last executing test programs: 6.482635355s ago: executing program 0 (id=6415): socketpair(0x1, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1af06, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x8}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@phonet={0x23, 0x6, 0x7, 0xfa}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="93f6556354d8137f49dde2", 0xb}, {&(0x7f0000000240)="70182e485ce8a4218bd673aae3bdb9754aaadb49cb18a2134c94951895b5c3b0fe569b5206d06842ddc14fcbffb4492f9635d7d7854cd4e9b0667044de7ac5f71bf2b4bd59305b8aea9c6041cffb46ee13243da54680c508707cd19725daa8a192477992e48dd5fb04adb7499d823fcd1579611fe1ccec9c58ffaf1109f51439a538d9f369ceff136c4497c59cb1d701b3b94841644b83f343b98787c299b35e8628a64e7431e6a8f705f1ecec74af74f0d565708c254f036a21f79766224f8f4e1c3ee061fd73503c28a83297fb62eb1ce6b74e8bb058", 0xd7}], 0x2, &(0x7f0000000380)}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x4}, 0x19122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121fb719b6", 0x31}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x29, 0xf, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000010000000002b70696473202b7065722b646500"/41], 0x29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x1, &(0x7f00000005c0)=@raw=[@ldst={0x0, 0x3, 0x3, 0x8, 0xa, 0xffffffffffffffe0, 0x1}], &(0x7f0000000600)='GPL\x00', 0x4, 0xf6, &(0x7f0000000980)=""/246, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000008c0)=[{0x0, 0x1, 0xd, 0x6}, {0x2, 0x2, 0xd, 0x5}, {0x5, 0x4, 0xb, 0x2}, {0x2, 0x2, 0x10, 0x3}], 0x10, 0x5}, 0x94) close(0x3) 6.184874962s ago: executing program 2 (id=6419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0xc}, {0x10000002}]}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000240)=""/154}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x2}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x5}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) mkdir(&(0x7f0000000040)='./file/file0/..//file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0xfffffffffffffefb, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 6.153857254s ago: executing program 0 (id=6420): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000), 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="05"], 0x10) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000011c0)="81", 0x1}], 0x1}, 0x40800) 5.969796645s ago: executing program 3 (id=6423): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x108010, 0xfffffffffffffff9, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x15}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x40400c0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='\xd2^\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000) sendmsg$inet(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000040000f2ffffffffffa90000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x48) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x80, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) 5.896666229s ago: executing program 2 (id=6424): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000002700)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f0000000440)="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", 0x348}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f00000002c0)="550c6d32759e9c16ffa4f109b112c633892f0900461d1744b4bf458233d3294ababe6c28c97e2640f849c401a026827bfb3d48b3b006cae09644027cb84fde241cd39fe2a114546fd3d1653b9b7060b436d3620d93671bd83d4131f923eaca30764cb9cfd5a10ee406e8107539d00955ddd6c2933f014a2b30ce52da1fb2f779896b2ff0f031bfb2ab6ed2a996f712835ba39b0c6e09a31c171d3147bcddf8b3cea5b635934f", 0xa6}, {&(0x7f0000000900)="87a3ec9a1f2c062344c32d723e509529b7d74109fc61f9db8b0cba55c7d4924c00000400000000b3cad02e9542c6d8cbad891da12ba880366b1700131c6f3d8f36b8d4274006837e5c65977e46c4dbec1bd1bbbee144e9d5c68b55d900000000000098ab71399281412d1f1aa4c95c02f886d0aa10516e1741fdb21023c5c36d2996956a2035dd7583126496da699f084f2046618e78c67c933f102bc132184edfb7d8af62c79533ba2df55df1311d91a32ad950963a4874d4958d31ea53e600b161067c4d70a1cf5754a4d60b80c608b88ea8df83045e461d45cf07d0", 0xdd}], 0x5}, 0x0) 5.681908012s ago: executing program 2 (id=6426): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000400), &(0x7f0000000540)=""/119}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000b00)={&(0x7f0000002700)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de", 0xd9}, {&(0x7f0000000440)="6f4720baeb5434a1c17a4b697e4611c434c1947fafd44daee2d61fadd23c3505eee0cc5b6c76cf081390ae92516d567c4b49af0f4b3df75ae92efbfb0fbe60ac8c4e546500f4f8f3885d5622072fb9e9b948a5edc65602c644bee9ad04b655279f383ce068ad0c202a57f9a8804b73d1241fb306b2acd9d5e26a71b19a0b9859ff0f0d7cdbd80fdfacdf9f1d02a37ae44bb6ddd978d4a0e6d61b68f629915748d6d3d184ca2b4164192c60a3a383821d0e85f04d09b712814d4b0664799b7ae6657b7452214608d01d31bd7d9e03107c638353d89515692c24b11490b9e75cfcb489e80b9334f4660204b2a17409993ddc4b0d004709cd46cb2488cf3cecd965e978182dd42cfbbfa4ebda17cce9cfc970959fd29e1a802809aa4a65c8f1c6dd14fca85d83fc995f097a62c6f04fb0d1f0dec0faa41fe09b1eae67606123d908dd74c62e66ee2635ec9da7bc74103debf3e31f0794ca5fc2268bcb8a03aeb3bf860d164e0a6cba7c8dc469147cc7e1bb94731ec450525cf19275d4af40b115f2420ff7ab4eeb41c5ddc19aae1b2e535b796c0e7aa6e71b4e13c8023806a08638d13a8595e310321860c8d7670cf167c67b3b5217a66329505cdcdc3afb3233dbaec65ff45b0bfc3cfbd309a7ffd26507a8ffe782f3b84ad9dfc2b4f44d6716e8ad892ffc3acf6e7e09018041a27fcad1ee957d6fddccc3d41f9b04127dee7c471acf9fdc32f204afffc52b22b73844154285ce5ec58ec57b40ccf7b70215a4a27f9de2c2719dcb5897bc302ebb027c019e40aa6fc85d5b670aef709e40cbe597139537c10d2483b67c02ca781c5ce6c014b13c8dee248e8b75831cbee8f29cad33139e0b5bc86c203c71f54ad11573e8801b8cc623571b9c53ac723b51b2cdd09b60cf8a3a205a70814107251d962d603bf21f42e946462bf3d8bca96d7bdbdfa9ced20f6e9edba4ac6aea0a68c08a3f8076274bece6d676d64975dc1e611806feb81cbac4b38453a756845c866f0458fb61cd12a135e1dfa76d85a3b2972b6517b57bc35a0398f7b87ee0b697c84c629e8a62a7d1dab6459a71f7aad2fac7a1a4c019479b1f31dc017f3fa896000b8bcc0b1ca993447351fa0529a5be311faa90b6d8f0a5ce5fe2adfd4995ba13920826d27677d8dac9ef0aac4cea1517ff318a864b3ea3bcc45d", 0x348}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f00000002c0)="550c6d32759e9c16ffa4f109b112c633892f0900461d1744b4bf458233d3294ababe6c28c97e2640f849c401a026827bfb3d48b3b006cae09644027cb84fde241cd39fe2a114546fd3d1653b9b7010b436d3620d93671bd83d4131f923eaca30764cb9cfd5a10ee406e8107539d00955ddd6c2933f014a2b30ce52da1fb2f779896b2ff0f031bfb2ab6ed2a996f712835ba39b0c6e09a31c171d3147bcddf8b3cea5b63593", 0xa5}, {&(0x7f0000000900)="87a3ec9a1f2c062344c32d723e509529b7d74109fc61f9db8b0cba55c7d4924c00000400000000b3cad02e9542c6d8cbad891da12ba880366b1700131c6f3d8f36b8d4274006837e5c65977e46c4dbec1bd1bbbee144e9d5c68b55d900000000000098ab71399281412d1f1aa4c95c02f886d0aa10516e1741fdb21023c5c36d2996956a2035dd7583126496da699f084f2046618e78c67c933f102bc132184edfb7d8af62c79533ba2df55df1311d91a32ad950963a4874d4958d31ea53e600b161067c4d70a1cf5754a4d60b80c608b88ea8df83045e461d45cf07d0a9dd158716006137ed9ad7f28fecc15fab510d62", 0xf1}], 0x5}, 0x0) gettid() r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0xcc, 0xc}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r7, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', r8, 0x4000, r4}, 0x18) 5.647495413s ago: executing program 3 (id=6428): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async, rerun: 32) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) (async, rerun: 32) r5 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000001004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x25, 0x1, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007111b30000000000850000007500000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) (async, rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, r1, 0x0, 0x0, 0x0}, 0x30) (rerun: 64) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="310a10"], 0x31) (async) r10 = openat$cgroup_int(r8, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0xb, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0xffffffffffffffff}, @enum={0x0, 0xd, 0x0, 0x6, 0x4, [{0x1, 0x1}, {0xb, 0xfffffffd}, {0x3, 0xf}, {0xa, 0x9}, {0x3, 0x10001}, {0x1, 0x9}, {0x2, 0x6}, {0x8, 0xc}, {0xd, 0x3}, {0x2, 0xd40}, {0xf, 0x25f}, {0xb, 0xfffffff2}, {0xd, 0x1}]}, @decl_tag={0x101, 0x0, 0x0, 0x11, 0x1, 0x9}]}, {0x0, [0x30, 0x5f, 0x61, 0x2e, 0x30, 0x30, 0x2e, 0x0, 0x0]}}, &(0x7f0000000380)=""/225, 0xb7, 0xe1, 0x0, 0x8001, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x0, 0x3, 0x2, 0x9, 0xb}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x6e, &(0x7f0000000240)=""/110, 0x41100, 0x8, '\x00', 0x0, 0x25, r11, 0x8, &(0x7f0000000500)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xb, 0x6, 0xfffffffe}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000580)=[{0x0, 0x4, 0x1, 0x1}, {0x2, 0x4, 0xb, 0xc}, {0x2, 0x4, 0xf, 0x4}, {0x0, 0x5, 0xb, 0x4}, {0x3, 0x1, 0x10, 0x8}, {0x0, 0x5, 0x9, 0x5}]}, 0x94) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f0000000580)="d301ac2d14985d8607b124ca7b3d562de1ff26289f257bb0d031667b613719990e6fc0a366740f80447fc5e01b8c921e58ce05b421836ca001c04e2ead94be7e58edcbe8ce4b4a703ee11abb4cb64a202f159306e2ed3dc2e6da6622abe8b16a4a69104acc3c4c79c7a7a2999cd0152df27eeb506cadc25ac95ca22d788845e51554c67c45c3589b9a0c8b4ca028e98ad85266d14d059816df982b97174b6142c97c3135079d44182155103c8bbb594bc2b5be3539c36ec4e7fa508a0452c9442b9b6fec74dbf079f53ec4062bba81d76770137d41e2873bc1ff83722990e31a00e1643f14fa80e5f2e0909bd2b3a2c9ed", &(0x7f0000001500)=""/4096, &(0x7f0000000040)="3537ea7cb1f9bdffd7053e3c94e7758c26faff78991d08ad83e293f30f7afc0b939679c65b57be7e", &(0x7f0000000680)="85a5cea4de23aca8439c124686417ded2b2a1fdc9d6bc58df0e7bb18d355625c2b7bb326b0b9dd8a69a41d6f2054627c64c25b9cef380f671c9a736cfeb6d0c84816be4d7038526f29a065e40d66daf52ed081e0bf214bc58afc76639569ab7699cced8f0be545823f6ce6206a1eab59917388a7a49797fe64c9392df3282b09c5caba1c6ebb59aaa3220c42759826b7b246c753be8fffdf183aef8fe77447e2e87828b8f23ccacb617af4103afb46a3f4b67878f46c43852beeb45490976038fdba36b7f9469fcd3605a1e90f7eecd15acad5cbd2b0", 0x8}, 0x38) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x0, 0x58, &(0x7f0000000900)=[{}], 0x8, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x73, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0f00000008000000050000000000000000000100", @ANYRES32, @ANYBLOB="c200"/20, @ANYRES32=r12, @ANYRES32, @ANYBLOB="02cf0300520000000000000000000000000ea161c0bd0300", @ANYRES32, @ANYBLOB], 0x50) (async, rerun: 64) sendmsg$inet(r6, &(0x7f0000000b80)={&(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000880)="c6d908a2c9ca92295a98fc5a4bb3e9a6b53b5e4efc2724228c46292fa58a43d0614f41e153dfa9b88588f43876937862cce234b026266fa49515f95e60f9f37c47cfa2679c7f875ce840099632537c82068c11cbaf220fd188489da8826e6e3916e2e61010122ec502", 0x69}, {&(0x7f0000000900)="73891ea795550dee9282de6b017fa5ed41714ee7466ff3f74810b4377cfc72a7a14d0a1ecbd0bd41b49a63b0347189444bf5a520c512d733dac657ca1e71021f8453f9edf7b979be94ff0ea835f9564b908da5b6857ad4217833c89e634ddb1a9b14d6bab668e8e03ac4cfc1319f537611e77f29a3d81166d8833e0d625c4a34d61a51146b8d3837a7dec88f100c60b34f2949c2bc13826f5a68d4e74975e161f06e78b8307c6875440e0a849bf35882c2671c3d3d88c72b44787656ac632178d6d111359612b8094c312714f63598f0984c04e7588d3eee1de63a838b65abb1a384b7d93748d4af4c3d0f6e90fff26bde6a675cd566a2b3", 0xf8}], 0x2, &(0x7f0000000a40)=[@ip_retopts={{0x108, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0x99, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x12}, 0xffff}, {@empty, 0xa9}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x1}, {@remote, 0xc0}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x50b}, {@rand_addr=0x64010100, 0x65}, {@multicast1}, {@private=0xa010101, 0xffffffff}]}, @lsrr={0x83, 0x23, 0x28, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @broadcast, @broadcast]}, @end, @timestamp_prespec={0x44, 0x14, 0x4e, 0x3, 0x0, [{@private=0xa010102, 0x81eb}, {@rand_addr=0x64010102, 0x2}]}, @cipso={0x86, 0x3e, 0x1, [{0x2, 0x3, "f1"}, {0x2, 0x2}, {0x7, 0xd, "0b1d080d8550f5f2767ca3"}, {0x1, 0x9, "32180aff390fca"}, {0x1, 0xc, "df6669068d593d1ec810"}, {0x2, 0x11, "1c057167ed6f2da3be684ae2872942"}]}, @end, @cipso={0x86, 0x31, 0x3, [{0x1, 0x6, "1819cd3c"}, {0x2, 0x4, 'SL'}, {0x1, 0x3, "e5"}, {0x7, 0xd, "e632c545573bb160b9afc2"}, {0x5, 0x2}, {0x6, 0xf, "4e49297fc7622a4f9f4e827013"}]}, @ssrr={0x89, 0xb, 0x2, [@empty, @rand_addr=0x64010100]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @dev={0xac, 0x14, 0x14, 0x39}, @multicast2}}}], 0x128}, 0x4) (async, rerun: 64) write$cgroup_int(r10, &(0x7f0000000180)=0x6, 0x12) 5.5355435s ago: executing program 1 (id=6429): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000212f57ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 5.36818529s ago: executing program 1 (id=6430): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000000000006311200000000d008510000002000000850000000500000095000000000000009500a50500000000c26bf4c51915a6c4e100fae4083c001fa4edbe2c3f4d07244c0dea76d8b036b266125f6f51bc77e29d324a025f66b200c7820fce6f66d02ee77ee3a36cb1c9155de843169e85d413c8c1a25cd426ceeba2e1ca11c4a921158b9d657904a87309ce20aea7a4bbdbf066e2d03016ea763fe25444879d2819507c9891ddb39b4a5bd8e9040b0b96181b6c0b275776f0d344b275d190bda96dd28861afc4564e7ea3d02aeb4233f437d122c1229c573cc33b5bcc67ef3d4219dd3a51c980946c40ca2095ef9c113c9f40a2603306e6e3dac502bd51153c43cce52494971f74bc3990de4aaee6688feeb1d2a8a6e26e30ae11ecccb873d88ff2b6ce7662d1a43f84718204110fb3fe963354e898fe4b2ed10d7072c8ba78d14a7c1c94c010c528de257892bcacd1b3d718205e336a44b7a1"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7, 0x84084, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00"], 0xfe33) close(0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, 0x0, 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0), 0x12) 5.328260542s ago: executing program 3 (id=6431): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socket$kcm(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xbf, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff892f00004000633277fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9", 0x0, 0xfe, 0x60000000}, 0x50) 5.219279878s ago: executing program 0 (id=6432): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0xc}, {0x10000002}]}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000240)=""/154}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x2}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x5}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) mkdir(&(0x7f0000000040)='./file/file0/..//file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0xfffffffffffffefb, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 5.111878475s ago: executing program 2 (id=6433): socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x108010, 0xfffffffffffffff9, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x15}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x40400c0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='\xd2^\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000) sendmsg$inet(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000040000f2ffffffffffa90000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="000000000100"/28], 0x48) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x80, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) 5.109535335s ago: executing program 1 (id=6441): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000000000006311200000000d008510000002000000850000000500000095000000000000009500a50500000000c26bf4c51915a6c4e100fae4083c001fa4edbe2c3f4d07244c0dea76d8b036b266125f6f51bc77e29d324a025f66b200c7820fce6f66d02ee77ee3a36cb1c9155de843169e85d413c8c1a25cd426ceeba2e1ca11c4a921158b9d657904a87309ce20aea7a4bbdbf066e2d03016ea763fe25444879d2819507c9891ddb39b4a5bd8e9040b0b96181b6c0b275776f0d344b275d190bda96dd28861afc4564e7ea3d02aeb4233f437d122c1229c573cc33b5bcc67ef3d4219dd3a51c980946c40ca2095ef9c113c9f40a2603306e6e3dac502bd51153c43cce52494971f74bc3990de4aaee6688feeb1d2a8a6e26e30ae11ecccb873d88ff2b6ce7662d1a43f84718204110fb3fe963354e898fe4b2ed10d7072c8ba78d14a7c1c94c010c528de257892bcacd1b3d718205e336a44b7a1"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7, 0x84084, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00"], 0xfe33) close(0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) 5.049804108s ago: executing program 3 (id=6434): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 4.970061303s ago: executing program 0 (id=6435): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x402, 0x0}, 0x0) 4.948168914s ago: executing program 1 (id=6436): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0xc}, {0x10000002}]}, 0x94) socket$kcm(0x2, 0x5, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000240)=""/154}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x80) mkdir(&(0x7f0000000000)='./file\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x2}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x5}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file/file0/..//file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0xfffffffffffffefb, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 4.8487573s ago: executing program 0 (id=6437): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socket$kcm(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 4.782329143s ago: executing program 2 (id=6438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000212f57ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 4.727966057s ago: executing program 3 (id=6439): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004"], 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="d1", 0xfffd}], 0x1}, 0xc54) (fail_nth: 6) 4.708765068s ago: executing program 1 (id=6440): r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0xa, [@int={0xa, 0x0, 0x0, 0x1, 0x0, 0x18, 0x0, 0x59, 0x6}, @float={0x8, 0x0, 0x0, 0x10, 0x4}, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @enum64={0x8, 0x3, 0x0, 0x13, 0x1, 0x5, [{0xf, 0x6, 0xa5}, {0xc, 0xd, 0x1}, {0x10, 0x602d1923, 0x4}]}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x3ff, [{0x8, 0x5, 0x8}]}, @fwd={0xd}, @struct={0xe, 0x4, 0x0, 0x4, 0x0, 0x0, [{0x6, 0x101, 0x5}, {0xe, 0x5, 0x3}, {0x1, 0x5, 0xff}, {0xa, 0x2, 0xd98}]}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x7f, 0x61, 0x0, 0x61, 0x0, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000680)=""/254, 0xea, 0xfe, 0x0, 0x8}, 0x28) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r4, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r3, &(0x7f0000000940)={&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000bc0)="5ff36b19ab12234b491b58e14ae737312377a57c86d8bc35d06429c15908bacc101625c5df7d449c5257dabca96c364963885ee0d5936f3ed239530c15c5a673fe9983cd14ab4bf6628080b8acaef9f95d40ef4fe55b3289124227ebfdea32ffdc752decb8f8d73afc05470a53e9c3a09b5491999a496ca785df6d768201cba1fb37b3514442d4590fb8b8eccf8acedaf5d07df4b17e0ebf72c8a9072534b202ffca375f8d1581c53cb978b37d28c89335c92675725f7bbaeb27e1be2a200c9f1ca4825a306d02fd", 0xc8}, {&(0x7f0000000380)="3c28eab5ae0ef2ca7ee99fb1d917bdaf8360900b8724d53164", 0x19}, {&(0x7f0000000cc0)="f192baf6a97ef02d1cd03ee9c58466c06ec4361678f9773896c21257e1da015a018cb769dd3d025618e43a64b938e525fa7236ee9735475f0c4818511fc2a39e6a217ba618619e2cc09f77829913714e2d13d60e5be7e912beb11bb2912a5a4738105e80c86120277b9088fbdcf57c7abe448658d22bed13a42c68f58bc81f2d13aa8e31bc330d253964586bcb4e5f1805", 0x91}], 0x3, &(0x7f0000000dc0)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x36, 0x0, 0xa, [0x1, 0x4]}, @timestamp={0x44, 0x10, 0xe8, 0x0, 0x4, [0x7ff, 0x1, 0x67f]}, @lsrr={0x83, 0xf, 0x6f, [@private=0xa010101, @broadcast, @private=0xa010100]}, @noop, @noop, @timestamp={0x44, 0x4, 0x52, 0x0, 0x4}, @ssrr={0x89, 0x27, 0xbf, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @private=0xa010102, @local, @multicast1]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @remote, @multicast1}}}, @ip_retopts={{0x54, 0x0, 0x7, {[@cipso={0x86, 0x2d, 0xffffffffffffffff, [{0x6, 0xf, "2f8d0039fad220443d263f510e"}, {0x1, 0x7, "4fdf763674"}, {0x7, 0xd, "ce58f9288a6855eb18fff3"}, {0x7, 0x4, "2e88"}]}, @generic={0x94, 0x2}, @timestamp={0x44, 0x14, 0xcf, 0x0, 0x9, [0x3ff, 0x8, 0x5, 0xff]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_tos_u8={{0x11}}], 0x138}, 0x40) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r6, &(0x7f0000000280)="5538a437", &(0x7f00000002c0)=""/38, 0x4}, 0x20) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000800)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='k', 0x1}, {&(0x7f0000000140)="577f0c71644d887bc5f95c3a99824710982009b68a0ab37fabc01bc2f56a9c9972797d16be32c905a36b45bb9b72b9ade1f2b8e88563bb53ea91c72bb3f3eee53574ed19ad4fadd5343faa93c32548034554f0f5ead089a3c0dd890ffd06a70e772b50", 0x63}], 0x2, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x305}}], 0x18}, 0x4000081) socket$kcm(0x29, 0x7, 0x0) 4.605925804s ago: executing program 2 (id=6442): r0 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8941, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0xf, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1400000016000b63d25a80648c2594f91124fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x10140) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x3, 0x9}, 0x8000, 0x7, 0x101, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42, 0x56}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0x34, 0x1, 0x7dea, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000700), 0x4) 4.605285924s ago: executing program 0 (id=6443): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socket$kcm(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdf, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff892f00004000633277fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb", 0x0, 0xfe, 0x60000000}, 0x50) 4.579346896s ago: executing program 3 (id=6444): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0xc}, {0x10000002}]}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000240)=""/154}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x2}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x5}, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) mkdir(&(0x7f0000000040)='./file/file0/..//file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0xfffffffffffffefb, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x6488, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 0s ago: executing program 1 (id=6445): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7, 0x84084, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4080, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x1}, 0x10}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00"], 0xfe33) close(0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) kernel console output (not intermixed with test programs): ler #0 [ 963.181267][T21987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 963.191380][T21987] Call Trace: [ 963.194702][T21987] [ 963.197689][T21987] dump_stack_lvl+0x18c/0x250 [ 963.202460][T21987] ? show_regs_print_info+0x20/0x20 [ 963.207740][T21987] ? load_image+0x400/0x400 [ 963.212308][T21987] ? __might_fault+0xaa/0x120 [ 963.217061][T21987] ? __lock_acquire+0x7d40/0x7d40 [ 963.222140][T21987] ? tomoyo_path_number_perm+0x5b4/0x620 [ 963.227858][T21987] should_fail_ex+0x39d/0x4d0 [ 963.232624][T21987] _copy_from_user+0x2f/0xe0 [ 963.237298][T21987] wext_handle_ioctl+0xc8/0x1d0 [ 963.242216][T21987] ? call_commit_handler+0xf0/0xf0 [ 963.247400][T21987] sock_ioctl+0x15d/0x7e0 [ 963.251866][T21987] ? sock_poll+0x3e0/0x3e0 [ 963.256336][T21987] ? bpf_lsm_file_ioctl+0x9/0x10 [ 963.261320][T21987] ? security_file_ioctl+0x80/0xa0 [ 963.266475][T21987] ? sock_poll+0x3e0/0x3e0 [ 963.270926][T21987] __se_sys_ioctl+0xfd/0x170 [ 963.275598][T21987] do_syscall_64+0x55/0xa0 [ 963.280065][T21987] ? clear_bhb_loop+0x40/0x90 [ 963.284788][T21987] ? clear_bhb_loop+0x40/0x90 [ 963.289497][T21987] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.295425][T21987] RIP: 0033:0x7f8f6919aeb9 [ 963.299882][T21987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.319526][T21987] RSP: 002b:00007f8f6a0df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 963.327982][T21987] RAX: ffffffffffffffda RBX: 00007f8f69415fa0 RCX: 00007f8f6919aeb9 [ 963.336016][T21987] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000004 [ 963.344035][T21987] RBP: 00007f8f6a0df090 R08: 0000000000000000 R09: 0000000000000000 [ 963.352047][T21987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.360045][T21987] R13: 00007f8f69416038 R14: 00007f8f69415fa0 R15: 00007ffd60e118e8 [ 963.368065][T21987] [ 963.927083][T22002] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5034'. [ 964.084183][T22004] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 (while UP) [ 964.353921][T22012] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5039'. [ 964.383794][T22012] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5039'. [ 964.424399][T22012] netlink: 'syz.0.5039': attribute type 29 has an invalid length. [ 964.462118][T22012] netlink: 'syz.0.5039': attribute type 29 has an invalid length. [ 964.482163][T22015] netlink: 'syz.0.5039': attribute type 29 has an invalid length. [ 964.498803][T22012] netlink: 'syz.0.5039': attribute type 29 has an invalid length. [ 964.613310][T22008] netlink: 'syz.2.5037': attribute type 12 has an invalid length. [ 964.640427][T22008] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.5037'. [ 964.719823][T22019] FAULT_INJECTION: forcing a failure. [ 964.719823][T22019] name failslab, interval 1, probability 0, space 0, times 0 [ 964.740710][T22020] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5037'. [ 964.753433][T22019] CPU: 1 PID: 22019 Comm: syz.0.5040 Not tainted syzkaller #0 [ 964.761213][T22019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 964.771358][T22019] Call Trace: [ 964.774687][T22019] [ 964.777670][T22019] dump_stack_lvl+0x18c/0x250 [ 964.782420][T22019] ? show_regs_print_info+0x20/0x20 [ 964.787699][T22019] ? load_image+0x400/0x400 [ 964.792264][T22019] ? __might_sleep+0xe0/0xe0 [ 964.796917][T22019] ? __lock_acquire+0x7d40/0x7d40 [ 964.802003][T22019] should_fail_ex+0x39d/0x4d0 [ 964.806753][T22019] should_failslab+0x9/0x20 [ 964.811316][T22019] slab_pre_alloc_hook+0x59/0x310 [ 964.816402][T22019] ? lockdep_hardirqs_on+0x98/0x150 [ 964.821663][T22019] kmem_cache_alloc_node+0x60/0x320 [ 964.826930][T22019] ? __alloc_skb+0x103/0x2c0 [ 964.831603][T22019] __alloc_skb+0x103/0x2c0 [ 964.836097][T22019] netlink_ack+0x376/0x1180 [ 964.840672][T22019] ? __dev_queue_xmit+0x26b/0x36b0 [ 964.845858][T22019] ? netlink_dump+0xe50/0xe50 [ 964.850683][T22019] ? ref_tracker_free+0x690/0x840 [ 964.855770][T22019] netlink_rcv_skb+0x2c5/0x4d0 [ 964.860596][T22019] ? rtnetlink_bind+0x80/0x80 [ 964.865331][T22019] ? netlink_ack+0x1180/0x1180 [ 964.870178][T22019] ? __lock_acquire+0x7d40/0x7d40 [ 964.875267][T22019] ? netlink_deliver_tap+0x2e/0x1b0 [ 964.880549][T22019] netlink_unicast+0x751/0x8d0 [ 964.885385][T22019] netlink_sendmsg+0x8d0/0xbf0 [ 964.890220][T22019] ? netlink_getsockopt+0x590/0x590 [ 964.895487][T22019] ? aa_sock_msg_perm+0x94/0x150 [ 964.900918][T22019] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 964.906259][T22019] ? security_socket_sendmsg+0x80/0xa0 [ 964.911786][T22019] ? netlink_getsockopt+0x590/0x590 [ 964.917056][T22019] ____sys_sendmsg+0x5ba/0x960 [ 964.921888][T22019] ? __asan_memset+0x22/0x40 [ 964.926551][T22019] ? __sys_sendmsg_sock+0x30/0x30 [ 964.931644][T22019] ? __import_iovec+0x5f2/0x850 [ 964.936576][T22019] ? import_iovec+0x73/0xa0 [ 964.941146][T22019] ___sys_sendmsg+0x2a6/0x360 [ 964.945903][T22019] ? get_pid_task+0x20/0x1e0 [ 964.950576][T22019] ? __sys_sendmsg+0x2a0/0x2a0 [ 964.955429][T22019] ? __lock_acquire+0x7d40/0x7d40 [ 964.960528][T22019] __se_sys_sendmsg+0x1c2/0x2b0 [ 964.965457][T22019] ? __x64_sys_sendmsg+0x80/0x80 [ 964.970477][T22019] ? lockdep_hardirqs_on+0x98/0x150 [ 964.975731][T22019] do_syscall_64+0x55/0xa0 [ 964.980206][T22019] ? clear_bhb_loop+0x40/0x90 [ 964.984939][T22019] ? clear_bhb_loop+0x40/0x90 [ 964.989679][T22019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 964.995631][T22019] RIP: 0033:0x7fb97339aeb9 [ 965.000105][T22019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.019794][T22019] RSP: 002b:00007fb974247028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 965.028293][T22019] RAX: ffffffffffffffda RBX: 00007fb973615fa0 RCX: 00007fb97339aeb9 [ 965.036321][T22019] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 965.044348][T22019] RBP: 00007fb974247090 R08: 0000000000000000 R09: 0000000000000000 [ 965.052371][T22019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 965.060393][T22019] R13: 00007fb973616038 R14: 00007fb973615fa0 R15: 00007ffc2a3f8dd8 [ 965.068434][T22019] [ 966.334713][T22041] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5046'. [ 966.519293][T22047] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5049'. [ 966.574966][T22050] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5049'. [ 966.652329][T22047] netlink: 'syz.3.5049': attribute type 29 has an invalid length. [ 968.569499][T22073] bridge_slave_1: left allmulticast mode [ 968.594887][T22073] bridge_slave_1: left promiscuous mode [ 968.604821][T22073] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.905653][T22085] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5060'. [ 969.001417][T22085] validate_nla: 3 callbacks suppressed [ 969.001444][T22085] netlink: 'syz.2.5060': attribute type 29 has an invalid length. [ 969.103463][T22073] bridge_slave_0: left allmulticast mode [ 969.111329][T22073] bridge_slave_0: left promiscuous mode [ 969.148876][T22073] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.490064][T22079] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5060'. [ 969.503989][T22083] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5061'. [ 969.522515][T22085] netlink: 'syz.2.5060': attribute type 29 has an invalid length. [ 969.531742][T22087] netlink: 'syz.2.5060': attribute type 29 has an invalid length. [ 969.542446][T22088] netlink: 'syz.2.5060': attribute type 29 has an invalid length. [ 971.143014][T22115] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5071'. [ 971.234276][T22119] bridge_slave_1: left allmulticast mode [ 971.254022][T22119] bridge_slave_1: left promiscuous mode [ 971.306412][T22119] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.381252][T22125] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5073'. [ 971.412079][T22125] netlink: 'syz.3.5073': attribute type 29 has an invalid length. [ 971.428474][T22119] bridge_slave_0: left allmulticast mode [ 971.447003][T22119] bridge_slave_0: left promiscuous mode [ 971.470499][T22119] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.291647][T22121] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5073'. [ 972.322805][T22125] netlink: 'syz.3.5073': attribute type 29 has an invalid length. [ 972.629366][T22145] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.5079'. [ 973.350196][T22159] FAULT_INJECTION: forcing a failure. [ 973.350196][T22159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.377427][T22159] CPU: 1 PID: 22159 Comm: syz.3.5084 Not tainted syzkaller #0 [ 973.384991][T22159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 973.395119][T22159] Call Trace: [ 973.398462][T22159] [ 973.401463][T22159] dump_stack_lvl+0x18c/0x250 [ 973.406233][T22159] ? show_regs_print_info+0x20/0x20 [ 973.411521][T22159] ? load_image+0x400/0x400 [ 973.416107][T22159] ? __might_fault+0xaa/0x120 [ 973.420868][T22159] ? __lock_acquire+0x7d40/0x7d40 [ 973.425989][T22159] should_fail_ex+0x39d/0x4d0 [ 973.430754][T22159] _copy_from_user+0x2f/0xe0 [ 973.435426][T22159] ___sys_sendmsg+0x1c7/0x360 [ 973.440201][T22159] ? __sys_sendmsg+0x2a0/0x2a0 [ 973.445092][T22159] ? __lock_acquire+0x7d40/0x7d40 [ 973.450249][T22159] __se_sys_sendmsg+0x1c2/0x2b0 [ 973.455224][T22159] ? __x64_sys_sendmsg+0x80/0x80 [ 973.460274][T22159] ? lockdep_hardirqs_on+0x98/0x150 [ 973.465561][T22159] do_syscall_64+0x55/0xa0 [ 973.470047][T22159] ? clear_bhb_loop+0x40/0x90 [ 973.474794][T22159] ? clear_bhb_loop+0x40/0x90 [ 973.479593][T22159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 973.485553][T22159] RIP: 0033:0x7f8f6919aeb9 [ 973.490038][T22159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.509720][T22159] RSP: 002b:00007f8f6a0df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.518223][T22159] RAX: ffffffffffffffda RBX: 00007f8f69415fa0 RCX: 00007f8f6919aeb9 [ 973.526282][T22159] RDX: 0000000000000084 RSI: 0000200000000200 RDI: 0000000000000007 [ 973.534326][T22159] RBP: 00007f8f6a0df090 R08: 0000000000000000 R09: 0000000000000000 [ 973.542397][T22159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.550448][T22159] R13: 00007f8f69416038 R14: 00007f8f69415fa0 R15: 00007ffd60e118e8 [ 973.558534][T22159] [ 973.596746][T22168] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.5087'. [ 973.619916][T22169] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.5087'. [ 973.916985][T22173] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5088'. [ 973.932023][T22173] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5088'. [ 974.008433][T22173] netlink: 'syz.3.5088': attribute type 29 has an invalid length. [ 974.046310][T22173] netlink: 'syz.3.5088': attribute type 29 has an invalid length. [ 974.065998][T22176] FAULT_INJECTION: forcing a failure. [ 974.065998][T22176] name failslab, interval 1, probability 0, space 0, times 0 [ 974.093816][T22177] netlink: 'syz.3.5088': attribute type 29 has an invalid length. [ 974.103449][T22178] netlink: 'syz.3.5088': attribute type 29 has an invalid length. [ 974.123188][T22176] CPU: 0 PID: 22176 Comm: syz.1.5090 Not tainted syzkaller #0 [ 974.130759][T22176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 974.140871][T22176] Call Trace: [ 974.144195][T22176] [ 974.147165][T22176] dump_stack_lvl+0x18c/0x250 [ 974.151917][T22176] ? show_regs_print_info+0x20/0x20 [ 974.157171][T22176] ? load_image+0x400/0x400 [ 974.161732][T22176] ? __local_bh_enable_ip+0x13a/0x1c0 [ 974.167158][T22176] ? lockdep_hardirqs_on+0x98/0x150 [ 974.172447][T22176] ? __local_bh_enable_ip+0x13a/0x1c0 [ 974.177863][T22176] should_fail_ex+0x39d/0x4d0 [ 974.182589][T22176] should_failslab+0x9/0x20 [ 974.187133][T22176] slab_pre_alloc_hook+0x59/0x310 [ 974.192194][T22176] ? sctp_get_port_local+0xe65/0x1620 [ 974.197602][T22176] ? sctp_add_bind_addr+0x8c/0x360 [ 974.202838][T22176] __kmem_cache_alloc_node+0x53/0x250 [ 974.208254][T22176] ? sctp_add_bind_addr+0x8c/0x360 [ 974.213410][T22176] kmalloc_trace+0x2a/0xe0 [ 974.217905][T22176] sctp_add_bind_addr+0x8c/0x360 [ 974.222877][T22176] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 974.228522][T22176] sctp_do_bind+0x616/0x990 [ 974.233075][T22176] sctp_connect_new_asoc+0x26a/0x6a0 [ 974.238408][T22176] ? __sctp_connect+0xd80/0xd80 [ 974.243299][T22176] ? __local_bh_enable_ip+0x13a/0x1c0 [ 974.248713][T22176] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 974.254303][T22176] ? security_sctp_bind_connect+0x89/0xb0 [ 974.260063][T22176] sctp_sendmsg+0x1575/0x28c0 [ 974.264787][T22176] ? sctp_getsockopt+0xb60/0xb60 [ 974.269763][T22176] ? aa_sk_perm+0x83c/0x970 [ 974.274316][T22176] ? aa_af_perm+0x330/0x330 [ 974.278868][T22176] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 974.285335][T22176] ? sock_rps_record_flow+0x19/0x3f0 [ 974.290660][T22176] ? inet_sendmsg+0xe9/0x2f0 [ 974.295308][T22176] ? inet_send_prepare+0x260/0x260 [ 974.300456][T22176] ____sys_sendmsg+0x5ba/0x960 [ 974.305365][T22176] ? __lock_acquire+0x7d40/0x7d40 [ 974.310443][T22176] ? __asan_memset+0x22/0x40 [ 974.315068][T22176] ? __sys_sendmsg_sock+0x30/0x30 [ 974.320131][T22176] ? __import_iovec+0x5f2/0x850 [ 974.325030][T22176] ? import_iovec+0x73/0xa0 [ 974.329597][T22176] ___sys_sendmsg+0x2a6/0x360 [ 974.334317][T22176] ? get_pid_task+0x20/0x1e0 [ 974.338947][T22176] ? __sys_sendmsg+0x2a0/0x2a0 [ 974.343761][T22176] ? __lock_acquire+0x7d40/0x7d40 [ 974.348841][T22176] __se_sys_sendmsg+0x1c2/0x2b0 [ 974.353835][T22176] ? __x64_sys_sendmsg+0x80/0x80 [ 974.358913][T22176] ? lockdep_hardirqs_on+0x98/0x150 [ 974.364146][T22176] do_syscall_64+0x55/0xa0 [ 974.368620][T22176] ? clear_bhb_loop+0x40/0x90 [ 974.373342][T22176] ? clear_bhb_loop+0x40/0x90 [ 974.378051][T22176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 974.383978][T22176] RIP: 0033:0x7f30cf59aeb9 [ 974.388443][T22176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.408101][T22176] RSP: 002b:00007f30d04b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.416556][T22176] RAX: ffffffffffffffda RBX: 00007f30cf815fa0 RCX: 00007f30cf59aeb9 [ 974.424590][T22176] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 974.432601][T22176] RBP: 00007f30d04b0090 R08: 0000000000000000 R09: 0000000000000000 [ 974.440629][T22176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.448637][T22176] R13: 00007f30cf816038 R14: 00007f30cf815fa0 R15: 00007fff8f4a09d8 [ 974.456648][T22176] [ 975.324417][T22210] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5102'. [ 975.345677][T22210] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5102'. [ 975.376895][T22210] netlink: 'syz.1.5102': attribute type 29 has an invalid length. [ 975.387053][T22210] netlink: 'syz.1.5102': attribute type 29 has an invalid length. [ 975.403898][T22210] netlink: 'syz.1.5102': attribute type 29 has an invalid length. [ 975.420852][T22210] netlink: 'syz.1.5102': attribute type 29 has an invalid length. [ 976.037838][T22231] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5110'. [ 976.061066][T22232] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5110'. [ 976.205260][T22237] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5113'. [ 976.251517][T22237] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5113'. [ 976.319244][T22237] netlink: 'syz.2.5113': attribute type 29 has an invalid length. [ 976.350604][T22237] netlink: 'syz.2.5113': attribute type 29 has an invalid length. [ 977.846487][T22265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5123'. [ 977.870100][T22265] team0: entered promiscuous mode [ 977.884670][T22265] team_slave_0: entered promiscuous mode [ 977.893565][T22265] team_slave_1: entered promiscuous mode [ 977.911545][T22265] team0: entered allmulticast mode [ 977.928202][T22265] team_slave_0: entered allmulticast mode [ 977.944329][T22265] team_slave_1: entered allmulticast mode [ 977.958904][T22265] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 978.126466][T22275] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5127'. [ 979.046428][T22299] validate_nla: 7 callbacks suppressed [ 979.046470][T22299] netlink: 'syz.0.5136': attribute type 21 has an invalid length. [ 979.066013][T22299] __nla_validate_parse: 2 callbacks suppressed [ 979.066053][T22299] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5136'. [ 979.259025][T22306] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5139'. [ 979.283395][T22306] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5139'. [ 979.360736][T22306] netlink: 'syz.1.5139': attribute type 29 has an invalid length. [ 979.378082][T22306] netlink: 'syz.1.5139': attribute type 29 has an invalid length. [ 979.399414][T22312] netlink: 'syz.1.5139': attribute type 29 has an invalid length. [ 979.421374][T22306] netlink: 'syz.1.5139': attribute type 29 has an invalid length. [ 980.320061][T22337] FAULT_INJECTION: forcing a failure. [ 980.320061][T22337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.337193][T22337] CPU: 1 PID: 22337 Comm: syz.0.5149 Not tainted syzkaller #0 [ 980.344749][T22337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 980.354860][T22337] Call Trace: [ 980.358189][T22337] [ 980.363089][T22337] dump_stack_lvl+0x18c/0x250 [ 980.367851][T22337] ? show_regs_print_info+0x20/0x20 [ 980.373128][T22337] ? load_image+0x400/0x400 [ 980.377701][T22337] ? __lock_acquire+0x7d40/0x7d40 [ 980.383314][T22337] ? snprintf+0xe9/0x140 [ 980.387623][T22337] should_fail_ex+0x39d/0x4d0 [ 980.392370][T22337] _copy_to_user+0x2f/0xa0 [ 980.396842][T22337] simple_read_from_buffer+0xe7/0x150 [ 980.402288][T22337] proc_fail_nth_read+0x1e8/0x260 [ 980.407373][T22337] ? proc_fault_inject_write+0x360/0x360 [ 980.413257][T22337] ? fsnotify_perm+0x271/0x5e0 [ 980.418087][T22337] ? proc_fault_inject_write+0x360/0x360 [ 980.423803][T22337] vfs_read+0x28b/0x970 [ 980.428033][T22337] ? kernel_read+0x1e0/0x1e0 [ 980.432760][T22337] ? __fget_files+0x28/0x4b0 [ 980.437411][T22337] ? __fget_files+0x28/0x4b0 [ 980.442064][T22337] ? __fget_files+0x43d/0x4b0 [ 980.446813][T22337] ? __fdget_pos+0x2a3/0x330 [ 980.451472][T22337] ? ksys_read+0x75/0x260 [ 980.455866][T22337] ksys_read+0x150/0x260 [ 980.460174][T22337] ? vfs_write+0x990/0x990 [ 980.464652][T22337] ? lockdep_hardirqs_on+0x98/0x150 [ 980.469913][T22337] do_syscall_64+0x55/0xa0 [ 980.474386][T22337] ? clear_bhb_loop+0x40/0x90 [ 980.479125][T22337] ? clear_bhb_loop+0x40/0x90 [ 980.483893][T22337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 980.489859][T22337] RIP: 0033:0x7fb97335b78e [ 980.494332][T22337] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 980.514056][T22337] RSP: 002b:00007fb974246fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 980.522536][T22337] RAX: ffffffffffffffda RBX: 00007fb9742476c0 RCX: 00007fb97335b78e [ 980.530559][T22337] RDX: 000000000000000f RSI: 00007fb9742470a0 RDI: 0000000000000005 [ 980.538581][T22337] RBP: 00007fb974247090 R08: 0000000000000000 R09: 0000000000000000 [ 980.546622][T22337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.554650][T22337] R13: 00007fb973616038 R14: 00007fb973615fa0 R15: 00007ffc2a3f8dd8 [ 980.562704][T22337] [ 980.708562][T22339] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5150'. [ 980.725028][T22339] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5150'. [ 980.819198][T22339] netlink: 'syz.3.5150': attribute type 29 has an invalid length. [ 980.834165][T22339] netlink: 'syz.3.5150': attribute type 29 has an invalid length. [ 980.857738][T22344] netlink: 'syz.3.5150': attribute type 29 has an invalid length. [ 980.883830][T22339] netlink: 'syz.3.5150': attribute type 29 has an invalid length. [ 981.639622][T22362] FAULT_INJECTION: forcing a failure. [ 981.639622][T22362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.677327][T22362] CPU: 1 PID: 22362 Comm: syz.3.5159 Not tainted syzkaller #0 [ 981.684884][T22362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 981.694997][T22362] Call Trace: [ 981.698342][T22362] [ 981.701324][T22362] dump_stack_lvl+0x18c/0x250 [ 981.706071][T22362] ? show_regs_print_info+0x20/0x20 [ 981.711333][T22362] ? load_image+0x400/0x400 [ 981.715902][T22362] ? __might_fault+0xaa/0x120 [ 981.720636][T22362] ? __lock_acquire+0x7d40/0x7d40 [ 981.725726][T22362] should_fail_ex+0x39d/0x4d0 [ 981.730485][T22362] _copy_from_user+0x2f/0xe0 [ 981.735139][T22362] ___sys_sendmsg+0x1c7/0x360 [ 981.739888][T22362] ? __sys_sendmsg+0x2a0/0x2a0 [ 981.744741][T22362] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 981.751068][T22362] __se_sys_sendmsg+0x1c2/0x2b0 [ 981.755995][T22362] ? __x64_sys_sendmsg+0x80/0x80 [ 981.761016][T22362] ? lockdep_hardirqs_on+0x98/0x150 [ 981.766272][T22362] do_syscall_64+0x55/0xa0 [ 981.770747][T22362] ? clear_bhb_loop+0x40/0x90 [ 981.775484][T22362] ? clear_bhb_loop+0x40/0x90 [ 981.780220][T22362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 981.786171][T22362] RIP: 0033:0x7f8f6919aeb9 [ 981.790641][T22362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.810309][T22362] RSP: 002b:00007f8f6a0df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 981.818784][T22362] RAX: ffffffffffffffda RBX: 00007f8f69415fa0 RCX: 00007f8f6919aeb9 [ 981.826824][T22362] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000006 [ 981.834860][T22362] RBP: 00007f8f6a0df090 R08: 0000000000000000 R09: 0000000000000000 [ 981.842886][T22362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.850916][T22362] R13: 00007f8f69416038 R14: 00007f8f69415fa0 R15: 00007ffd60e118e8 [ 981.858969][T22362] [ 983.772201][T22406] netlink: 'syz.3.5173': attribute type 4 has an invalid length. [ 983.783790][T22406] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5173'. [ 985.024975][T22429] netlink: 'syz.1.5182': attribute type 10 has an invalid length. [ 985.047360][T22429] netlink: 'syz.1.5182': attribute type 10 has an invalid length. [ 985.055602][T22429] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.5182'. [ 985.068195][T22429] openvswitch: netlink: Message has 4 unknown bytes. [ 985.920558][T22455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5190'. [ 986.134120][T22463] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5194'. [ 986.157809][T22463] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5194'. [ 986.197736][T22463] netlink: 'syz.1.5194': attribute type 29 has an invalid length. [ 986.219387][T22463] netlink: 'syz.1.5194': attribute type 29 has an invalid length. [ 986.239111][T22463] netlink: 'syz.1.5194': attribute type 29 has an invalid length. [ 986.258202][T22463] netlink: 'syz.1.5194': attribute type 29 has an invalid length. [ 986.707383][T22479] netlink: 'syz.0.5200': attribute type 10 has an invalid length. [ 986.724877][T22479] netlink: 'syz.0.5200': attribute type 10 has an invalid length. [ 986.743157][T22479] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.5200'. [ 986.756837][T22479] openvswitch: netlink: Message has 4 unknown bytes. [ 987.032216][T22489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5204'. [ 987.281842][T22495] FAULT_INJECTION: forcing a failure. [ 987.281842][T22495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.297331][T22495] CPU: 1 PID: 22495 Comm: syz.3.5206 Not tainted syzkaller #0 [ 987.304870][T22495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 987.314979][T22495] Call Trace: [ 987.318306][T22495] [ 987.321279][T22495] dump_stack_lvl+0x18c/0x250 [ 987.326026][T22495] ? show_regs_print_info+0x20/0x20 [ 987.331286][T22495] ? load_image+0x400/0x400 [ 987.335851][T22495] ? __might_fault+0xaa/0x120 [ 987.340582][T22495] should_fail_ex+0x39d/0x4d0 [ 987.345329][T22495] copyin+0x1a/0x90 [ 987.349195][T22495] _copy_from_iter+0x54f/0x12e0 [ 987.354105][T22495] ? copyin+0x70/0x90 [ 987.358151][T22495] ? copyout_mc+0x70/0x70 [ 987.362543][T22495] ? copyout_mc+0x70/0x70 [ 987.366929][T22495] ? __virt_addr_valid+0x18c/0x540 [ 987.372083][T22495] ? __virt_addr_valid+0x469/0x540 [ 987.377250][T22495] ? page_copy_sane+0x4e/0x270 [ 987.382058][T22495] copy_page_from_iter+0x7b/0x100 [ 987.387122][T22495] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 987.392969][T22495] packet_sendmsg+0x3566/0x4d70 [ 987.397879][T22495] ? verify_lock_unused+0x140/0x140 [ 987.403107][T22495] ? mark_lock+0x94/0x320 [ 987.407467][T22495] ? __lock_acquire+0x1273/0x7d40 [ 987.412520][T22495] ? verify_lock_unused+0x140/0x140 [ 987.417768][T22495] ? aa_sk_perm+0x83c/0x970 [ 987.422324][T22495] ? packet_getsockopt+0xad0/0xad0 [ 987.427483][T22495] ? aa_sock_msg_perm+0x94/0x150 [ 987.432454][T22495] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 987.437774][T22495] ? security_socket_sendmsg+0x80/0xa0 [ 987.443273][T22495] ? packet_getsockopt+0xad0/0xad0 [ 987.448426][T22495] ____sys_sendmsg+0x5ba/0x960 [ 987.453228][T22495] ? __lock_acquire+0x7d40/0x7d40 [ 987.458284][T22495] ? __asan_memset+0x22/0x40 [ 987.462914][T22495] ? __sys_sendmsg_sock+0x30/0x30 [ 987.467977][T22495] ? __import_iovec+0x3fa/0x850 [ 987.472873][T22495] ? import_iovec+0x73/0xa0 [ 987.477424][T22495] ___sys_sendmsg+0x2a6/0x360 [ 987.482145][T22495] ? get_pid_task+0x20/0x1e0 [ 987.486865][T22495] ? __sys_sendmsg+0x2a0/0x2a0 [ 987.491701][T22495] ? __lock_acquire+0x7d40/0x7d40 [ 987.496788][T22495] __se_sys_sendmsg+0x1c2/0x2b0 [ 987.501681][T22495] ? __x64_sys_sendmsg+0x80/0x80 [ 987.506677][T22495] ? lockdep_hardirqs_on+0x98/0x150 [ 987.511909][T22495] do_syscall_64+0x55/0xa0 [ 987.516362][T22495] ? clear_bhb_loop+0x40/0x90 [ 987.521080][T22495] ? clear_bhb_loop+0x40/0x90 [ 987.525873][T22495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.531801][T22495] RIP: 0033:0x7f8f6919aeb9 [ 987.536247][T22495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.555972][T22495] RSP: 002b:00007f8f6a0df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.564422][T22495] RAX: ffffffffffffffda RBX: 00007f8f69415fa0 RCX: 00007f8f6919aeb9 [ 987.572422][T22495] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 987.580424][T22495] RBP: 00007f8f6a0df090 R08: 0000000000000000 R09: 0000000000000000 [ 987.588437][T22495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 987.596441][T22495] R13: 00007f8f69416038 R14: 00007f8f69415fa0 R15: 00007ffd60e118e8 [ 987.604474][T22495] [ 988.155825][T22514] netlink: 'syz.0.5210': attribute type 4 has an invalid length. [ 988.164062][T22514] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5210'. [ 988.760607][T22521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5214'. [ 989.016718][T22528] netlink: 'syz.0.5218': attribute type 3 has an invalid length. [ 989.070690][T22528] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.5218'. [ 989.301095][T22533] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.5219'. [ 989.312728][T22533] openvswitch: netlink: Message has 4 unknown bytes. [ 991.172889][T22567] bridge_slave_1: left allmulticast mode [ 991.201298][T22567] bridge_slave_1: left promiscuous mode [ 991.241448][T22567] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.050024][T22567] bridge_slave_0: left allmulticast mode [ 992.055947][T22567] bridge_slave_0: left promiscuous mode [ 992.061810][T22567] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.198734][T22570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5228'. [ 992.210074][T22574] validate_nla: 2 callbacks suppressed [ 992.210099][T22574] netlink: 'syz.2.5226': attribute type 4 has an invalid length. [ 992.224044][T22574] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5226'. [ 992.555992][ T5774] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 993.139626][T22604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5240'. [ 993.441665][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.452350][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.768315][T22620] netlink: 'syz.2.5244': attribute type 3 has an invalid length. [ 993.799404][T22619] netlink: 'syz.0.5252': attribute type 2 has an invalid length. [ 993.818288][T22620] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.5244'. [ 995.009783][ T5774] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 995.389517][T22652] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.5257'. [ 995.432565][T22652] netlink: zone id is out of range [ 995.438820][T22652] netlink: zone id is out of range [ 995.444303][T22652] netlink: zone id is out of range [ 996.000197][T22673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5264'. [ 996.031909][T22672] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5265'. [ 996.069113][T22674] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5265'. [ 996.121191][T22672] netlink: 'syz.1.5265': attribute type 29 has an invalid length. [ 996.131906][T22672] netlink: 'syz.1.5265': attribute type 29 has an invalid length. [ 996.147664][T22672] netlink: 'syz.1.5265': attribute type 29 has an invalid length. [ 996.157279][T22672] netlink: 'syz.1.5265': attribute type 29 has an invalid length. [ 996.531903][T22680] syzkaller0: entered promiscuous mode [ 996.554690][T22680] syzkaller0: entered allmulticast mode [ 997.765274][T22705] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5276'. [ 997.789573][T22705] netlink: 'syz.2.5276': attribute type 29 has an invalid length. [ 1001.235497][T22699] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5274'. [ 1001.254876][T22704] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5276'. [ 1001.294896][T22705] netlink: 'syz.2.5276': attribute type 29 has an invalid length. [ 1002.013945][T22734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5286'. [ 1002.219294][T22736] netlink: 'syz.3.5287': attribute type 10 has an invalid length. [ 1002.307946][T22741] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5288'. [ 1002.336487][T22736] team0: Device veth1_macvtap failed to register rx_handler [ 1002.346238][T22741] netlink: 'syz.1.5288': attribute type 29 has an invalid length. [ 1002.412875][T22738] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5288'. [ 1002.449077][T22741] netlink: 'syz.1.5288': attribute type 29 has an invalid length. [ 1002.465426][T22747] netlink: 'syz.1.5288': attribute type 29 has an invalid length. [ 1002.474317][T22738] netlink: 'syz.1.5288': attribute type 29 has an invalid length. [ 1005.623404][T22774] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5300'. [ 1005.629289][T22778] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1005.650772][T22774] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5300'. [ 1005.716466][T22776] netlink: 'syz.0.5299': attribute type 10 has an invalid length. [ 1005.733377][T22774] netlink: 'syz.3.5300': attribute type 29 has an invalid length. [ 1005.957683][T22776] team0: Device veth1_macvtap failed to register rx_handler [ 1006.000167][T22774] netlink: 'syz.3.5300': attribute type 29 has an invalid length. [ 1006.021408][T22780] netlink: 'syz.3.5300': attribute type 29 has an invalid length. [ 1006.041215][T22781] netlink: 'syz.3.5300': attribute type 29 has an invalid length. [ 1006.368729][T22793] netlink: 'syz.2.5306': attribute type 2 has an invalid length. [ 1007.122322][T22812] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5313'. [ 1007.134168][T22812] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5313'. [ 1007.188656][T22814] netlink: 'syz.1.5313': attribute type 29 has an invalid length. [ 1007.202121][T22814] netlink: 'syz.1.5313': attribute type 29 has an invalid length. [ 1007.218488][T22812] netlink: 'syz.1.5313': attribute type 29 has an invalid length. [ 1007.258499][T22812] netlink: 'syz.1.5313': attribute type 29 has an invalid length. [ 1008.122344][T22821] team0: Device veth1_macvtap failed to register rx_handler [ 1008.262899][T22829] FAULT_INJECTION: forcing a failure. [ 1008.262899][T22829] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.279439][T22829] CPU: 1 PID: 22829 Comm: syz.0.5319 Not tainted syzkaller #0 [ 1008.287001][T22829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1008.297118][T22829] Call Trace: [ 1008.300449][T22829] [ 1008.303432][T22829] dump_stack_lvl+0x18c/0x250 [ 1008.308181][T22829] ? show_regs_print_info+0x20/0x20 [ 1008.313462][T22829] ? load_image+0x400/0x400 [ 1008.318039][T22829] ? __asan_memset+0x22/0x40 [ 1008.322696][T22829] should_fail_ex+0x39d/0x4d0 [ 1008.327449][T22829] should_failslab+0x9/0x20 [ 1008.332022][T22829] slab_pre_alloc_hook+0x59/0x310 [ 1008.337118][T22829] ? __debug_object_init+0xec/0x450 [ 1008.342393][T22829] kmem_cache_alloc+0x5a/0x2d0 [ 1008.347222][T22829] ? slab_build_skb+0x2b/0x3f0 [ 1008.352033][T22829] slab_build_skb+0x2b/0x3f0 [ 1008.356670][T22829] bpf_prog_test_run_skb+0x3c8/0x12b0 [ 1008.362076][T22829] ? lockdep_hardirqs_on+0x98/0x150 [ 1008.367312][T22829] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1008.373512][T22829] ? cpu_online+0x60/0x60 [ 1008.377982][T22829] bpf_prog_test_run+0x321/0x390 [ 1008.382982][T22829] __sys_bpf+0x49d/0x890 [ 1008.387287][T22829] ? bpf_link_show_fdinfo+0x390/0x390 [ 1008.392715][T22829] ? lock_chain_count+0x20/0x20 [ 1008.397617][T22829] __x64_sys_bpf+0x7c/0x90 [ 1008.402073][T22829] do_syscall_64+0x55/0xa0 [ 1008.406534][T22829] ? clear_bhb_loop+0x40/0x90 [ 1008.411248][T22829] ? clear_bhb_loop+0x40/0x90 [ 1008.415968][T22829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1008.421897][T22829] RIP: 0033:0x7fb97339aeb9 [ 1008.426342][T22829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.445994][T22829] RSP: 002b:00007fb974247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1008.454472][T22829] RAX: ffffffffffffffda RBX: 00007fb973615fa0 RCX: 00007fb97339aeb9 [ 1008.462497][T22829] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 1008.470503][T22829] RBP: 00007fb974247090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.478507][T22829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.486518][T22829] R13: 00007fb973616038 R14: 00007fb973615fa0 R15: 00007ffc2a3f8dd8 [ 1008.494560][T22829] [ 1008.740480][T22837] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5322'. [ 1008.758249][T22837] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5322'. [ 1010.356957][T22854] team0: Device veth1_macvtap failed to register rx_handler [ 1010.594647][T22857] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5327'. [ 1010.930358][T22869] validate_nla: 7 callbacks suppressed [ 1010.930381][T22869] netlink: 'syz.2.5329': attribute type 10 has an invalid length. [ 1010.967183][T22869] team0: Device veth1_macvtap failed to register rx_handler [ 1011.393690][T22879] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5334'. [ 1011.410030][T22879] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5334'. [ 1011.509441][T22879] netlink: 'syz.1.5334': attribute type 29 has an invalid length. [ 1011.931664][T22879] netlink: 'syz.1.5334': attribute type 29 has an invalid length. [ 1011.944224][T22882] netlink: 'syz.1.5334': attribute type 29 has an invalid length. [ 1011.960636][T22883] netlink: 'syz.1.5334': attribute type 29 has an invalid length. [ 1012.525386][ T59] hsr_slave_0: left promiscuous mode [ 1012.539696][ T59] hsr_slave_1: left promiscuous mode [ 1012.570962][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1012.594144][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.652060][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1012.662883][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.723502][ T59] veth1_macvtap: left promiscuous mode [ 1012.736623][ T59] veth0_macvtap: left promiscuous mode [ 1012.743776][ T59] veth1_vlan: left promiscuous mode [ 1012.760454][ T59] veth0_vlan: left promiscuous mode [ 1013.023674][ T59] team0 (unregistering): Port device geneve1 removed [ 1013.768873][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1013.853140][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1014.710963][T22918] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5347'. [ 1014.795588][T22918] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5347'. [ 1014.852931][T22918] netlink: 'syz.0.5347': attribute type 29 has an invalid length. [ 1014.863978][T22918] netlink: 'syz.0.5347': attribute type 29 has an invalid length. [ 1014.877477][T22918] netlink: 'syz.0.5347': attribute type 29 has an invalid length. [ 1014.905949][T22918] netlink: 'syz.0.5347': attribute type 29 has an invalid length. [ 1015.330959][T22931] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5353'. [ 1016.475880][T22956] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5360'. [ 1016.513833][T22956] netlink: 'syz.2.5360': attribute type 29 has an invalid length. [ 1016.665886][T22955] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5360'. [ 1016.701457][T22956] netlink: 'syz.2.5360': attribute type 29 has an invalid length. [ 1016.717908][T22960] netlink: 'syz.2.5360': attribute type 29 has an invalid length. [ 1016.740316][T22963] netlink: 'syz.3.5362': attribute type 2 has an invalid length. [ 1016.750737][T22962] netlink: 'syz.2.5360': attribute type 29 has an invalid length. [ 1018.291964][T22989] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5372'. [ 1018.322796][T22989] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5372'. [ 1018.380924][T22989] netlink: 'syz.1.5372': attribute type 29 has an invalid length. [ 1018.393099][T22989] netlink: 'syz.1.5372': attribute type 29 has an invalid length. [ 1018.404866][T22992] netlink: 'syz.1.5372': attribute type 29 has an invalid length. [ 1018.415592][T22989] netlink: 'syz.1.5372': attribute type 29 has an invalid length. [ 1019.559958][T23014] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5381'. [ 1019.611190][T23017] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5383'. [ 1019.622962][T23017] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5383'. [ 1019.641946][T23017] netlink: 'syz.3.5383': attribute type 29 has an invalid length. [ 1020.293551][T23032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5388'. [ 1020.599689][T23040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5398'. [ 1021.140659][T23050] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5393'. [ 1022.005014][T23065] __nla_validate_parse: 1 callbacks suppressed [ 1022.005036][T23065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5400'. [ 1022.465560][T23076] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5404'. [ 1022.482332][T23076] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5404'. [ 1022.579832][T23076] validate_nla: 7 callbacks suppressed [ 1022.579873][T23076] netlink: 'syz.0.5404': attribute type 29 has an invalid length. [ 1022.638255][T23076] netlink: 'syz.0.5404': attribute type 29 has an invalid length. [ 1022.653489][T23078] netlink: 'syz.0.5404': attribute type 29 has an invalid length. [ 1022.668736][T23079] netlink: 'syz.0.5404': attribute type 29 has an invalid length. [ 1023.118228][T23088] netlink: 'syz.2.5408': attribute type 1 has an invalid length. [ 1023.130565][T23088] netlink: 'syz.2.5408': attribute type 2 has an invalid length. [ 1023.149585][T23088] netlink: 'syz.2.5408': attribute type 2 has an invalid length. [ 1023.160009][T23088] netlink: 'syz.2.5408': attribute type 3 has an invalid length. [ 1023.171079][T23088] netlink: 'syz.2.5408': attribute type 4 has an invalid length. [ 1023.205148][T23088] netlink: 'syz.2.5408': attribute type 5 has an invalid length. [ 1023.212996][T23088] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.5408'. [ 1024.022387][T23100] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5413'. [ 1024.145883][T23103] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5414'. [ 1024.199470][T23108] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5414'. [ 1025.032864][T23118] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5419'. [ 1025.904415][T23138] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5425'. [ 1025.916195][T23138] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5425'. [ 1027.482375][T23156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1027.496371][T23156] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5434'. [ 1028.878087][T23183] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5440'. [ 1031.323816][T23221] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5455'. [ 1031.336949][T23221] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5455'. [ 1031.362078][T23221] validate_nla: 20 callbacks suppressed [ 1031.362108][T23221] netlink: 'syz.1.5455': attribute type 29 has an invalid length. [ 1031.378277][T23221] netlink: 'syz.1.5455': attribute type 29 has an invalid length. [ 1031.396971][T23221] netlink: 'syz.1.5455': attribute type 29 has an invalid length. [ 1031.408137][T23221] netlink: 'syz.1.5455': attribute type 29 has an invalid length. [ 1033.129991][T23250] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1033.218182][T23250] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5466'. [ 1033.460981][T23250] netlink: 'syz.1.5466': attribute type 29 has an invalid length. [ 1033.515490][T23250] netlink: 'syz.1.5466': attribute type 29 has an invalid length. [ 1033.539067][T23252] netlink: 'syz.1.5466': attribute type 29 has an invalid length. [ 1033.566888][T23254] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5468'. [ 1033.611613][T23255] netlink: 'syz.1.5466': attribute type 29 has an invalid length. [ 1034.746092][T23281] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5480'. [ 1034.774355][T23281] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5480'. [ 1034.803391][T23281] netlink: 'syz.2.5480': attribute type 29 has an invalid length. [ 1034.825187][T23281] netlink: 'syz.2.5480': attribute type 29 has an invalid length. [ 1035.840770][T23304] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5490'. [ 1035.858166][T23304] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5490'. [ 1036.449721][T13087] Bluetooth: hci0: command 0x0406 tx timeout [ 1036.972486][T23335] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5502'. [ 1036.992257][T23335] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5502'. [ 1037.077118][T23335] validate_nla: 6 callbacks suppressed [ 1037.077161][T23335] netlink: 'syz.2.5502': attribute type 29 has an invalid length. [ 1037.101228][T23335] netlink: 'syz.2.5502': attribute type 29 has an invalid length. [ 1037.350963][T23338] netlink: 'syz.2.5502': attribute type 29 has an invalid length. [ 1037.377998][T23335] netlink: 'syz.2.5502': attribute type 29 has an invalid length. [ 1037.917295][T23357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5510'. [ 1038.899452][T23370] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5514'. [ 1038.916972][T23370] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5514'. [ 1038.957837][T23370] netlink: 'syz.0.5514': attribute type 29 has an invalid length. [ 1038.982197][T23370] netlink: 'syz.0.5514': attribute type 29 has an invalid length. [ 1039.017227][T23373] netlink: 'syz.0.5514': attribute type 29 has an invalid length. [ 1039.043254][T23370] netlink: 'syz.0.5514': attribute type 29 has an invalid length. [ 1039.411041][T23393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5521'. [ 1040.367770][T23410] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5529'. [ 1040.395699][T23410] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5529'. [ 1040.471235][T23410] netlink: 'syz.0.5529': attribute type 29 has an invalid length. [ 1040.504166][T23410] netlink: 'syz.0.5529': attribute type 29 has an invalid length. [ 1040.938083][T23421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5533'. [ 1043.607674][T23472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5548'. [ 1044.308692][T23480] validate_nla: 2 callbacks suppressed [ 1044.308717][T23480] netlink: 'syz.2.5551': attribute type 41 has an invalid length. [ 1044.342918][T23480] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5551'. [ 1044.415114][T23485] netlink: 'syz.2.5551': attribute type 10 has an invalid length. [ 1045.173621][T23485] team0: Port device hsr0 added [ 1045.365204][T23500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5561'. [ 1045.414973][T23502] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5562'. [ 1045.448190][T23502] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5562'. [ 1045.502858][T23507] netlink: 'syz.3.5562': attribute type 29 has an invalid length. [ 1045.536354][T23507] netlink: 'syz.3.5562': attribute type 29 has an invalid length. [ 1045.558971][T23502] netlink: 'syz.3.5562': attribute type 29 has an invalid length. [ 1045.587116][T23502] netlink: 'syz.3.5562': attribute type 29 has an invalid length. [ 1046.069478][T23523] netlink: 'syz.1.5569': attribute type 41 has an invalid length. [ 1046.105015][T23523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5569'. [ 1046.158209][T23523] netlink: 'syz.1.5569': attribute type 10 has an invalid length. [ 1046.686293][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 1046.764308][T23523] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1047.156321][T23537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5573'. [ 1047.448120][T23541] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5576'. [ 1047.461004][T23541] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5576'. [ 1047.506338][T23541] netlink: 'syz.0.5576': attribute type 29 has an invalid length. [ 1047.526960][T23541] netlink: 'syz.0.5576': attribute type 29 has an invalid length. [ 1047.680756][T23549] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5579'. [ 1047.708294][T23549] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5579'. [ 1049.917107][T23602] __nla_validate_parse: 3 callbacks suppressed [ 1049.917130][T23602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5598'. [ 1050.452071][T23613] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5604'. [ 1050.479169][T23613] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5604'. [ 1050.516238][T23613] validate_nla: 6 callbacks suppressed [ 1050.516282][T23613] netlink: 'syz.1.5604': attribute type 29 has an invalid length. [ 1050.540431][T23613] netlink: 'syz.1.5604': attribute type 29 has an invalid length. [ 1050.556584][T23618] netlink: 'syz.1.5604': attribute type 29 has an invalid length. [ 1050.576851][T23613] netlink: 'syz.1.5604': attribute type 29 has an invalid length. [ 1051.425482][T23636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5612'. [ 1052.091428][T23648] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5617'. [ 1052.108302][T23648] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5617'. [ 1052.133365][T23646] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5615'. [ 1052.155482][T23646] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5615'. [ 1052.183949][T23648] netlink: 'syz.1.5617': attribute type 29 has an invalid length. [ 1052.202352][T23646] netlink: 'syz.3.5615': attribute type 29 has an invalid length. [ 1052.224375][T23648] netlink: 'syz.1.5617': attribute type 29 has an invalid length. [ 1052.240072][T23646] netlink: 'syz.3.5615': attribute type 29 has an invalid length. [ 1052.252257][T23651] netlink: 'syz.1.5617': attribute type 29 has an invalid length. [ 1052.263163][T23652] netlink: 'syz.3.5615': attribute type 29 has an invalid length. [ 1053.127256][T23672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5625'. [ 1053.758974][T23679] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5628'. [ 1054.863637][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.872233][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.142836][T23707] __nla_validate_parse: 1 callbacks suppressed [ 1055.142862][T23707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5638'. [ 1055.313538][T23713] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5640'. [ 1055.335621][T23713] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5640'. [ 1056.093955][T23734] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5649'. [ 1056.142462][T23734] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5649'. [ 1056.195320][T23734] validate_nla: 11 callbacks suppressed [ 1056.195360][T23734] netlink: 'syz.3.5649': attribute type 29 has an invalid length. [ 1056.227891][T23734] netlink: 'syz.3.5649': attribute type 29 has an invalid length. [ 1056.272322][T23734] netlink: 'syz.3.5649': attribute type 29 has an invalid length. [ 1056.302652][T23734] netlink: 'syz.3.5649': attribute type 29 has an invalid length. [ 1056.371391][T23739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5651'. [ 1056.622926][T23744] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5654'. [ 1056.651544][T23744] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5654'. [ 1056.737579][T23744] netlink: 'syz.1.5654': attribute type 29 has an invalid length. [ 1056.769378][T23744] netlink: 'syz.1.5654': attribute type 29 has an invalid length. [ 1056.798714][T23747] netlink: 'syz.1.5654': attribute type 29 has an invalid length. [ 1056.851930][T23744] netlink: 'syz.1.5654': attribute type 29 has an invalid length. [ 1057.833494][T23768] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.5661'. [ 1057.980167][T23772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5663'. [ 1058.487281][T23779] netlink: 'syz.2.5666': attribute type 29 has an invalid length. [ 1058.529325][T23779] netlink: 'syz.2.5666': attribute type 29 has an invalid length. [ 1060.716409][T23828] __nla_validate_parse: 5 callbacks suppressed [ 1060.716502][T23828] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5684'. [ 1060.789611][T23829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5685'. [ 1061.043938][T23832] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5686'. [ 1061.072067][T23832] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5686'. [ 1062.046833][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 1062.146186][T23854] validate_nla: 12 callbacks suppressed [ 1062.146209][T23854] netlink: 'syz.3.5694': attribute type 10 has an invalid length. [ 1062.190638][T23854] team0: Device veth1_macvtap failed to register rx_handler [ 1062.337706][T23860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5697'. [ 1062.528066][T23863] netlink: 'syz.3.5698': attribute type 21 has an invalid length. [ 1062.548704][T23863] netlink: 'syz.3.5698': attribute type 6 has an invalid length. [ 1062.579692][T23863] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5698'. [ 1062.823784][T23870] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5699'. [ 1062.908377][T23871] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5699'. [ 1063.061144][T23870] netlink: 'syz.0.5699': attribute type 29 has an invalid length. [ 1063.124309][T23870] netlink: 'syz.0.5699': attribute type 29 has an invalid length. [ 1063.156804][T23871] netlink: 'syz.0.5699': attribute type 29 has an invalid length. [ 1063.188543][T23874] netlink: 'syz.0.5699': attribute type 29 has an invalid length. [ 1063.853261][T23888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5708'. [ 1064.491746][T23903] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5713'. [ 1064.538930][T23903] netlink: 'syz.1.5713': attribute type 29 has an invalid length. [ 1064.549614][T23903] netlink: 'syz.1.5713': attribute type 29 has an invalid length. [ 1064.564124][T23903] netlink: 'syz.1.5713': attribute type 29 has an invalid length. [ 1065.524258][T23927] team0: Device veth1_macvtap failed to register rx_handler [ 1065.799078][T23932] __nla_validate_parse: 5 callbacks suppressed [ 1065.799118][T23932] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5723'. [ 1065.848605][T23932] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5723'. [ 1067.030503][T23963] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5734'. [ 1067.173161][T13087] Bluetooth: hci3: command 0x0406 tx timeout [ 1067.375374][T23973] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5738'. [ 1067.408683][T23973] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5738'. [ 1067.458136][T23973] validate_nla: 10 callbacks suppressed [ 1067.458177][T23973] netlink: 'syz.2.5738': attribute type 29 has an invalid length. [ 1067.484010][T23973] netlink: 'syz.2.5738': attribute type 29 has an invalid length. [ 1067.501699][T23975] netlink: 'syz.2.5738': attribute type 29 has an invalid length. [ 1067.520804][T23973] netlink: 'syz.2.5738': attribute type 29 has an invalid length. [ 1068.089795][T23987] netlink: 'syz.2.5743': attribute type 5 has an invalid length. [ 1068.102706][T23987] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5743'. [ 1068.138272][T23987] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5743'. [ 1068.161987][T23987] team0: Port device team_slave_0 removed [ 1068.180539][T23987] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1068.354070][T23996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5745'. [ 1068.999034][T24013] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5753'. [ 1069.022716][T24013] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5753'. [ 1069.044188][T24013] netlink: 'syz.0.5753': attribute type 29 has an invalid length. [ 1069.055090][T24013] netlink: 'syz.0.5753': attribute type 29 has an invalid length. [ 1069.067718][T24013] netlink: 'syz.0.5753': attribute type 29 has an invalid length. [ 1069.082829][T24013] netlink: 'syz.0.5753': attribute type 29 has an invalid length. [ 1070.455954][T24037] netlink: 'syz.1.5761': attribute type 29 has an invalid length. [ 1071.000472][T24054] __nla_validate_parse: 5 callbacks suppressed [ 1071.000542][T24054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5769'. [ 1072.053079][T24077] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5776'. [ 1072.088661][T24077] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5776'. [ 1072.413428][T24083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1072.438351][T24088] FAULT_INJECTION: forcing a failure. [ 1072.438351][T24088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1072.508496][T24088] CPU: 0 PID: 24088 Comm: syz.1.5781 Not tainted syzkaller #0 [ 1072.516045][T24088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1072.526149][T24088] Call Trace: [ 1072.529474][T24088] [ 1072.532447][T24088] dump_stack_lvl+0x18c/0x250 [ 1072.537208][T24088] ? show_regs_print_info+0x20/0x20 [ 1072.542477][T24088] ? load_image+0x400/0x400 [ 1072.547051][T24088] ? __might_fault+0xaa/0x120 [ 1072.551778][T24088] ? __lock_acquire+0x7d40/0x7d40 [ 1072.556872][T24088] should_fail_ex+0x39d/0x4d0 [ 1072.561662][T24088] _copy_from_user+0x2f/0xe0 [ 1072.566313][T24088] ___sys_sendmsg+0x1c7/0x360 [ 1072.571041][T24088] ? __sys_sendmsg+0x2a0/0x2a0 [ 1072.575881][T24088] ? trace_call_bpf+0xc3/0x6c0 [ 1072.580719][T24088] __se_sys_sendmsg+0x1c2/0x2b0 [ 1072.585621][T24088] ? __x64_sys_sendmsg+0x80/0x80 [ 1072.590621][T24088] ? lockdep_hardirqs_on+0x98/0x150 [ 1072.595859][T24088] do_syscall_64+0x55/0xa0 [ 1072.600333][T24088] ? clear_bhb_loop+0x40/0x90 [ 1072.605052][T24088] ? clear_bhb_loop+0x40/0x90 [ 1072.609771][T24088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1072.615698][T24088] RIP: 0033:0x7f30cf59aeb9 [ 1072.620147][T24088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.639795][T24088] RSP: 002b:00007f30d04b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1072.648263][T24088] RAX: ffffffffffffffda RBX: 00007f30cf815fa0 RCX: 00007f30cf59aeb9 [ 1072.656270][T24088] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 1072.664279][T24088] RBP: 00007f30d04b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.672291][T24088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1072.680300][T24088] R13: 00007f30cf816038 R14: 00007f30cf815fa0 R15: 00007fff8f4a09d8 [ 1072.688335][T24088] [ 1072.977784][T24092] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5783'. [ 1073.662356][T24112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5791'. [ 1073.674385][T24112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5791'. [ 1073.691090][T24112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5791'. [ 1073.702525][T24113] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5790'. [ 1073.737587][T24113] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5790'. [ 1073.795963][T24113] validate_nla: 10 callbacks suppressed [ 1073.796003][T24113] netlink: 'syz.1.5790': attribute type 29 has an invalid length. [ 1073.812383][T24113] netlink: 'syz.1.5790': attribute type 29 has an invalid length. [ 1073.831500][T24113] netlink: 'syz.1.5790': attribute type 29 has an invalid length. [ 1073.845905][T24113] netlink: 'syz.1.5790': attribute type 29 has an invalid length. [ 1075.474702][T24144] netlink: 'syz.3.5802': attribute type 29 has an invalid length. [ 1075.487879][T24144] netlink: 'syz.3.5802': attribute type 29 has an invalid length. [ 1075.499012][T24149] netlink: 'syz.3.5802': attribute type 29 has an invalid length. [ 1075.511613][T24144] netlink: 'syz.3.5802': attribute type 29 has an invalid length. [ 1075.692259][T24155] netlink: set zone limit has 8 unknown bytes [ 1076.413846][T24167] netlink: 'syz.1.5809': attribute type 8 has an invalid length. [ 1076.427268][T24167] __nla_validate_parse: 5 callbacks suppressed [ 1076.427288][T24167] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.5809'. [ 1076.450402][T24168] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5809'. [ 1076.460153][T24168] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5809'. [ 1076.495397][T24168] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5809'. [ 1076.723035][T24173] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5812'. [ 1076.872513][T24174] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5812'. [ 1076.903888][T24173] netlink: 'syz.2.5812': attribute type 29 has an invalid length. [ 1077.306721][T24189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5817'. [ 1077.605794][T24199] netlink: 703 bytes leftover after parsing attributes in process `syz.3.5822'. [ 1078.282431][T24217] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5825'. [ 1078.339575][T24219] FAULT_INJECTION: forcing a failure. [ 1078.339575][T24219] name failslab, interval 1, probability 0, space 0, times 0 [ 1078.353978][T24220] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5825'. [ 1078.380132][T24219] CPU: 0 PID: 24219 Comm: syz.2.5826 Not tainted syzkaller #0 [ 1078.387693][T24219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1078.397804][T24219] Call Trace: [ 1078.401133][T24219] [ 1078.404113][T24219] dump_stack_lvl+0x18c/0x250 [ 1078.408866][T24219] ? show_regs_print_info+0x20/0x20 [ 1078.414126][T24219] ? load_image+0x400/0x400 [ 1078.418691][T24219] ? __might_sleep+0xe0/0xe0 [ 1078.423361][T24219] ? __lock_acquire+0x7d40/0x7d40 [ 1078.428477][T24219] should_fail_ex+0x39d/0x4d0 [ 1078.433240][T24219] should_failslab+0x9/0x20 [ 1078.437820][T24219] slab_pre_alloc_hook+0x59/0x310 [ 1078.442925][T24219] kmem_cache_alloc+0x5a/0x2d0 [ 1078.447769][T24219] ? security_inode_alloc+0x34/0x110 [ 1078.453124][T24219] security_inode_alloc+0x34/0x110 [ 1078.458305][T24219] inode_init_always+0x8fc/0xc90 [ 1078.463307][T24219] new_inode_pseudo+0x95/0x1d0 [ 1078.468214][T24219] __sock_create+0x12d/0x940 [ 1078.472874][T24219] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1078.478772][T24219] mptcp_subflow_create_socket+0x10b/0xac0 [ 1078.484626][T24219] ? mark_lock+0x94/0x320 [ 1078.488998][T24219] ? __mptcp_subflow_connect+0x1450/0x1450 [ 1078.494854][T24219] ? lock_chain_count+0x20/0x20 [ 1078.499758][T24219] __mptcp_nmpc_sk+0x157/0x740 [ 1078.504653][T24219] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1078.510065][T24219] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 1078.516887][T24219] mptcp_setsockopt+0xe7a/0x3390 [ 1078.522046][T24219] ? __fget_files+0x28/0x4b0 [ 1078.526681][T24219] ? pm_nl_exit_net+0x230/0x230 [ 1078.531587][T24219] ? aa_af_perm+0x330/0x330 [ 1078.536132][T24219] ? __fget_files+0x28/0x4b0 [ 1078.540753][T24219] ? __fget_files+0x28/0x4b0 [ 1078.545385][T24219] ? aa_sock_opt_perm+0x74/0x100 [ 1078.550398][T24219] ? sock_common_setsockopt+0x36/0xc0 [ 1078.555818][T24219] ? sock_common_recvmsg+0x190/0x190 [ 1078.561149][T24219] do_sock_setsockopt+0x175/0x1a0 [ 1078.566226][T24219] ? __fdget+0x180/0x210 [ 1078.570521][T24219] __x64_sys_setsockopt+0x182/0x200 [ 1078.575768][T24219] do_syscall_64+0x55/0xa0 [ 1078.580232][T24219] ? clear_bhb_loop+0x40/0x90 [ 1078.584955][T24219] ? clear_bhb_loop+0x40/0x90 [ 1078.589667][T24219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1078.595600][T24219] RIP: 0033:0x7f439139aeb9 [ 1078.600045][T24219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.619689][T24219] RSP: 002b:00007f43921e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1078.628153][T24219] RAX: ffffffffffffffda RBX: 00007f4391615fa0 RCX: 00007f439139aeb9 [ 1078.636166][T24219] RDX: 000000000000004e RSI: 0000000000000029 RDI: 0000000000000004 [ 1078.644172][T24219] RBP: 00007f43921e9090 R08: 0000000000004000 R09: 0000000000000000 [ 1078.652187][T24219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.660194][T24219] R13: 00007f4391616038 R14: 00007f4391615fa0 R15: 00007ffed96d6598 [ 1078.668217][T24219] [ 1078.674886][T24219] socket: no more sockets [ 1080.971069][T24252] validate_nla: 7 callbacks suppressed [ 1080.971098][T24252] netlink: 'syz.2.5837': attribute type 29 has an invalid length. [ 1080.993250][T24252] netlink: 'syz.2.5837': attribute type 29 has an invalid length. [ 1081.023809][T24252] netlink: 'syz.2.5837': attribute type 29 has an invalid length. [ 1081.043273][T24252] netlink: 'syz.2.5837': attribute type 29 has an invalid length. [ 1081.696732][T24268] __nla_validate_parse: 4 callbacks suppressed [ 1081.696771][T24268] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5845'. [ 1081.720818][T24268] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5845'. [ 1081.746672][T24268] netlink: 'syz.0.5845': attribute type 29 has an invalid length. [ 1081.757748][T24268] netlink: 'syz.0.5845': attribute type 29 has an invalid length. [ 1081.796871][T24268] netlink: 'syz.0.5845': attribute type 29 has an invalid length. [ 1081.822878][T24268] netlink: 'syz.0.5845': attribute type 29 has an invalid length. [ 1082.932723][T24284] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5850'. [ 1082.970296][T24284] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5850'. [ 1083.013928][T24284] netlink: 'syz.0.5850': attribute type 29 has an invalid length. [ 1083.033298][T24284] netlink: 'syz.0.5850': attribute type 29 has an invalid length. [ 1083.322377][T24295] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5856'. [ 1083.350561][T24295] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5856'. [ 1083.710098][T24307] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5869'. [ 1083.754747][T24307] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5869'. [ 1084.721833][T24322] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.5864'. [ 1084.737544][T24322] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.5864'. [ 1087.038020][T24362] __nla_validate_parse: 2 callbacks suppressed [ 1087.038062][T24362] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5882'. [ 1087.077652][T24362] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5882'. [ 1087.153801][T24362] validate_nla: 15 callbacks suppressed [ 1087.153834][T24362] netlink: 'syz.0.5882': attribute type 29 has an invalid length. [ 1087.186272][T24362] netlink: 'syz.0.5882': attribute type 29 has an invalid length. [ 1087.215539][T24371] netlink: 'syz.0.5882': attribute type 29 has an invalid length. [ 1087.236965][T24362] netlink: 'syz.0.5882': attribute type 29 has an invalid length. [ 1088.479464][T24396] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5898'. [ 1088.513399][T24396] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5898'. [ 1088.585346][T24396] netlink: 'syz.3.5898': attribute type 29 has an invalid length. [ 1088.613325][T24396] netlink: 'syz.3.5898': attribute type 29 has an invalid length. [ 1088.636024][T24403] netlink: 'syz.3.5898': attribute type 29 has an invalid length. [ 1088.733253][T24396] netlink: 'syz.3.5898': attribute type 29 has an invalid length. [ 1089.053771][T24407] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5904'. [ 1089.106085][T24407] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5904'. [ 1089.158316][T24407] netlink: 'syz.1.5904': attribute type 29 has an invalid length. [ 1089.180490][T24407] netlink: 'syz.1.5904': attribute type 29 has an invalid length. [ 1090.445335][T24431] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5914'. [ 1090.467513][T24431] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5914'. [ 1090.728703][T24441] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5918'. [ 1090.757117][T24441] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5918'. [ 1092.187098][T24479] __nla_validate_parse: 3 callbacks suppressed [ 1092.187137][T24479] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5931'. [ 1092.277575][T24479] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5931'. [ 1092.308303][T24483] validate_nla: 14 callbacks suppressed [ 1092.308325][T24483] netlink: 'syz.1.5931': attribute type 29 has an invalid length. [ 1092.325327][T24483] netlink: 'syz.1.5931': attribute type 29 has an invalid length. [ 1092.381993][T24479] netlink: 'syz.1.5931': attribute type 29 has an invalid length. [ 1092.400920][T24479] netlink: 'syz.1.5931': attribute type 29 has an invalid length. [ 1092.647910][ T5774] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5 [ 1092.853524][T24495] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1092.885469][T24495] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5939'. [ 1092.933999][T24493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5938'. [ 1092.997921][T24495] netlink: 'syz.2.5939': attribute type 29 has an invalid length. [ 1093.033408][T24495] netlink: 'syz.2.5939': attribute type 29 has an invalid length. [ 1093.055873][T24496] netlink: 'syz.2.5939': attribute type 29 has an invalid length. [ 1093.072218][T24497] netlink: 'syz.2.5939': attribute type 29 has an invalid length. [ 1093.381961][T24508] FAULT_INJECTION: forcing a failure. [ 1093.381961][T24508] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.400665][T24508] CPU: 0 PID: 24508 Comm: syz.2.5945 Not tainted syzkaller #0 [ 1093.408315][T24508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1093.418434][T24508] Call Trace: [ 1093.421773][T24508] [ 1093.424753][T24508] dump_stack_lvl+0x18c/0x250 [ 1093.429511][T24508] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1093.435741][T24508] ? show_regs_print_info+0x20/0x20 [ 1093.441007][T24508] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1093.447249][T24508] should_fail_ex+0x39d/0x4d0 [ 1093.451989][T24508] should_failslab+0x9/0x20 [ 1093.456557][T24508] slab_pre_alloc_hook+0x59/0x310 [ 1093.461638][T24508] ? kvm_sched_clock_read+0x11/0x20 [ 1093.466885][T24508] kmem_cache_alloc_lru+0x4d/0x2d0 [ 1093.472051][T24508] ? sock_alloc_inode+0x28/0xc0 [ 1093.476961][T24508] sock_alloc_inode+0x28/0xc0 [ 1093.481773][T24508] ? sockfs_init_fs_context+0xb0/0xb0 [ 1093.487192][T24508] new_inode_pseudo+0x63/0x1d0 [ 1093.492019][T24508] __sock_create+0x12d/0x940 [ 1093.496668][T24508] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1093.502711][T24508] __sys_socket+0xd7/0x1a0 [ 1093.507189][T24508] __x64_sys_socket+0x7a/0x90 [ 1093.511925][T24508] do_syscall_64+0x55/0xa0 [ 1093.516400][T24508] ? clear_bhb_loop+0x40/0x90 [ 1093.521140][T24508] ? clear_bhb_loop+0x40/0x90 [ 1093.525871][T24508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.531819][T24508] RIP: 0033:0x7f439139aeb9 [ 1093.536279][T24508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.555942][T24508] RSP: 002b:00007f43921e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1093.564431][T24508] RAX: ffffffffffffffda RBX: 00007f4391615fa0 RCX: 00007f439139aeb9 [ 1093.572454][T24508] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000023 [ 1093.580509][T24508] RBP: 00007f43921e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.588531][T24508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.596584][T24508] R13: 00007f4391616038 R14: 00007f4391615fa0 R15: 00007ffed96d6598 [ 1093.604633][T24508] [ 1093.661761][T24508] socket: no more sockets [ 1094.528961][T24528] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5951'. [ 1094.571500][T24528] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5951'. [ 1094.591327][T24528] netlink: 'syz.0.5951': attribute type 29 has an invalid length. [ 1094.629030][T24528] netlink: 'syz.0.5951': attribute type 29 has an invalid length. [ 1095.051110][T24537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5952'. [ 1095.843587][T24554] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.5959'. [ 1096.094204][T24561] sctp: [Deprecated]: syz.3.5963 (pid 24561) Use of int in maxseg socket option. [ 1096.094204][T24561] Use struct sctp_assoc_value instead [ 1096.597044][T24575] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5967'. [ 1097.700057][T24593] validate_nla: 2 callbacks suppressed [ 1097.700079][T24593] netlink: 'syz.3.5973': attribute type 21 has an invalid length. [ 1097.719352][T24593] netlink: 'syz.3.5973': attribute type 6 has an invalid length. [ 1097.732426][T24593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5973'. [ 1098.007066][T24599] sctp: [Deprecated]: syz.2.5974 (pid 24599) Use of int in maxseg socket option. [ 1098.007066][T24599] Use struct sctp_assoc_value instead [ 1098.045202][T24601] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5976'. [ 1098.062943][T24601] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5976'. [ 1098.118019][T24601] netlink: 'syz.3.5976': attribute type 29 has an invalid length. [ 1098.146052][T24601] netlink: 'syz.3.5976': attribute type 29 has an invalid length. [ 1098.170369][T24601] netlink: 'syz.3.5976': attribute type 29 has an invalid length. [ 1098.182126][T24601] netlink: 'syz.3.5976': attribute type 29 has an invalid length. [ 1099.273482][T24625] FAULT_INJECTION: forcing a failure. [ 1099.273482][T24625] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.291500][T24625] CPU: 0 PID: 24625 Comm: syz.2.5986 Not tainted syzkaller #0 [ 1099.299066][T24625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1099.309200][T24625] Call Trace: [ 1099.312530][T24625] [ 1099.315521][T24625] dump_stack_lvl+0x18c/0x250 [ 1099.320267][T24625] ? show_regs_print_info+0x20/0x20 [ 1099.325541][T24625] ? load_image+0x400/0x400 [ 1099.330133][T24625] should_fail_ex+0x39d/0x4d0 [ 1099.334897][T24625] should_failslab+0x9/0x20 [ 1099.339465][T24625] slab_pre_alloc_hook+0x59/0x310 [ 1099.344565][T24625] kmem_cache_alloc+0x5a/0x2d0 [ 1099.349391][T24625] ? skb_clone+0x1eb/0x370 [ 1099.353881][T24625] skb_clone+0x1eb/0x370 [ 1099.358184][T24625] __netlink_deliver_tap+0x41c/0x830 [ 1099.363546][T24625] ? netlink_deliver_tap+0x2e/0x1b0 [ 1099.368817][T24625] netlink_deliver_tap+0x19c/0x1b0 [ 1099.373999][T24625] netlink_dump+0x94b/0xe50 [ 1099.378587][T24625] ? netlink_lookup+0x200/0x200 [ 1099.383491][T24625] ? ns_capable+0x89/0xe0 [ 1099.387867][T24625] ? __inet_diag_dump_start+0x886/0x9f0 [ 1099.393465][T24625] __netlink_dump_start+0x5f1/0x810 [ 1099.398719][T24625] inet_diag_rcv_msg_compat+0x215/0x440 [ 1099.404312][T24625] ? __inet_diag_dump+0x380/0x380 [ 1099.409381][T24625] ? sock_diag_rcv_msg+0xd1/0x600 [ 1099.414477][T24625] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 1099.420257][T24625] ? inet_diag_dump_start_compat+0x20/0x20 [ 1099.426109][T24625] ? inet_diag_dump+0x50/0x50 [ 1099.430845][T24625] ? __inet_diag_dump+0x380/0x380 [ 1099.435908][T24625] sock_diag_rcv_msg+0x3d8/0x600 [ 1099.440884][T24625] netlink_rcv_skb+0x241/0x4d0 [ 1099.445713][T24625] ? sock_diag_bind+0xb0/0xb0 [ 1099.450428][T24625] ? netlink_ack+0x1180/0x1180 [ 1099.455251][T24625] ? __lock_acquire+0x7d40/0x7d40 [ 1099.460321][T24625] ? netlink_deliver_tap+0x2e/0x1b0 [ 1099.465568][T24625] sock_diag_rcv+0x2a/0x40 [ 1099.470031][T24625] netlink_unicast+0x751/0x8d0 [ 1099.474846][T24625] netlink_sendmsg+0x8d0/0xbf0 [ 1099.479664][T24625] ? netlink_getsockopt+0x590/0x590 [ 1099.484914][T24625] ? aa_sock_msg_perm+0x94/0x150 [ 1099.489900][T24625] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1099.495230][T24625] ? security_socket_sendmsg+0x80/0xa0 [ 1099.500824][T24625] ? netlink_getsockopt+0x590/0x590 [ 1099.506070][T24625] ____sys_sendmsg+0x5ba/0x960 [ 1099.510906][T24625] ? __asan_memset+0x22/0x40 [ 1099.515540][T24625] ? __sys_sendmsg_sock+0x30/0x30 [ 1099.520603][T24625] ? __import_iovec+0x5f2/0x850 [ 1099.525511][T24625] ? import_iovec+0x73/0xa0 [ 1099.530065][T24625] ___sys_sendmsg+0x2a6/0x360 [ 1099.534794][T24625] ? get_pid_task+0x20/0x1e0 [ 1099.539429][T24625] ? __sys_sendmsg+0x2a0/0x2a0 [ 1099.544250][T24625] ? __lock_acquire+0x7d40/0x7d40 [ 1099.549331][T24625] __se_sys_sendmsg+0x1c2/0x2b0 [ 1099.554225][T24625] ? __x64_sys_sendmsg+0x80/0x80 [ 1099.559214][T24625] ? lockdep_hardirqs_on+0x98/0x150 [ 1099.564453][T24625] do_syscall_64+0x55/0xa0 [ 1099.568922][T24625] ? clear_bhb_loop+0x40/0x90 [ 1099.573634][T24625] ? clear_bhb_loop+0x40/0x90 [ 1099.578362][T24625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1099.584303][T24625] RIP: 0033:0x7f439139aeb9 [ 1099.588749][T24625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1099.608385][T24625] RSP: 002b:00007f43921e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1099.616835][T24625] RAX: ffffffffffffffda RBX: 00007f4391615fa0 RCX: 00007f439139aeb9 [ 1099.624847][T24625] RDX: ff0f000020000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 1099.632892][T24625] RBP: 00007f43921e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1099.640893][T24625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1099.648894][T24625] R13: 00007f4391616038 R14: 00007f4391615fa0 R15: 00007ffed96d6598 [ 1099.656919][T24625] [ 1099.712368][T24628] sctp: [Deprecated]: syz.0.5985 (pid 24628) Use of int in maxseg socket option. [ 1099.712368][T24628] Use struct sctp_assoc_value instead [ 1099.861868][T24631] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5988'. [ 1099.878417][T24631] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5988'. [ 1099.921882][T24631] netlink: 'syz.2.5988': attribute type 29 has an invalid length. [ 1099.942618][T24631] netlink: 'syz.2.5988': attribute type 29 has an invalid length. [ 1099.962715][T24631] netlink: 'syz.2.5988': attribute type 29 has an invalid length. [ 1100.000400][T24631] netlink: 'syz.2.5988': attribute type 29 has an invalid length. [ 1100.041422][T24636] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5990'. [ 1100.385601][T24650] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5995'. [ 1100.404303][T24650] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5995'. [ 1101.257743][T24679] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6006'. [ 1101.271161][T24679] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6006'. [ 1103.611492][T24738] __nla_validate_parse: 7 callbacks suppressed [ 1103.611532][T24738] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6031'. [ 1103.651527][T24739] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6032'. [ 1103.661680][T24738] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6031'. [ 1103.682167][T24739] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6032'. [ 1103.721976][T24738] validate_nla: 20 callbacks suppressed [ 1103.722017][T24738] netlink: 'syz.2.6031': attribute type 29 has an invalid length. [ 1103.761595][T24738] netlink: 'syz.2.6031': attribute type 29 has an invalid length. [ 1103.772946][T24739] netlink: 'syz.0.6032': attribute type 29 has an invalid length. [ 1103.787778][T24739] netlink: 'syz.0.6032': attribute type 29 has an invalid length. [ 1103.800246][T24740] netlink: 'syz.2.6031': attribute type 29 has an invalid length. [ 1103.824224][T24738] netlink: 'syz.2.6031': attribute type 29 has an invalid length. [ 1103.841942][T24741] netlink: 'syz.0.6032': attribute type 29 has an invalid length. [ 1103.877790][T24739] netlink: 'syz.0.6032': attribute type 29 has an invalid length. [ 1104.278252][T24749] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6036'. [ 1104.726463][T24764] FAULT_INJECTION: forcing a failure. [ 1104.726463][T24764] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.752401][T24764] CPU: 1 PID: 24764 Comm: syz.2.6043 Not tainted syzkaller #0 [ 1104.759963][T24764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1104.770070][T24764] Call Trace: [ 1104.773415][T24764] [ 1104.776393][T24764] dump_stack_lvl+0x18c/0x250 [ 1104.781138][T24764] ? show_regs_print_info+0x20/0x20 [ 1104.786398][T24764] ? load_image+0x400/0x400 [ 1104.790965][T24764] ? __might_sleep+0xe0/0xe0 [ 1104.795614][T24764] ? __lock_acquire+0x7d40/0x7d40 [ 1104.800689][T24764] ? lockdep_hardirqs_on+0x98/0x150 [ 1104.805951][T24764] should_fail_ex+0x39d/0x4d0 [ 1104.810695][T24764] should_failslab+0x9/0x20 [ 1104.815279][T24764] slab_pre_alloc_hook+0x59/0x310 [ 1104.820372][T24764] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1104.825967][T24764] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1104.831563][T24764] __kmem_cache_alloc_node+0x53/0x250 [ 1104.836987][T24764] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1104.842572][T24764] __kmalloc+0xa4/0x230 [ 1104.846784][T24764] bpf_prog_test_run_skb+0x238/0x12b0 [ 1104.852187][T24764] ? __fget_files+0x28/0x4b0 [ 1104.856823][T24764] ? __fget_files+0x28/0x4b0 [ 1104.861475][T24764] ? __fget_files+0x43d/0x4b0 [ 1104.866217][T24764] ? cpu_online+0x60/0x60 [ 1104.870643][T24764] bpf_prog_test_run+0x321/0x390 [ 1104.875621][T24764] __sys_bpf+0x49d/0x890 [ 1104.879897][T24764] ? bpf_link_show_fdinfo+0x390/0x390 [ 1104.885318][T24764] ? lock_chain_count+0x20/0x20 [ 1104.890193][T24764] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1104.896223][T24764] __x64_sys_bpf+0x7c/0x90 [ 1104.900674][T24764] do_syscall_64+0x55/0xa0 [ 1104.905127][T24764] ? clear_bhb_loop+0x40/0x90 [ 1104.909837][T24764] ? clear_bhb_loop+0x40/0x90 [ 1104.914567][T24764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1104.920526][T24764] RIP: 0033:0x7f439139aeb9 [ 1104.924984][T24764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.944680][T24764] RSP: 002b:00007f43921e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1104.953144][T24764] RAX: ffffffffffffffda RBX: 00007f4391615fa0 RCX: 00007f439139aeb9 [ 1104.961148][T24764] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1104.969166][T24764] RBP: 00007f43921e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.977186][T24764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.985224][T24764] R13: 00007f4391616038 R14: 00007f4391615fa0 R15: 00007ffed96d6598 [ 1104.993241][T24764] [ 1109.043239][T24805] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6058'. [ 1111.035400][T24837] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6072'. [ 1111.163045][T24843] FAULT_INJECTION: forcing a failure. [ 1111.163045][T24843] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.179209][T24843] CPU: 0 PID: 24843 Comm: syz.1.6073 Not tainted syzkaller #0 [ 1111.186781][T24843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1111.196937][T24843] Call Trace: [ 1111.200285][T24843] [ 1111.203289][T24843] dump_stack_lvl+0x18c/0x250 [ 1111.208081][T24843] ? show_regs_print_info+0x20/0x20 [ 1111.213369][T24843] ? load_image+0x400/0x400 [ 1111.217978][T24843] ? __might_sleep+0xe0/0xe0 [ 1111.222714][T24843] ? __lock_acquire+0x7d40/0x7d40 [ 1111.227846][T24843] should_fail_ex+0x39d/0x4d0 [ 1111.232637][T24843] should_failslab+0x9/0x20 [ 1111.237218][T24843] slab_pre_alloc_hook+0x59/0x310 [ 1111.242335][T24843] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1111.248148][T24843] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1111.253939][T24843] __kmem_cache_alloc_node+0x53/0x250 [ 1111.259447][T24843] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1111.265235][T24843] __kmalloc+0xa4/0x230 [ 1111.269489][T24843] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1111.275175][T24843] tomoyo_path_number_perm+0x248/0x620 [ 1111.280730][T24843] ? tomoyo_path_number_perm+0x217/0x620 [ 1111.286455][T24843] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1111.292017][T24843] ? ksys_write+0x1c4/0x260 [ 1111.296770][T24843] ? __fget_files+0x28/0x4b0 [ 1111.301441][T24843] ? __fget_files+0x28/0x4b0 [ 1111.306193][T24843] security_file_ioctl+0x70/0xa0 [ 1111.311241][T24843] __se_sys_ioctl+0x48/0x170 [ 1111.315954][T24843] do_syscall_64+0x55/0xa0 [ 1111.320452][T24843] ? clear_bhb_loop+0x40/0x90 [ 1111.325208][T24843] ? clear_bhb_loop+0x40/0x90 [ 1111.329971][T24843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1111.335944][T24843] RIP: 0033:0x7f30cf59aeb9 [ 1111.340440][T24843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.360126][T24843] RSP: 002b:00007f30d046e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.368631][T24843] RAX: ffffffffffffffda RBX: 00007f30cf816180 RCX: 00007f30cf59aeb9 [ 1111.376674][T24843] RDX: 0000200000000000 RSI: 0000000000008b04 RDI: 0000000000000008 [ 1111.384722][T24843] RBP: 00007f30d046e090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.392768][T24843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.400815][T24843] R13: 00007f30cf816218 R14: 00007f30cf816180 R15: 00007fff8f4a09d8 [ 1111.408942][T24843] [ 1111.434636][T24843] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1112.042460][T24857] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.6078'. [ 1112.980853][T24877] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6089'. [ 1114.595270][T24905] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6101'. [ 1114.608299][T24905] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6101'. [ 1114.657262][T24905] netlink: 'syz.0.6101': attribute type 29 has an invalid length. [ 1114.690856][T24905] netlink: 'syz.0.6101': attribute type 29 has an invalid length. [ 1114.715015][T24907] netlink: 'syz.0.6101': attribute type 29 has an invalid length. [ 1114.740713][T24905] netlink: 'syz.0.6101': attribute type 29 has an invalid length. [ 1115.711319][T24926] FAULT_INJECTION: forcing a failure. [ 1115.711319][T24926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1115.744653][T24926] CPU: 0 PID: 24926 Comm: syz.0.6109 Not tainted syzkaller #0 [ 1115.752242][T24926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1115.762388][T24926] Call Trace: [ 1115.765758][T24926] [ 1115.768763][T24926] dump_stack_lvl+0x18c/0x250 [ 1115.773541][T24926] ? show_regs_print_info+0x20/0x20 [ 1115.778849][T24926] ? load_image+0x400/0x400 [ 1115.783488][T24926] ? __might_fault+0xaa/0x120 [ 1115.788278][T24926] ? __lock_acquire+0x7d40/0x7d40 [ 1115.793401][T24926] should_fail_ex+0x39d/0x4d0 [ 1115.798188][T24926] _copy_from_user+0x2f/0xe0 [ 1115.802960][T24926] __sys_bpf+0x23e/0x890 [ 1115.807301][T24926] ? bpf_link_show_fdinfo+0x390/0x390 [ 1115.812811][T24926] ? lock_chain_count+0x20/0x20 [ 1115.817779][T24926] __x64_sys_bpf+0x7c/0x90 [ 1115.822283][T24926] do_syscall_64+0x55/0xa0 [ 1115.826793][T24926] ? clear_bhb_loop+0x40/0x90 [ 1115.831547][T24926] ? clear_bhb_loop+0x40/0x90 [ 1115.836308][T24926] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1115.842288][T24926] RIP: 0033:0x7fb97339aeb9 [ 1115.846784][T24926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.866482][T24926] RSP: 002b:00007fb974247028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1115.874991][T24926] RAX: ffffffffffffffda RBX: 00007fb973615fa0 RCX: 00007fb97339aeb9 [ 1115.883054][T24926] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1115.891214][T24926] RBP: 00007fb974247090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.899276][T24926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.907330][T24926] R13: 00007fb973616038 R14: 00007fb973615fa0 R15: 00007ffc2a3f8dd8 [ 1115.915441][T24926] [ 1116.289683][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.296166][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.339631][T24936] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6112'. [ 1116.373053][T24936] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6112'. [ 1116.468571][T24936] netlink: 'syz.2.6112': attribute type 29 has an invalid length. [ 1116.512886][T24936] netlink: 'syz.2.6112': attribute type 29 has an invalid length. [ 1116.556453][T24932] netlink: 'syz.2.6112': attribute type 29 has an invalid length. [ 1116.577575][T24939] netlink: 'syz.2.6112': attribute type 29 has an invalid length. [ 1116.977247][T24954] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6120'. [ 1118.115184][T24960] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6121'. [ 1120.273981][T24975] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6127'. [ 1120.298842][T24975] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6127'. [ 1120.373842][T24975] netlink: 'syz.1.6127': attribute type 29 has an invalid length. [ 1120.403640][T24975] netlink: 'syz.1.6127': attribute type 29 has an invalid length. [ 1120.435037][T24982] netlink: 'syz.1.6127': attribute type 29 has an invalid length. [ 1120.473317][T24975] netlink: 'syz.1.6127': attribute type 29 has an invalid length. [ 1121.712925][T24996] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6135'. [ 1121.969527][T25007] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6140'. [ 1121.992611][T25007] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6140'. [ 1122.084051][T25007] netlink: 'syz.0.6140': attribute type 29 has an invalid length. [ 1122.093199][T25007] netlink: 'syz.0.6140': attribute type 29 has an invalid length. [ 1122.113424][T25008] netlink: 'syz.0.6140': attribute type 29 has an invalid length. [ 1122.137384][T25007] netlink: 'syz.0.6140': attribute type 29 has an invalid length. [ 1123.048602][T25035] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6151'. [ 1123.076770][T25035] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6151'. [ 1123.107043][T25035] netlink: 'syz.1.6151': attribute type 29 has an invalid length. [ 1123.123246][T25035] netlink: 'syz.1.6151': attribute type 29 has an invalid length. [ 1124.371684][T25063] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6160'. [ 1125.253539][T25081] netlink: 371 bytes leftover after parsing attributes in process `syz.1.6165'. [ 1125.817804][T25096] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6172'. [ 1127.043392][T25116] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1127.066063][T25116] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1127.104081][T25116] validate_nla: 3 callbacks suppressed [ 1127.104123][T25116] netlink: 'syz.0.6179': attribute type 29 has an invalid length. [ 1127.121133][T25116] netlink: 'syz.0.6179': attribute type 29 has an invalid length. [ 1127.133775][T25116] netlink: 'syz.0.6179': attribute type 29 has an invalid length. [ 1127.154766][T25116] netlink: 'syz.0.6179': attribute type 29 has an invalid length. [ 1127.271055][T25124] FAULT_INJECTION: forcing a failure. [ 1127.271055][T25124] name failslab, interval 1, probability 0, space 0, times 0 [ 1127.298847][T25124] CPU: 1 PID: 25124 Comm: syz.2.6183 Not tainted syzkaller #0 [ 1127.306435][T25124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1127.316585][T25124] Call Trace: [ 1127.319957][T25124] [ 1127.322967][T25124] dump_stack_lvl+0x18c/0x250 [ 1127.327760][T25124] ? show_regs_print_info+0x20/0x20 [ 1127.333052][T25124] ? load_image+0x400/0x400 [ 1127.337652][T25124] ? __might_sleep+0xe0/0xe0 [ 1127.342329][T25124] ? __lock_acquire+0x7d40/0x7d40 [ 1127.347443][T25124] ? prepend_path+0x4b/0x960 [ 1127.352125][T25124] should_fail_ex+0x39d/0x4d0 [ 1127.356921][T25124] should_failslab+0x9/0x20 [ 1127.361520][T25124] slab_pre_alloc_hook+0x59/0x310 [ 1127.366645][T25124] ? __asan_memcpy+0x40/0x70 [ 1127.371322][T25124] ? tomoyo_encode+0x28b/0x540 [ 1127.376196][T25124] ? tomoyo_encode+0x28b/0x540 [ 1127.381054][T25124] __kmem_cache_alloc_node+0x53/0x250 [ 1127.386519][T25124] ? prepend_path+0x4b/0x960 [ 1127.391200][T25124] ? tomoyo_encode+0x28b/0x540 [ 1127.396071][T25124] __kmalloc+0xa4/0x230 [ 1127.400347][T25124] tomoyo_encode+0x28b/0x540 [ 1127.405059][T25124] tomoyo_realpath_from_path+0x592/0x5d0 [ 1127.410832][T25124] tomoyo_check_open_permission+0x224/0x460 [ 1127.416823][T25124] ? tomoyo_check_open_permission+0x1cf/0x460 [ 1127.422990][T25124] ? tomoyo_check_path_number_acl+0x280/0x280 [ 1127.429205][T25124] ? __asan_memset+0x22/0x40 [ 1127.433973][T25124] ? __rwlock_init+0x150/0x150 [ 1127.438841][T25124] ? tomoyo_file_open+0xed/0x180 [ 1127.443872][T25124] security_file_open+0x62/0xa0 [ 1127.448820][T25124] do_dentry_open+0x380/0x1500 [ 1127.453733][T25124] path_openat+0x27f1/0x3230 [ 1127.458532][T25124] ? do_filp_open+0x430/0x430 [ 1127.463326][T25124] ? trace_event_raw_event_lock+0x250/0x250 [ 1127.469347][T25124] do_filp_open+0x1f5/0x430 [ 1127.473937][T25124] ? alloc_fd+0x58f/0x630 [ 1127.478379][T25124] ? vfs_tmpfile+0x490/0x490 [ 1127.483150][T25124] ? _raw_spin_unlock+0x28/0x40 [ 1127.488084][T25124] ? alloc_fd+0x58f/0x630 [ 1127.492547][T25124] do_sys_openat2+0x134/0x1d0 [ 1127.497321][T25124] ? do_sys_open+0xe0/0xe0 [ 1127.501825][T25124] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1127.507906][T25124] ? lock_chain_count+0x20/0x20 [ 1127.512865][T25124] __x64_sys_openat+0x139/0x160 [ 1127.517843][T25124] do_syscall_64+0x55/0xa0 [ 1127.522484][T25124] ? clear_bhb_loop+0x40/0x90 [ 1127.527271][T25124] ? clear_bhb_loop+0x40/0x90 [ 1127.532041][T25124] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1127.538015][T25124] RIP: 0033:0x7f439139aeb9 [ 1127.542540][T25124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.562242][T25124] RSP: 002b:00007f43921e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1127.570757][T25124] RAX: ffffffffffffffda RBX: 00007f4391615fa0 RCX: 00007f439139aeb9 [ 1127.578808][T25124] RDX: 000000000000275a RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1127.586864][T25124] RBP: 00007f43921e9090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.594981][T25124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.603055][T25124] R13: 00007f4391616038 R14: 00007f4391615fa0 R15: 00007ffed96d6598 [ 1127.611178][T25124] [ 1127.651514][T25124] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1128.587360][T25150] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6190'. [ 1128.593513][T25145] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6190'. [ 1128.609621][T25150] netlink: 'syz.0.6190': attribute type 29 has an invalid length. [ 1128.624739][T25150] netlink: 'syz.0.6190': attribute type 29 has an invalid length. [ 1128.652877][T25145] netlink: 'syz.0.6190': attribute type 29 has an invalid length. [ 1128.703255][T25145] netlink: 'syz.0.6190': attribute type 29 has an invalid length. [ 1129.062069][T25163] netlink: 'syz.2.6195': attribute type 10 has an invalid length. [ 1129.953584][T25184] netlink: 'syz.3.6204': attribute type 21 has an invalid length. [ 1129.971868][T25184] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6204'. [ 1130.014841][T25184] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6204'. [ 1130.763821][T25194] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.6210'. [ 1130.838388][T25194] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6210'. [ 1131.003611][T25218] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.6216'. [ 1131.016694][T25218] openvswitch: netlink: Flow key attr not present in new flow. [ 1131.097859][T25220] sctp: [Deprecated]: syz.0.6217 (pid 25220) Use of int in maxseg socket option. [ 1131.097859][T25220] Use struct sctp_assoc_value instead [ 1131.214011][T25220] FAULT_INJECTION: forcing a failure. [ 1131.214011][T25220] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.244058][T25220] CPU: 1 PID: 25220 Comm: syz.0.6217 Not tainted syzkaller #0 [ 1131.251640][T25220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1131.261760][T25220] Call Trace: [ 1131.265092][T25220] [ 1131.268097][T25220] dump_stack_lvl+0x18c/0x250 [ 1131.272833][T25220] ? show_regs_print_info+0x20/0x20 [ 1131.278105][T25220] ? load_image+0x400/0x400 [ 1131.282643][T25220] ? __might_sleep+0xe0/0xe0 [ 1131.287302][T25220] should_fail_ex+0x39d/0x4d0 [ 1131.292051][T25220] should_failslab+0x9/0x20 [ 1131.296609][T25220] slab_pre_alloc_hook+0x59/0x310 [ 1131.301713][T25220] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1131.307911][T25220] kmem_cache_alloc_node+0x60/0x320 [ 1131.313172][T25220] ? __alloc_skb+0x103/0x2c0 [ 1131.317806][T25220] __alloc_skb+0x103/0x2c0 [ 1131.322269][T25220] netlink_sendmsg+0x66a/0xbf0 [ 1131.327070][T25220] ? lockdep_hardirqs_on+0x98/0x150 [ 1131.332305][T25220] ? netlink_getsockopt+0x590/0x590 [ 1131.337546][T25220] ? security_socket_sendmsg+0x37/0xa0 [ 1131.343037][T25220] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1131.348360][T25220] ? security_socket_sendmsg+0x80/0xa0 [ 1131.353858][T25220] ? netlink_getsockopt+0x590/0x590 [ 1131.359091][T25220] ____sys_sendmsg+0x5ba/0x960 [ 1131.363927][T25220] ? __asan_memset+0x22/0x40 [ 1131.368560][T25220] ? __sys_sendmsg_sock+0x30/0x30 [ 1131.373704][T25220] ? __import_iovec+0x5f2/0x850 [ 1131.378603][T25220] ? import_iovec+0x73/0xa0 [ 1131.383151][T25220] ___sys_sendmsg+0x2a6/0x360 [ 1131.387874][T25220] ? __sys_sendmsg+0x2a0/0x2a0 [ 1131.392716][T25220] __se_sys_sendmsg+0x1c2/0x2b0 [ 1131.397607][T25220] ? __x64_sys_sendmsg+0x80/0x80 [ 1131.402607][T25220] do_syscall_64+0x55/0xa0 [ 1131.407069][T25220] ? clear_bhb_loop+0x40/0x90 [ 1131.411773][T25220] ? clear_bhb_loop+0x40/0x90 [ 1131.416484][T25220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1131.422402][T25220] RIP: 0033:0x7fb97339aeb9 [ 1131.426858][T25220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.446519][T25220] RSP: 002b:00007fb974247028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1131.454993][T25220] RAX: ffffffffffffffda RBX: 00007fb973615fa0 RCX: 00007fb97339aeb9 [ 1131.463058][T25220] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1131.471078][T25220] RBP: 00007fb974247090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.479082][T25220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.487108][T25220] R13: 00007fb973616038 R14: 00007fb973615fa0 R15: 00007ffc2a3f8dd8 [ 1131.495129][T25220] [ 1131.555942][T25218] dummy0: entered promiscuous mode [ 1131.578357][T25218] dummy0: entered allmulticast mode [ 1131.597833][T25218] team0: Port device dummy0 added [ 1131.651706][T25226] dummy0: left promiscuous mode [ 1131.665012][T25226] dummy0: left allmulticast mode [ 1131.690020][T25231] sctp: [Deprecated]: syz.0.6220 (pid 25231) Use of int in maxseg socket option. [ 1131.690020][T25231] Use struct sctp_assoc_value instead [ 1131.768826][T25226] team0: Port device dummy0 removed [ 1131.861654][T25231] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6220'. [ 1132.137660][T25240] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6224'. [ 1132.177826][T25240] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6224'. [ 1132.277737][T25240] validate_nla: 5 callbacks suppressed [ 1132.277790][T25240] netlink: 'syz.1.6224': attribute type 29 has an invalid length. [ 1132.364018][T25248] sctp: [Deprecated]: syz.0.6227 (pid 25248) Use of int in maxseg socket option. [ 1132.364018][T25248] Use struct sctp_assoc_value instead [ 1132.399926][T25240] netlink: 'syz.1.6224': attribute type 29 has an invalid length. [ 1132.446086][T25249] netlink: 'syz.1.6224': attribute type 29 has an invalid length. [ 1132.454577][T25248] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6227'. [ 1132.504683][T25243] netlink: 'syz.1.6224': attribute type 29 has an invalid length. [ 1133.040002][T25265] FAULT_INJECTION: forcing a failure. [ 1133.040002][T25265] name failslab, interval 1, probability 0, space 0, times 0 [ 1133.061262][T25265] CPU: 1 PID: 25265 Comm: syz.1.6241 Not tainted syzkaller #0 [ 1133.068844][T25265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1133.078963][T25265] Call Trace: [ 1133.082293][T25265] [ 1133.085270][T25265] dump_stack_lvl+0x18c/0x250 [ 1133.090021][T25265] ? show_regs_print_info+0x20/0x20 [ 1133.090303][T25264] netlink: 'syz.3.6233': attribute type 10 has an invalid length. [ 1133.095254][T25265] ? load_image+0x400/0x400 [ 1133.095285][T25265] ? __might_sleep+0xe0/0xe0 [ 1133.095309][T25265] ? __lock_acquire+0x7d40/0x7d40 [ 1133.095338][T25265] should_fail_ex+0x39d/0x4d0 [ 1133.095373][T25265] should_failslab+0x9/0x20 [ 1133.104115][T25264] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.6233'. [ 1133.107704][T25265] slab_pre_alloc_hook+0x59/0x310 [ 1133.107755][T25265] ? __lock_acquire+0x7d40/0x7d40 [ 1133.107784][T25265] kmem_cache_alloc_node+0x60/0x320 [ 1133.107813][T25265] ? __alloc_skb+0x103/0x2c0 [ 1133.107849][T25265] __alloc_skb+0x103/0x2c0 [ 1133.107890][T25265] netlink_sendmsg+0x66a/0xbf0 [ 1133.107927][T25265] ? netlink_getsockopt+0x590/0x590 [ 1133.107960][T25265] ? aa_sock_msg_perm+0x94/0x150 [ 1133.120420][T25264] openvswitch: netlink: Flow key attr not present in new flow. [ 1133.122283][T25265] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1133.122318][T25265] ? security_socket_sendmsg+0x80/0xa0 [ 1133.193809][T25265] ? netlink_getsockopt+0x590/0x590 [ 1133.199069][T25265] ____sys_sendmsg+0x5ba/0x960 [ 1133.203885][T25265] ? __asan_memset+0x22/0x40 [ 1133.208527][T25265] ? __sys_sendmsg_sock+0x30/0x30 [ 1133.213585][T25265] ? __import_iovec+0x3fa/0x850 [ 1133.218481][T25265] ? import_iovec+0x73/0xa0 [ 1133.223031][T25265] ___sys_sendmsg+0x2a6/0x360 [ 1133.227766][T25265] ? get_pid_task+0x20/0x1e0 [ 1133.232394][T25265] ? __sys_sendmsg+0x2a0/0x2a0 [ 1133.237208][T25265] ? __lock_acquire+0x7d40/0x7d40 [ 1133.242289][T25265] __se_sys_sendmsg+0x1c2/0x2b0 [ 1133.247189][T25265] ? __x64_sys_sendmsg+0x80/0x80 [ 1133.252181][T25265] ? lockdep_hardirqs_on+0x98/0x150 [ 1133.257414][T25265] do_syscall_64+0x55/0xa0 [ 1133.261872][T25265] ? clear_bhb_loop+0x40/0x90 [ 1133.266585][T25265] ? clear_bhb_loop+0x40/0x90 [ 1133.271304][T25265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1133.277226][T25265] RIP: 0033:0x7f30cf59aeb9 [ 1133.281696][T25265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.301347][T25265] RSP: 002b:00007f30d04b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1133.309799][T25265] RAX: ffffffffffffffda RBX: 00007f30cf815fa0 RCX: 00007f30cf59aeb9 [ 1133.317808][T25265] RDX: 0000000004000010 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1133.325831][T25265] RBP: 00007f30d04b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1133.333848][T25265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.341857][T25265] R13: 00007f30cf816038 R14: 00007f30cf815fa0 R15: 00007fff8f4a09d8 [ 1133.349875][T25265] [ 1133.567252][T25278] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6237'. [ 1133.603977][T25278] team_slave_0: left promiscuous mode [ 1133.623201][T25278] team_slave_0: left allmulticast mode [ 1133.870900][T25278] team0: Port device team_slave_0 removed [ 1133.891412][T25278] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1133.910185][T25264] netlink: 'syz.3.6233': attribute type 10 has an invalid length. [ 1133.953356][T25264] team0: Port device dummy0 added [ 1133.993005][T25271] netlink: 'syz.3.6233': attribute type 10 has an invalid length. [ 1134.029749][T25271] team0: Port device dummy0 removed [ 1134.124165][T25282] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6238'. [ 1134.206980][T25285] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6240'. [ 1134.265766][T25285] netlink: 'syz.0.6240': attribute type 29 has an invalid length. [ 1134.276391][T25285] netlink: 'syz.0.6240': attribute type 29 has an invalid length. [ 1134.293148][T25285] netlink: 'syz.0.6240': attribute type 29 has an invalid length. [ 1135.029509][T25308] openvswitch: netlink: Flow key attr not present in new flow. [ 1135.123445][T25308] team0: Port device dummy0 added [ 1135.177152][T25310] team0: Port device dummy0 removed [ 1136.896939][T25353] __nla_validate_parse: 4 callbacks suppressed [ 1136.896962][T25353] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1137.141860][T25353] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6263'. [ 1137.244546][T25365] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6269'. [ 1137.316949][T25369] validate_nla: 10 callbacks suppressed [ 1137.316977][T25369] netlink: 'syz.3.6270': attribute type 4 has an invalid length. [ 1137.354968][T25369] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6270'. [ 1138.523549][T25396] FAULT_INJECTION: forcing a failure. [ 1138.523549][T25396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.575817][T25396] CPU: 1 PID: 25396 Comm: syz.1.6278 Not tainted syzkaller #0 [ 1138.583389][T25396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1138.593512][T25396] Call Trace: [ 1138.596843][T25396] [ 1138.599815][T25396] dump_stack_lvl+0x18c/0x250 [ 1138.604554][T25396] ? show_regs_print_info+0x20/0x20 [ 1138.609813][T25396] ? load_image+0x400/0x400 [ 1138.614409][T25396] ? __might_fault+0xaa/0x120 [ 1138.619139][T25396] ? __lock_acquire+0x7d40/0x7d40 [ 1138.624243][T25396] should_fail_ex+0x39d/0x4d0 [ 1138.628982][T25396] _copy_from_user+0x2f/0xe0 [ 1138.633626][T25396] ___sys_sendmsg+0x1c7/0x360 [ 1138.638377][T25396] ? get_pid_task+0x20/0x1e0 [ 1138.643034][T25396] ? __sys_sendmsg+0x2a0/0x2a0 [ 1138.647880][T25396] ? __lock_acquire+0x7d40/0x7d40 [ 1138.652984][T25396] __se_sys_sendmsg+0x1c2/0x2b0 [ 1138.657903][T25396] ? __x64_sys_sendmsg+0x80/0x80 [ 1138.662926][T25396] ? lockdep_hardirqs_on+0x98/0x150 [ 1138.668176][T25396] do_syscall_64+0x55/0xa0 [ 1138.672631][T25396] ? clear_bhb_loop+0x40/0x90 [ 1138.677347][T25396] ? clear_bhb_loop+0x40/0x90 [ 1138.682068][T25396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1138.687993][T25396] RIP: 0033:0x7f30cf59aeb9 [ 1138.692440][T25396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.712107][T25396] RSP: 002b:00007f30d04b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1138.720559][T25396] RAX: ffffffffffffffda RBX: 00007f30cf815fa0 RCX: 00007f30cf59aeb9 [ 1138.728560][T25396] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000003 [ 1138.736560][T25396] RBP: 00007f30d04b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.744560][T25396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.752573][T25396] R13: 00007f30cf816038 R14: 00007f30cf815fa0 R15: 00007fff8f4a09d8 [ 1138.760595][T25396] [ 1139.077809][T25411] netlink: 'syz.0.6281': attribute type 12 has an invalid length. [ 1139.097961][T25411] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.6281'. [ 1139.249608][T25411] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6281'. [ 1141.675725][T25441] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6294'. [ 1141.692267][T25441] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6294'. [ 1141.743736][T25441] netlink: 'syz.2.6294': attribute type 29 has an invalid length. [ 1141.765950][T25441] netlink: 'syz.2.6294': attribute type 29 has an invalid length. [ 1141.787650][T25448] netlink: 'syz.2.6294': attribute type 29 has an invalid length. [ 1141.810272][T25441] netlink: 'syz.2.6294': attribute type 29 has an invalid length. [ 1142.249907][T25460] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6302'. [ 1142.518649][T25474] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6307'. [ 1142.581154][T25476] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6308'. [ 1142.596313][T25476] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6308'. [ 1142.660535][T25476] netlink: 'syz.0.6308': attribute type 29 has an invalid length. [ 1142.676421][T25476] netlink: 'syz.0.6308': attribute type 29 has an invalid length. [ 1142.690581][T25480] netlink: 'syz.0.6308': attribute type 29 has an invalid length. [ 1142.708105][T25476] netlink: 'syz.0.6308': attribute type 29 has an invalid length. [ 1143.010232][T25493] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6313'. [ 1143.056555][T25487] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6313'. [ 1143.766187][T25510] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6322'. [ 1143.790182][T25510] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6322'. [ 1143.853250][T25510] netlink: 'syz.1.6322': attribute type 29 has an invalid length. [ 1143.890391][T25510] netlink: 'syz.1.6322': attribute type 29 has an invalid length. [ 1143.908591][T25512] netlink: 'syz.1.6322': attribute type 29 has an invalid length. [ 1143.945381][T25510] netlink: 'syz.1.6322': attribute type 29 has an invalid length. [ 1144.407795][T25523] FAULT_INJECTION: forcing a failure. [ 1144.407795][T25523] name failslab, interval 1, probability 0, space 0, times 0 [ 1144.440229][T25523] CPU: 0 PID: 25523 Comm: syz.3.6329 Not tainted syzkaller #0 [ 1144.447791][T25523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1144.457911][T25523] Call Trace: [ 1144.461233][T25523] [ 1144.464209][T25523] dump_stack_lvl+0x18c/0x250 [ 1144.468955][T25523] ? show_regs_print_info+0x20/0x20 [ 1144.474211][T25523] ? load_image+0x400/0x400 [ 1144.478770][T25523] ? __might_sleep+0xe0/0xe0 [ 1144.483457][T25523] ? __lock_acquire+0x7d40/0x7d40 [ 1144.488558][T25523] ? percpu_counter_add_batch+0x1f1/0x2a0 [ 1144.494355][T25523] ? lockdep_hardirqs_on+0x98/0x150 [ 1144.499622][T25523] should_fail_ex+0x39d/0x4d0 [ 1144.504363][T25523] should_failslab+0x9/0x20 [ 1144.508926][T25523] slab_pre_alloc_hook+0x59/0x310 [ 1144.514024][T25523] kmem_cache_alloc_lru+0x4d/0x2d0 [ 1144.519210][T25523] ? __d_alloc+0x31/0x730 [ 1144.523621][T25523] __d_alloc+0x31/0x730 [ 1144.527869][T25523] ? alloc_file+0x4ab/0x600 [ 1144.532436][T25523] d_alloc_pseudo+0x1d/0x70 [ 1144.537189][T25523] alloc_file_pseudo+0xe4/0x210 [ 1144.542112][T25523] ? alloc_empty_backing_file+0xe0/0xe0 [ 1144.547725][T25523] ? init_peercred+0x263/0x2c0 [ 1144.552562][T25523] sock_alloc_file+0xb7/0x280 [ 1144.557307][T25523] __sys_socketpair+0x376/0x550 [ 1144.562265][T25523] __x64_sys_socketpair+0x9b/0xb0 [ 1144.567350][T25523] do_syscall_64+0x55/0xa0 [ 1144.571827][T25523] ? clear_bhb_loop+0x40/0x90 [ 1144.576589][T25523] ? clear_bhb_loop+0x40/0x90 [ 1144.581322][T25523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1144.587262][T25523] RIP: 0033:0x7f8f6919aeb9 [ 1144.591729][T25523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.611404][T25523] RSP: 002b:00007f8f6a0df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1144.619851][T25523] RAX: ffffffffffffffda RBX: 00007f8f69415fa0 RCX: 00007f8f6919aeb9 [ 1144.627846][T25523] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 1144.635863][T25523] RBP: 00007f8f6a0df090 R08: 0000000000000000 R09: 0000000000000000 [ 1144.643863][T25523] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000002 [ 1144.651878][T25523] R13: 00007f8f69416038 R14: 00007f8f69415fa0 R15: 00007ffd60e118e8 [ 1144.659897][T25523] [ 1148.921228][T25542] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6335'. [ 1149.608160][T25559] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.6341'. [ 1149.627847][T25559] netlink: del zone limit has 8 unknown bytes [ 1149.747515][T25566] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6344'. [ 1149.837170][T25569] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6346'. [ 1149.872684][T25569] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6346'. [ 1149.944348][T25569] netlink: 'syz.0.6346': attribute type 29 has an invalid length. [ 1149.969113][T25569] netlink: 'syz.0.6346': attribute type 29 has an invalid length. [ 1150.000633][T25574] netlink: 'syz.0.6346': attribute type 29 has an invalid length. [ 1150.067332][T25569] netlink: 'syz.0.6346': attribute type 29 has an invalid length. [ 1150.120808][T25579] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6350'. [ 1150.136397][T25578] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6350'. [ 1150.200795][T25581] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1150.257243][T25581] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6351'. [ 1150.316810][T25581] netlink: 'syz.2.6351': attribute type 29 has an invalid length. [ 1150.342543][T25581] netlink: 'syz.2.6351': attribute type 29 has an invalid length. [ 1150.357325][T25588] netlink: 'syz.2.6351': attribute type 29 has an invalid length. [ 1150.372629][T25581] netlink: 'syz.2.6351': attribute type 29 has an invalid length. [ 1150.668113][T25594] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6357'. [ 1150.786486][T25603] netlink: del zone limit has 8 unknown bytes [ 1150.964131][T25607] netlink: 'syz.3.6362': attribute type 29 has an invalid length. [ 1151.001574][T25607] netlink: 'syz.3.6362': attribute type 29 has an invalid length. [ 1151.180351][T25612] sit0: entered promiscuous mode [ 1151.188910][T25612] sit0: entered allmulticast mode [ 1153.333125][T25671] sit0: entered promiscuous mode [ 1153.346299][T25671] sit0: entered allmulticast mode [ 1154.592720][T25701] __nla_validate_parse: 13 callbacks suppressed [ 1154.592766][T25701] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6400'. [ 1154.641368][T25702] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6398'. [ 1154.654807][T25701] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6400'. [ 1154.695697][T25702] netlink: 196 bytes leftover after parsing attributes in process `syz.1.6398'. [ 1154.781322][T25704] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6402'. [ 1154.795043][T25704] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6402'. [ 1155.100517][T25712] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6412'. [ 1155.646094][T25735] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6415'. [ 1155.681469][T25735] netlink: 196 bytes leftover after parsing attributes in process `syz.0.6415'. [ 1155.728396][T25735] validate_nla: 28 callbacks suppressed [ 1155.728434][T25735] netlink: 'syz.0.6415': attribute type 29 has an invalid length. [ 1155.755241][T25735] netlink: 'syz.0.6415': attribute type 29 has an invalid length. [ 1155.771190][T25739] netlink: 'syz.0.6415': attribute type 29 has an invalid length. [ 1155.782035][T25735] netlink: 'syz.0.6415': attribute type 29 has an invalid length. [ 1155.864290][T25742] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.6418'. [ 1162.080072][T25807] __nla_validate_parse: 2 callbacks suppressed [ 1162.080111][T25807] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6445'. [ 1174.075981][T13087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1174.086368][T13087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1174.095478][T13087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1174.103934][T13087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1174.112458][T13087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1174.120309][T13087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1174.740217][T13087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1174.755469][T13087] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1174.763892][T13087] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1174.775530][T13087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1174.784580][T13087] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1174.792413][T13087] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1175.131415][ T5774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1175.144713][ T5774] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1175.153189][ T5774] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1175.163009][ T5774] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1175.171057][ T5774] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1175.183564][ T5774] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1175.610444][T25809] chnl_net:caif_netlink_parms(): no params data found [ 1175.798673][T25814] chnl_net:caif_netlink_parms(): no params data found [ 1176.112632][T25809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.128428][T25809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.136515][T25809] bridge_slave_0: entered allmulticast mode [ 1176.144088][T25809] bridge_slave_0: entered promiscuous mode [ 1176.211501][ T5774] Bluetooth: hci4: command tx timeout [ 1176.292450][T25809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.312150][T25809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.321980][T25809] bridge_slave_1: entered allmulticast mode [ 1176.336291][T25809] bridge_slave_1: entered promiscuous mode [ 1176.412663][T25816] chnl_net:caif_netlink_parms(): no params data found [ 1176.436774][T25814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.444054][T25814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.459687][T25814] bridge_slave_0: entered allmulticast mode [ 1176.467896][T25814] bridge_slave_0: entered promiscuous mode [ 1176.511349][T25809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.543666][T25814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1176.560694][T25814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.571195][T25814] bridge_slave_1: entered allmulticast mode [ 1176.585756][T25814] bridge_slave_1: entered promiscuous mode [ 1176.605577][T25809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.777402][T25809] team0: Port device team_slave_0 added [ 1176.797790][T25814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.818890][T25814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.844766][ T5774] Bluetooth: hci5: command tx timeout [ 1176.964014][T25809] team0: Port device team_slave_1 added [ 1177.156846][T25814] team0: Port device team_slave_0 added [ 1177.163902][T25809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1177.179465][T25809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.220011][T25809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1177.243564][T25809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.254581][ T5774] Bluetooth: hci6: command tx timeout [ 1177.270082][T25809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.304513][T25809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.355561][T25816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.362767][T25816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.414605][T25816] bridge_slave_0: entered allmulticast mode [ 1177.433467][T25816] bridge_slave_0: entered promiscuous mode [ 1177.445240][T25814] team0: Port device team_slave_1 added [ 1178.171802][T13087] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1178.184324][T13087] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1178.207101][T13087] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1178.223174][T13087] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1178.233373][T13087] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1178.250160][T13087] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1178.284666][T13087] Bluetooth: hci4: command tx timeout [ 1178.924605][T13087] Bluetooth: hci5: command tx timeout [ 1179.329724][T13087] Bluetooth: hci6: command tx timeout [ 1180.284944][T13087] Bluetooth: hci7: command tx timeout [ 1180.364657][T13087] Bluetooth: hci4: command tx timeout [ 1181.004668][T13087] Bluetooth: hci5: command tx timeout [ 1181.407073][T13087] Bluetooth: hci6: command tx timeout [ 1182.364688][T13087] Bluetooth: hci7: command tx timeout [ 1182.446548][T13087] Bluetooth: hci4: command tx timeout [ 1183.087047][T13087] Bluetooth: hci5: command tx timeout [ 1183.485617][T13087] Bluetooth: hci6: command tx timeout [ 1184.444604][T13087] Bluetooth: hci7: command tx timeout [ 1186.524650][T13087] Bluetooth: hci7: command tx timeout [ 1235.388252][T20899] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1235.398397][T20899] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1235.407508][T20899] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1235.416512][T20899] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1235.427618][T20899] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1235.442836][T20899] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1235.626834][T20899] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1235.637390][T20899] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1235.645885][T20899] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1235.654136][T20899] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1235.663791][T20899] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1235.671400][T20899] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1236.481310][T13087] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1236.495028][T13087] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1236.503327][T13087] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1236.512250][T13087] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1236.521673][T13087] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1236.530805][T13087] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1237.484881][T13087] Bluetooth: hci9: command tx timeout [ 1237.724751][T13087] Bluetooth: hci8: command tx timeout [ 1238.480398][T20899] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1238.496097][T20899] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1238.505386][T20899] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1238.526239][T20899] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1238.534344][T20899] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1238.542220][T20899] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1238.604852][T13087] Bluetooth: hci10: command tx timeout [ 1239.564595][T13087] Bluetooth: hci9: command tx timeout [ 1239.815546][T13087] Bluetooth: hci8: command tx timeout [ 1240.608124][T13087] Bluetooth: hci11: command tx timeout [ 1240.684826][T13087] Bluetooth: hci10: command tx timeout [ 1241.644594][T13087] Bluetooth: hci9: command tx timeout [ 1241.884653][T13087] Bluetooth: hci8: command tx timeout [ 1242.684611][T13087] Bluetooth: hci11: command tx timeout [ 1242.764611][T13087] Bluetooth: hci10: command tx timeout [ 1243.724612][T13087] Bluetooth: hci9: command tx timeout [ 1243.964735][T13087] Bluetooth: hci8: command tx timeout [ 1244.765803][T13087] Bluetooth: hci11: command tx timeout [ 1244.844678][T13087] Bluetooth: hci10: command tx timeout [ 1246.848567][T13087] Bluetooth: hci11: command tx timeout [ 1247.686042][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1247.693308][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1262.524432][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1262.531120][ C0] rcu: 0-....: (1 GPs behind) idle=872c/1/0x4000000000000000 softirq=109715/109716 fqs=5011 [ 1262.542664][ C0] rcu: hardirqs softirqs csw/system [ 1262.549115][ C0] rcu: number: 1220875 0 0 [ 1262.555543][ C0] rcu: cputime: 18674 33805 71 ==> 52500(ms) [ 1262.563378][ C0] rcu: (t=10502 jiffies g=151617 q=2315 ncpus=2) [ 1262.569872][ C0] CPU: 0 PID: 25797 Comm: syz.2.6442 Not tainted syzkaller #0 [ 1262.577360][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1262.587441][ C0] RIP: 0010:nf_nat_setup_info+0x1986/0x2790 [ 1262.593350][ C0] Code: fb 41 89 c5 e9 15 fb ff ff e8 56 19 c3 f8 eb 05 e8 4f 19 c3 f8 4c 8b 6c 24 08 48 8b 9c 24 70 02 00 00 4c 8b b4 24 78 02 00 00 <4c> 8b bc 24 20 02 00 00 4c 8b a4 24 28 02 00 00 48 89 df 4c 89 fe [ 1262.612969][ C0] RSP: 0018:ffffc900000069c0 EFLAGS: 00000246 [ 1262.619044][ C0] RAX: ffffc90000006c30 RBX: 00000000181414ac RCX: ffffffff88c3e956 [ 1262.627024][ C0] RDX: 0000000000000008 RSI: ffffc90000006be0 RDI: ffffc90000006c30 [ 1262.635031][ C0] RBP: ffffc90000006d30 R08: 00000000181414ac R09: 00000000181414ac [ 1262.643007][ C0] R10: 181414ac00027c9d R11: 0000000000000000 R12: ffff8880309b9e00 [ 1262.651006][ C0] R13: ffff8880309b9ec0 R14: 0000000000000000 R15: ffffc90000006dc0 [ 1262.658989][ C0] FS: 00007f43921e96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1262.667944][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1262.674555][ C0] CR2: 000000110c319cdb CR3: 0000000068de3000 CR4: 00000000003506f0 [ 1262.682538][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1262.690516][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1262.698501][ C0] Call Trace: [ 1262.701791][ C0] [ 1262.704657][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1262.710822][ C0] ? ipt_do_table+0x2c1/0x15e0 [ 1262.715632][ C0] ? nf_ct_nat_ext_add+0x190/0x190 [ 1262.720747][ C0] ? __local_bh_enable_ip+0x142/0x1c0 [ 1262.726130][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1262.730997][ C0] ? lock_chain_count+0x20/0x20 [ 1262.735868][ C0] ? ipt_do_table+0x13cc/0x15e0 [ 1262.740730][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1262.745952][ C0] ? ipt_do_table+0x2c1/0x15e0 [ 1262.750725][ C0] ? ipt_alloc_initial_table+0x610/0x610 [ 1262.756374][ C0] ? nf_nat_inet_fn+0x83e/0xbe0 [ 1262.761239][ C0] nf_nat_inet_fn+0x85d/0xbe0 [ 1262.765956][ C0] ? nf_nat_packet+0xf0/0xf0 [ 1262.770563][ C0] ? ipt_alloc_initial_table+0x610/0x610 [ 1262.776211][ C0] nf_nat_ipv4_out+0x18d/0x4d0 [ 1262.780994][ C0] ? nf_nat_ipv4_pre_routing+0x390/0x390 [ 1262.786643][ C0] nf_hook_slow+0xbd/0x200 [ 1262.791081][ C0] ? ip_mc_finish_output+0x250/0x250 [ 1262.796395][ C0] nf_hook+0x228/0x390 [ 1262.800564][ C0] ? nf_hook+0xa2/0x390 [ 1262.804775][ C0] ? __ip_local_out+0x5f0/0x5f0 [ 1262.809643][ C0] ? ip_mc_finish_output+0x250/0x250 [ 1262.814962][ C0] ? call_rcu+0x6da/0x950 [ 1262.819310][ C0] ip_output+0x26b/0x3b0 [ 1262.823564][ C0] ? ip_mc_finish_output+0x250/0x250 [ 1262.828884][ C0] ? ip_output+0x60/0x3b0 [ 1262.833230][ C0] iptunnel_xmit+0x4f0/0x920 [ 1262.837845][ C0] udp_tunnel_xmit_skb+0x249/0x390 [ 1262.842978][ C0] geneve_xmit+0x25d1/0x3430 [ 1262.847606][ C0] ? netdev_pick_tx+0xa97/0xc20 [ 1262.852468][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1262.857680][ C0] ? geneve_xmit+0x157/0x3430 [ 1262.862372][ C0] ? geneve_stop+0x1b0/0x1b0 [ 1262.866981][ C0] ? validate_xmit_xfrm+0xbc/0x12c0 [ 1262.872193][ C0] ? xfrm_init_replay+0x2a0/0x2a0 [ 1262.877311][ C0] ? passthru_features_check+0x20/0x20 [ 1262.882788][ C0] dev_hard_start_xmit+0x246/0x740 [ 1262.887922][ C0] __dev_queue_xmit+0x1ac2/0x36b0 [ 1262.892967][ C0] ? __dev_queue_xmit+0x26b/0x36b0 [ 1262.898097][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1262.903307][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1262.909478][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 1262.914790][ C0] ? neigh_resolve_output+0x4d6/0x730 [ 1262.920185][ C0] ? neigh_resolve_output+0x618/0x730 [ 1262.925602][ C0] ip6_finish_output2+0xe3d/0x1630 [ 1262.930729][ C0] ? ip6_finish_output2+0x645/0x1630 [ 1262.936031][ C0] ? ip6_mtu+0x7d/0x3f0 [ 1262.940221][ C0] ? nf_hook+0x390/0x390 [ 1262.944479][ C0] ? ip6_finish_output+0x57b/0x820 [ 1262.949602][ C0] ndisc_send_skb+0xc26/0x14f0 [ 1262.954376][ C0] ? ndisc_send_skb+0x1f5/0x14f0 [ 1262.959327][ C0] ? ndisc_mc_map+0x680/0x680 [ 1262.964025][ C0] ? skb_dst+0xd0/0xd0 [ 1262.968102][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1262.974273][ C0] ? ndisc_send_rs+0x43d/0x610 [ 1262.979060][ C0] addrconf_rs_timer+0x2d5/0x630 [ 1262.984021][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1262.990098][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1262.996093][ C0] call_timer_fn+0x189/0x540 [ 1263.000700][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1263.006782][ C0] ? call_timer_fn+0xd2/0x540 [ 1263.011490][ C0] ? __run_timers+0x800/0x800 [ 1263.016181][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 1263.022284][ C0] __run_timers+0x542/0x800 [ 1263.026803][ C0] ? detach_timer+0x2b0/0x2b0 [ 1263.031509][ C0] run_timer_softirq+0x67/0xf0 [ 1263.036281][ C0] handle_softirqs+0x280/0x820 [ 1263.041091][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1263.045890][ C0] ? do_softirq+0x1a0/0x1a0 [ 1263.050407][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1263.055621][ C0] __irq_exit_rcu+0xd3/0x190 [ 1263.060234][ C0] ? irq_exit_rcu+0x20/0x20 [ 1263.064767][ C0] irq_exit_rcu+0x9/0x20 [ 1263.069029][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1263.074683][ C0] [ 1263.077621][ C0] [ 1263.080580][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1263.086565][ C0] RIP: 0010:__schedule+0x150/0x45a0 [ 1263.091774][ C0] Code: 74 08 48 89 df e8 10 33 53 f7 48 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 f7 32 53 f7 48 81 3b 9d 6e ac 57 <0f> 85 7d 16 00 00 45 85 ff 44 89 7c 24 6c 75 4c 48 8b 44 24 30 48 [ 1263.111396][ C0] RSP: 0018:ffffc9000de7f7c0 EFLAGS: 00000246 [ 1263.117490][ C0] RAX: 1ffff92001bcf000 RBX: ffffc9000de78000 RCX: 0000000000000000 [ 1263.125467][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000de7f960 [ 1263.133443][ C0] RBP: ffffc9000de7f9d0 R08: ffffc9000de7f95f R09: 0000000000000000 [ 1263.141432][ C0] R10: ffffc9000de7f950 R11: fffff52001bcff2c R12: 1ffff92001bcff18 [ 1263.149462][ C0] R13: ffff8880b8e00000 R14: dffffc0000000000 R15: 0000000000000001 [ 1263.157464][ C0] ? mark_lock+0x94/0x320 [ 1263.161808][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1263.167804][ C0] ? lock_chain_count+0x20/0x20 [ 1263.172674][ C0] ? asan.module_dtor+0x20/0x20 [ 1263.177539][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1263.183706][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1263.188922][ C0] ? preempt_schedule+0xc0/0xd0 [ 1263.193790][ C0] preempt_schedule_common+0x82/0xc0 [ 1263.199089][ C0] preempt_schedule+0xc0/0xd0 [ 1263.203797][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1263.209455][ C0] ? event_function+0x300/0x300 [ 1263.214314][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 1263.220062][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1263.225275][ C0] ? smp_call_function_single+0x488/0x5a0 [ 1263.231004][ C0] smp_call_function_single+0x48d/0x5a0 [ 1263.236565][ C0] ? event_function+0x300/0x300 [ 1263.241464][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 1263.247626][ C0] ? event_function+0x300/0x300 [ 1263.252499][ C0] perf_install_in_context+0x5be/0x920 [ 1263.257985][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 1263.263989][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 1263.269211][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 1263.274423][ C0] ? perf_event__header_size+0x165/0x220 [ 1263.280072][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 1263.285805][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1263.291461][ C0] ? lock_chain_count+0x20/0x20 [ 1263.296343][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1263.302339][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1263.307549][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1263.313192][ C0] do_syscall_64+0x55/0xa0 [ 1263.317622][ C0] ? clear_bhb_loop+0x40/0x90 [ 1263.322305][ C0] ? clear_bhb_loop+0x40/0x90 [ 1263.326992][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1263.332891][ C0] RIP: 0033:0x7f439139aeb9 [ 1263.337317][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.356937][ C0] RSP: 002b:00007f43921e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1263.365366][ C0] RAX: ffffffffffffffda RBX: 00007f4391615fa0 RCX: 00007f439139aeb9 [ 1263.373345][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 1263.381330][ C0] RBP: 00007f4391408c1f R08: 0000000000000002 R09: 0000000000000000 [ 1263.389316][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1263.397296][ C0] R13: 00007f4391616038 R14: 00007f4391615fa0 R15: 00007ffed96d6598 [ 1263.405285][ C0]