffffff813b4175 RBX: ffffffff8f95a448 RCX: 0000000000000003 [ 538.787977][ C0] RDX: ffffffff813b3f02 RSI: ffffffff8cfa07a0 RDI: 0000000000000004 [ 538.795956][ C0] RBP: ffffc90000007498 R08: ffff88802bb53c00 R09: 0000000000000008 [ 538.803939][ C0] R10: 0000000000000009 R11: 0000000000000100 R12: ffffc90000007448 [ 538.811933][ C0] R13: dffffc0000000000 R14: 0000000000000004 R15: ffffffff8f95a44c [ 538.819930][ C0] FS: 00007fe3890076c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 538.828865][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.835471][ C0] CR2: 0000000100000000 CR3: 0000000028eaa000 CR4: 00000000003506f0 [ 538.843478][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 538.851464][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 538.859445][ C0] Call Trace: [ 538.862737][ C0] [ 538.865608][ C0] unwind_next_frame+0x9b5/0x2970 [ 538.870654][ C0] ? ndisc_send_skb+0xc26/0x14f0 [ 538.875621][ C0] ? ndisc_send_skb+0xc26/0x14f0 [ 538.880653][ C0] ? stack_trace_save+0x100/0x100 [ 538.885718][ C0] arch_stack_walk+0x144/0x190 [ 538.890512][ C0] ? ndisc_send_skb+0xc26/0x14f0 [ 538.895507][ C0] stack_trace_save+0xaa/0x100 [ 538.900302][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 538.905464][ C0] ref_tracker_alloc+0x1b7/0x4c0 [ 538.910446][ C0] ? lockdep_init_map_type+0x9c/0x8e0 [ 538.915841][ C0] ? ref_tracker_dir_exit+0x500/0x500 [ 538.921242][ C0] ? ___neigh_create+0xc8b/0x2440 [ 538.926289][ C0] ? ip6_finish_output2+0x1581/0x1630 [ 538.931675][ C0] ? ndisc_send_skb+0xc26/0x14f0 [ 538.936668][ C0] ? ___neigh_create+0xbdc/0x2440 [ 538.941724][ C0] ___neigh_create+0xc8b/0x2440 [ 538.946628][ C0] ? __ipv6_neigh_lookup_noref+0x5b9/0x7d0 [ 538.952465][ C0] ip6_finish_output2+0x1581/0x1630 [ 538.957688][ C0] ? ip6_finish_output2+0x645/0x1630 [ 538.963020][ C0] ? ip6_mtu+0x7d/0x3f0 [ 538.967224][ C0] ? nf_hook+0x390/0x390 [ 538.971544][ C0] ? ip6_finish_output+0x57b/0x820 [ 538.976685][ C0] ndisc_send_skb+0xc26/0x14f0 [ 538.981479][ C0] ? ndisc_send_skb+0x1f5/0x14f0 [ 538.986435][ C0] ? ndisc_mc_map+0x680/0x680 [ 538.991123][ C0] ? skb_dst+0xd0/0xd0 [ 538.995216][ C0] addrconf_rs_timer+0x2d5/0x630 [ 539.000173][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 539.006253][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 539.012254][ C0] call_timer_fn+0x189/0x540 [ 539.016855][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 539.023020][ C0] ? call_timer_fn+0xd2/0x540 [ 539.027709][ C0] ? __run_timers+0x800/0x800 [ 539.032418][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 539.038516][ C0] __run_timers+0x542/0x800 [ 539.043037][ C0] ? detach_timer+0x2b0/0x2b0 [ 539.047732][ C0] run_timer_softirq+0x67/0xf0 [ 539.052602][ C0] handle_softirqs+0x280/0x820 [ 539.057400][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 539.062177][ C0] ? do_softirq+0x1a0/0x1a0 [ 539.066693][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 539.071924][ C0] __irq_exit_rcu+0xd3/0x190 [ 539.076609][ C0] ? irq_exit_rcu+0x20/0x20 [ 539.081129][ C0] irq_exit_rcu+0x9/0x20 [ 539.085390][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 539.091064][ C0] [ 539.094005][ C0] [ 539.096954][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 539.102970][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x42/0x60 [ 539.109138][ C0] Code: e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 <48> 8b 32 48 8d 7e 01 8b 89 fc 15 00 00 48 39 cf 73 08 48 89 3a 48 [ 539.128768][ C0] RSP: 0018:ffffc90011566df8 EFLAGS: 00000246 [ 539.134867][ C0] RAX: ffffffff818f561c RBX: 000000000000002c RCX: ffff88802bb53c00 [ 539.142868][ C0] RDX: ffffc9000cbc9000 RSI: ffffc90011566ea0 RDI: 000000000000002c [ 539.150868][ C0] RBP: ffffc90011566f40 R08: 0000000000000002 R09: 0000000000000000 [ 539.158954][ C0] R10: dffffc0000000000 R11: fffffbfff1d1629e R12: 1ffff920022acdd0 [ 539.166942][ C0] R13: 000000000000002c R14: ffffc90011566ea0 R15: ffffc90011566ec0 [ 539.175195][ C0] ? perf_trace_buf_alloc+0x1c/0x290 [ 539.180510][ C0] perf_trace_buf_alloc+0x1c/0x290 [ 539.185637][ C0] perf_trace_lock_acquire+0x1a0/0x410 [ 539.191120][ C0] ? arch_stack_walk+0x160/0x190 [ 539.196072][ C0] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 539.202683][ C0] ? stack_trace_save+0xaa/0x100 [ 539.207635][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 539.212758][ C0] lock_acquire+0x3ef/0x420 [ 539.217277][ C0] ? page_ext_get+0x22/0x2b0 [ 539.221887][ C0] ? read_lock_is_recursive+0x20/0x20 [ 539.227278][ C0] ? do_syscall_64+0x55/0xa0 [ 539.231886][ C0] ? page_ext_put+0x9c/0xb0 [ 539.236411][ C0] ? page_ext_get+0x22/0x2b0 [ 539.241019][ C0] page_ext_get+0x3e/0x2b0 [ 539.245453][ C0] ? page_ext_get+0x22/0x2b0 [ 539.250068][ C0] __page_table_check_zero+0x138/0x4b0 [ 539.255542][ C0] free_unref_page_prepare+0x7c1/0x8c0 [ 539.261039][ C0] free_unref_page+0x32/0x2e0 [ 539.265736][ C0] vfree+0x1a6/0x320 [ 539.269652][ C0] bpf_prog_calc_tag+0x5c4/0x6c0 [ 539.274598][ C0] ? bpf_check+0xacc/0xeba0 [ 539.279111][ C0] ? bpf_prog_load+0x1163/0x1670 [ 539.284066][ C0] ? __bpf_prog_free+0x120/0x120 [ 539.289046][ C0] resolve_pseudo_ldimm64+0xe1/0x1160 [ 539.294430][ C0] ? add_subprog+0x3c0/0x3c0 [ 539.299036][ C0] ? sort+0xaf/0xf0 [ 539.302861][ C0] ? bpf_check+0xeba0/0xeba0 [ 539.307474][ C0] ? check_btf_info+0x29e0/0x29e0 [ 539.312529][ C0] ? rcu_is_watching+0x15/0xb0 [ 539.317330][ C0] ? add_subprog+0x2b8/0x3c0 [ 539.321935][ C0] bpf_check+0x3770/0xeba0 [ 539.326390][ C0] ? __perf_event_overflow+0x4f8/0x630 [ 539.331869][ C0] ? perf_swevent_event+0x4be/0x570 [ 539.337111][ C0] ? bpf_get_btf_vmlinux+0x20/0x20 [ 539.342251][ C0] ? perf_tp_event+0x13d7/0x1520 [ 539.347201][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 539.353020][ C0] ? __lock_acquire+0x1347/0x7d40 [ 539.358077][ C0] ? verify_lock_unused+0x140/0x140 [ 539.363291][ C0] ? perf_trace_lock_acquire+0x34f/0x410 [ 539.368947][ C0] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 539.375581][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 539.381316][ C0] ? perf_trace_preemptirq_template+0x269/0x330 [ 539.387572][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 539.393567][ C0] ? lock_chain_count+0x20/0x20 [ 539.398429][ C0] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 539.404679][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 539.409883][ C0] ? ktime_get_with_offset+0x103/0x330 [ 539.415350][ C0] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 539.421599][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 539.426892][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 539.432112][ C0] ? bpf_obj_name_cpy+0x194/0x1e0 [ 539.437145][ C0] bpf_prog_load+0x1163/0x1670 [ 539.441925][ C0] ? map_freeze+0x420/0x420 [ 539.446463][ C0] ? __might_fault+0xaa/0x120 [ 539.451148][ C0] ? __might_fault+0xc6/0x120 [ 539.455830][ C0] ? __might_fault+0xaa/0x120 [ 539.460512][ C0] ? bpf_lsm_bpf+0x9/0x10 [ 539.464851][ C0] ? security_bpf+0x7e/0xa0 [ 539.469385][ C0] __sys_bpf+0x5ba/0x890 [ 539.473657][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 539.479064][ C0] ? lock_chain_count+0x20/0x20 [ 539.483938][ C0] __x64_sys_bpf+0x7c/0x90 [ 539.488371][ C0] do_syscall_64+0x55/0xa0 [ 539.492801][ C0] ? clear_bhb_loop+0x40/0x90 [ 539.497496][ C0] ? clear_bhb_loop+0x40/0x90 [ 539.502213][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.508212][ C0] RIP: 0033:0x7fe38819c819 [ 539.512664][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.532357][ C0] RSP: 002b:00007fe389007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 539.540842][ C0] RAX: ffffffffffffffda RBX: 00007fe388415fa0 RCX: 00007fe38819c819 [ 539.548839][ C0] RDX: 0000000000000090 RSI: 0000200000000000 RDI: 0000000000000005 [ 539.556831][ C0] RBP: 00007fe388232c91 R08: 0000000000000000 R09: 0000000000000000 [ 539.564826][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.572905][ C0] R13: 00007fe388416038 R14: 00007fe388415fa0 R15: 00007ffc3238b558 [ 539.580931][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)