last executing test programs: 24.428509574s ago: executing program 2 (id=1873): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x5, [@enum={0x3, 0x2, 0x0, 0xf, 0x4000000, [{0x1}, {0x2, 0x2}]}, @struct={0x2}]}, {0x0, [0x0, 0x0, 0x61]}}, &(0x7f0000002200)=""/4110, 0x45, 0x100e, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x10800, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x1) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r3, 0x29, 0x17, &(0x7f0000000100)=r4, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000dc0)={'macsec0\x00', @broadcast}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000005500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00f59d2089867b6308fab8fde1889f0000a2514d335d5921000800005c9b0baf28653c81000820"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) socket$kcm(0xa, 0x2, 0x73) 24.080749364s ago: executing program 3 (id=1876): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x3e8) 23.979615533s ago: executing program 0 (id=1877): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) 23.818346481s ago: executing program 3 (id=1878): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf000000}, 0x94) 23.527513331s ago: executing program 3 (id=1880): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x29c800, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0x7}, 0x50) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000001010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509f9ff060000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000180)) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b 5:'], 0x8) 22.609113316s ago: executing program 4 (id=1881): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0x66, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), &(0x7f0000000140), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000840)={&(0x7f0000000300)=@l2tp={0x2, 0x0, @remote, 0x3}, 0x80, &(0x7f00000007c0)}, 0x4c004) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x200) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000000000000000000200"/20, @ANYRES32=r0, @ANYBLOB="05000000005600002400"/20, @ANYRES32=r1, @ANYRESDEC=r3, @ANYBLOB="03000000020000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000bc0)=ANY=[@ANYRESDEC=r6, @ANYRES8=r2, @ANYRESDEC=r5], 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x34, '\x00', r1, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) openat$cgroup_type(r7, &(0x7f00000007c0), 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}, 0x10c002, 0xac5d, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xcc3b, 0x2}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x6, 0x0) socketpair(0x1, 0x3, 0x3, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYRES16=r3, @ANYRESHEX=0x0], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000008c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0201000004000000083133da5346101c03010000", @ANYRES32=r8, @ANYBLOB="b19000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020000000500"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x11, 0x0, &(0x7f0000000880)="daf9e846ab156efc71ae6052333536dbfd", 0x0}, 0x31) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)="aee1b65e3babc7ae5897", 0xa}, {&(0x7f0000000b40)}], 0x2}, 0x20000080) r9 = socket$kcm(0x10, 0x2, 0x0) gettid() sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a800160008000140090011009c0010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r10 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x85, &(0x7f0000000000), 0x90) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001409000d200009000d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0) 22.459557105s ago: executing program 2 (id=1883): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}, 0x3000c085) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380), 0x4) socket$kcm(0x23, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6402}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$kcm(r2, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5d}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) close(r4) socketpair(0x29, 0x1, 0x1d7, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x100080, 0x7fff, 0x0, 0x7, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4b3c, 0x5}, 0x2400, 0x0, 0x6, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22.458289475s ago: executing program 0 (id=1884): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xf, 0xfffffffffffffe0d, &(0x7f0000000140)="7c003307000000000008000088471a", 0x0, 0xffedfff0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001300)=r3, 0x4) r4 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x4, 0x5, 0x8, 0xe8, 0x0, 0x9, 0x800, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x4, 0x6, 0x2, 0x4, 0x4b4, 0x9, 0x3, 0x0, 0x7ff, 0x0, 0x7}, 0x0, 0xa, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0xa, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000000000}, 0xc072, 0x200000000000c8, 0x802, 0x9, 0xfffffffffffffffb, 0x80400000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, r4, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023fc"], 0xfdef) 22.262603086s ago: executing program 3 (id=1885): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x29c800, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0x7}, 0x50) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000001010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509f9ff060000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000180)) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b 5:'], 0x8) 21.904697803s ago: executing program 1 (id=1886): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000001101ffaaaaaa"], 0xfdef) 21.556744352s ago: executing program 4 (id=1887): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e24, 0x9, @local, 0xc}}, 0x29, 0x0}, 0x4004090) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xd}, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async, rerun: 32) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="e6", 0x1}], 0x1}, 0x4040001) recvmsg$unix(r5, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) (async) recvmsg$unix(r5, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000380)=r8, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f2, &(0x7f0000000080)) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async, rerun: 64) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) (rerun: 64) 21.402270992s ago: executing program 4 (id=1888): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 21.328512907s ago: executing program 1 (id=1889): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000500)=@ax25={{0x3, @null}, [@bcast, @netrom, @null, @remote, @netrom, @bcast, @bcast]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/183, 0xb7}], 0x1}, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x29, 0x8, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="811e", 0x2}, {&(0x7f00000007c0)="f89eb1", 0x3}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840) sendmsg$inet(r1, 0x0, 0x40011) sendmsg$sock(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="f57d2155575630d164f315bc5f4a510bba78c4539b1b46a930b362fb438b3aa4ddf801fde5ec3f3d2fa3352e00f315b7a098f93b1a02f3ae54e0d2f340f24ea2742e3730e1735c95d3d2190801e4e23d2ce1a65860c3928746dae92e2a8c94dd627185c11c625cb457b2527031686763be480db0e825adae6e40aebf9a1dd6be9473ce56d5db", 0x86}, {&(0x7f0000000700)="8c97ad24f842b70a228784f2", 0xc}, {&(0x7f0000000880)="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", 0xfb}, {&(0x7f0000000980)="9606e2dbd5aff4db254cf9f3237bab81ec2a9273729b9fb55b7d248d91def523b2a05bff8f7bcf76d8ac51a790a63174704f2a84980af2b578df01fe8c9ce17968450c322fd40dba83b22f06fc967ba6e7d3b2a6b48e25fa10d63f0ca71417e71dbcbc8a0a4020bf4cf414a01129639831d4d3288339bccba1ffee9194888fd7cd00d826b8843dd99bf5cc09315f4fafc279f821414a01156c", 0x99}], 0x4, &(0x7f0000000a40)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x48}, 0x200080c1) sendmsg(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x61]}}, 0x0, 0x1c}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f00000003c0)="e097566f5bec64", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e12", 0x24}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1e, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000600000000000000f6ffffff18110000", @ANYRES8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000b"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) 21.327698367s ago: executing program 0 (id=1890): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b1000000000085100000000000009500a505000008d5ad0000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="9c00000000000000791009000000000063000000000000009500740100000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x21) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2, 0xfffffffb}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r5, &(0x7f0000000040), 0x0}, 0x20) perf_event_open$cgroup(&(0x7f0000001200)={0x5, 0x80, 0x4, 0xc8, 0x6, 0x2, 0x0, 0x40f, 0x80000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000440)}, 0xa40, 0xfffffffffffffffe, 0x1ff, 0x7, 0x9f3a, 0x9, 0x400, 0x0, 0xfffff4a7, 0x0, 0x1}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x4, &(0x7f0000000740)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000680)={r2}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b405000000000000611004000000000063017e000000000095000000000000002e3a95988137ed9fc2a5a44cd610f233891e8e8585e37bc52533fb5c134f7934c9f3523f87c7a8dd09ffaba82683162e2f8e193c9b503abd71a3a1b00176a865cc333b17943eb0d9629c93aa8c8d343d0b34ef7f4be0f5c6080100877d22aec04c6d1720d6abaf5b1eb41f76"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000000}, 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000001540)={&(0x7f0000000600), 0x6e, &(0x7f00000005c0)=[{&(0x7f0000001880)=""/4081, 0xff1}, {&(0x7f0000000980)=""/211, 0xd3}], 0x2, &(0x7f0000000b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}, 0x10040) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f0000001280)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000070000000200000000000004ff00000000005f302e5f00852b8909882cf0f27a97c970ce4e5bfb7854c1cf297cd279acb8f0a93d07e6c7eef8c701d9db62b4f2df5c5e1f796e6bd6953afc091410783eee29cb8667b66804059dd5ab6ad1b58f848e812c840b6fbf37444091d027fcfabd43b3a7913c8755581fc86aec14c9a6fae44fab2b7b"], 0x0, 0x2b}, 0x20) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f0000000040)=r0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000bc0)={r2}) 21.312640504s ago: executing program 2 (id=1891): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000fffff001c0000001c00000003000000000000000000000200000000010000000000000e0100000000000000002e"], 0x0, 0x37}, 0x20) 20.986418938s ago: executing program 2 (id=1892): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair(0x33, 0x4, 0x6, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x120000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x4}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000800)="e7b09faa344efb7e78c6e7f10bea46b00ded8a6e357e33374a4afed27e6d6f90b1e5290d7aedbc13f365a841fdcc97b14b6d3b2e2de1ae70ae348f319268c52088b8cf42ffd7aa8473232a079b3f6596b21fa0a6134298eab6607962331f2cace1d83049edaadc1c383562f2a683ebcc16e5826da9002d89014d19b6f37f05d426485b041312e9753023c85fc792dbb4b23fa7b6a2c52b7a93804e81cecb186c1bd7eb16b66c3688b2a02c96d461899d8861f14656b14fe904b3b7fe8601debf84ae53185c8a4a193d85687ae76dffa976b3fc8c58eb5ecafd0c46f3758a", 0xde}, {&(0x7f0000000900)="e61d321435c52d0af9a4565ca57b0bd29060baec0cb30ce3f45a1562d476467a2b6252e82ba9df437a7d9fe854e1889661c6505b48ddac8a13d64120e6835d1ac833df0247f0cc", 0x47}], 0x2}, 0x8800) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x6, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x20, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="7e820801793b5be6a9d78cbfe575fbfe9c3757bd8674589e3337527dd78562564b0f8b35a8ab2e74bf6c585e8ae4bfd395d4cd3778e9a5e0f0c614e4bb2ecf55436c3f2c65d66d9b426cc5d3865feb29a76e418a9e9580145bda2f28dcb9d28d331bfa051ae229c244c5d023c8385d014f11331fd1dd535d56a29ae3952f2442207481c018c88fd9148d0497abe9928466303800772aa54027d5b1491a79d1aa54c29766d5cb536cfc4f79aed7a883979bb8936274654f71c9620599cdbe501d017a3370d4f87ccaa83ba917c51b", 0xce}, {&(0x7f00000006c0)="657f029b77ab1bb1133f01a0e970da6ba4a70568b3a975ce0ed8b77915b0b0138eb00c9b4fc8320db50eb54aed74b3105a2eda98166abb45559312719876da000000000000000093fd71b6d7e4c7e925e5398bc0791c5fb3fe888a50953374be9ba1de991c4462a053effa3169094fddff3adc3061050a73c6477ed24ce5a1707658d50ee4c04cbd11b5bcd6e85bb6b317", 0x91}], 0x2}, 0x44) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000400)={r5, r3, 0x4, r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x401c, r0}, 0x18) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r7, &(0x7f0000000780)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)='%pi6 \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000c00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe5, &(0x7f0000000cc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001240)=@o_path={&(0x7f0000001200)='./file0\x00', 0xffffffffffffffff, 0x4000, r9}, 0x18) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xb, [@float={0x4, 0x0, 0x0, 0x10, 0x2}, @enum={0x3, 0x5, 0x0, 0x6, 0x4, [{0xf, 0x809}, {0x8, 0xffffffa7}, {0xd, 0xffffffff}, {0x5, 0x7}, {0xd, 0xb15d}]}]}, {0x0, [0x30, 0x2e, 0x61, 0x61, 0x30, 0x0, 0x61, 0x5f, 0x61]}}, &(0x7f0000000fc0)=""/156, 0x63, 0x9c, 0x1}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001180)={0x1b, 0x0, 0x0, 0x8, 0x0, r9, 0x40, '\x00', r10, r11, 0x1, 0x3}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r13, 0x4) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0xffffff80, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0x1f, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x32}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @cb_func={0x18, 0xf, 0x4, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x0, 0x4, 0x2, 0x5, 0x10, 0xfffffffffffffffc}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c40)='GPL\x00', 0x9, 0x87, &(0x7f0000000c80)=""/135, 0x40f00, 0x2, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x1, 0x4, 0x30a4, 0x400}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000f00)=[r6, r13, r14, r15], &(0x7f0000000f40)=[{0x0, 0x2, 0xc, 0x3}, {0x2, 0x5, 0xffff, 0x3}, {0x0, 0x3, 0x4, 0x4}, {0x2, 0x4, 0xc, 0x6}, {0x0, 0x1, 0x6, 0x3}], 0x10, 0x2}, 0x94) 20.928614916s ago: executing program 4 (id=1893): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x29c800, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0x7}, 0x50) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000001010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509f9ff060000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b 5:'], 0x8) 20.733716467s ago: executing program 3 (id=1894): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280100000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0xd, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0xffffffff, @loopback, 0x2}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x20000054) setsockopt$sock_attach_bpf(r2, 0x84, 0x6, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f00000002c0)=@can, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)=""/119, 0x77}, {&(0x7f0000000500)=""/202, 0xca}], 0x2, &(0x7f0000002e00)=""/4096, 0x1000}, 0x10000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 19.76360511s ago: executing program 1 (id=1895): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) r6 = openat$cgroup_type(r2, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000080), 0x9) 19.76218072s ago: executing program 0 (id=1905): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x0, 0xd006e1258c48358c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}, 0x101c21, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x4}, 0x0, 0xc, 0xffffffffffffffff, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="365e4e92c32ad880a6d33aaad447788d30188897", 0x14}], 0x1}, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f91731dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 19.7146899s ago: executing program 2 (id=1896): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x29c800, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0x7}, 0x50) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000001010000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b509f9ff060000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000180)) write$cgroup_devices(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='b 5:'], 0x8) 19.71414617s ago: executing program 3 (id=1897): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181002e7ffffffe010000000000000e000a000f000000028002", 0x2b}], 0x1}, 0x2004c044) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000000060020000000000000008400000002"], 0x38}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d00000000000000280000"], 0x0, 0x42}, 0x28) socketpair(0x22, 0x800, 0x3, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 19.712589899s ago: executing program 4 (id=1898): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 19.324090571s ago: executing program 4 (id=1899): r0 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x110ca1, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="6a62e1e47b6899", 0x7}, {0x0}], 0x2}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2e30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000800400040008000000ec1a7df10968e6010000008000000096945020d6ea8ee3d0fac20273fb31c75e00d9e4a72950cbe4cb1e84"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0x4, &(0x7f0000000b80), 0x4) 18.181371479s ago: executing program 1 (id=1900): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x2}, 0x2, 0x2}}, 0x80, 0x0}, 0x0) (async) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x0, 0x0, @local, 0x5}, 0x80, 0x0}, 0x404c814) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba55"], 0xfe33) (async) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r2, 0x10, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES8=0x0, @ANYRES16=r7, @ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) 18.126537299s ago: executing program 0 (id=1901): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10000) 18.077291639s ago: executing program 2 (id=1902): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000880)=""/174, 0xae, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) gettid() mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x8c) r3 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11f200, 0x3, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="04000000000000000100"/24]) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x119, 0x14, 0x0, 0x5d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 17.685045389s ago: executing program 0 (id=1903): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe7}}, @printk={@d}]}, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x75, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000cc0), &(0x7f0000000d00)=[{0x4, 0x3, 0xe}, {0x2, 0x2, 0xf, 0x6}, {0x2, 0x5, 0x1, 0xa}], 0x10, 0x5}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f00000008c0)=""/248, 0xf8}], 0x4, &(0x7f0000000440)=""/151, 0x97}, 0x10000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={@fallback=r1, 0x15, 0x0, 0x10, &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=""/82, 0x4e, 0x52, 0x80000000, 0x0, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000004000000170200000500000000080000", @ANYRES32=r2, @ANYBLOB="09008000000000000000001e395dc265957f5d00", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0300000001000000040000000700"/28], 0x50) close(r4) r5 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x40, 0x80, 0x0, 0x0, 0x400, 0x4c4d7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x18, 0x3, 0x2, 0x7, 0x5, 0x2, 0x103, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x1b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000"], 0x50) r7 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x0, 0xa}, {0x10000002, 0x2, 0x8000000, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) recvmsg$kcm(r7, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x17, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000c00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018600000080000000000000006000000184a0000fdffffff0000000000000000d90a0600e3ffffff18210000", @ANYRES32=r2, @ANYBLOB="00000000080000c18520000002000000bf91000098090000b70000008500000084000000b7000000000000009500"/56], &(0x7f0000003ff6)='GPL\x00', 0xffffb45e, 0xd3, &(0x7f0000000bc0)=""/211, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="07d2be6426a1c5987005a56a45b7632993b2c449f0df0edf5cd0f0cfbd8fbdc9acd50b7b04c3d8dbbb7277defc8e1fb9ad9690fd3179be67036bbbb73630bde6117cefc7485941f3e86504ac", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x12) 17.684623229s ago: executing program 1 (id=1904): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0xf3, 0xa, 0x0, 0x0, 0xd006e1258c4875cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x4c30, 0xc8, 0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc5c082c00db5bffffffffff000000060311000023000000000000000000000000ac1414aa3c"], 0xfdef) 15.284751994s ago: executing program 1 (id=1906): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0x1c}], 0x1}, 0x0) 4.105856431s ago: executing program 32 (id=1897): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181002e7ffffffe010000000000000e000a000f000000028002", 0x2b}], 0x1}, 0x2004c044) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000008400000005000000000000000000060020000000000000008400000002"], 0x38}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d00000000000000280000"], 0x0, 0x42}, 0x28) socketpair(0x22, 0x800, 0x3, &(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.012413562s ago: executing program 33 (id=1899): r0 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x110ca1, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="6a62e1e47b6899", 0x7}, {0x0}], 0x2}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2e30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000800400040008000000ec1a7df10968e6010000008000000096945020d6ea8ee3d0fac20273fb31c75e00d9e4a72950cbe4cb1e84"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4008804) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0x4, &(0x7f0000000b80), 0x4) 2.784636073s ago: executing program 34 (id=1902): socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x23, 0x5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000880)=""/174, 0xae, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89ed, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) gettid() mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x8c) r3 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11f200, 0x3, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000200)=ANY=[@ANYBLOB="04000000000000000100"/24]) r4 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x119, 0x14, 0x0, 0x5d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.202968294s ago: executing program 35 (id=1903): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe7}}, @printk={@d}]}, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x75, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000cc0), &(0x7f0000000d00)=[{0x4, 0x3, 0xe}, {0x2, 0x2, 0xf, 0x6}, {0x2, 0x5, 0x1, 0xa}], 0x10, 0x5}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000001c0)={&(0x7f0000000040)=@nl=@unspec, 0x80, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f00000008c0)=""/248, 0xf8}], 0x4, &(0x7f0000000440)=""/151, 0x97}, 0x10000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={@fallback=r1, 0x15, 0x0, 0x10, &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)=""/82, 0x4e, 0x52, 0x80000000, 0x0, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000004000000170200000500000000080000", @ANYRES32=r2, @ANYBLOB="09008000000000000000001e395dc265957f5d00", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0300000001000000040000000700"/28], 0x50) close(r4) r5 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x40, 0x80, 0x0, 0x0, 0x400, 0x4c4d7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x18, 0x3, 0x2, 0x7, 0x5, 0x2, 0x103, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x1b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000"], 0x50) r7 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x0, 0xa}, {0x10000002, 0x2, 0x8000000, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) recvmsg$kcm(r7, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) r11 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x17, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000c00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018600000080000000000000006000000184a0000fdffffff0000000000000000d90a0600e3ffffff18210000", @ANYRES32=r2, @ANYBLOB="00000000080000c18520000002000000bf91000098090000b70000008500000084000000b7000000000000009500"/56], &(0x7f0000003ff6)='GPL\x00', 0xffffb45e, 0xd3, &(0x7f0000000bc0)=""/211, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="07d2be6426a1c5987005a56a45b7632993b2c449f0df0edf5cd0f0cfbd8fbdc9acd50b7b04c3d8dbbb7277defc8e1fb9ad9690fd3179be67036bbbb73630bde6117cefc7485941f3e86504ac", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x12) 0s ago: executing program 36 (id=1906): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8847, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0007000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6e8c0000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0x1c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): DEV_CHANGE): lo: link becomes ready [ 212.964462][ T5871] netlink: 'syz.2.486': attribute type 21 has an invalid length. [ 212.976483][ T5871] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.996549][ T5871] IPv6: Can't replace route, no match found [ 213.010926][ T5872] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 213.498100][ T5884] ±ÿ: renamed from ipvlan0 [ 215.065739][ T5914] netlink: 160 bytes leftover after parsing attributes in process `syz.3.501'. [ 215.095232][ T5914] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 215.462222][ T5918] netlink: 'syz.3.501': attribute type 11 has an invalid length. [ 215.474156][ T5918] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.501'. [ 215.512872][ T5918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.888927][ T5932] netlink: 'syz.2.505': attribute type 1 has an invalid length. [ 215.932744][ T5932] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.505'. [ 216.139455][ T5931] device syzkaller0 entered promiscuous mode [ 216.351413][ T5944] FAULT_INJECTION: forcing a failure. [ 216.351413][ T5944] name failslab, interval 1, probability 0, space 0, times 0 [ 216.366279][ T5944] CPU: 1 PID: 5944 Comm: syz.3.509 Not tainted syzkaller #0 [ 216.373626][ T5944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.383729][ T5944] Call Trace: [ 216.387073][ T5944] [ 216.390060][ T5944] dump_stack_lvl+0x188/0x24e [ 216.394831][ T5944] ? show_regs_print_info+0x12/0x12 [ 216.400089][ T5944] ? load_image+0x400/0x400 [ 216.404670][ T5944] ? __might_sleep+0xd0/0xd0 [ 216.409350][ T5944] ? __lock_acquire+0x7d10/0x7d10 [ 216.414457][ T5944] should_fail_ex+0x399/0x4d0 [ 216.419219][ T5944] should_failslab+0x5/0x20 [ 216.423783][ T5944] slab_pre_alloc_hook+0x59/0x310 [ 216.428885][ T5944] kmem_cache_alloc+0x56/0x2f0 [ 216.433703][ T5944] ? ptlock_alloc+0x1c/0x60 [ 216.434416][ T5932] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.505'. [ 216.438261][ T5944] ptlock_alloc+0x1c/0x60 [ 216.438359][ T5944] pte_alloc_one+0xc0/0x310 [ 216.438395][ T5944] ? pfn_modify_allowed+0x560/0x560 [ 216.438434][ T5944] ? __might_sleep+0xd0/0xd0 [ 216.438483][ T5944] ? rcu_is_watching+0x11/0xa0 [ 216.438534][ T5944] __pte_alloc+0x21/0x150 [ 216.475662][ T5944] copy_page_range+0x3118/0x3900 [ 216.480894][ T5944] ? pfn_valid+0x450/0x450 [ 216.485440][ T5944] ? up_write+0x1bb/0x420 [ 216.489875][ T5944] copy_mm+0xec3/0x1690 [ 216.494171][ T5944] ? copy_signal+0x680/0x680 [ 216.498817][ T5944] ? lockdep_init_map_type+0x98/0x8d0 [ 216.504348][ T5944] ? __init_rwsem+0x11e/0x160 [ 216.509098][ T5944] ? copy_signal+0x556/0x680 [ 216.513764][ T5944] copy_process+0x1979/0x4030 [ 216.518572][ T5944] ? copy_process+0x94d/0x4030 [ 216.523461][ T5944] ? idle_dummy+0x10/0x10 [ 216.527911][ T5944] kernel_clone+0x24b/0x900 [ 216.532480][ T5944] ? ksys_write+0x1c0/0x250 [ 216.537072][ T5944] ? create_io_thread+0x170/0x170 [ 216.542246][ T5944] __x64_sys_clone+0x1a7/0x220 [ 216.547064][ T5944] ? __fget_files+0x43d/0x4b0 [ 216.551820][ T5944] ? __ia32_sys_vfork+0x140/0x140 [ 216.556972][ T5944] ? lock_chain_count+0x20/0x20 [ 216.561926][ T5944] ? lockdep_hardirqs_on+0x94/0x140 [ 216.562004][ T5932] net_ratelimit: 146 callbacks suppressed [ 216.562021][ T5932] netlink: zone id is out of range [ 216.567174][ T5944] do_syscall_64+0x4c/0xa0 [ 216.567206][ T5944] ? clear_bhb_loop+0x60/0xb0 [ 216.567232][ T5944] ? clear_bhb_loop+0x60/0xb0 [ 216.567269][ T5944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.567295][ T5944] RIP: 0033:0x7f213839c799 [ 216.567325][ T5944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.567346][ T5944] RSP: 002b:00007f21392a7fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 216.567379][ T5944] RAX: ffffffffffffffda RBX: 00007f2138615fa0 RCX: 00007f213839c799 [ 216.567399][ T5944] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 216.567416][ T5944] RBP: 00007f21392a8090 R08: 0000000000000000 R09: 0000000000000000 [ 216.567432][ T5944] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 216.567449][ T5944] R13: 00007f2138616038 R14: 00007f2138615fa0 R15: 00007ffc5f857028 [ 216.567534][ T5944] [ 217.057957][ T5932] netlink: zone id is out of range [ 217.107669][ T5932] netlink: zone id is out of range [ 217.114022][ T5932] netlink: zone id is out of range [ 217.175874][ T5932] netlink: zone id is out of range [ 217.256352][ T5932] netlink: zone id is out of range [ 217.261582][ T5932] netlink: zone id is out of range [ 217.286475][ T5932] netlink: zone id is out of range [ 217.336826][ T5932] netlink: zone id is out of range [ 217.342003][ T5932] netlink: zone id is out of range [ 220.302195][ T5977] netlink: 60 bytes leftover after parsing attributes in process `syz.4.521'. [ 220.551597][ T5987] netlink: 'syz.4.523': attribute type 2 has an invalid length. [ 220.657258][ T5987] netlink: 10 bytes leftover after parsing attributes in process `syz.4.523'. [ 221.342439][ T6003] FAULT_INJECTION: forcing a failure. [ 221.342439][ T6003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.636223][ T6003] CPU: 0 PID: 6003 Comm: syz.4.529 Not tainted syzkaller #0 [ 221.643603][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.653700][ T6003] Call Trace: [ 221.657036][ T6003] [ 221.660022][ T6003] dump_stack_lvl+0x188/0x24e [ 221.664775][ T6003] ? show_regs_print_info+0x12/0x12 [ 221.670042][ T6003] ? load_image+0x400/0x400 [ 221.674612][ T6003] ? __lock_acquire+0x7d10/0x7d10 [ 221.679729][ T6003] should_fail_ex+0x399/0x4d0 [ 221.684493][ T6003] _copy_from_user+0x2c/0x170 [ 221.689230][ T6003] __sys_bpf+0x2ea/0x780 [ 221.693539][ T6003] ? bpf_link_show_fdinfo+0x380/0x380 [ 221.699125][ T6003] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 221.705396][ T6003] __x64_sys_bpf+0x78/0x90 [ 221.709876][ T6003] do_syscall_64+0x4c/0xa0 [ 221.714349][ T6003] ? clear_bhb_loop+0x60/0xb0 [ 221.719080][ T6003] ? clear_bhb_loop+0x60/0xb0 [ 221.723812][ T6003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.729755][ T6003] RIP: 0033:0x7fb02239c799 [ 221.734221][ T6003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.753871][ T6003] RSP: 002b:00007fb02319f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.762343][ T6003] RAX: ffffffffffffffda RBX: 00007fb022615fa0 RCX: 00007fb02239c799 [ 221.770363][ T6003] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 221.778381][ T6003] RBP: 00007fb02319f090 R08: 0000000000000000 R09: 0000000000000000 [ 221.786401][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.794409][ T6003] R13: 00007fb022616038 R14: 00007fb022615fa0 R15: 00007ffe737b9818 [ 221.802477][ T6003] [ 221.990826][ T6009] netlink: 'syz.1.527': attribute type 1 has an invalid length. [ 222.106304][ T6009] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.527'. [ 222.249746][ T6009] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.527'. [ 222.310682][ T6009] net_ratelimit: 143 callbacks suppressed [ 222.310704][ T6009] netlink: zone id is out of range [ 222.393362][ T6009] netlink: zone id is out of range [ 222.427167][ T6009] netlink: zone id is out of range [ 222.521491][ T6009] netlink: zone id is out of range [ 222.552049][ T6009] netlink: zone id is out of range [ 222.593743][ T6009] netlink: zone id is out of range [ 222.643800][ T6009] netlink: zone id is out of range [ 222.674338][ T6009] netlink: zone id is out of range [ 222.720760][ T6009] netlink: zone id is out of range [ 222.766185][ T6009] netlink: zone id is out of range [ 224.155207][ T6012] netlink: 'syz.0.530': attribute type 12 has an invalid length. [ 224.168130][ T6012] netlink: 132 bytes leftover after parsing attributes in process `syz.0.530'. [ 224.468305][ T6021] netlink: 'syz.4.532': attribute type 10 has an invalid length. [ 224.502151][ T6021] netlink: 40 bytes leftover after parsing attributes in process `syz.4.532'. [ 224.546549][ T6021] device ipvlan1 entered promiscuous mode [ 224.554915][ T6021] bridge0: port 3(ipvlan1) entered blocking state [ 224.562377][ T6021] bridge0: port 3(ipvlan1) entered disabled state [ 224.722424][ T6022] netlink: 60 bytes leftover after parsing attributes in process `syz.3.534'. [ 225.262369][ T6034] netlink: 160 bytes leftover after parsing attributes in process `syz.4.539'. [ 225.421625][ T6034] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 225.799966][ T6039] netlink: 'syz.4.539': attribute type 11 has an invalid length. [ 225.890676][ T6039] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.539'. [ 225.921930][ T6039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.114086][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.193144][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.312001][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.331531][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.204336][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.243042][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.324200][ T6102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.397917][ T6102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.518786][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.667154][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.719983][ T6142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.735500][ T6142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.469895][ T6201] FAULT_INJECTION: forcing a failure. [ 236.469895][ T6201] name failslab, interval 1, probability 0, space 0, times 0 [ 236.507221][ T6201] CPU: 1 PID: 6201 Comm: syz.1.590 Not tainted syzkaller #0 [ 236.514578][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.524659][ T6201] Call Trace: [ 236.527961][ T6201] [ 236.530923][ T6201] dump_stack_lvl+0x188/0x24e [ 236.535644][ T6201] ? show_regs_print_info+0x12/0x12 [ 236.540879][ T6201] ? load_image+0x400/0x400 [ 236.545425][ T6201] ? __lock_acquire+0x7d10/0x7d10 [ 236.550494][ T6201] should_fail_ex+0x399/0x4d0 [ 236.555217][ T6201] should_failslab+0x5/0x20 [ 236.559756][ T6201] slab_pre_alloc_hook+0x59/0x310 [ 236.564825][ T6201] ? verify_lock_unused+0x140/0x140 [ 236.570060][ T6201] ? bpf_test_init+0x9f/0x140 [ 236.574762][ T6201] __kmem_cache_alloc_node+0x4f/0x260 [ 236.580152][ T6201] ? bpf_test_init+0x9f/0x140 [ 236.584844][ T6201] __kmalloc+0xa0/0x240 [ 236.589015][ T6201] bpf_test_init+0x9f/0x140 [ 236.593545][ T6201] bpf_prog_test_run_xdp+0x484/0xf10 [ 236.598857][ T6201] ? dev_put+0x80/0x80 [ 236.602940][ T6201] ? dev_put+0x80/0x80 [ 236.607017][ T6201] bpf_prog_test_run+0x31e/0x390 [ 236.611974][ T6201] __sys_bpf+0x62b/0x780 [ 236.616238][ T6201] ? bpf_link_show_fdinfo+0x380/0x380 [ 236.621649][ T6201] ? lock_chain_count+0x20/0x20 [ 236.626517][ T6201] __x64_sys_bpf+0x78/0x90 [ 236.630943][ T6201] do_syscall_64+0x4c/0xa0 [ 236.635390][ T6201] ? clear_bhb_loop+0x60/0xb0 [ 236.640073][ T6201] ? clear_bhb_loop+0x60/0xb0 [ 236.644759][ T6201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 236.650670][ T6201] RIP: 0033:0x7f92bd79c799 [ 236.655094][ T6201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.674721][ T6201] RSP: 002b:00007f92be6ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.683152][ T6201] RAX: ffffffffffffffda RBX: 00007f92bda16090 RCX: 00007f92bd79c799 [ 236.691131][ T6201] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 236.699121][ T6201] RBP: 00007f92be6ba090 R08: 0000000000000000 R09: 0000000000000000 [ 236.707119][ T6201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.715110][ T6201] R13: 00007f92bda16128 R14: 00007f92bda16090 R15: 00007ffe5dfe88b8 [ 236.723102][ T6201] [ 238.309797][ T6227] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.600'. [ 238.914816][ T6240] netlink: 'syz.0.603': attribute type 3 has an invalid length. [ 238.963533][ T6240] netlink: 'syz.0.603': attribute type 4 has an invalid length. [ 238.986818][ T6240] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.603'. [ 241.505720][ T6254] netlink: 'syz.2.609': attribute type 3 has an invalid length. [ 241.575183][ T6254] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.609'. [ 241.701279][ T6254] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 241.767274][ T6254] net_ratelimit: 144 callbacks suppressed [ 241.767291][ T6254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.252280][ T6267] FAULT_INJECTION: forcing a failure. [ 242.252280][ T6267] name failslab, interval 1, probability 0, space 0, times 0 [ 242.465504][ T6267] CPU: 0 PID: 6267 Comm: syz.1.614 Not tainted syzkaller #0 [ 242.472859][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 242.482939][ T6267] Call Trace: [ 242.486240][ T6267] [ 242.489198][ T6267] dump_stack_lvl+0x188/0x24e [ 242.493915][ T6267] ? show_regs_print_info+0x12/0x12 [ 242.499151][ T6267] ? load_image+0x400/0x400 [ 242.503689][ T6267] ? __might_sleep+0xd0/0xd0 [ 242.508307][ T6267] ? __lock_acquire+0x7d10/0x7d10 [ 242.513370][ T6267] should_fail_ex+0x399/0x4d0 [ 242.518105][ T6267] should_failslab+0x5/0x20 [ 242.522649][ T6267] slab_pre_alloc_hook+0x59/0x310 [ 242.527716][ T6267] kmem_cache_alloc+0x56/0x2f0 [ 242.532513][ T6267] ? vm_area_dup+0x23/0x1a0 [ 242.537048][ T6267] vm_area_dup+0x23/0x1a0 [ 242.541406][ T6267] copy_mm+0xb28/0x1690 [ 242.545612][ T6267] ? copy_signal+0x680/0x680 [ 242.550222][ T6267] ? lockdep_init_map_type+0x98/0x8d0 [ 242.555656][ T6267] ? __init_rwsem+0x11e/0x160 [ 242.560360][ T6267] ? copy_signal+0x556/0x680 [ 242.564982][ T6267] copy_process+0x1979/0x4030 [ 242.569706][ T6267] ? copy_process+0x94d/0x4030 [ 242.574523][ T6267] ? idle_dummy+0x10/0x10 [ 242.578896][ T6267] kernel_clone+0x24b/0x900 [ 242.583425][ T6267] ? ksys_write+0x1c0/0x250 [ 242.587967][ T6267] ? create_io_thread+0x170/0x170 [ 242.593043][ T6267] __x64_sys_clone+0x1a7/0x220 [ 242.597836][ T6267] ? __fget_files+0x43d/0x4b0 [ 242.602549][ T6267] ? __ia32_sys_vfork+0x140/0x140 [ 242.607619][ T6267] ? lock_chain_count+0x20/0x20 [ 242.612511][ T6267] ? lockdep_hardirqs_on+0x94/0x140 [ 242.617740][ T6267] do_syscall_64+0x4c/0xa0 [ 242.622190][ T6267] ? clear_bhb_loop+0x60/0xb0 [ 242.626894][ T6267] ? clear_bhb_loop+0x60/0xb0 [ 242.631610][ T6267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.637535][ T6267] RIP: 0033:0x7f92bd79c799 [ 242.641977][ T6267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.661619][ T6267] RSP: 002b:00007f92be6b9fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 242.670072][ T6267] RAX: ffffffffffffffda RBX: 00007f92bda16090 RCX: 00007f92bd79c799 [ 242.678069][ T6267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002024011 [ 242.686065][ T6267] RBP: 00007f92be6ba090 R08: 0000000000000000 R09: 0000000000000000 [ 242.694076][ T6267] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 242.702099][ T6267] R13: 00007f92bda16128 R14: 00007f92bda16090 R15: 00007ffe5dfe88b8 [ 242.710128][ T6267] [ 243.662197][ T6286] FAULT_INJECTION: forcing a failure. [ 243.662197][ T6286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.695687][ T6286] CPU: 0 PID: 6286 Comm: syz.0.622 Not tainted syzkaller #0 [ 243.703035][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 243.713119][ T6286] Call Trace: [ 243.716431][ T6286] [ 243.719383][ T6286] dump_stack_lvl+0x188/0x24e [ 243.724077][ T6286] ? show_regs_print_info+0x12/0x12 [ 243.729288][ T6286] ? load_image+0x400/0x400 [ 243.733800][ T6286] ? __lock_acquire+0x7d10/0x7d10 [ 243.738838][ T6286] ? __virt_addr_valid+0x188/0x540 [ 243.743964][ T6286] should_fail_ex+0x399/0x4d0 [ 243.748663][ T6286] _copy_from_user+0x2c/0x170 [ 243.753352][ T6286] bpf_test_init+0xde/0x140 [ 243.757865][ T6286] bpf_prog_test_run_xdp+0x484/0xf10 [ 243.763169][ T6286] ? dev_put+0x80/0x80 [ 243.767255][ T6286] ? dev_put+0x80/0x80 [ 243.771329][ T6286] bpf_prog_test_run+0x31e/0x390 [ 243.776286][ T6286] __sys_bpf+0x62b/0x780 [ 243.780550][ T6286] ? bpf_link_show_fdinfo+0x380/0x380 [ 243.785948][ T6286] ? lock_chain_count+0x20/0x20 [ 243.790817][ T6286] __x64_sys_bpf+0x78/0x90 [ 243.795242][ T6286] do_syscall_64+0x4c/0xa0 [ 243.799668][ T6286] ? clear_bhb_loop+0x60/0xb0 [ 243.804368][ T6286] ? clear_bhb_loop+0x60/0xb0 [ 243.809052][ T6286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.814951][ T6286] RIP: 0033:0x7f0e9439c799 [ 243.819374][ T6286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.838985][ T6286] RSP: 002b:00007f0e9519d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.847404][ T6286] RAX: ffffffffffffffda RBX: 00007f0e94615fa0 RCX: 00007f0e9439c799 [ 243.855391][ T6286] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 243.863370][ T6286] RBP: 00007f0e9519d090 R08: 0000000000000000 R09: 0000000000000000 [ 243.871351][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.879329][ T6286] R13: 00007f0e94616038 R14: 00007f0e94615fa0 R15: 00007fff6de1ff18 [ 243.887323][ T6286] [ 244.789188][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.796824][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.322352][ T6306] device bridge_slave_1 left promiscuous mode [ 245.366347][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.406459][ T6306] device bridge_slave_0 left promiscuous mode [ 245.412799][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.605720][ T6315] netlink: 'syz.1.631': attribute type 3 has an invalid length. [ 245.634066][ T6315] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.631'. [ 245.656200][ T6320] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.633'. [ 245.816070][ T6320] netlink: 72 bytes leftover after parsing attributes in process `syz.2.633'. [ 247.009183][ T6354] netlink: 14558 bytes leftover after parsing attributes in process `syz.0.641'. [ 250.633940][ T6389] netlink: 'syz.4.647': attribute type 10 has an invalid length. [ 250.734777][ T6389] netlink: 40 bytes leftover after parsing attributes in process `syz.4.647'. [ 250.866938][ T6389] device dummy0 entered promiscuous mode [ 251.385995][ T6389] bridge0: port 3(dummy0) entered blocking state [ 251.488272][ T6389] bridge0: port 3(dummy0) entered disabled state [ 251.553922][ T6389] bridge0: port 3(dummy0) entered blocking state [ 251.560475][ T6389] bridge0: port 3(dummy0) entered forwarding state [ 252.851152][ T6415] netlink: 'syz.1.655': attribute type 41 has an invalid length. [ 252.896290][ T6415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.655'. [ 255.780781][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.787310][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.490950][ T6444] netlink: 160 bytes leftover after parsing attributes in process `syz.3.667'. [ 257.514451][ T6444] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 257.907736][ T6460] netlink: 'syz.2.672': attribute type 10 has an invalid length. [ 257.952454][ T6460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.672'. [ 258.036873][ T6460] device ipvlan1 entered promiscuous mode [ 258.159563][ T6460] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 258.271526][ T6461] netlink: 132 bytes leftover after parsing attributes in process `syz.1.673'. [ 258.838721][ T6486] netlink: 160 bytes leftover after parsing attributes in process `syz.2.681'. [ 258.863578][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 261.641354][ T6500] netlink: 'syz.3.686': attribute type 5 has an invalid length. [ 262.447701][ T6504] netlink: 'syz.0.687': attribute type 10 has an invalid length. [ 262.487841][ T6504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.687'. [ 262.710768][ T6504] device dummy0 entered promiscuous mode [ 263.189094][ T6504] bridge0: port 3(dummy0) entered blocking state [ 263.236002][ T6504] bridge0: port 3(dummy0) entered disabled state [ 263.284273][ T6520] netlink: 'syz.1.689': attribute type 4 has an invalid length. [ 263.326680][ T6525] netlink: 'syz.2.691': attribute type 2 has an invalid length. [ 263.340161][ T6525] netlink: 'syz.2.691': attribute type 8 has an invalid length. [ 263.359561][ T6525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.691'. [ 263.448009][ T6527] netlink: 'syz.2.691': attribute type 2 has an invalid length. [ 263.455713][ T6527] netlink: 'syz.2.691': attribute type 8 has an invalid length. [ 263.479206][ T6527] netlink: 132 bytes leftover after parsing attributes in process `syz.2.691'. [ 266.950726][ T6554] netlink: 'syz.1.699': attribute type 7 has an invalid length. [ 267.074689][ T6557] netlink: 160 bytes leftover after parsing attributes in process `syz.3.700'. [ 267.114969][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 267.323821][ T6565] FAULT_INJECTION: forcing a failure. [ 267.323821][ T6565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.406295][ T6565] CPU: 1 PID: 6565 Comm: syz.0.703 Not tainted syzkaller #0 [ 267.413664][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 267.423744][ T6565] Call Trace: [ 267.427035][ T6565] [ 267.429979][ T6565] dump_stack_lvl+0x188/0x24e [ 267.434677][ T6565] ? show_regs_print_info+0x12/0x12 [ 267.439892][ T6565] ? load_image+0x400/0x400 [ 267.444411][ T6565] ? __lock_acquire+0x7d10/0x7d10 [ 267.449456][ T6565] should_fail_ex+0x399/0x4d0 [ 267.454157][ T6565] _copy_from_user+0x2c/0x170 [ 267.458845][ T6565] bpf_test_init+0xde/0x140 [ 267.463357][ T6565] bpf_prog_test_run_xdp+0x484/0xf10 [ 267.468655][ T6565] ? lockdep_hardirqs_on+0x94/0x140 [ 267.473859][ T6565] ? dev_put+0x80/0x80 [ 267.477936][ T6565] ? bpf_prog_test_run+0x253/0x390 [ 267.483062][ T6565] ? dev_put+0x80/0x80 [ 267.487140][ T6565] bpf_prog_test_run+0x31e/0x390 [ 267.492091][ T6565] __sys_bpf+0x62b/0x780 [ 267.496343][ T6565] ? bpf_link_show_fdinfo+0x380/0x380 [ 267.501732][ T6565] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 267.507903][ T6565] __x64_sys_bpf+0x78/0x90 [ 267.512341][ T6565] do_syscall_64+0x4c/0xa0 [ 267.516766][ T6565] ? clear_bhb_loop+0x60/0xb0 [ 267.521448][ T6565] ? clear_bhb_loop+0x60/0xb0 [ 267.526134][ T6565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.532031][ T6565] RIP: 0033:0x7f0e9439c799 [ 267.536455][ T6565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.556077][ T6565] RSP: 002b:00007f0e9519d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 267.564501][ T6565] RAX: ffffffffffffffda RBX: 00007f0e94615fa0 RCX: 00007f0e9439c799 [ 267.572481][ T6565] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 267.580465][ T6565] RBP: 00007f0e9519d090 R08: 0000000000000000 R09: 0000000000000000 [ 267.588462][ T6565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.596438][ T6565] R13: 00007f0e94616038 R14: 00007f0e94615fa0 R15: 00007fff6de1ff18 [ 267.604443][ T6565] [ 268.381201][ T6583] netlink: 44 bytes leftover after parsing attributes in process `syz.1.710'. [ 271.307915][ T6633] FAULT_INJECTION: forcing a failure. [ 271.307915][ T6633] name failslab, interval 1, probability 0, space 0, times 0 [ 271.357525][ T6633] CPU: 0 PID: 6633 Comm: syz.2.725 Not tainted syzkaller #0 [ 271.364889][ T6633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.374981][ T6633] Call Trace: [ 271.378291][ T6633] [ 271.381255][ T6633] dump_stack_lvl+0x188/0x24e [ 271.385985][ T6633] ? show_regs_print_info+0x12/0x12 [ 271.391223][ T6633] ? load_image+0x400/0x400 [ 271.395767][ T6633] ? __might_sleep+0xd0/0xd0 [ 271.400396][ T6633] ? __lock_acquire+0x7d10/0x7d10 [ 271.405481][ T6633] should_fail_ex+0x399/0x4d0 [ 271.410210][ T6633] should_failslab+0x5/0x20 [ 271.414755][ T6633] slab_pre_alloc_hook+0x59/0x310 [ 271.419828][ T6633] kmem_cache_alloc+0x56/0x2f0 [ 271.424624][ T6633] ? ptlock_alloc+0x1c/0x60 [ 271.429174][ T6633] ptlock_alloc+0x1c/0x60 [ 271.433538][ T6633] pte_alloc_one+0xc0/0x310 [ 271.438079][ T6633] ? pfn_modify_allowed+0x560/0x560 [ 271.443317][ T6633] ? __might_sleep+0xd0/0xd0 [ 271.447949][ T6633] ? rcu_is_watching+0x11/0xa0 [ 271.452763][ T6633] __pte_alloc+0x21/0x150 [ 271.457149][ T6633] copy_page_range+0x3118/0x3900 [ 271.462236][ T6633] ? pfn_valid+0x450/0x450 [ 271.466726][ T6633] ? up_write+0x1bb/0x420 [ 271.471104][ T6633] copy_mm+0xec3/0x1690 [ 271.475341][ T6633] ? copy_signal+0x680/0x680 [ 271.479975][ T6633] ? lockdep_init_map_type+0x98/0x8d0 [ 271.485435][ T6633] ? __init_rwsem+0x11e/0x160 [ 271.490167][ T6633] ? copy_signal+0x556/0x680 [ 271.494809][ T6633] copy_process+0x1979/0x4030 [ 271.499563][ T6633] ? copy_process+0x94d/0x4030 [ 271.504406][ T6633] ? idle_dummy+0x10/0x10 [ 271.508817][ T6633] kernel_clone+0x24b/0x900 [ 271.513365][ T6633] ? ksys_write+0x1c0/0x250 [ 271.517918][ T6633] ? create_io_thread+0x170/0x170 [ 271.523023][ T6633] __x64_sys_clone+0x1a7/0x220 [ 271.527821][ T6633] ? __fget_files+0x43d/0x4b0 [ 271.532551][ T6633] ? __ia32_sys_vfork+0x140/0x140 [ 271.537641][ T6633] ? lock_chain_count+0x20/0x20 [ 271.542546][ T6633] ? lockdep_hardirqs_on+0x94/0x140 [ 271.547790][ T6633] do_syscall_64+0x4c/0xa0 [ 271.552240][ T6633] ? clear_bhb_loop+0x60/0xb0 [ 271.556950][ T6633] ? clear_bhb_loop+0x60/0xb0 [ 271.561663][ T6633] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.567594][ T6633] RIP: 0033:0x7f1a89f9c799 [ 271.572042][ T6633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.591684][ T6633] RSP: 002b:00007f1a8ae08fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 271.600149][ T6633] RAX: ffffffffffffffda RBX: 00007f1a8a215fa0 RCX: 00007f1a89f9c799 [ 271.608157][ T6633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002024011 [ 271.616167][ T6633] RBP: 00007f1a8ae09090 R08: 0000000000000000 R09: 0000000000000000 [ 271.624167][ T6633] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 271.632170][ T6633] R13: 00007f1a8a216038 R14: 00007f1a8a215fa0 R15: 00007ffcb731f408 [ 271.640223][ T6633] [ 272.540864][ T6667] netlink: 'syz.2.737': attribute type 22 has an invalid length. [ 272.562886][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 272.956371][ T6678] bridge0: port 3(dummy0) entered disabled state [ 273.048293][ T6678] device bridge_slave_1 left promiscuous mode [ 273.105151][ T6678] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.163055][ T6678] device bridge_slave_0 left promiscuous mode [ 273.170743][ T6678] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.396411][ T6694] netlink: 'syz.3.746': attribute type 28 has an invalid length. [ 273.412150][ T6681] netlink: 160 bytes leftover after parsing attributes in process `syz.2.741'. [ 273.421662][ T6694] netlink: 'syz.3.746': attribute type 29 has an invalid length. [ 273.465187][ T6681] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 273.484541][ T6694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.746'. [ 273.683777][ T6692] netlink: 'syz.4.745': attribute type 10 has an invalid length. [ 273.730122][ T6692] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.748825][ T6692] bond0: (slave team0): Enslaving as an active interface with an up link [ 274.377110][ T6712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.752'. [ 274.640404][ T6725] netlink: 'syz.4.757': attribute type 10 has an invalid length. [ 274.665764][ T6725] device veth1_macvtap left promiscuous mode [ 275.393959][ T6751] FAULT_INJECTION: forcing a failure. [ 275.393959][ T6751] name failslab, interval 1, probability 0, space 0, times 0 [ 275.428528][ T6747] netlink: 160 bytes leftover after parsing attributes in process `syz.0.762'. [ 275.456029][ T6751] CPU: 0 PID: 6751 Comm: syz.4.765 Not tainted syzkaller #0 [ 275.463379][ T6751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 275.468705][ T6747] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 275.473442][ T6751] Call Trace: [ 275.473454][ T6751] [ 275.473462][ T6751] dump_stack_lvl+0x188/0x24e [ 275.473497][ T6751] ? show_regs_print_info+0x12/0x12 [ 275.473522][ T6751] ? load_image+0x400/0x400 [ 275.473546][ T6751] ? __might_sleep+0xd0/0xd0 [ 275.473565][ T6751] ? __lock_acquire+0x7d10/0x7d10 [ 275.473596][ T6751] should_fail_ex+0x399/0x4d0 [ 275.473631][ T6751] should_failslab+0x5/0x20 [ 275.473657][ T6751] slab_pre_alloc_hook+0x59/0x310 [ 275.473684][ T6751] kmem_cache_alloc+0x56/0x2f0 [ 275.473703][ T6751] ? vm_area_dup+0x23/0x1a0 [ 275.473727][ T6751] vm_area_dup+0x23/0x1a0 [ 275.473748][ T6751] copy_mm+0xb28/0x1690 [ 275.542960][ T6751] ? copy_signal+0x680/0x680 [ 275.547564][ T6751] ? lockdep_init_map_type+0x98/0x8d0 [ 275.552966][ T6751] ? __init_rwsem+0x11e/0x160 [ 275.557652][ T6751] ? copy_signal+0x556/0x680 [ 275.562253][ T6751] copy_process+0x1979/0x4030 [ 275.566950][ T6751] ? copy_process+0x94d/0x4030 [ 275.571731][ T6751] ? idle_dummy+0x10/0x10 [ 275.576101][ T6751] kernel_clone+0x24b/0x900 [ 275.580613][ T6751] ? ksys_write+0x1c0/0x250 [ 275.585135][ T6751] ? create_io_thread+0x170/0x170 [ 275.590208][ T6751] __x64_sys_clone+0x1a7/0x220 [ 275.594977][ T6751] ? __fget_files+0x43d/0x4b0 [ 275.599673][ T6751] ? __ia32_sys_vfork+0x140/0x140 [ 275.604714][ T6751] ? lock_chain_count+0x20/0x20 [ 275.609580][ T6751] ? lockdep_hardirqs_on+0x94/0x140 [ 275.614788][ T6751] do_syscall_64+0x4c/0xa0 [ 275.619209][ T6751] ? clear_bhb_loop+0x60/0xb0 [ 275.623889][ T6751] ? clear_bhb_loop+0x60/0xb0 [ 275.628571][ T6751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.634467][ T6751] RIP: 0033:0x7fb02239c799 [ 275.638893][ T6751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.658507][ T6751] RSP: 002b:00007fb02319efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 275.666928][ T6751] RAX: ffffffffffffffda RBX: 00007fb022615fa0 RCX: 00007fb02239c799 [ 275.674919][ T6751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 275.682902][ T6751] RBP: 00007fb02319f090 R08: 0000000000000000 R09: 0000000000000000 [ 275.690968][ T6751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 275.698948][ T6751] R13: 00007fb022616038 R14: 00007fb022615fa0 R15: 00007ffe737b9818 [ 275.706945][ T6751] [ 276.565957][ T6776] bridge0: port 3(dummy0) entered disabled state [ 276.572818][ T6776] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.580360][ T6776] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.744017][ T6770] bridge0: port 3(dummy0) entered disabled state [ 279.450172][ T6770] device bridge_slave_1 left promiscuous mode [ 279.456750][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.465686][ T6770] device bridge_slave_0 left promiscuous mode [ 279.474227][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.861492][ T6784] netlink: 'syz.3.777': attribute type 46 has an invalid length. [ 279.874418][ T6794] netlink: 160 bytes leftover after parsing attributes in process `syz.0.779'. [ 279.920624][ T6794] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 280.038409][ T6795] netlink: 'syz.0.779': attribute type 11 has an invalid length. [ 280.099448][ T6795] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.779'. [ 280.242634][ T6800] netlink: 'syz.1.780': attribute type 11 has an invalid length. [ 280.263084][ T6800] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.780'. [ 280.278892][ T6795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.303109][ T6798] netlink: 160 bytes leftover after parsing attributes in process `syz.1.780'. [ 280.370173][ T6800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.372321][ T6798] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 280.633369][ T6808] netlink: 160 bytes leftover after parsing attributes in process `syz.4.783'. [ 280.664474][ T6808] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 280.752823][ T6814] tipc: Failed do clone local mcast rcv buffer [ 283.728895][ T6839] FAULT_INJECTION: forcing a failure. [ 283.728895][ T6839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.770625][ T6842] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.801'. [ 283.808256][ T6839] CPU: 1 PID: 6839 Comm: syz.4.791 Not tainted syzkaller #0 [ 283.815602][ T6839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 283.825681][ T6839] Call Trace: [ 283.828984][ T6839] [ 283.831950][ T6839] dump_stack_lvl+0x188/0x24e [ 283.836670][ T6839] ? show_regs_print_info+0x12/0x12 [ 283.841899][ T6839] ? load_image+0x400/0x400 [ 283.846436][ T6839] ? __lock_acquire+0x7d10/0x7d10 [ 283.851506][ T6839] should_fail_ex+0x399/0x4d0 [ 283.856219][ T6839] _copy_from_user+0x2c/0x170 [ 283.860927][ T6839] iovec_from_user+0x143/0x360 [ 283.865726][ T6839] __import_iovec+0x6d/0x500 [ 283.870348][ T6839] import_iovec+0x6f/0xa0 [ 283.874684][ T6839] ___sys_sendmsg+0x252/0x360 [ 283.879380][ T6839] ? __sys_sendmsg+0x290/0x290 [ 283.884170][ T6839] ? __lock_acquire+0x7d10/0x7d10 [ 283.889227][ T6839] __se_sys_sendmsg+0x1bb/0x2a0 [ 283.894093][ T6839] ? __x64_sys_sendmsg+0x80/0x80 [ 283.899051][ T6839] ? lockdep_hardirqs_on+0x94/0x140 [ 283.904263][ T6839] do_syscall_64+0x4c/0xa0 [ 283.908685][ T6839] ? clear_bhb_loop+0x60/0xb0 [ 283.913378][ T6839] ? clear_bhb_loop+0x60/0xb0 [ 283.918067][ T6839] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.923963][ T6839] RIP: 0033:0x7fb02239c799 [ 283.928388][ T6839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.948000][ T6839] RSP: 002b:00007fb02319f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 283.956419][ T6839] RAX: ffffffffffffffda RBX: 00007fb022615fa0 RCX: 00007fb02239c799 [ 283.964393][ T6839] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 283.972377][ T6839] RBP: 00007fb02319f090 R08: 0000000000000000 R09: 0000000000000000 [ 283.980360][ T6839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.988346][ T6839] R13: 00007fb022616038 R14: 00007fb022615fa0 R15: 00007ffe737b9818 [ 283.996352][ T6839] [ 284.009784][ T6842] openvswitch: netlink: Key type 386 is out of range max 32 [ 284.314570][ T6856] FAULT_INJECTION: forcing a failure. [ 284.314570][ T6856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.363639][ T6856] CPU: 1 PID: 6856 Comm: syz.1.796 Not tainted syzkaller #0 [ 284.370988][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 284.381073][ T6856] Call Trace: [ 284.384380][ T6856] [ 284.387341][ T6856] dump_stack_lvl+0x188/0x24e [ 284.392060][ T6856] ? show_regs_print_info+0x12/0x12 [ 284.397295][ T6856] ? load_image+0x400/0x400 [ 284.401840][ T6856] ? __lock_acquire+0x7d10/0x7d10 [ 284.401999][ T6859] netlink: 160 bytes leftover after parsing attributes in process `syz.3.798'. [ 284.406888][ T6856] should_fail_ex+0x399/0x4d0 [ 284.406952][ T6856] _copy_from_user+0x2c/0x170 [ 284.406979][ T6856] kstrtouint_from_user+0xda/0x170 [ 284.407008][ T6856] ? kstrtol_from_user+0x190/0x190 [ 284.407069][ T6856] proc_fail_nth_write+0x8b/0x200 [ 284.407090][ T6856] ? proc_fail_nth_read+0x220/0x220 [ 284.407110][ T6856] ? common_file_perm+0x171/0x1c0 [ 284.407136][ T6856] ? proc_fail_nth_read+0x220/0x220 [ 284.407156][ T6856] vfs_write+0x2e6/0xa30 [ 284.407188][ T6856] ? file_end_write+0x250/0x250 [ 284.407214][ T6856] ? __fget_files+0x28/0x4b0 [ 284.407236][ T6856] ? __fget_files+0x28/0x4b0 [ 284.407261][ T6856] ? __fget_files+0x43d/0x4b0 [ 284.407293][ T6856] ? __fdget_pos+0x2ae/0x360 [ 284.434439][ T6859] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 284.435784][ T6856] ? ksys_write+0x71/0x250 [ 284.435821][ T6856] ksys_write+0x14c/0x250 [ 284.435850][ T6856] ? __ia32_sys_read+0x80/0x80 [ 284.435882][ T6856] ? lockdep_hardirqs_on+0x94/0x140 [ 284.435905][ T6856] do_syscall_64+0x4c/0xa0 [ 284.435928][ T6856] ? clear_bhb_loop+0x60/0xb0 [ 284.435949][ T6856] ? clear_bhb_loop+0x60/0xb0 [ 284.435972][ T6856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.435992][ T6856] RIP: 0033:0x7f92bd75cfce [ 284.436009][ T6856] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 284.436025][ T6856] RSP: 002b:00007f92be6b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 284.436049][ T6856] RAX: ffffffffffffffda RBX: 00007f92be6ba6c0 RCX: 00007f92bd75cfce [ 284.436063][ T6856] RDX: 0000000000000001 RSI: 00007f92be6ba0a0 RDI: 0000000000000006 [ 284.436075][ T6856] RBP: 00007f92be6ba090 R08: 0000000000000000 R09: 0000000000000000 [ 284.436088][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.436099][ T6856] R13: 00007f92bda16128 R14: 00007f92bda16090 R15: 00007ffe5dfe88b8 [ 284.436132][ T6856] [ 284.865312][ T6865] netlink: 'syz.3.798': attribute type 11 has an invalid length. [ 284.875819][ T6865] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.798'. [ 284.928090][ T6865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.989772][ T6861] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.799'. [ 285.255866][ T6875] netlink: 'syz.2.804': attribute type 7 has an invalid length. [ 290.099475][ T6913] netlink: 'syz.4.814': attribute type 21 has an invalid length. [ 290.164852][ T6913] netlink: 'syz.4.814': attribute type 15 has an invalid length. [ 290.314297][ T6917] netlink: 160 bytes leftover after parsing attributes in process `syz.0.816'. [ 290.430507][ T6917] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 292.564026][ T6942] netlink: 160 bytes leftover after parsing attributes in process `syz.0.823'. [ 292.761081][ T6942] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 292.880109][ T6945] netlink: 'syz.0.823': attribute type 11 has an invalid length. [ 292.915961][ T6945] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.823'. [ 292.993321][ T6945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.601380][ T6962] netlink: 'syz.0.829': attribute type 39 has an invalid length. [ 298.054590][ T6997] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 298.130003][ T6997] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 298.139198][ T6997] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 298.148357][ T6997] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 298.157504][ T6997] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 298.166627][ T6997] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 298.175720][ T6997] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 298.184849][ T6997] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 298.193979][ T6997] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 298.203093][ T6997] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 298.816100][ T7000] mac80211_hwsim hwsim9 »»»»»»: renamed from wlan0 [ 300.060236][ T7031] netlink: 'syz.0.849': attribute type 6 has an invalid length. [ 301.536301][ T7041] netlink: 'syz.0.852': attribute type 10 has an invalid length. [ 301.764770][ T7046] FAULT_INJECTION: forcing a failure. [ 301.764770][ T7046] name failslab, interval 1, probability 0, space 0, times 0 [ 301.846130][ T7046] CPU: 0 PID: 7046 Comm: syz.3.854 Not tainted syzkaller #0 [ 301.853492][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 301.863585][ T7046] Call Trace: [ 301.866900][ T7046] [ 301.869866][ T7046] dump_stack_lvl+0x188/0x24e [ 301.874598][ T7046] ? show_regs_print_info+0x12/0x12 [ 301.879843][ T7046] ? load_image+0x400/0x400 [ 301.884405][ T7046] ? __might_sleep+0xd0/0xd0 [ 301.889045][ T7046] ? __lock_acquire+0x7d10/0x7d10 [ 301.894138][ T7046] should_fail_ex+0x399/0x4d0 [ 301.898873][ T7046] should_failslab+0x5/0x20 [ 301.903420][ T7046] slab_pre_alloc_hook+0x59/0x310 [ 301.908494][ T7046] kmem_cache_alloc+0x56/0x2f0 [ 301.913295][ T7046] ? vm_area_dup+0x23/0x1a0 [ 301.917844][ T7046] vm_area_dup+0x23/0x1a0 [ 301.922214][ T7046] copy_mm+0xb28/0x1690 [ 301.926442][ T7046] ? copy_signal+0x680/0x680 [ 301.931064][ T7046] ? lockdep_init_map_type+0x98/0x8d0 [ 301.936527][ T7046] ? __init_rwsem+0x11e/0x160 [ 301.941245][ T7046] ? copy_signal+0x556/0x680 [ 301.945875][ T7046] copy_process+0x1979/0x4030 [ 301.950626][ T7046] ? copy_process+0x94d/0x4030 [ 301.955466][ T7046] ? idle_dummy+0x10/0x10 [ 301.959872][ T7046] kernel_clone+0x24b/0x900 [ 301.964407][ T7046] ? ksys_write+0x1c0/0x250 [ 301.968968][ T7046] ? create_io_thread+0x170/0x170 [ 301.974077][ T7046] __x64_sys_clone+0x1a7/0x220 [ 301.978877][ T7046] ? __fget_files+0x43d/0x4b0 [ 301.983600][ T7046] ? __ia32_sys_vfork+0x140/0x140 [ 301.988688][ T7046] ? lock_chain_count+0x20/0x20 [ 301.993599][ T7046] ? lockdep_hardirqs_on+0x94/0x140 [ 301.998845][ T7046] do_syscall_64+0x4c/0xa0 [ 302.003296][ T7046] ? clear_bhb_loop+0x60/0xb0 [ 302.008006][ T7046] ? clear_bhb_loop+0x60/0xb0 [ 302.012733][ T7046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 302.018663][ T7046] RIP: 0033:0x7f213839c799 [ 302.023126][ T7046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.042771][ T7046] RSP: 002b:00007f21392a7fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 302.051228][ T7046] RAX: ffffffffffffffda RBX: 00007f2138615fa0 RCX: 00007f213839c799 [ 302.059238][ T7046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002024011 [ 302.067239][ T7046] RBP: 00007f21392a8090 R08: 0000000000000000 R09: 0000000000000000 [ 302.075240][ T7046] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 302.083239][ T7046] R13: 00007f2138616038 R14: 00007f2138615fa0 R15: 00007ffc5f857028 [ 302.091278][ T7046] [ 304.174045][ T7069] FAULT_INJECTION: forcing a failure. [ 304.174045][ T7069] name failslab, interval 1, probability 0, space 0, times 0 [ 304.218155][ T7069] CPU: 1 PID: 7069 Comm: syz.0.861 Not tainted syzkaller #0 [ 304.225513][ T7069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 304.235594][ T7069] Call Trace: [ 304.238912][ T7069] [ 304.241877][ T7069] dump_stack_lvl+0x188/0x24e [ 304.246595][ T7069] ? show_regs_print_info+0x12/0x12 [ 304.251816][ T7069] ? load_image+0x400/0x400 [ 304.256344][ T7069] ? __might_sleep+0xd0/0xd0 [ 304.260970][ T7069] ? __lock_acquire+0x7d10/0x7d10 [ 304.266037][ T7069] should_fail_ex+0x399/0x4d0 [ 304.270759][ T7069] should_failslab+0x5/0x20 [ 304.275297][ T7069] slab_pre_alloc_hook+0x59/0x310 [ 304.280360][ T7069] ? kvmalloc_node+0x6c/0x180 [ 304.285075][ T7069] __kmem_cache_alloc_node+0x4f/0x260 [ 304.290464][ T7069] ? kvmalloc_node+0x6c/0x180 [ 304.290494][ T7069] __kmalloc_node+0xa0/0x240 [ 304.299877][ T7069] kvmalloc_node+0x6c/0x180 [ 304.304424][ T7069] bpf_test_run_xdp_live+0x209/0x1a90 [ 304.309828][ T7069] ? verify_lock_unused+0x140/0x140 [ 304.315071][ T7069] ? kasan_set_track+0x60/0x70 [ 304.319869][ T7069] ? kasan_set_track+0x4b/0x70 [ 304.324666][ T7069] ? __kasan_kmalloc+0x8e/0xa0 [ 304.329467][ T7069] ? bpf_test_init+0x9f/0x140 [ 304.334175][ T7069] ? bpf_prog_test_run_xdp+0x484/0xf10 [ 304.339666][ T7069] ? bpf_prog_test_run+0x31e/0x390 [ 304.344820][ T7069] ? __x64_sys_bpf+0x78/0x90 [ 304.349453][ T7069] ? do_syscall_64+0x4c/0xa0 [ 304.354077][ T7069] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.360186][ T7069] ? xdp_convert_md_to_buff+0x330/0x330 [ 304.365774][ T7069] ? __lock_acquire+0x7d10/0x7d10 [ 304.370845][ T7069] ? __virt_addr_valid+0x188/0x540 [ 304.376003][ T7069] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 304.382296][ T7069] ? bpf_test_init+0x119/0x140 [ 304.387097][ T7069] ? xdp_convert_md_to_buff+0x5b/0x330 [ 304.392597][ T7069] bpf_prog_test_run_xdp+0x736/0xf10 [ 304.397928][ T7069] ? dev_put+0x80/0x80 [ 304.402042][ T7069] ? dev_put+0x80/0x80 [ 304.406140][ T7069] bpf_prog_test_run+0x31e/0x390 [ 304.411113][ T7069] __sys_bpf+0x62b/0x780 [ 304.415385][ T7069] ? bpf_link_show_fdinfo+0x380/0x380 [ 304.420803][ T7069] ? lock_chain_count+0x20/0x20 [ 304.425708][ T7069] __x64_sys_bpf+0x78/0x90 [ 304.430158][ T7069] do_syscall_64+0x4c/0xa0 [ 304.434600][ T7069] ? clear_bhb_loop+0x60/0xb0 [ 304.439300][ T7069] ? clear_bhb_loop+0x60/0xb0 [ 304.444007][ T7069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.449925][ T7069] RIP: 0033:0x7f0e9439c799 [ 304.454364][ T7069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.473989][ T7069] RSP: 002b:00007f0e9519d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 304.482433][ T7069] RAX: ffffffffffffffda RBX: 00007f0e94615fa0 RCX: 00007f0e9439c799 [ 304.490431][ T7069] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 304.498430][ T7069] RBP: 00007f0e9519d090 R08: 0000000000000000 R09: 0000000000000000 [ 304.506420][ T7069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.514413][ T7069] R13: 00007f0e94616038 R14: 00007f0e94615fa0 R15: 00007fff6de1ff18 [ 304.522429][ T7069] [ 304.534027][ T7065] netlink: 'syz.2.859': attribute type 10 has an invalid length. [ 304.687741][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.702055][ T7065] team0: Port device bond0 added [ 307.924450][ T7102] netlink: 'syz.4.871': attribute type 10 has an invalid length. [ 307.987993][ T7102] bond0: (slave team0): Releasing backup interface [ 308.482801][ T7118] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.876'. [ 308.648236][ T7119] netlink: 'syz.3.876': attribute type 3 has an invalid length. [ 308.728343][ T7119] netlink: 'syz.3.876': attribute type 8 has an invalid length. [ 308.746952][ T7119] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.876'. [ 309.247182][ T7124] netlink: 'syz.1.879': attribute type 6 has an invalid length. [ 309.757847][ T7135] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.882'. [ 313.203755][ T7162] netlink: 'syz.3.890': attribute type 10 has an invalid length. [ 313.335498][ T7162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.583341][ T7162] team0: Port device bond0 added [ 313.747771][ T7183] IPv6: NLM_F_CREATE should be specified when creating new route [ 313.755666][ T7183] netlink: 1 bytes leftover after parsing attributes in process `syz.2.897'. [ 313.912271][ T7184] netlink: 'syz.2.897': attribute type 3 has an invalid length. [ 313.956290][ T7184] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.897'. [ 314.587919][ T7187] device syzkaller0 entered promiscuous mode [ 314.611304][ T7189] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 314.619034][ T7189] syzkaller0: Linktype set failed because interface is up [ 314.629298][ T4316] syzkaller0: tun_net_xmit 48 [ 315.202514][ T7202] netlink: 'syz.2.901': attribute type 11 has an invalid length. [ 315.239782][ T7202] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.901'. [ 315.294244][ T7202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.219228][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.225676][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.959626][ T7210] tipc: Failed to clone mcast rcv buffer [ 324.858181][ T7200] netlink: 160 bytes leftover after parsing attributes in process `syz.2.901'. [ 324.867539][ T7200] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 328.399110][ T7295] delete_channel: no stack [ 328.705428][ T7310] netlink: 160 bytes leftover after parsing attributes in process `syz.1.936'. [ 328.748012][ T7310] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 329.268964][ T7316] netlink: 'syz.1.936': attribute type 11 has an invalid length. [ 329.337050][ T7316] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.936'. [ 329.409512][ T7316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.784962][ T7337] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.945'. [ 329.920251][ T7337] device veth0_to_team entered promiscuous mode [ 329.984370][ T7333] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.942'. [ 330.101548][ T7333] bridge_slave_1: default FDB implementation only supports local addresses [ 330.769705][ T7354] netlink: 'syz.2.946': attribute type 10 has an invalid length. [ 330.939936][ T7354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.946'. [ 330.978808][ T7354] net_ratelimit: 3256 callbacks suppressed [ 330.978824][ T7354] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 331.744102][ T7361] device syzkaller0 entered promiscuous mode [ 331.783409][ T7369] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 331.825428][ T7369] syzkaller0: Linktype set failed because interface is up [ 331.839672][ T7376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.955'. [ 331.889742][ T4359] syzkaller0: tun_net_xmit 48 [ 331.904827][ T7376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.955'. [ 331.917401][ T7373] netlink: 'syz.0.954': attribute type 11 has an invalid length. [ 331.925860][ T7373] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.954'. [ 331.941813][ T7373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.214458][ T7379] netlink: 60 bytes leftover after parsing attributes in process `syz.1.955'. [ 336.979167][ T7403] delete_channel: no stack [ 337.832346][ T7429] netlink: 'syz.2.969': attribute type 11 has an invalid length. [ 337.841202][ T7429] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.969'. [ 337.853473][ T7429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.043809][ T7435] netlink: 'syz.2.970': attribute type 2 has an invalid length. [ 339.065911][ T7435] netlink: 'syz.2.970': attribute type 8 has an invalid length. [ 339.088251][ T7435] netlink: 132 bytes leftover after parsing attributes in process `syz.2.970'. [ 339.104761][ T7436] netlink: 'syz.2.970': attribute type 2 has an invalid length. [ 339.126626][ T7436] netlink: 'syz.2.970': attribute type 8 has an invalid length. [ 339.134318][ T7436] netlink: 132 bytes leftover after parsing attributes in process `syz.2.970'. [ 340.684318][ T7468] netlink: 'syz.0.980': attribute type 11 has an invalid length. [ 340.693299][ T7468] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.980'. [ 340.710420][ T7468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.945079][ T7478] netlink: 160 bytes leftover after parsing attributes in process `syz.1.994'. [ 344.075477][ T7478] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 344.641048][ T7482] netlink: 'syz.1.994': attribute type 11 has an invalid length. [ 344.889443][ T7482] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.994'. [ 344.899105][ T7490] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 344.906659][ T7490] syzkaller0: linktype set to 776 [ 344.916897][ T7483] netlink: 'syz.3.985': attribute type 11 has an invalid length. [ 344.917104][ T7482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.924643][ T7483] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.985'. [ 344.976307][ T7483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.018803][ T7486] device syzkaller0 entered promiscuous mode [ 345.481446][ T7502] netlink: 'syz.1.998': attribute type 11 has an invalid length. [ 345.504203][ T7502] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.998'. [ 345.550712][ T7502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.098783][ T7494] netlink: 'syz.4.986': attribute type 10 has an invalid length. [ 347.106961][ T7499] netlink: 160 bytes leftover after parsing attributes in process `syz.1.998'. [ 347.118586][ T7499] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 347.850788][ T7520] device syzkaller0 entered promiscuous mode [ 349.407686][ T7552] netlink: 'syz.0.1002': attribute type 11 has an invalid length. [ 349.460056][ T7552] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1002'. [ 349.596045][ T7552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.778297][ T7551] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1002'. [ 351.787803][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 351.829036][ T7609] netlink: 'syz.1.1003': attribute type 10 has an invalid length. [ 351.851840][ T7609] device veth1_macvtap left promiscuous mode [ 353.799625][ T7678] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1016'. [ 353.828373][ T7678] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 354.004239][ T7684] FAULT_INJECTION: forcing a failure. [ 354.004239][ T7684] name failslab, interval 1, probability 0, space 0, times 0 [ 354.245453][ T7684] CPU: 1 PID: 7684 Comm: syz.2.1018 Not tainted syzkaller #0 [ 354.252897][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 354.262979][ T7684] Call Trace: [ 354.266279][ T7684] [ 354.269254][ T7684] dump_stack_lvl+0x188/0x24e [ 354.273968][ T7684] ? show_regs_print_info+0x12/0x12 [ 354.279204][ T7684] ? load_image+0x400/0x400 [ 354.283738][ T7684] ? __might_sleep+0xd0/0xd0 [ 354.288360][ T7684] ? __lock_acquire+0x7d10/0x7d10 [ 354.293434][ T7684] should_fail_ex+0x399/0x4d0 [ 354.298164][ T7684] should_failslab+0x5/0x20 [ 354.302706][ T7684] slab_pre_alloc_hook+0x59/0x310 [ 354.307771][ T7684] kmem_cache_alloc+0x56/0x2f0 [ 354.312555][ T7684] ? ptlock_alloc+0x1c/0x60 [ 354.317068][ T7684] ptlock_alloc+0x1c/0x60 [ 354.321402][ T7684] pte_alloc_one+0xc0/0x310 [ 354.325919][ T7684] ? pfn_modify_allowed+0x560/0x560 [ 354.331127][ T7684] ? __might_sleep+0xd0/0xd0 [ 354.335727][ T7684] ? rcu_is_watching+0x11/0xa0 [ 354.340508][ T7684] __pte_alloc+0x21/0x150 [ 354.344851][ T7684] copy_page_range+0x3118/0x3900 [ 354.349843][ T7684] ? pfn_valid+0x450/0x450 [ 354.354280][ T7684] ? up_write+0x1bb/0x420 [ 354.358624][ T7684] copy_mm+0xec3/0x1690 [ 354.362799][ T7684] ? copy_signal+0x680/0x680 [ 354.367392][ T7684] ? lockdep_init_map_type+0x98/0x8d0 [ 354.372788][ T7684] ? __init_rwsem+0x11e/0x160 [ 354.377471][ T7684] ? copy_signal+0x556/0x680 [ 354.382068][ T7684] copy_process+0x1979/0x4030 [ 354.386767][ T7684] ? copy_process+0x94d/0x4030 [ 354.391545][ T7684] ? idle_dummy+0x10/0x10 [ 354.395888][ T7684] ? __lock_acquire+0x7d10/0x7d10 [ 354.400925][ T7684] kernel_clone+0x24b/0x900 [ 354.405434][ T7684] ? trace_call_bpf+0xbf/0x6b0 [ 354.410210][ T7684] ? trace_call_bpf+0xbf/0x6b0 [ 354.414987][ T7684] ? create_io_thread+0x170/0x170 [ 354.420029][ T7684] ? lockdep_hardirqs_on+0x94/0x140 [ 354.425240][ T7684] __x64_sys_clone+0x1a7/0x220 [ 354.430007][ T7684] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 354.435824][ T7684] ? __ia32_sys_vfork+0x140/0x140 [ 354.440868][ T7684] ? lock_chain_count+0x20/0x20 [ 354.445732][ T7684] ? lockdep_hardirqs_on+0x94/0x140 [ 354.450935][ T7684] do_syscall_64+0x4c/0xa0 [ 354.455363][ T7684] ? clear_bhb_loop+0x60/0xb0 [ 354.460049][ T7684] ? clear_bhb_loop+0x60/0xb0 [ 354.464735][ T7684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.470631][ T7684] RIP: 0033:0x7f1a89f9c799 [ 354.475062][ T7684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.494681][ T7684] RSP: 002b:00007f1a8ae08fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 354.503101][ T7684] RAX: ffffffffffffffda RBX: 00007f1a8a215fa0 RCX: 00007f1a89f9c799 [ 354.511079][ T7684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 354.519227][ T7684] RBP: 00007f1a8ae09090 R08: 0000000000000000 R09: 0000000000000000 [ 354.527204][ T7684] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 354.535175][ T7684] R13: 00007f1a8a216038 R14: 00007f1a8a215fa0 R15: 00007ffcb731f408 [ 354.543165][ T7684] [ 354.623227][ T7683] netlink: 'syz.1.1016': attribute type 11 has an invalid length. [ 354.705531][ T7683] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1016'. [ 354.808424][ T7683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.703599][ T7727] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1032'. [ 356.764041][ T7727] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 357.289709][ T7730] netlink: 'syz.1.1032': attribute type 11 has an invalid length. [ 357.311463][ T7730] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1032'. [ 357.431959][ T7733] mac80211_hwsim hwsim25 »»»»»»7熦н: renamed from wlan0 [ 357.445139][ T7727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.447348][ T7730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.642153][ T7727] syz.1.1032 (7727) used greatest stack depth: 19504 bytes left [ 358.298665][ T7753] netlink: 'syz.1.1041': attribute type 2 has an invalid length. [ 358.407656][ T7753] netlink: 161436 bytes leftover after parsing attributes in process `syz.1.1041'. [ 358.833123][ T7768] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1046'. [ 358.910251][ T7768] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 359.511724][ T7770] netlink: 'syz.4.1046': attribute type 11 has an invalid length. [ 359.630345][ T7770] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1046'. [ 359.692267][ T7770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.720457][ T7776] netlink: 'syz.3.1048': attribute type 22 has an invalid length. [ 359.827345][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1048'. [ 360.021923][ T7785] netlink: 'syz.4.1050': attribute type 22 has an invalid length. [ 360.043517][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1050'. [ 360.702466][ T7803] tipc: Failed to clone mcast rcv buffer [ 361.099791][ T7812] netlink: 'syz.4.1061': attribute type 11 has an invalid length. [ 361.189131][ T7812] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1061'. [ 361.323084][ T7812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.821248][ T7824] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1057'. [ 364.626030][ T7839] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1065'. [ 364.672333][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 365.126071][ T7844] netlink: 'syz.0.1065': attribute type 11 has an invalid length. [ 365.154961][ T7844] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1065'. [ 365.215613][ T7844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.251565][ T7868] netlink: 'syz.0.1074': attribute type 11 has an invalid length. [ 366.307514][ T7868] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1074'. [ 366.562264][ T7868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.934435][ T7900] netlink: 'syz.4.1081': attribute type 11 has an invalid length. [ 369.953357][ T7900] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1081'. [ 369.991979][ T7900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.105765][ T7898] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1081'. [ 372.115937][ T7898] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 372.342850][ T7905] sctp: [Deprecated]: syz.0.1083 (pid 7905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.342850][ T7905] Use struct sctp_sack_info instead [ 372.468912][ T7907] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1085'. [ 372.499798][ T7907] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 372.970245][ T7915] netlink: 'syz.2.1085': attribute type 11 has an invalid length. [ 373.003156][ T7915] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1085'. [ 373.125533][ T7915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.651592][ T7930] netlink: 'syz.1.1091': attribute type 11 has an invalid length. [ 373.677206][ T7930] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1091'. [ 373.692452][ T7930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.048714][ T7977] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1107'. [ 377.105230][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 377.863611][ T7992] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1110'. [ 378.757473][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.763875][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.994680][ T8024] netlink: 'syz.0.1120': attribute type 7 has an invalid length. [ 382.091453][ T8029] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1123'. [ 382.155288][ T8029] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 382.786004][ T8043] netlink: 'syz.2.1127': attribute type 7 has an invalid length. [ 383.799560][ T8080] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1138'. [ 383.802559][ T8078] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1138'. [ 383.884032][ T8080] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1138'. [ 384.812225][ T8083] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1140'. [ 384.862795][ T8083] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 384.950897][ T8083] netlink: 'syz.0.1140': attribute type 11 has an invalid length. [ 384.986882][ T8083] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1140'. [ 385.114237][ T8083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.242229][ T8100] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1145'. [ 385.309289][ T8104] netlink: 'syz.4.1145': attribute type 10 has an invalid length. [ 385.413400][ T8103] netlink: 'syz.1.1147': attribute type 22 has an invalid length. [ 385.502692][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 385.809265][ T8119] FAULT_INJECTION: forcing a failure. [ 385.809265][ T8119] name failslab, interval 1, probability 0, space 0, times 0 [ 385.844900][ T8119] CPU: 1 PID: 8119 Comm: syz.1.1151 Not tainted syzkaller #0 [ 385.852344][ T8119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.862432][ T8119] Call Trace: [ 385.865736][ T8119] [ 385.868695][ T8119] dump_stack_lvl+0x188/0x24e [ 385.873414][ T8119] ? show_regs_print_info+0x12/0x12 [ 385.878654][ T8119] ? load_image+0x400/0x400 [ 385.883191][ T8119] ? __might_sleep+0xd0/0xd0 [ 385.887801][ T8119] ? __lock_acquire+0x7d10/0x7d10 [ 385.892845][ T8119] should_fail_ex+0x399/0x4d0 [ 385.897536][ T8119] should_failslab+0x5/0x20 [ 385.902047][ T8119] slab_pre_alloc_hook+0x59/0x310 [ 385.907090][ T8119] ? kvmalloc_node+0x6c/0x180 [ 385.911787][ T8119] __kmem_cache_alloc_node+0x4f/0x260 [ 385.917166][ T8119] ? kvmalloc_node+0x6c/0x180 [ 385.921851][ T8119] __kmalloc_node+0xa0/0x240 [ 385.926457][ T8119] kvmalloc_node+0x6c/0x180 [ 385.930971][ T8119] page_pool_create+0x1e7/0x5c0 [ 385.935825][ T8119] bpf_test_run_xdp_live+0x223/0x1a90 [ 385.941216][ T8119] ? verify_lock_unused+0x140/0x140 [ 385.946425][ T8119] ? kasan_set_track+0x60/0x70 [ 385.951194][ T8119] ? kasan_set_track+0x4b/0x70 [ 385.955965][ T8119] ? __kasan_kmalloc+0x8e/0xa0 [ 385.960734][ T8119] ? bpf_test_init+0x9f/0x140 [ 385.965410][ T8119] ? bpf_prog_test_run_xdp+0x484/0xf10 [ 385.970869][ T8119] ? bpf_prog_test_run+0x31e/0x390 [ 385.975989][ T8119] ? __x64_sys_bpf+0x78/0x90 [ 385.980585][ T8119] ? do_syscall_64+0x4c/0xa0 [ 385.985179][ T8119] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 385.991256][ T8119] ? xdp_convert_md_to_buff+0x330/0x330 [ 385.996822][ T8119] ? __lock_acquire+0x7d10/0x7d10 [ 386.001853][ T8119] ? __virt_addr_valid+0x188/0x540 [ 386.006981][ T8119] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 386.013234][ T8119] ? bpf_test_init+0x119/0x140 [ 386.017999][ T8119] ? xdp_convert_md_to_buff+0x5b/0x330 [ 386.023462][ T8119] bpf_prog_test_run_xdp+0x736/0xf10 [ 386.028767][ T8119] ? dev_put+0x80/0x80 [ 386.032854][ T8119] ? dev_put+0x80/0x80 [ 386.036930][ T8119] bpf_prog_test_run+0x31e/0x390 [ 386.041880][ T8119] __sys_bpf+0x62b/0x780 [ 386.046134][ T8119] ? bpf_link_show_fdinfo+0x380/0x380 [ 386.051528][ T8119] ? lock_chain_count+0x20/0x20 [ 386.056392][ T8119] __x64_sys_bpf+0x78/0x90 [ 386.060814][ T8119] do_syscall_64+0x4c/0xa0 [ 386.065233][ T8119] ? clear_bhb_loop+0x60/0xb0 [ 386.069913][ T8119] ? clear_bhb_loop+0x60/0xb0 [ 386.074594][ T8119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 386.080491][ T8119] RIP: 0033:0x7f92bd79c799 [ 386.084911][ T8119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.104519][ T8119] RSP: 002b:00007f92be6db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 386.112942][ T8119] RAX: ffffffffffffffda RBX: 00007f92bda15fa0 RCX: 00007f92bd79c799 [ 386.120921][ T8119] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 386.128898][ T8119] RBP: 00007f92be6db090 R08: 0000000000000000 R09: 0000000000000000 [ 386.136874][ T8119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.144845][ T8119] R13: 00007f92bda16038 R14: 00007f92bda15fa0 R15: 00007ffe5dfe88b8 [ 386.152832][ T8119] [ 386.161020][ T8119] page_pool_create() gave up with errno -12 [ 386.269648][ T8126] netlink: 'syz.3.1153': attribute type 10 has an invalid length. [ 386.343787][ T8129] netlink: 'syz.4.1152': attribute type 2 has an invalid length. [ 386.385664][ T8129] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1152'. [ 387.821611][ T8156] netlink: 'syz.0.1160': attribute type 11 has an invalid length. [ 387.948263][ T8156] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1160'. [ 388.043019][ T8156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.573027][ T8143] device syzkaller0 entered promiscuous mode [ 388.597922][ T8152] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1160'. [ 388.607983][ T8152] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 390.991067][ T8172] netlink: 'syz.4.1166': attribute type 10 has an invalid length. [ 391.008679][ T8189] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1171'. [ 391.259136][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'. [ 392.081936][ T8209] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1178'. [ 392.125483][ T8209] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 392.430581][ T8206] netlink: 'syz.0.1178': attribute type 11 has an invalid length. [ 392.440208][ T8206] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1178'. [ 392.514319][ T8206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.918214][ T8223] netlink: 'syz.4.1183': attribute type 22 has an invalid length. [ 392.948410][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1183'. [ 396.387621][ T8255] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1194'. [ 396.428010][ T8255] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 396.792974][ T8256] netlink: 'syz.2.1194': attribute type 11 has an invalid length. [ 396.805197][ T8256] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1194'. [ 396.879234][ T8256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.116948][ T8270] netlink: 'syz.0.1198': attribute type 22 has an invalid length. [ 397.179306][ T8270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'. [ 400.684809][ T8333] FAULT_INJECTION: forcing a failure. [ 400.684809][ T8333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.766212][ T8333] CPU: 1 PID: 8333 Comm: syz.2.1219 Not tainted syzkaller #0 [ 400.773654][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.783744][ T8333] Call Trace: [ 400.787062][ T8333] [ 400.790022][ T8333] dump_stack_lvl+0x188/0x24e [ 400.794746][ T8333] ? show_regs_print_info+0x12/0x12 [ 400.799987][ T8333] ? load_image+0x400/0x400 [ 400.804525][ T8333] ? __might_fault+0xa6/0x120 [ 400.809236][ T8333] should_fail_ex+0x399/0x4d0 [ 400.813962][ T8333] copyin+0x1b/0x120 [ 400.817894][ T8333] _copy_from_iter+0x447/0x1130 [ 400.822764][ T8333] ? copyout_mc+0x110/0x110 [ 400.827275][ T8333] ? __virt_addr_valid+0x188/0x540 [ 400.832397][ T8333] ? __virt_addr_valid+0x188/0x540 [ 400.837519][ T8333] ? __virt_addr_valid+0x465/0x540 [ 400.842646][ T8333] ? __check_object_size+0x500/0xa40 [ 400.847947][ T8333] netlink_sendmsg+0x755/0xbd0 [ 400.852736][ T8333] ? netlink_getsockopt+0x550/0x550 [ 400.857946][ T8333] ? aa_sock_msg_perm+0x94/0x150 [ 400.862892][ T8333] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 400.868184][ T8333] ? security_socket_sendmsg+0x7c/0xa0 [ 400.873658][ T8333] ? netlink_getsockopt+0x550/0x550 [ 400.878864][ T8333] ____sys_sendmsg+0x5be/0x970 [ 400.883643][ T8333] ? __sys_sendmsg_sock+0x30/0x30 [ 400.888678][ T8333] ? __import_iovec+0x315/0x500 [ 400.893576][ T8333] ? import_iovec+0x6f/0xa0 [ 400.898084][ T8333] ___sys_sendmsg+0x2a2/0x360 [ 400.902780][ T8333] ? __sys_sendmsg+0x290/0x290 [ 400.907570][ T8333] ? trace_call_bpf+0xbf/0x6b0 [ 400.912360][ T8333] __se_sys_sendmsg+0x1bb/0x2a0 [ 400.917225][ T8333] ? __x64_sys_sendmsg+0x80/0x80 [ 400.922186][ T8333] ? lockdep_hardirqs_on+0x94/0x140 [ 400.927392][ T8333] do_syscall_64+0x4c/0xa0 [ 400.931813][ T8333] ? clear_bhb_loop+0x60/0xb0 [ 400.936497][ T8333] ? clear_bhb_loop+0x60/0xb0 [ 400.941179][ T8333] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.947081][ T8333] RIP: 0033:0x7f1a89f9c799 [ 400.951510][ T8333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.971120][ T8333] RSP: 002b:00007f1a8ae09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.979542][ T8333] RAX: ffffffffffffffda RBX: 00007f1a8a215fa0 RCX: 00007f1a89f9c799 [ 400.987521][ T8333] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 400.995497][ T8333] RBP: 00007f1a8ae09090 R08: 0000000000000000 R09: 0000000000000000 [ 401.003473][ T8333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.011448][ T8333] R13: 00007f1a8a216038 R14: 00007f1a8a215fa0 R15: 00007ffcb731f408 [ 401.019457][ T8333] [ 404.954829][ T8367] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1231'. [ 408.764351][ T8399] netlink: 'syz.4.1240': attribute type 7 has an invalid length. [ 409.001096][ T8390] netlink: 'syz.0.1235': attribute type 10 has an invalid length. [ 409.014523][ T8390] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1235'. [ 409.052873][ T8390] device ipvlan1 entered promiscuous mode [ 409.092870][ T8390] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 411.038083][ T8442] netlink: 'syz.3.1254': attribute type 12 has an invalid length. [ 411.156182][ T8442] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1254'. [ 413.442773][ T8482] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1269'. [ 413.678620][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 414.076346][ T8488] netlink: 'syz.2.1270': attribute type 3 has an invalid length. [ 414.084154][ T8488] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1270'. [ 414.102014][ T8485] netlink: 'syz.3.1269': attribute type 11 has an invalid length. [ 414.178945][ T8485] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1269'. [ 414.229046][ T8485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.235135][ T8482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.073736][ T8511] netlink: 'syz.1.1286': attribute type 10 has an invalid length. [ 415.161737][ T8511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1286'. [ 415.318735][ T8511] device ipvlan1 entered promiscuous mode [ 415.732826][ T8511] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 416.938904][ T8537] netlink: 'syz.4.1283': attribute type 10 has an invalid length. [ 416.950814][ T8541] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1285'. [ 417.017777][ T8541] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 417.120320][ T8547] netlink: 'syz.0.1287': attribute type 10 has an invalid length. [ 417.170322][ T8547] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1287'. [ 417.587069][ T8547] batman_adv: batadv0: Interface deactivated: vlan1 [ 418.204383][ T8547] batman_adv: batadv0: Removing interface: vlan1 [ 419.915860][ T8603] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1302'. [ 419.943950][ T8603] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 420.205914][ T8605] netlink: 'syz.2.1302': attribute type 11 has an invalid length. [ 420.226332][ T8605] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1302'. [ 420.282080][ T8605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.352645][ T8617] netlink: 'syz.0.1305': attribute type 7 has an invalid length. [ 423.313361][ T8636] netlink: 'syz.0.1313': attribute type 7 has an invalid length. [ 423.977515][ T8646] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1317'. [ 424.060351][ T8646] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 424.388949][ T8647] netlink: 'syz.2.1317': attribute type 11 has an invalid length. [ 424.432358][ T8647] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1317'. [ 424.502856][ T8647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.803531][ T8668] netlink: 'syz.0.1323': attribute type 4 has an invalid length. [ 426.839045][ T8668] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1323'. [ 426.923206][ T8671] netlink: 'syz.1.1322': attribute type 10 has an invalid length. [ 426.949030][ T8671] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1322'. [ 427.802453][ T8679] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1325'. [ 428.127323][ T8701] netlink: 'syz.4.1329': attribute type 7 has an invalid length. [ 428.173699][ T8700] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1330'. [ 428.242289][ T8700] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 428.339435][ T8700] netlink: 'syz.1.1330': attribute type 11 has an invalid length. [ 428.375075][ T8700] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1330'. [ 428.634433][ T8700] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.850192][ T8735] FAULT_INJECTION: forcing a failure. [ 429.850192][ T8735] name failslab, interval 1, probability 0, space 0, times 0 [ 429.920765][ T8735] CPU: 1 PID: 8735 Comm: syz.1.1341 Not tainted syzkaller #0 [ 429.928206][ T8735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.938282][ T8735] Call Trace: [ 429.941578][ T8735] [ 429.944530][ T8735] dump_stack_lvl+0x188/0x24e [ 429.949245][ T8735] ? show_regs_print_info+0x12/0x12 [ 429.954473][ T8735] ? load_image+0x400/0x400 [ 429.959005][ T8735] ? __might_sleep+0xd0/0xd0 [ 429.963624][ T8735] ? __lock_acquire+0x7d10/0x7d10 [ 429.968688][ T8735] should_fail_ex+0x399/0x4d0 [ 429.973403][ T8735] should_failslab+0x5/0x20 [ 429.977938][ T8735] slab_pre_alloc_hook+0x59/0x310 [ 429.982991][ T8735] kmem_cache_alloc+0x56/0x2f0 [ 429.987779][ T8735] ? vm_area_dup+0x23/0x1a0 [ 429.992314][ T8735] vm_area_dup+0x23/0x1a0 [ 429.996672][ T8735] copy_mm+0xb28/0x1690 [ 429.999978][ T8728] device sit0 entered promiscuous mode [ 430.000855][ T8735] ? copy_signal+0x680/0x680 [ 430.000886][ T8735] ? lockdep_init_map_type+0x98/0x8d0 [ 430.000934][ T8735] ? __init_rwsem+0x11e/0x160 [ 430.000958][ T8735] ? copy_signal+0x556/0x680 [ 430.000982][ T8735] copy_process+0x1979/0x4030 [ 430.001019][ T8735] ? copy_process+0x94d/0x4030 [ 430.001054][ T8735] ? idle_dummy+0x10/0x10 [ 430.001088][ T8735] kernel_clone+0x24b/0x900 [ 430.001108][ T8735] ? ksys_write+0x1c0/0x250 [ 430.001137][ T8735] ? create_io_thread+0x170/0x170 [ 430.001180][ T8735] __x64_sys_clone+0x1a7/0x220 [ 430.001198][ T8735] ? __fget_files+0x43d/0x4b0 [ 430.001225][ T8735] ? __ia32_sys_vfork+0x140/0x140 [ 430.001260][ T8735] ? lock_chain_count+0x20/0x20 [ 430.001292][ T8735] ? lockdep_hardirqs_on+0x94/0x140 [ 430.001316][ T8735] do_syscall_64+0x4c/0xa0 [ 430.001338][ T8735] ? clear_bhb_loop+0x60/0xb0 [ 430.001359][ T8735] ? clear_bhb_loop+0x60/0xb0 [ 430.001382][ T8735] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 430.001402][ T8735] RIP: 0033:0x7f92bd79c799 [ 430.001421][ T8735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.001438][ T8735] RSP: 002b:00007f92be6dafd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 430.001461][ T8735] RAX: ffffffffffffffda RBX: 00007f92bda15fa0 RCX: 00007f92bd79c799 [ 430.001476][ T8735] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 430.001488][ T8735] RBP: 00007f92be6db090 R08: 0000000000000000 R09: 0000000000000000 [ 430.001501][ T8735] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 430.001513][ T8735] R13: 00007f92bda16038 R14: 00007f92bda15fa0 R15: 00007ffe5dfe88b8 [ 430.001545][ T8735] [ 430.615123][ T8741] netlink: 'syz.4.1342': attribute type 10 has an invalid length. [ 430.647495][ T8741] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1342'. [ 431.444421][ T8767] netlink: 'syz.2.1348': attribute type 11 has an invalid length. [ 431.470630][ T8767] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1348'. [ 431.524725][ T8767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.726211][ T8754] netlink: 'syz.1.1345': attribute type 7 has an invalid length. [ 431.765147][ T8765] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1348'. [ 431.809236][ T8765] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 432.600241][ T8783] netlink: 'syz.0.1354': attribute type 22 has an invalid length. [ 432.620615][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'. [ 433.659715][ T8802] netlink: 'syz.0.1363': attribute type 10 has an invalid length. [ 439.783505][ T8840] netlink: 'syz.1.1375': attribute type 10 has an invalid length. [ 440.098981][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.105432][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.125338][ T8844] netlink: 'syz.0.1378': attribute type 9 has an invalid length. [ 440.133289][ T8844] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1378'. [ 441.351242][ T8866] netlink: 'syz.4.1383': attribute type 8 has an invalid length. [ 441.478629][ T8866] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1383'. [ 441.533153][ T8865] netlink: 'syz.3.1384': attribute type 1 has an invalid length. [ 441.570373][ T8865] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1384'. [ 443.180058][ T8866] netlink: 'syz.4.1383': attribute type 22 has an invalid length. [ 443.217689][ T8866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1383'. [ 443.474772][ T8871] netlink: 'syz.0.1385': attribute type 41 has an invalid length. [ 443.508911][ T8871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1385'. [ 446.702061][ T8893] netlink: 'syz.4.1391': attribute type 10 has an invalid length. [ 447.448160][ T8915] netlink: 'syz.1.1397': attribute type 1 has an invalid length. [ 447.472802][ T8915] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1397'. [ 448.257596][ T8933] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1402'. [ 448.274251][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 448.569633][ T8935] netlink: 'syz.3.1402': attribute type 11 has an invalid length. [ 448.582826][ T8935] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1402'. [ 448.599230][ T8935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.985030][ T8960] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1413'. [ 454.434261][ T8974] netlink: 'syz.2.1417': attribute type 10 has an invalid length. [ 455.430144][ T8979] netlink: 'syz.0.1419': attribute type 1 has an invalid length. [ 455.440432][ T8979] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1419'. [ 456.478425][ T9005] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1426'. [ 456.588301][ T9005] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 457.014332][ T9007] netlink: 'syz.0.1426': attribute type 11 has an invalid length. [ 457.051236][ T9007] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1426'. [ 457.120419][ T9007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.093065][ T9015] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.789753][ T9056] device syzkaller0 entered promiscuous mode [ 460.970908][ T9068] netlink: 'syz.2.1448': attribute type 3 has an invalid length. [ 461.068971][ T9068] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1448'. [ 461.490051][ T9081] netlink: 'syz.3.1452': attribute type 29 has an invalid length. [ 463.290968][ T9081] netlink: 'syz.3.1452': attribute type 29 has an invalid length. [ 463.561825][ T9112] netlink: 'syz.3.1465': attribute type 29 has an invalid length. [ 463.574874][ T9112] netlink: 'syz.3.1465': attribute type 29 has an invalid length. [ 464.783244][ T9134] netlink: 'syz.0.1472': attribute type 11 has an invalid length. [ 464.826384][ T9134] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1472'. [ 464.851748][ T9132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.965282][ T9153] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1478'. [ 469.759539][ T9186] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1489'. [ 469.791894][ T9186] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 470.027441][ T9189] netlink: 'syz.4.1489': attribute type 11 has an invalid length. [ 470.037982][ T9189] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1489'. [ 470.061145][ T9189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.961664][ T9201] netlink: 'syz.3.1492': attribute type 41 has an invalid length. [ 473.052567][ T9201] netlink: 'syz.3.1492': attribute type 41 has an invalid length. [ 473.591036][ T9212] netlink: 'syz.4.1498': attribute type 41 has an invalid length. [ 473.619806][ T9212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1498'. [ 479.345362][ T9231] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1505'. [ 479.592093][ T9247] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1507'. [ 479.615929][ T9248] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1508'. [ 479.647022][ T9248] netlink: 'syz.1.1508': attribute type 9 has an invalid length. [ 479.672909][ T9248] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1508'. [ 482.996641][ T9263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1513'. [ 483.114872][ T9265] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1516'. [ 483.350500][ T9271] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1517'. [ 483.440894][ T9271] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 483.847573][ T9273] netlink: 'syz.1.1517': attribute type 11 has an invalid length. [ 483.980026][ T9273] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1517'. [ 484.240131][ T9273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.255866][ T9269] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 486.171300][ T9310] netlink: 'syz.4.1532': attribute type 7 has an invalid length. [ 486.492290][ T9318] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1534'. [ 486.557630][ T9318] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 486.655451][ T9315] netlink: 'syz.4.1533': attribute type 10 has an invalid length. [ 486.892494][ T9327] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1537'. [ 486.971156][ T9319] netlink: 'syz.0.1534': attribute type 11 has an invalid length. [ 487.016266][ T9319] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1534'. [ 487.106326][ T9319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.092552][ T9359] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1547'. [ 488.146109][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 488.680342][ T9365] netlink: 'syz.2.1559': attribute type 10 has an invalid length. [ 488.706822][ T9359] netlink: 'syz.0.1547': attribute type 11 has an invalid length. [ 488.715772][ T9359] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1547'. [ 488.771076][ T9359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.789467][ T9368] tap0: tun_chr_ioctl cmd 1074025675 [ 488.804243][ T9368] tap0: persist enabled [ 488.826542][ T9368] tap0: tun_chr_ioctl cmd 1074025675 [ 488.831902][ T9368] tap0: persist disabled [ 488.922091][ T9372] netlink: 'syz.4.1552': attribute type 3 has an invalid length. [ 488.948813][ T9372] netlink: 'syz.4.1552': attribute type 1 has an invalid length. [ 488.973237][ T9372] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1552'. [ 489.153234][ T9378] netlink: 'syz.2.1551': attribute type 10 has an invalid length. [ 489.293646][ T9378] team0: Port device bond0 removed [ 489.338613][ T9382] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1554'. [ 489.372361][ T9382] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 489.468971][ T9389] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1565'. [ 489.488775][ T9389] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 489.550969][ T9392] netlink: 'syz.3.1554': attribute type 11 has an invalid length. [ 489.577357][ T9394] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1556'. [ 489.587953][ T9392] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1554'. [ 489.656236][ T9392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.464029][ T7627] tipc: Subscription rejected, illegal request [ 491.519779][ T9436] netlink: 'syz.4.1570': attribute type 13 has an invalid length. [ 491.553341][ T9436] __nla_validate_parse: 1 callbacks suppressed [ 491.553356][ T9436] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1570'. [ 491.667497][ T9436] erspan0: refused to change device tx_queue_len [ 491.714403][ T9436] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 492.081844][ T9452] FAULT_INJECTION: forcing a failure. [ 492.081844][ T9452] name failslab, interval 1, probability 0, space 0, times 0 [ 492.102356][ T9452] CPU: 0 PID: 9452 Comm: syz.4.1575 Not tainted syzkaller #0 [ 492.109780][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.119868][ T9452] Call Trace: [ 492.123186][ T9452] [ 492.126148][ T9452] dump_stack_lvl+0x188/0x24e [ 492.130878][ T9452] ? show_regs_print_info+0x12/0x12 [ 492.136118][ T9452] ? load_image+0x400/0x400 [ 492.140665][ T9452] ? __might_sleep+0xd0/0xd0 [ 492.145286][ T9452] ? __lock_acquire+0x7d10/0x7d10 [ 492.150359][ T9452] should_fail_ex+0x399/0x4d0 [ 492.155094][ T9452] should_failslab+0x5/0x20 [ 492.159640][ T9452] slab_pre_alloc_hook+0x59/0x310 [ 492.164710][ T9452] kmem_cache_alloc+0x56/0x2f0 [ 492.169506][ T9452] ? ptlock_alloc+0x1c/0x60 [ 492.174051][ T9452] ptlock_alloc+0x1c/0x60 [ 492.178411][ T9452] pte_alloc_one+0xc0/0x310 [ 492.182954][ T9452] ? pfn_modify_allowed+0x560/0x560 [ 492.188201][ T9452] ? __might_sleep+0xd0/0xd0 [ 492.192829][ T9452] ? rcu_is_watching+0x11/0xa0 [ 492.197636][ T9452] __pte_alloc+0x21/0x150 [ 492.202008][ T9452] copy_page_range+0x3118/0x3900 [ 492.207047][ T9452] ? pfn_valid+0x450/0x450 [ 492.211519][ T9452] ? up_write+0x1bb/0x420 [ 492.215889][ T9452] copy_mm+0xec3/0x1690 [ 492.220092][ T9452] ? copy_signal+0x680/0x680 [ 492.224708][ T9452] ? lockdep_init_map_type+0x98/0x8d0 [ 492.230145][ T9452] ? __init_rwsem+0x11e/0x160 [ 492.234861][ T9452] ? copy_signal+0x556/0x680 [ 492.239484][ T9452] copy_process+0x1979/0x4030 [ 492.244216][ T9452] ? copy_process+0x94d/0x4030 [ 492.249025][ T9452] ? idle_dummy+0x10/0x10 [ 492.253396][ T9452] kernel_clone+0x24b/0x900 [ 492.257930][ T9452] ? ksys_write+0x1c0/0x250 [ 492.262475][ T9452] ? create_io_thread+0x170/0x170 [ 492.267552][ T9452] __x64_sys_clone+0x1a7/0x220 [ 492.272346][ T9452] ? __fget_files+0x43d/0x4b0 [ 492.277057][ T9452] ? __ia32_sys_vfork+0x140/0x140 [ 492.282103][ T9452] ? lock_chain_count+0x20/0x20 [ 492.286971][ T9452] ? lockdep_hardirqs_on+0x94/0x140 [ 492.292179][ T9452] do_syscall_64+0x4c/0xa0 [ 492.296607][ T9452] ? clear_bhb_loop+0x60/0xb0 [ 492.301289][ T9452] ? clear_bhb_loop+0x60/0xb0 [ 492.305980][ T9452] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.311876][ T9452] RIP: 0033:0x7fb02239c799 [ 492.316300][ T9452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.335909][ T9452] RSP: 002b:00007fb02319efd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 492.344328][ T9452] RAX: ffffffffffffffda RBX: 00007fb022615fa0 RCX: 00007fb02239c799 [ 492.352307][ T9452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 492.360282][ T9452] RBP: 00007fb02319f090 R08: 0000000000000000 R09: 0000000000000000 [ 492.368259][ T9452] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 492.376236][ T9452] R13: 00007fb022616038 R14: 00007fb022615fa0 R15: 00007ffe737b9818 [ 492.384227][ T9452] [ 492.392072][ T9459] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1578'. [ 492.452906][ T9461] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1576'. [ 492.486044][ T9461] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 492.674976][ T9464] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1579'. [ 492.837012][ T9461] netlink: 'syz.0.1576': attribute type 11 has an invalid length. [ 492.845734][ T9461] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1576'. [ 492.858153][ T9467] netlink: 'syz.1.1580': attribute type 10 has an invalid length. [ 492.911716][ T9461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.209727][ T9475] netlink: 'syz.2.1582': attribute type 3 has an invalid length. [ 493.236378][ T9475] netlink: 'syz.2.1582': attribute type 1 has an invalid length. [ 493.484317][ T9475] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1582'. [ 495.345183][ T9519] netlink: 'syz.0.1595': attribute type 11 has an invalid length. [ 495.375601][ T9519] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1595'. [ 495.429194][ T9519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.673044][ T9511] team0: Port device team_slave_0 removed [ 495.679634][ T9511] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 495.746997][ T9518] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1595'. [ 495.783759][ T9518] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 496.203534][ T9531] netlink: 'syz.1.1600': attribute type 3 has an invalid length. [ 496.225640][ T9531] netlink: 'syz.1.1600': attribute type 1 has an invalid length. [ 496.276795][ T9533] netlink: 'syz.2.1599': attribute type 3 has an invalid length. [ 496.417735][ T9531] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1600'. [ 496.423581][ T9533] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1599'. [ 497.750902][ T9569] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1611'. [ 497.776545][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 497.976078][ T9574] netlink: 'syz.3.1612': attribute type 10 has an invalid length. [ 497.984471][ T9574] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1612'. [ 498.088190][ T9574] device batadv_slave_1 entered promiscuous mode [ 498.150080][ T9573] netlink: 'syz.0.1611': attribute type 11 has an invalid length. [ 498.160134][ T9573] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1611'. [ 498.192923][ T9573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.538188][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.544730][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.549351][ T9592] netlink: 'syz.0.1618': attribute type 30 has an invalid length. [ 501.961695][ T9609] netlink: 'syz.2.1625': attribute type 3 has an invalid length. [ 502.017524][ T9609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1625'. [ 502.206314][ T9609] device pim6reg1 entered promiscuous mode [ 502.359158][ T9616] netlink: 'syz.1.1626': attribute type 10 has an invalid length. [ 502.372801][ T9616] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1626'. [ 502.472025][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.532235][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.890897][ T9615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.918074][ T9615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.002442][ T9621] netlink: 'syz.3.1628': attribute type 11 has an invalid length. [ 503.021688][ T9621] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1628'. [ 503.072662][ T9621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.064095][ T9620] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1628'. [ 505.085981][ T9620] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 509.608957][ T9680] FAULT_INJECTION: forcing a failure. [ 509.608957][ T9680] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 509.661059][ T9680] CPU: 0 PID: 9680 Comm: syz.3.1646 Not tainted syzkaller #0 [ 509.668509][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.678610][ T9680] Call Trace: [ 509.679255][ T9682] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1645'. [ 509.681900][ T9680] [ 509.681912][ T9680] dump_stack_lvl+0x188/0x24e [ 509.681947][ T9680] ? show_regs_print_info+0x12/0x12 [ 509.681973][ T9680] ? load_image+0x400/0x400 [ 509.681997][ T9680] ? __lock_acquire+0x7d10/0x7d10 [ 509.682031][ T9680] should_fail_ex+0x399/0x4d0 [ 509.682065][ T9680] prepare_alloc_pages+0x1e2/0x5f0 [ 509.682100][ T9680] __alloc_pages+0x130/0x4f0 [ 509.682126][ T9680] ? __kmem_cache_alloc_node+0x140/0x260 [ 509.682148][ T9680] ? zone_statistics+0x170/0x170 [ 509.682171][ T9680] ? alloc_skb_with_frags+0xa7/0x710 [ 509.682203][ T9680] ? alloc_pages+0x4d8/0x740 [ 509.682233][ T9680] alloc_skb_with_frags+0x20c/0x710 [ 509.682266][ T9680] sock_alloc_send_pskb+0x87f/0x9a0 [ 509.682308][ T9680] ? sock_kzfree_s+0x50/0x50 [ 509.682342][ T9680] ? iov_iter_advance+0x84/0x1a0 [ 509.682372][ T9680] tun_get_user+0x915/0x3c70 [ 509.682418][ T9680] ? rcu_read_unlock+0xa0/0xa0 [ 509.682452][ T9680] ? tun_get+0x1c/0x2e0 [ 509.682480][ T9680] ? __lock_acquire+0x7d10/0x7d10 [ 509.682512][ T9680] ? tun_get+0x1c/0x2e0 [ 509.682544][ T9680] tun_chr_write_iter+0x112/0x1f0 [ 509.682572][ T9680] vfs_write+0x4b1/0xa30 [ 509.682604][ T9680] ? file_end_write+0x250/0x250 [ 509.682634][ T9680] ? __fget_files+0x43d/0x4b0 [ 509.682669][ T9680] ? __fdget_pos+0x1d4/0x360 [ 509.682692][ T9680] ? ksys_write+0x71/0x250 [ 509.682719][ T9680] ksys_write+0x14c/0x250 [ 509.682748][ T9680] ? __ia32_sys_read+0x80/0x80 [ 509.682784][ T9680] ? lockdep_hardirqs_on+0x94/0x140 [ 509.682807][ T9680] do_syscall_64+0x4c/0xa0 [ 509.682829][ T9680] ? clear_bhb_loop+0x60/0xb0 [ 509.682849][ T9680] ? clear_bhb_loop+0x60/0xb0 [ 509.682872][ T9680] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.682893][ T9680] RIP: 0033:0x7f213839c799 [ 509.682912][ T9680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.682929][ T9680] RSP: 002b:00007f21392a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 509.682952][ T9680] RAX: ffffffffffffffda RBX: 00007f2138615fa0 RCX: 00007f213839c799 [ 509.682966][ T9680] RDX: 000000000000ffdd RSI: 0000200000000000 RDI: 0000000000000003 [ 509.682980][ T9680] RBP: 00007f21392a8090 R08: 0000000000000000 R09: 0000000000000000 [ 509.682992][ T9680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.683004][ T9680] R13: 00007f2138616038 R14: 00007f2138615fa0 R15: 00007ffc5f857028 [ 509.683036][ T9680] [ 510.363278][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 510.651694][ T9691] netlink: 'syz.4.1645': attribute type 11 has an invalid length. [ 510.704759][ T9691] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1645'. [ 510.774356][ T9691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.775429][ T9701] device wg2 entered promiscuous mode [ 515.164581][ T9743] netlink: 'syz.1.1666': attribute type 3 has an invalid length. [ 515.196242][ T9743] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1666'. [ 515.732806][ T9749] FAULT_INJECTION: forcing a failure. [ 515.732806][ T9749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 515.774577][ T9751] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1668'. [ 515.789579][ T9749] CPU: 1 PID: 9749 Comm: syz.0.1669 Not tainted syzkaller #0 [ 515.797008][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 515.807093][ T9749] Call Trace: [ 515.810395][ T9749] [ 515.812986][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 515.813332][ T9749] dump_stack_lvl+0x188/0x24e [ 515.813369][ T9749] ? show_regs_print_info+0x12/0x12 [ 515.813394][ T9749] ? load_image+0x400/0x400 [ 515.813417][ T9749] ? __lock_acquire+0x7d10/0x7d10 [ 515.813449][ T9749] should_fail_ex+0x399/0x4d0 [ 515.813481][ T9749] _copy_to_user+0x2c/0x130 [ 515.813505][ T9749] bpf_test_finish+0x198/0x600 [ 515.813534][ T9749] ? convert_skb_to___skb+0x420/0x420 [ 515.859228][ T9749] ? bpf_test_init+0x119/0x140 [ 515.864034][ T9749] bpf_prog_test_run_xdp+0x80a/0xf10 [ 515.869367][ T9749] ? dev_put+0x80/0x80 [ 515.873474][ T9749] ? dev_put+0x80/0x80 [ 515.877617][ T9749] bpf_prog_test_run+0x31e/0x390 [ 515.882576][ T9749] __sys_bpf+0x62b/0x780 [ 515.886830][ T9749] ? bpf_link_show_fdinfo+0x380/0x380 [ 515.892225][ T9749] ? lock_chain_count+0x20/0x20 [ 515.897093][ T9749] __x64_sys_bpf+0x78/0x90 [ 515.901519][ T9749] do_syscall_64+0x4c/0xa0 [ 515.905944][ T9749] ? clear_bhb_loop+0x60/0xb0 [ 515.910626][ T9749] ? clear_bhb_loop+0x60/0xb0 [ 515.915311][ T9749] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 515.921215][ T9749] RIP: 0033:0x7f0e9439c799 [ 515.925647][ T9749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.945269][ T9749] RSP: 002b:00007f0e9519d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.953695][ T9749] RAX: ffffffffffffffda RBX: 00007f0e94615fa0 RCX: 00007f0e9439c799 [ 515.961699][ T9749] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 515.969681][ T9749] RBP: 00007f0e9519d090 R08: 0000000000000000 R09: 0000000000000000 [ 515.977662][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 515.985649][ T9749] R13: 00007f0e94616038 R14: 00007f0e94615fa0 R15: 00007fff6de1ff18 [ 515.993643][ T9749] [ 516.014173][ T9755] netlink: 'syz.3.1668': attribute type 11 has an invalid length. [ 516.057396][ T9755] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1668'. [ 516.142931][ T9755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.588404][ T9801] netlink: 'syz.4.1688': attribute type 11 has an invalid length. [ 520.728676][ T9801] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1688'. [ 520.856801][ T9801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.069075][ T9817] netlink: 'syz.2.1691': attribute type 30 has an invalid length. [ 523.092743][ T9816] netlink: 'syz.3.1692': attribute type 2 has an invalid length. [ 523.116185][ T9816] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1692'. [ 523.433254][ T9828] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1705'. [ 523.522081][ T9828] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 523.900937][ T9835] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1697'. [ 524.181687][ T9831] netlink: 'syz.0.1705': attribute type 11 has an invalid length. [ 524.225934][ T9831] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1705'. [ 524.264093][ T9831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.329804][ T9846] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1700'. [ 524.388551][ T9846] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.1700'. [ 528.652061][ T9878] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1722'. [ 528.876094][ T9882] netlink: 'syz.4.1713': attribute type 7 has an invalid length. [ 529.184563][ T9889] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1714'. [ 529.238761][ T9889] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 529.565637][ T9890] netlink: 'syz.1.1714': attribute type 11 has an invalid length. [ 529.606347][ T9890] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1714'. [ 529.744562][ T9887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.848643][ T9931] netlink: 'syz.1.1727': attribute type 10 has an invalid length. [ 530.892861][ T9931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1727'. [ 531.911160][ T9945] netlink: 'syz.1.1731': attribute type 41 has an invalid length. [ 531.976316][ T9945] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1731'. [ 532.031866][ T9949] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1732'. [ 532.524338][ T9949] device hsr_slave_0 left promiscuous mode [ 532.698727][ T9949] device hsr_slave_1 left promiscuous mode [ 533.586667][ T9983] netlink: 'syz.0.1744': attribute type 10 has an invalid length. [ 533.672912][ T9983] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.1744'. [ 533.734881][ T9983] netlink: zone id is out of range [ 533.779283][ T9983] netlink: zone id is out of range [ 533.863526][ T9983] netlink: zone id is out of range [ 533.937758][ T9983] netlink: zone id is out of range [ 534.028794][ T9983] netlink: zone id is out of range [ 534.136608][ T9983] netlink: zone id is out of range [ 534.142404][ T9983] netlink: zone id is out of range [ 534.206632][ T9983] netlink: zone id is out of range [ 534.286970][ T9983] netlink: zone id is out of range [ 534.302549][ T9983] netlink: zone id is out of range [ 534.705689][ T9999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1748'. [ 535.392876][T10018] netlink: 'syz.3.1753': attribute type 7 has an invalid length. [ 539.852655][T10097] FAULT_INJECTION: forcing a failure. [ 539.852655][T10097] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 539.910703][T10097] CPU: 0 PID: 10097 Comm: syz.2.1781 Not tainted syzkaller #0 [ 539.918230][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 539.928321][T10097] Call Trace: [ 539.931625][T10097] [ 539.934578][T10097] dump_stack_lvl+0x188/0x24e [ 539.939298][T10097] ? show_regs_print_info+0x12/0x12 [ 539.944539][T10097] ? load_image+0x400/0x400 [ 539.949078][T10097] ? __lock_acquire+0x7d10/0x7d10 [ 539.954150][T10097] should_fail_ex+0x399/0x4d0 [ 539.958878][T10097] prepare_alloc_pages+0x1e2/0x5f0 [ 539.964035][T10097] __alloc_pages+0x130/0x4f0 [ 539.968673][T10097] ? __kmem_cache_alloc_node+0x140/0x260 [ 539.974336][T10097] ? zone_statistics+0x170/0x170 [ 539.979305][T10097] ? alloc_skb_with_frags+0xa7/0x710 [ 539.984631][T10097] ? alloc_pages+0x4d8/0x740 [ 539.989260][T10097] alloc_skb_with_frags+0x20c/0x710 [ 539.994502][T10097] sock_alloc_send_pskb+0x87f/0x9a0 [ 539.999760][T10097] ? sock_kzfree_s+0x50/0x50 [ 540.004401][T10097] ? iov_iter_advance+0x84/0x1a0 [ 540.009439][T10097] tun_get_user+0x915/0x3c70 [ 540.014086][T10097] ? rcu_read_unlock+0xa0/0xa0 [ 540.018901][T10097] ? tun_get+0x1c/0x2e0 [ 540.023102][T10097] ? __lock_acquire+0x7d10/0x7d10 [ 540.028165][T10097] ? tun_get+0x1c/0x2e0 [ 540.032365][T10097] tun_chr_write_iter+0x112/0x1f0 [ 540.037442][T10097] vfs_write+0x4b1/0xa30 [ 540.041740][T10097] ? file_end_write+0x250/0x250 [ 540.046638][T10097] ? __fget_files+0x43d/0x4b0 [ 540.051373][T10097] ? __fdget_pos+0x1d4/0x360 [ 540.055996][T10097] ? ksys_write+0x71/0x250 [ 540.060453][T10097] ksys_write+0x14c/0x250 [ 540.064823][T10097] ? __ia32_sys_read+0x80/0x80 [ 540.069637][T10097] ? lockdep_hardirqs_on+0x94/0x140 [ 540.074880][T10097] do_syscall_64+0x4c/0xa0 [ 540.079332][T10097] ? clear_bhb_loop+0x60/0xb0 [ 540.084037][T10097] ? clear_bhb_loop+0x60/0xb0 [ 540.088745][T10097] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 540.094673][T10097] RIP: 0033:0x7f1a89f9c799 [ 540.099115][T10097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.118755][T10097] RSP: 002b:00007f1a8ae09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 540.127202][T10097] RAX: ffffffffffffffda RBX: 00007f1a8a215fa0 RCX: 00007f1a89f9c799 [ 540.135209][T10097] RDX: 000000000000ffdd RSI: 0000200000000000 RDI: 0000000000000003 [ 540.143205][T10097] RBP: 00007f1a8ae09090 R08: 0000000000000000 R09: 0000000000000000 [ 540.151202][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.159211][T10097] R13: 00007f1a8a216038 R14: 00007f1a8a215fa0 R15: 00007ffcb731f408 [ 540.167238][T10097] [ 540.381135][T10108] netlink: 'syz.1.1785': attribute type 7 has an invalid length. [ 540.641318][T10111] netlink: 'syz.4.1786': attribute type 2 has an invalid length. [ 540.776939][T10111] netlink: 'syz.4.1786': attribute type 8 has an invalid length. [ 540.848685][T10111] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1786'. [ 541.394585][T10124] netlink: 'syz.4.1791': attribute type 21 has an invalid length. [ 541.404491][T10125] netlink: 'syz.1.1789': attribute type 21 has an invalid length. [ 544.097237][T10183] netlink: 'syz.2.1806': attribute type 4 has an invalid length. [ 544.154465][T10183] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1806'. [ 544.311368][T10183] .`: renamed from bond0 [ 545.354249][T10215] FAULT_INJECTION: forcing a failure. [ 545.354249][T10215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.448345][T10215] CPU: 0 PID: 10215 Comm: syz.0.1820 Not tainted syzkaller #0 [ 545.455869][T10215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 545.465950][T10215] Call Trace: [ 545.469254][T10215] [ 545.472205][T10215] dump_stack_lvl+0x188/0x24e [ 545.476923][T10215] ? show_regs_print_info+0x12/0x12 [ 545.482149][T10215] ? load_image+0x400/0x400 [ 545.486687][T10215] ? __lock_acquire+0x7d10/0x7d10 [ 545.491155][T10210] netlink: 'syz.1.1819': attribute type 3 has an invalid length. [ 545.491738][T10215] should_fail_ex+0x399/0x4d0 [ 545.491776][T10215] _copy_to_user+0x2c/0x130 [ 545.491802][T10215] bpf_test_finish+0x266/0x600 [ 545.491837][T10215] ? convert_skb_to___skb+0x420/0x420 [ 545.491867][T10215] ? bpf_test_init+0x119/0x140 [ 545.491892][T10215] bpf_prog_test_run_xdp+0x80a/0xf10 [ 545.491934][T10215] ? dev_put+0x80/0x80 [ 545.491970][T10215] ? dev_put+0x80/0x80 [ 545.491992][T10215] bpf_prog_test_run+0x31e/0x390 [ 545.492023][T10215] __sys_bpf+0x62b/0x780 [ 545.492051][T10215] ? bpf_link_show_fdinfo+0x380/0x380 [ 545.492098][T10215] ? lock_chain_count+0x20/0x20 [ 545.492135][T10215] __x64_sys_bpf+0x78/0x90 [ 545.500278][T10210] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1819'. [ 545.504509][T10215] do_syscall_64+0x4c/0xa0 [ 545.504538][T10215] ? clear_bhb_loop+0x60/0xb0 [ 545.504559][T10215] ? clear_bhb_loop+0x60/0xb0 [ 545.504583][T10215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.504605][T10215] RIP: 0033:0x7f0e9439c799 [ 545.504625][T10215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.504649][T10215] RSP: 002b:00007f0e9519d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 545.504673][T10215] RAX: ffffffffffffffda RBX: 00007f0e94615fa0 RCX: 00007f0e9439c799 [ 545.504688][T10215] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 545.504701][T10215] RBP: 00007f0e9519d090 R08: 0000000000000000 R09: 0000000000000000 [ 545.504713][T10215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 545.504726][T10215] R13: 00007f0e94616038 R14: 00007f0e94615fa0 R15: 00007fff6de1ff18 [ 545.504759][T10215] [ 546.217856][T10226] netlink: 'syz.2.1823': attribute type 10 has an invalid length. [ 547.544478][T10226] team0: Port device hsr_slave_0 added [ 547.561099][T10233] netlink: 'syz.1.1824': attribute type 22 has an invalid length. [ 547.570174][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'. [ 548.201195][T10252] netlink: 'syz.3.1829': attribute type 3 has an invalid length. [ 548.371399][T10252] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1829'. [ 548.611227][T10259] netlink: 'syz.1.1833': attribute type 10 has an invalid length. [ 548.755308][T10259] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 550.636683][T10300] netlink: 'syz.4.1846': attribute type 39 has an invalid length. [ 552.085427][T10323] team0: Port device team_slave_0 removed [ 552.156254][T10323] net_ratelimit: 7 callbacks suppressed [ 552.156272][T10323] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 553.499412][T10362] netlink: 'syz.4.1865': attribute type 11 has an invalid length. [ 553.521549][T10362] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1865'. [ 553.588641][T10366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.704060][T10359] netlink: 'syz.2.1867': attribute type 2 has an invalid length. [ 553.799734][T10359] netlink: 'syz.2.1867': attribute type 8 has an invalid length. [ 553.826053][T10359] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1867'. [ 554.684975][T10392] netlink: 'syz.2.1873': attribute type 39 has an invalid length. [ 554.837967][T10393] netlink: 'syz.1.1874': attribute type 3 has an invalid length. [ 554.899854][T10393] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1874'. [ 556.338659][T10416] netlink: 'syz.1.1882': attribute type 22 has an invalid length. [ 556.385822][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 556.394827][T10416] FAULT_INJECTION: forcing a failure. [ 556.394827][T10416] name failslab, interval 1, probability 0, space 0, times 0 [ 556.426226][T10416] CPU: 0 PID: 10416 Comm: syz.1.1882 Not tainted syzkaller #0 [ 556.433776][T10416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.443874][T10416] Call Trace: [ 556.447181][T10416] [ 556.450144][T10416] dump_stack_lvl+0x188/0x24e [ 556.454857][T10416] ? show_regs_print_info+0x12/0x12 [ 556.460096][T10416] ? load_image+0x400/0x400 [ 556.464632][T10416] ? kasan_set_track+0x60/0x70 [ 556.469441][T10416] ? __alloc_skb+0x22a/0x7e0 [ 556.474062][T10416] ? verify_lock_unused+0x140/0x140 [ 556.479336][T10416] should_fail_ex+0x399/0x4d0 [ 556.484060][T10416] should_failslab+0x5/0x20 [ 556.488602][T10416] slab_pre_alloc_hook+0x59/0x310 [ 556.493664][T10416] kmem_cache_alloc+0x56/0x2f0 [ 556.498461][T10416] ? skb_clone+0x1e7/0x370 [ 556.502930][T10416] skb_clone+0x1e7/0x370 [ 556.507216][T10416] __netlink_deliver_tap+0x3ed/0x800 [ 556.512557][T10416] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.517801][T10416] netlink_deliver_tap+0x19c/0x1b0 [ 556.522946][T10416] netlink_sendskb+0x64/0x130 [ 556.527745][T10416] netlink_ack+0xcdd/0x1170 [ 556.532308][T10416] ? refcount_inc+0x70/0x70 [ 556.536846][T10416] ? netlink_dump+0xd00/0xd00 [ 556.541556][T10416] ? __copy_skb_header+0x3ba/0x4f0 [ 556.546713][T10416] ? __skb_clone+0x480/0x790 [ 556.551339][T10416] netlink_rcv_skb+0x280/0x450 [ 556.556119][T10416] ? rtnetlink_bind+0x80/0x80 [ 556.560839][T10416] ? netlink_ack+0x1170/0x1170 [ 556.565619][T10416] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.570833][T10416] netlink_unicast+0x74d/0x8d0 [ 556.575617][T10416] netlink_sendmsg+0x8ad/0xbd0 [ 556.580398][T10416] ? netlink_getsockopt+0x550/0x550 [ 556.585611][T10416] ? aa_sock_msg_perm+0x94/0x150 [ 556.590556][T10416] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 556.595847][T10416] ? security_socket_sendmsg+0x7c/0xa0 [ 556.601324][T10416] ? netlink_getsockopt+0x550/0x550 [ 556.606532][T10416] ____sys_sendmsg+0x5be/0x970 [ 556.611322][T10416] ? __sys_sendmsg_sock+0x30/0x30 [ 556.616352][T10416] ? __import_iovec+0x315/0x500 [ 556.621216][T10416] ? import_iovec+0x6f/0xa0 [ 556.625732][T10416] ___sys_sendmsg+0x2a2/0x360 [ 556.630449][T10416] ? __sys_sendmsg+0x290/0x290 [ 556.635255][T10416] ? __lock_acquire+0x7d10/0x7d10 [ 556.640315][T10416] __se_sys_sendmsg+0x1bb/0x2a0 [ 556.645196][T10416] ? __x64_sys_sendmsg+0x80/0x80 [ 556.650163][T10416] ? lockdep_hardirqs_on+0x94/0x140 [ 556.655379][T10416] do_syscall_64+0x4c/0xa0 [ 556.659808][T10416] ? clear_bhb_loop+0x60/0xb0 [ 556.664493][T10416] ? clear_bhb_loop+0x60/0xb0 [ 556.669179][T10416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.675094][T10416] RIP: 0033:0x7f92bd79c799 [ 556.679528][T10416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.699158][T10416] RSP: 002b:00007f92be6db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.707591][T10416] RAX: ffffffffffffffda RBX: 00007f92bda15fa0 RCX: 00007f92bd79c799 [ 556.715565][T10416] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 556.723543][T10416] RBP: 00007f92be6db090 R08: 0000000000000000 R09: 0000000000000000 [ 556.731528][T10416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.739520][T10416] R13: 00007f92bda16038 R14: 00007f92bda15fa0 R15: 00007ffe5dfe88b8 [ 556.747521][T10416] [ 556.807091][T10424] netlink: 'syz.4.1881': attribute type 21 has an invalid length. [ 556.841941][T10420] netlink: 'syz.2.1883': attribute type 11 has an invalid length. [ 556.854674][T10424] netlink: 'syz.4.1881': attribute type 22 has an invalid length. [ 556.897401][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1881'. [ 556.907238][T10420] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1883'. [ 556.921295][T10420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.592912][T10448] netlink: 'syz.0.1890': attribute type 10 has an invalid length. [ 557.611232][T10448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1890'. [ 559.264904][T10472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1897'. [ 559.326952][T10472] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1897'. [ 559.731777][T10485] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1897'. [ 575.475258][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 575.484267][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 575.492538][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 575.500990][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 575.509019][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 575.520966][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 575.853002][T10517] chnl_net:caif_netlink_parms(): no params data found [ 575.925596][ T4278] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 575.946032][ T4278] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 575.953999][ T4278] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 575.962720][ T4278] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 575.976497][ T4278] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 575.983999][ T4278] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 576.147772][T10517] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.154925][T10517] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.163985][T10517] device bridge_slave_0 entered promiscuous mode [ 576.190605][T10517] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.197939][T10517] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.206696][T10517] device bridge_slave_1 entered promiscuous mode [ 576.289416][T10517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.320202][T10517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.382970][T10517] team0: Port device team_slave_0 added [ 576.391800][T10517] team0: Port device team_slave_1 added [ 576.427171][T10517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.434167][T10517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.460895][T10517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.474194][T10517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.481475][T10517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.516001][T10517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.967977][ T4278] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 576.977047][ T4278] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 576.984823][ T4278] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 576.993557][ T4278] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 577.001419][ T4278] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 577.014849][ T4278] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 577.556198][T10521] Bluetooth: hci5: command 0x0409 tx timeout [ 578.056083][T10521] Bluetooth: hci6: command 0x0409 tx timeout [ 578.096338][ T4278] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 578.105033][ T4278] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 578.117864][ T4278] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 578.126607][ T4278] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 578.134494][ T4278] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 578.142262][ T4278] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 579.056385][T10521] Bluetooth: hci7: command 0x0409 tx timeout [ 579.174861][ T4278] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 579.183773][ T4278] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 579.191968][ T4278] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 579.200301][ T4278] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 579.216762][ T4278] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 579.224194][ T4278] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 579.656064][T10521] Bluetooth: hci5: command 0x041b tx timeout [ 580.106066][T10521] Bluetooth: hci6: command 0x041b tx timeout [ 580.206167][T10521] Bluetooth: hci8: command 0x0409 tx timeout [ 581.156046][T10521] Bluetooth: hci7: command 0x041b tx timeout [ 581.255969][T10521] Bluetooth: hci9: command 0x0409 tx timeout [ 581.706056][T10521] Bluetooth: hci5: command 0x040f tx timeout [ 582.206129][T10521] Bluetooth: hci6: command 0x040f tx timeout [ 582.266033][T10521] Bluetooth: hci8: command 0x041b tx timeout [ 583.256014][T10521] Bluetooth: hci7: command 0x040f tx timeout [ 583.306055][T10521] Bluetooth: hci9: command 0x041b tx timeout [ 583.806167][T10521] Bluetooth: hci5: command 0x0419 tx timeout [ 584.256146][T10521] Bluetooth: hci6: command 0x0419 tx timeout [ 584.356291][T10521] Bluetooth: hci8: command 0x040f tx timeout [ 585.305982][T10521] Bluetooth: hci7: command 0x0419 tx timeout [ 585.406070][T10521] Bluetooth: hci9: command 0x040f tx timeout [ 586.456383][T10521] Bluetooth: hci8: command 0x0419 tx timeout [ 587.456126][T10521] Bluetooth: hci9: command 0x0419 tx timeout [ 588.607342][ T4315] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2670 jiffies s: 30509 root: 0x1/. [ 588.631024][ T4315] rcu: blocking rcu_node structures (internal RCU debug): [ 588.638517][ T4315] Sending NMI from CPU 1 to CPUs 0: [ 588.643762][ C0] NMI backtrace for cpu 0 [ 588.643772][ C0] CPU: 0 PID: 10498 Comm: syz.2.1902 Not tainted syzkaller #0 [ 588.643787][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.643796][ C0] RIP: 0010:kasan_check_range+0x80/0x290 [ 588.643822][ C0] Code: ff 4d 89 c1 49 c1 e9 03 4b 8d 1c 21 49 89 df 4d 29 df 49 83 ff 10 7f 29 4d 85 ff 0f 84 38 01 00 00 4c 89 cb 48 f7 d3 4c 01 f3 <41> 80 3b 00 0f 85 86 01 00 00 49 ff c3 48 ff c3 75 ee e9 18 01 00 [ 588.643834][ C0] RSP: 0018:ffffc90000007898 EFLAGS: 00000086 [ 588.643848][ C0] RAX: ffffffff818ece01 RBX: ffffffffffffffff RCX: ffffffff818eceed [ 588.643859][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff8880b8e3b9f8 [ 588.643868][ C0] RBP: ffffc900000079b0 R08: ffff8880b8e3b9fb R09: 1ffff110171c773f [ 588.643878][ C0] R10: dffffc0000000000 R11: ffffed10171c773f R12: dffffc0000000001 [ 588.643888][ C0] R13: 0000000000000000 R14: 1ffff110171c773f R15: 0000000000000001 [ 588.643898][ C0] FS: 00007f1a8ae096c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 588.643911][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 588.643942][ C0] CR2: 000000110c347439 CR3: 0000000052770000 CR4: 00000000003506f0 [ 588.643956][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 588.643965][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 588.643975][ C0] Call Trace: [ 588.643979][ C0] [ 588.643987][ C0] irq_work_single+0x2d/0x230 [ 588.644010][ C0] irq_work_run+0x159/0x2f0 [ 588.644029][ C0] ? irq_work_single+0x230/0x230 [ 588.644047][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 588.644067][ C0] ? lock_chain_count+0x20/0x20 [ 588.644087][ C0] __sysvec_irq_work+0xba/0x350 [ 588.644103][ C0] sysvec_irq_work+0x4a/0xc0 [ 588.644124][ C0] asm_sysvec_irq_work+0x16/0x20 [ 588.644140][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 588.644155][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 31 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 588.644167][ C0] RSP: 0018:ffffc90000007aa0 EFLAGS: 00000206 [ 588.644178][ C0] RAX: ed58f2d325cbed00 RBX: 1ffff92000000f5c RCX: ed58f2d325cbed00 [ 588.644189][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0de0 [ 588.644198][ C0] RBP: ffffc90000007b90 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 588.644208][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000246 [ 588.644218][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 588.644238][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 588.644255][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 588.644268][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 588.644283][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 588.644305][ C0] __rcu_read_unlock+0x78/0xd0 [ 588.644317][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 588.644337][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 588.644350][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 588.644370][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 588.644391][ C0] __hrtimer_run_queues+0x560/0xd70 [ 588.644411][ C0] ? hw_scan_work+0xf50/0xf50 [ 588.644434][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 588.644449][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 588.644470][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 588.644487][ C0] handle_softirqs+0x2a1/0x930 [ 588.644505][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 588.644521][ C0] ? do_softirq+0x210/0x210 [ 588.644536][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 588.644551][ C0] __irq_exit_rcu+0x13b/0x230 [ 588.644564][ C0] ? irq_exit_rcu+0x20/0x20 [ 588.644581][ C0] irq_exit_rcu+0x5/0x20 [ 588.644593][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 588.644613][ C0] [ 588.644617][ C0] [ 588.644622][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 588.644637][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 588.644655][ C0] Code: 0f 84 3b 01 00 00 48 85 db 0f 85 5a 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 d0 0d dd 08 e8 7b 2e 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 588.644667][ C0] RSP: 0018:ffffc90003ed6ef8 EFLAGS: 00000282 [ 588.644678][ C0] RAX: ed58f2d325cbed00 RBX: 0000000000000000 RCX: ed58f2d325cbed00 [ 588.644687][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0de0 [ 588.644697][ C0] RBP: ffffc90003ed6f50 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 588.644707][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: ffff8880534bd940 [ 588.644716][ C0] R13: dffffc0000000000 R14: ffff88807d8e9dc0 R15: ffff8880b8e3b5d0 [ 588.644734][ C0] ? finish_task_switch+0x265/0x8f0 [ 588.644755][ C0] __schedule+0x11d9/0x40e0 [ 588.644776][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 588.644801][ C0] ? ct_irq_exit_irqson+0x113/0x170 [ 588.644816][ C0] ? __sched_text_start+0x8/0x8 [ 588.644832][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 588.644851][ C0] ? lock_chain_count+0x20/0x20 [ 588.644868][ C0] ? preempt_schedule+0xbc/0xd0 [ 588.644886][ C0] preempt_schedule_common+0x82/0xd0 [ 588.644903][ C0] preempt_schedule+0xbc/0xd0 [ 588.644919][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 588.644947][ C0] preempt_schedule_thunk+0x16/0x18 [ 588.644970][ C0] unwind_next_frame+0x1892/0x20b0 [ 588.644991][ C0] ? __x64_sys_bpf+0x78/0x90 [ 588.645010][ C0] ? stack_trace_save+0xf0/0xf0 [ 588.645027][ C0] arch_stack_walk+0x10c/0x140 [ 588.645046][ C0] ? do_syscall_64+0x4c/0xa0 [ 588.645065][ C0] stack_trace_save+0xa6/0xf0 [ 588.645081][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 588.645096][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 588.645118][ C0] kasan_set_track+0x4b/0x70 [ 588.645134][ C0] ? kasan_set_track+0x4b/0x70 [ 588.645150][ C0] ? __kasan_slab_alloc+0x6b/0x80 [ 588.645167][ C0] ? slab_post_alloc_hook+0x4b/0x480 [ 588.645181][ C0] ? kmem_cache_alloc_node+0x14d/0x320 [ 588.645195][ C0] ? alloc_vmap_area+0x18e/0x18c0 [ 588.645210][ C0] ? __get_vm_area_node+0x158/0x330 [ 588.645224][ C0] ? __vmalloc_node_range+0x357/0x13b0 [ 588.645240][ C0] ? __vmalloc+0x76/0x80 [ 588.645254][ C0] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 588.645272][ C0] ? bpf_prog_alloc+0x1c/0x1b0 [ 588.645290][ C0] ? bpf_prog_load+0x7c9/0x1560 [ 588.645306][ C0] ? __sys_bpf+0x5b8/0x780 [ 588.645322][ C0] ? __x64_sys_bpf+0x78/0x90 [ 588.645358][ C0] __kasan_slab_alloc+0x6b/0x80 [ 588.645376][ C0] slab_post_alloc_hook+0x4b/0x480 [ 588.645394][ C0] kmem_cache_alloc_node+0x14d/0x320 [ 588.645408][ C0] ? alloc_vmap_area+0x18e/0x18c0 [ 588.645425][ C0] alloc_vmap_area+0x18e/0x18c0 [ 588.645449][ C0] ? vm_map_ram+0xab0/0xab0 [ 588.645465][ C0] ? kasan_quarantine_reduce+0x1/0x160 [ 588.645482][ C0] __get_vm_area_node+0x158/0x330 [ 588.645501][ C0] __vmalloc_node_range+0x357/0x13b0 [ 588.645518][ C0] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 588.645540][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 588.645560][ C0] ? lock_chain_count+0x20/0x20 [ 588.645581][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 588.645595][ C0] ? free_vm_area+0x50/0x50 [ 588.645609][ C0] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 588.645632][ C0] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 588.645650][ C0] __vmalloc+0x76/0x80 [ 588.645665][ C0] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 588.645684][ C0] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 588.645705][ C0] bpf_prog_alloc+0x1c/0x1b0 [ 588.645725][ C0] bpf_prog_load+0x7c9/0x1560 [ 588.645749][ C0] ? map_freeze+0x390/0x390 [ 588.645770][ C0] ? __might_fault+0xa6/0x120 [ 588.645792][ C0] ? __might_fault+0xa6/0x120 [ 588.645805][ C0] ? __might_fault+0xc2/0x120 [ 588.645818][ C0] ? __might_fault+0xa6/0x120 [ 588.645831][ C0] ? bpf_lsm_bpf+0x5/0x10 [ 588.645845][ C0] ? security_bpf+0x7a/0xa0 [ 588.645861][ C0] __sys_bpf+0x5b8/0x780 [ 588.645877][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 588.645897][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 588.645923][ C0] ? lock_chain_count+0x20/0x20 [ 588.645945][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 588.645967][ C0] __x64_sys_bpf+0x78/0x90 [ 588.645985][ C0] do_syscall_64+0x4c/0xa0 [ 588.646001][ C0] ? clear_bhb_loop+0x60/0xb0 [ 588.646015][ C0] ? clear_bhb_loop+0x60/0xb0 [ 588.646031][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.646046][ C0] RIP: 0033:0x7f1a89f9c799 [ 588.646059][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.646070][ C0] RSP: 002b:00007f1a8ae09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 588.646083][ C0] RAX: ffffffffffffffda RBX: 00007f1a8a215fa0 RCX: 00007f1a89f9c799 [ 588.646093][ C0] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 588.646102][ C0] RBP: 00007f1a8a032bd9 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 588.646111][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.646119][ C0] R13: 00007f1a8a216038 R14: 00007f1a8a215fa0 R15: 00007ffcb731f408 [ 588.646137][ C0]