last executing test programs: 21.8721463s ago: executing program 2 (id=8688): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x88a8ffff) 21.832643403s ago: executing program 2 (id=8690): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x18}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0xfffffffc, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe30, 0x0, 0x0, 0x10, 0x857}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000040)=@raw=[@ringbuf_query], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000040)=@raw=[@ringbuf_query], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x73) (async) socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080307000000e8", 0x19}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x3, 0x0) (async) r5 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r5, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x10104, 0x9}], 0x10, 0x1}, 0x94) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90424fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/233, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0xffffff8c}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0) recvmsg$kcm(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) recvmsg$unix(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/101, 0x65}, {&(0x7f00000003c0)=""/73, 0x49}, {&(0x7f00000006c0)=""/238, 0xee}], 0x3}, 0x40000040) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socket$kcm(0xa, 0x5, 0x0) (async) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000084000000000000"], 0x18}, 0x41) (async) sendmsg$kcm(r8, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000084000000000000"], 0x18}, 0x41) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) 21.448608176s ago: executing program 3 (id=8693): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x81, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1800000068006bcd9e3fe3dc6e08339d0a00000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae0000000000851000000200000085000000070000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3f, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x84, &(0x7f0000000000), 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40001) gettid() r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) r7 = socket$kcm(0x10, 0x5, 0x4) sendmsg$inet(r6, &(0x7f0000001580)={&(0x7f0000000dc0)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000e00)="1731", 0x2}], 0x1}, 0xc000) sendmsg$inet(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) setsockopt$sock_attach_bpf(r5, 0x0, 0x2b, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000000000000000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 21.390889329s ago: executing program 1 (id=8694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000080)='syzkaller\x00', 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000100)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @exit, @exit, @exit, @tail_call]}, &(0x7f0000000040)='GPL\x00', 0x9, 0xd6, &(0x7f00000004c0)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000ad3700005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00f7030004000000000000000000000000000000f3ff000000000000"], 0x50) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r4 = getpid() perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x1, 0x0, 0xc7, 0xff, 0x0, 0x2, 0x802e0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x2}, 0x100008, 0x0, 0x9aaf, 0x2, 0x200, 0x7f, 0x3, 0x0, 0x7fff, 0x0, 0x9}, r4, 0xd, r2, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x4}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f020000390005", 0x7}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x0, 0x0, 0x0, 0xee4, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x10, 0x4}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000000c000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="00000200040000000500"/28], 0x50) r10 = openat$cgroup_ro(r6, &(0x7f00000002c0)='io.stat\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000005c0)=r0}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000004000000000001801000020756c2500000a0001202028049ceaa6dc5f7a7b1af8ff00000000bfa100000000000007010000f8f2ffffb70200000800000000030012f8ffffff850000002d000000da42028f500000009500000000000080"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r12}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0x9, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0xa}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}]}, &(0x7f0000000780)='syzkaller\x00', 0x491, 0x0, 0x0, 0x41100, 0x6, '\x00', r7, @fallback=0x2b, r10, 0x8, &(0x7f00000007c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, r12, 0xa, &(0x7f0000000800)=[r10, r9], &(0x7f0000000840)=[{0x0, 0x4, 0x5, 0x4}, {0x4, 0x3, 0x4, 0x6}, {0x1, 0x4, 0xfffffffc, 0xb}, {0x4, 0x1, 0x5, 0x6}, {0x1, 0x4, 0x10, 0xb}, {0x2, 0x4, 0x7, 0x2}, {0x5, 0x5, 0x2, 0x2}, {0x5, 0x4, 0x1, 0x8}, {0x2, 0x3, 0xb, 0x2}, {0x0, 0x4, 0xb, 0x2}], 0x10, 0xffff14a5}, 0x94) close(r10) socket$kcm(0x1e, 0x5, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000080)={0x0, 0xfffffffffffffd8f, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c00000015006b05c84e21000af32c6e021875f802000000050003800000d34460bc04eab556a71525346182949a36c23d3b48dfd810000000003fce86b6345b05ca97fe4d5670a568fe43", 0x7c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 20.699613879s ago: executing program 2 (id=8696): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0xfffffffffffffffe, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 20.594565956s ago: executing program 0 (id=8697): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000080)='syzkaller\x00', 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) 20.300223313s ago: executing program 2 (id=8698): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x3, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x20009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x399a, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@fallback=r0, 0x22, 0x1, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x0], &(0x7f00000004c0)=[0x0]}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r5 = socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f00000008c0)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x7f, 0x5, 0x3, 0xfff9, 0x3}], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r5, 0x107, 0x5, &(0x7f00000000c0), 0x55) recvmsg$unix(r4, 0x0, 0x1c0) setsockopt$sock_attach_bpf(r3, 0x6, 0xc, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000000)="2e00000012008188040f46ecdb4cb9d8a7480ef410000000e3bd6e00000000000b0029000d000000ba8000", 0x2b}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) perf_event_open(&(0x7f0000000880)={0x5, 0x80, 0x0, 0x93, 0x8, 0xb3, 0x0, 0x5, 0x92218, 0x6, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x246c, 0x1, @perf_bp={&(0x7f0000000840), 0x5}, 0x100, 0x5, 0x280000, 0xa, 0x5b590378, 0x8, 0x0, 0x0, 0xc0e9, 0x0, 0xc}, 0x0, 0x3, r0, 0x8) r10 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r10, 0x10e, 0xf2ff, &(0x7f0000000300), 0x4) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000009c0)="f4f86f1247b76e164fcf214ca15ae6de14ebaf38121c5fc6bb787806a48302d695988a125c376198912271e2625f854d2f95aeca9e0413a2d4e3457ed8e19b652f6dbc6b1c15ad3c77ecf6938647c9fbedf8f0be6a99962cf006d4ca0be812f4f01390f893c9ab2fbe1c3ad8b66ecb94dbe40b9b0c1843b2c2a1cd11439a9eb1362f247539b052fb88c615dcca187b9cbb84b2345c65b13ee04092bc82591278e696e4ba73c593d7261d8e", 0xab}], 0x4}, 0x40) 20.299882012s ago: executing program 0 (id=8699): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0x25) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000", @ANYRES32, @ANYRES32=r1, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYRES8=r2], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731f"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x4, 0x47, &(0x7f0000000340)=""/71, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) socketpair(0x2, 0x3, 0xff, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40) recvmsg(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 20.146888442s ago: executing program 3 (id=8700): socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63e8ffffffffffffff80002000000000101000007f0600080000000000000009000000000000001184"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 19.32403341s ago: executing program 1 (id=8701): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 19.287622642s ago: executing program 0 (id=8702): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) 19.208323827s ago: executing program 1 (id=8703): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000071101400000000009500000700000000a425f8e8c17270231f92394c95540348156c9fd1fe6380cb460edb08ff7489bee864987b2042ef8eb2a30a9c3f1e9e9dfcc575e53c7bc51a30f3c90f718a082b76d79137ac87444fe847ca5b7583b11df467348d5ef14c51306e52709d7515579150bd747bd5326652c7c8cf506f762dce949021a6586d88496504285419f79850"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d00000000010000f0ffffff", 0x20}], 0x1}, 0x40000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x21, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x2, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) 19.184372528s ago: executing program 0 (id=8704): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000700)=[{0x5, 0x5, 0x6, 0x7}, {0x1, 0x1, 0xc}, {0x0, 0x3, 0x9, 0x6}, {0xfffffffd, 0x5, 0x4, 0x4}, {0x3, 0x2, 0xa, 0x8}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)='%pB \x00'}, 0x20) close(0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x4c, &(0x7f0000002a80)=[{&(0x7f0000000540)='I', 0xfffffffffffffed8}], 0x1}, 0x44) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x4102, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) close(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000ec0)="d80000001d0081044e81f782db44b904021d080500000000040000a1bc0002000000000000000e1208000f0100810401a8001600260001400300000803600cfab94dcf5c0461c16f94007134cf6ee08000a0e408e8d8ef075c11503c6baace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd6bc09000000000000002483916ddf50b8b351f55551715b52facb", 0x9b}, {&(0x7f00000006c0)="54f6d4d87eb3f1c0c5", 0x9}, {&(0x7f0000000080)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b6eb91dacc63c30ada51eb3958755533ccce04d3e635cbe848495e723490d", 0x34}], 0x3, 0x0, 0x0, 0x7400}, 0xd0) close(r4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x100000001}, 0x808, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x10, 0x0, 0x40000004, 0xa021, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x8640, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000001c20200009"], 0x48) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000ff0400000000000000080003002e000a000d002e009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e7c87962a841fca873753f07d7fcf50e4509", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYRES8=r1], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff03076804263a9cc165151fff", 0x0, 0xcb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000000)={'wlan0\x00', @random="f0206e07449c"}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x9}, 0x8) 18.97891412s ago: executing program 2 (id=8705): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000f00000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 18.932652703s ago: executing program 3 (id=8706): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000480)='GPL\x00'}, 0x80) 18.918180823s ago: executing program 3 (id=8707): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61141800000000001d430000000000007a0a00fe0000001f61141400000000004603f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180)=r1, 0x12) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9, 0x1, 0x9, 0x0, 0x0, 0x1, 0xc160, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x1, 0x8, 0x5, 0xff, 0x4, 0x6, 0x0, 0x7fff}, r1, 0x3, 0xffffffffffffffff, 0x1) write$cgroup_devices(r0, 0x0, 0xa) 18.906644164s ago: executing program 0 (id=8708): recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4098, 0x1002}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x38, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@ringbuf_query, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xb}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @generic={0xfe, 0x6, 0x9, 0x3, 0x4e}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x29fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) (fail_nth: 38) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 18.649818499s ago: executing program 2 (id=8709): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x22) write$cgroup_subtree(r3, 0x0, 0x17) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r6, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) close(r4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x11, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x101809, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x4a, 0x0, 0xfffffffd, 0x800, 0x10000}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) 18.168999607s ago: executing program 0 (id=8710): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0x25) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000", @ANYRES32, @ANYRES32=r1, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYRES8=r2], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x4, 0x47, &(0x7f0000000340)=""/71, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) socketpair(0x2, 0x3, 0xff, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40) recvmsg(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 17.516250286s ago: executing program 3 (id=8711): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 17.394115312s ago: executing program 3 (id=8712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0xffff, 0xfffff801, 0x10000, 0x40004, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa1a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x1000, 0x8, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f0000000c80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x4}}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe3, &(0x7f0000000240)=""/227}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f2, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="b234e15b958a14fa3120dffffa74557801fb59622cca78168120ea64cce177951209d374a8f78d694bd2e85ca0e10ab5db39fd2efc6a28737ca6e5079f556177d460ea96946ed15400e11aa94eeacb08cf93c88eacfb856d4a350ee25de1a44760afde72d4782da5badd777297ffa90f40840f69b1b949e3434742cc562721b167ccf5b465405248af5ac3ee1995546cbca4fb7988a889cd4edbeb74e6fce877041f496f669b7b34c7c05d08c8ce19c6b96d0e3a8dba1c92dbeaa18ea7dcb432793eca50", &(0x7f0000000180)=""/76}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000f80)=""/4115, 0x30, 0x1013, 0x1}, 0x28) 7.848511441s ago: executing program 1 (id=8713): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff2086ddffff21000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 7.848210021s ago: executing program 1 (id=8714): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (fail_nth: 20) 1.747934148s ago: executing program 1 (id=8715): socket$kcm(0x21, 0x2, 0x2) (async) r0 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000005c0)={&(0x7f00000003c0)=@abs, 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000bc0)=""/172, 0xac}, {&(0x7f0000000d80)=""/138, 0x8a}, {&(0x7f0000000e40)=""/143, 0x8f}, {&(0x7f0000000780)=""/113, 0x71}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x5, &(0x7f0000000f00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe1}, 0x2000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="660a00000000000079105b00000000009500000008000000000000001e95b0"], &(0x7f0000000000)='GPL\x00'}, 0x80) write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], 0x8) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) (async) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000000c80)=""/222, 0xde}, {&(0x7f00000028c0)=""/4059, 0xfdb}, {0x0}, {&(0x7f00000006c0)=""/161, 0xa1}, {&(0x7f00000000c0)=""/112, 0x70}, {0x0}], 0x7}, 0x40002000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x12, &(0x7f0000000940)=ANY=[@ANYBLOB="85100000db6865637966223a67641379e34c17bf498f06b69e9c38200cd7426ec217d02fbc631ef9e50d57b12d68734e0b055a5bff85f69f1f194277c368ca7b9a0386dd8bf2efb4bb71dde1ffc519b887bbc2e7b595dcb2af48696194f0cc9fea484a3b2ee577b4a83028dc1067a19298dafeffe61281253cdb94317c75b5a7526829007317675974ef348e5cc270cbcc633febaa51e0211969b682be919155512dbcd32315d3c025af8517f03f62ff91cdaeacbda51c455ddde9e9", @ANYRES32=r6, @ANYBLOB="000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000c20000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1, &(0x7f00000010c0)=ANY=[@ANYBLOB="14000000000000000000000001009e720bde0500007f00000000000000140000000000000000000000010000000500000000000000140000000000000000000000010000000e000000000000001400000000000000000000000200000007000000000000001c000000000000000000000008000000c4fd98fef2bc1d4556b9cd7809cf19e6e9a773dd3e969cd729b7003262e9", @ANYRES32=r11, @ANYBLOB="0a0101020000000000000000140000000000000000000000010000000500000000000000940000000000000000000000070000004424f651ac1e0101000000070000000000000009ac1e0001003c0000ac1e0001000000088323de0a010102e0000002ffffffffac1414bb7f000001ac1414bb00000000e0000002442cf6330000000000000000ac1414110000000fac14143f0000400be000000100000009ac14143100000009860d000000000107825b21901e0000000000000000"], 0x130}, 0x10) r13 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000000000001812", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r14, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x5761, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r16 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r16, 0x0, 0xfe33) sendmsg$inet(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.061377088s ago: executing program 32 (id=8709): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x22) write$cgroup_subtree(r3, 0x0, 0x17) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r6, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x40, &(0x7f0000000340)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x95, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) close(r4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x11, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x101809, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x4a, 0x0, 0xfffffffd, 0x800, 0x10000}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) 309.96µs ago: executing program 33 (id=8710): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0x25) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r2}, &(0x7f00000001c0), &(0x7f0000000180)='%pK \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000", @ANYRES32, @ANYRES32=r1, @ANYRES32], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYRES8=r2], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x4, 0x47, &(0x7f0000000340)=""/71, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb}, 0x94) socketpair(0x2, 0x3, 0xff, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x40) recvmsg(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 0s ago: executing program 34 (id=8712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0xffff, 0xfffff801, 0x10000, 0x40004, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa1a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0}, 0x1000, 0x8, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x6, &(0x7f0000000c80)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {0x4}}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe3, &(0x7f0000000240)=""/227}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r7) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xb7, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x90}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f2, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000080)="b234e15b958a14fa3120dffffa74557801fb59622cca78168120ea64cce177951209d374a8f78d694bd2e85ca0e10ab5db39fd2efc6a28737ca6e5079f556177d460ea96946ed15400e11aa94eeacb08cf93c88eacfb856d4a350ee25de1a44760afde72d4782da5badd777297ffa90f40840f69b1b949e3434742cc562721b167ccf5b465405248af5ac3ee1995546cbca4fb7988a889cd4edbeb74e6fce877041f496f669b7b34c7c05d08c8ce19c6b96d0e3a8dba1c92dbeaa18ea7dcb432793eca50", &(0x7f0000000180)=""/76}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000000f80)=""/4115, 0x30, 0x1013, 0x1}, 0x28) kernel console output (not intermixed with test programs): rog_test_run_skb+0x238/0x12b0 [ 1864.013282][T30129] __kmem_cache_alloc_node+0x53/0x250 [ 1864.018674][T30129] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 1864.024237][T30129] __kmalloc+0xa4/0x230 [ 1864.028415][T30129] bpf_prog_test_run_skb+0x238/0x12b0 [ 1864.033800][T30129] ? __fget_files+0x28/0x4b0 [ 1864.038409][T30129] ? __fget_files+0x28/0x4b0 [ 1864.043034][T30129] ? __fget_files+0x43d/0x4b0 [ 1864.047770][T30129] ? cpu_online+0x60/0x60 [ 1864.052122][T30129] bpf_prog_test_run+0x321/0x390 [ 1864.057081][T30129] __sys_bpf+0x49d/0x890 [ 1864.061442][T30129] ? bpf_link_show_fdinfo+0x390/0x390 [ 1864.066853][T30129] ? lock_chain_count+0x20/0x20 [ 1864.071736][T30129] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1864.077850][T30129] __x64_sys_bpf+0x7c/0x90 [ 1864.082312][T30129] do_syscall_64+0x55/0xa0 [ 1864.086744][T30129] ? clear_bhb_loop+0x40/0x90 [ 1864.091438][T30129] ? clear_bhb_loop+0x40/0x90 [ 1864.096157][T30129] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1864.102225][T30129] RIP: 0033:0x7f91bd19acb9 [ 1864.106650][T30129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1864.126622][T30129] RSP: 002b:00007f91be035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1864.135054][T30129] RAX: ffffffffffffffda RBX: 00007f91bd415fa0 RCX: 00007f91bd19acb9 [ 1864.143042][T30129] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 1864.151527][T30129] RBP: 00007f91be035090 R08: 0000000000000000 R09: 0000000000000000 [ 1864.159513][T30129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1864.167590][T30129] R13: 00007f91bd416038 R14: 00007f91bd415fa0 R15: 00007fff68113c48 [ 1864.175677][T30129] [ 1865.175295][T30144] validate_nla: 6 callbacks suppressed [ 1865.175313][T30144] netlink: 'syz.3.8057': attribute type 4 has an invalid length. [ 1865.210864][T30144] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8057'. [ 1865.242673][T30144] net_ratelimit: 5271 callbacks suppressed [ 1865.242691][T30144] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1866.755370][T30189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8082'. [ 1866.801140][T30189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8082'. [ 1866.833288][T30190] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8082'. [ 1866.847312][T30189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8082'. [ 1867.172596][T30204] netlink: 'syz.0.8086': attribute type 29 has an invalid length. [ 1867.174513][T30206] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8089'. [ 1867.205425][T30204] netlink: 'syz.0.8086': attribute type 29 has an invalid length. [ 1867.236004][T30210] netlink: 178584 bytes leftover after parsing attributes in process `syz.3.8090'. [ 1867.240104][T30209] netlink: 178584 bytes leftover after parsing attributes in process `syz.3.8090'. [ 1867.286448][T30210] netlink: zone id is out of range [ 1867.293203][T30199] netlink: 'syz.0.8086': attribute type 29 has an invalid length. [ 1867.317357][T30210] netlink: zone id is out of range [ 1867.318406][T30209] netlink: zone id is out of range [ 1867.322508][T30210] netlink: zone id is out of range [ 1867.322516][T30210] netlink: zone id is out of range [ 1867.340813][T30199] netlink: 'syz.0.8086': attribute type 29 has an invalid length. [ 1867.356595][T30209] netlink: zone id is out of range [ 1867.360247][T30199] netlink: 'syz.0.8086': attribute type 29 has an invalid length. [ 1867.391008][T30209] netlink: zone id is out of range [ 1867.425163][T30209] netlink: zone id is out of range [ 1867.447576][T30210] netlink: zone id is out of range [ 1870.041953][T30215] netlink: 'syz.2.8092': attribute type 10 has an invalid length. [ 1870.050167][T30215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8092'. [ 1870.060294][T30215] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1870.459816][T30234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8096'. [ 1870.588244][T30241] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8100'. [ 1870.721798][T30245] netlink: 'syz.0.8101': attribute type 10 has an invalid length. [ 1870.941096][T30245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1871.217363][T30245] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1871.286566][T30251] bond0: entered promiscuous mode [ 1871.292171][T30251] bond_slave_0: entered promiscuous mode [ 1871.298402][T30251] bond_slave_1: entered promiscuous mode [ 1871.304466][T30251] batadv0: entered promiscuous mode [ 1871.440332][T30261] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8104'. [ 1871.535916][T30265] FAULT_INJECTION: forcing a failure. [ 1871.535916][T30265] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.553961][T30265] CPU: 0 PID: 30265 Comm: syz.1.8107 Not tainted syzkaller #0 [ 1871.561473][T30265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1871.571664][T30265] Call Trace: [ 1871.575047][T30265] [ 1871.578017][T30265] dump_stack_lvl+0x18c/0x250 [ 1871.582745][T30265] ? show_regs_print_info+0x20/0x20 [ 1871.587975][T30265] ? load_image+0x400/0x400 [ 1871.592503][T30265] ? __might_sleep+0xe0/0xe0 [ 1871.597114][T30265] ? __lock_acquire+0x7d40/0x7d40 [ 1871.602341][T30265] should_fail_ex+0x39d/0x4d0 [ 1871.607122][T30265] should_failslab+0x9/0x20 [ 1871.611635][T30265] slab_pre_alloc_hook+0x59/0x310 [ 1871.616666][T30265] ? kvmalloc_node+0x70/0x180 [ 1871.621616][T30265] ? kvmalloc_node+0x70/0x180 [ 1871.626382][T30265] __kmem_cache_alloc_node+0x53/0x250 [ 1871.631766][T30265] ? kvmalloc_node+0x70/0x180 [ 1871.636532][T30265] __kmalloc_node+0xa4/0x230 [ 1871.641199][T30265] kvmalloc_node+0x70/0x180 [ 1871.645706][T30265] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 1871.651083][T30265] ? 0xffffffffa00044c0 [ 1871.655258][T30265] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1871.661171][T30265] ? 0xffffffffa00044c0 [ 1871.665337][T30265] ? xdp_convert_md_to_buff+0x330/0x330 [ 1871.670904][T30265] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1871.677236][T30265] ? _copy_from_user+0xa5/0xe0 [ 1871.682004][T30265] ? bpf_test_init+0x119/0x140 [ 1871.686773][T30265] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1871.692323][T30265] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1871.697792][T30265] ? dev_put+0x80/0x80 [ 1871.701875][T30265] ? dev_put+0x80/0x80 [ 1871.705937][T30265] bpf_prog_test_run+0x321/0x390 [ 1871.710965][T30265] __sys_bpf+0x49d/0x890 [ 1871.715212][T30265] ? bpf_link_show_fdinfo+0x390/0x390 [ 1871.720684][T30265] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1871.727111][T30265] __x64_sys_bpf+0x7c/0x90 [ 1871.731535][T30265] do_syscall_64+0x55/0xa0 [ 1871.735955][T30265] ? clear_bhb_loop+0x40/0x90 [ 1871.740641][T30265] ? clear_bhb_loop+0x40/0x90 [ 1871.745314][T30265] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1871.751209][T30265] RIP: 0033:0x7fbd2b19acb9 [ 1871.755670][T30265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.775455][T30265] RSP: 002b:00007fbd293f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1871.783878][T30265] RAX: ffffffffffffffda RBX: 00007fbd2b415fa0 RCX: 00007fbd2b19acb9 [ 1871.791936][T30265] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1871.799904][T30265] RBP: 00007fbd293f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1871.807879][T30265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.815935][T30265] R13: 00007fbd2b416038 R14: 00007fbd2b415fa0 R15: 00007ffcdc527528 [ 1871.824001][T30265] [ 1872.106661][T30274] netlink: 'syz.3.8110': attribute type 3 has an invalid length. [ 1872.117879][T30274] netlink: 130920 bytes leftover after parsing attributes in process `syz.3.8110'. [ 1875.448280][T30293] mac80211_hwsim hwsim82 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1876.114789][T30314] netlink: 'syz.1.8125': attribute type 3 has an invalid length. [ 1876.140511][T30314] netlink: 130920 bytes leftover after parsing attributes in process `syz.1.8125'. [ 1876.199600][T30321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8127'. [ 1877.419029][T30347] netlink: 'syz.3.8134': attribute type 10 has an invalid length. [ 1877.457395][T30347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8134'. [ 1877.494703][T30347] bridge0: port 4(team0) entered blocking state [ 1877.507822][T30347] bridge0: port 4(team0) entered disabled state [ 1877.516146][T30347] team0: entered allmulticast mode [ 1877.522690][T30347] C: entered allmulticast mode [ 1877.529855][T30347] team_slave_1: entered allmulticast mode [ 1877.543352][T30347] team0: entered promiscuous mode [ 1877.594210][T30347] C: entered promiscuous mode [ 1877.600348][T30347] team_slave_1: entered promiscuous mode [ 1877.611996][T30347] bridge0: port 4(team0) entered blocking state [ 1877.618778][T30347] bridge0: port 4(team0) entered forwarding state [ 1878.010560][T30359] netlink: 'syz.1.8138': attribute type 10 has an invalid length. [ 1878.044264][T30363] netlink: 'syz.0.8146': attribute type 9 has an invalid length. [ 1878.139702][T30363] netlink: 167288 bytes leftover after parsing attributes in process `syz.0.8146'. [ 1878.366444][T30361] netlink: 'syz.3.8140': attribute type 3 has an invalid length. [ 1878.382036][T30361] netlink: 130920 bytes leftover after parsing attributes in process `syz.3.8140'. [ 1878.476860][T30359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1878.624157][T30359] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1878.688674][T30365] bond0: entered promiscuous mode [ 1878.693790][T30365] bond_slave_0: entered promiscuous mode [ 1878.747505][T30365] bond_slave_1: entered promiscuous mode [ 1878.753425][T30365] dummy0: entered promiscuous mode [ 1878.777368][T30365] batadv0: entered promiscuous mode [ 1879.243892][T30376] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.8143'. [ 1879.249959][T30380] netlink: 'syz.2.8142': attribute type 10 has an invalid length. [ 1879.336919][T30380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8142'. [ 1879.397871][T30380] team0: entered promiscuous mode [ 1879.416837][T30380] team_slave_1: entered promiscuous mode [ 1879.503104][T30380] team0: entered allmulticast mode [ 1879.538572][T30380] team_slave_1: entered allmulticast mode [ 1879.604214][T30380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1879.629280][T30380] batman_adv: batadv0: Interface activated: team0 [ 1879.700946][T30380] batman_adv: batadv0: Interface deactivated: team0 [ 1879.717116][T30380] batman_adv: batadv0: Removing interface: team0 [ 1879.815401][T30380] net_ratelimit: 784 callbacks suppressed [ 1879.816237][T30380] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1879.937314][T30387] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8148'. [ 1879.966999][T30387] tc_dump_action: action bad kind [ 1880.286032][T30408] netlink: 'syz.1.8154': attribute type 39 has an invalid length. [ 1880.642364][T30414] netlink: 'syz.2.8155': attribute type 3 has an invalid length. [ 1880.676546][T30414] netlink: 130920 bytes leftover after parsing attributes in process `syz.2.8155'. [ 1880.936467][T30419] mac80211_hwsim hwsim86 .3ãc¤±: renamed from wlan1 (while UP) [ 1881.039478][T19413] Bluetooth: hci1: command 0x0406 tx timeout [ 1881.899834][T30442] netlink: 21 bytes leftover after parsing attributes in process `syz.3.8165'. [ 1881.947299][T30442] ksmbd: Unknown IPC event: 0, ignore. [ 1881.968278][T30442] netlink: 'syz.3.8165': attribute type 21 has an invalid length. [ 1883.149265][T30453] FAULT_INJECTION: forcing a failure. [ 1883.149265][T30453] name failslab, interval 1, probability 0, space 0, times 0 [ 1883.182488][T30453] CPU: 0 PID: 30453 Comm: syz.1.8171 Not tainted syzkaller #0 [ 1883.190017][T30453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1883.200100][T30453] Call Trace: [ 1883.203495][T30453] [ 1883.206551][T30453] dump_stack_lvl+0x18c/0x250 [ 1883.211265][T30453] ? sctp_sendmsg+0x1575/0x28c0 [ 1883.216202][T30453] ? ___sys_sendmsg+0x2a6/0x360 [ 1883.221083][T30453] ? show_regs_print_info+0x20/0x20 [ 1883.226358][T30453] ? load_image+0x400/0x400 [ 1883.230901][T30453] should_fail_ex+0x39d/0x4d0 [ 1883.235615][T30453] should_failslab+0x9/0x20 [ 1883.240142][T30453] slab_pre_alloc_hook+0x59/0x310 [ 1883.245199][T30453] ? sctp_add_bind_addr+0x8c/0x360 [ 1883.250417][T30453] __kmem_cache_alloc_node+0x53/0x250 [ 1883.255816][T30453] ? sctp_add_bind_addr+0x8c/0x360 [ 1883.261069][T30453] kmalloc_trace+0x2a/0xe0 [ 1883.265531][T30453] sctp_add_bind_addr+0x8c/0x360 [ 1883.270520][T30453] sctp_copy_local_addr_list+0x315/0x4f0 [ 1883.276275][T30453] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1883.282121][T30453] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1883.288318][T30453] ? sctp_v4_is_any+0x35/0x60 [ 1883.293252][T30453] ? sctp_copy_one_addr+0x8c/0x350 [ 1883.299026][T30453] sctp_bind_addr_copy+0xb3/0x3c0 [ 1883.304351][T30453] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1883.310739][T30453] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1883.316044][T30453] ? __sctp_connect+0xd80/0xd80 [ 1883.320903][T30453] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1883.326383][T30453] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1883.331975][T30453] ? security_sctp_bind_connect+0x89/0xb0 [ 1883.337735][T30453] sctp_sendmsg+0x1575/0x28c0 [ 1883.342468][T30453] ? sctp_getsockopt+0xb60/0xb60 [ 1883.347514][T30453] ? aa_sk_perm+0x83c/0x970 [ 1883.352064][T30453] ? aa_af_perm+0x330/0x330 [ 1883.356585][T30453] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1883.363017][T30453] ? sock_rps_record_flow+0x19/0x3f0 [ 1883.368318][T30453] ? inet_sendmsg+0xe9/0x2f0 [ 1883.372917][T30453] ? inet_send_prepare+0x260/0x260 [ 1883.378048][T30453] ____sys_sendmsg+0x5ba/0x960 [ 1883.382919][T30453] ? __lock_acquire+0x7d40/0x7d40 [ 1883.387963][T30453] ? __sys_sendmsg_sock+0x30/0x30 [ 1883.393032][T30453] ? __import_iovec+0x5f2/0x850 [ 1883.397938][T30453] ? import_iovec+0x73/0xa0 [ 1883.402471][T30453] ___sys_sendmsg+0x2a6/0x360 [ 1883.407206][T30453] ? __sys_sendmsg+0x2a0/0x2a0 [ 1883.412019][T30453] ? __lock_acquire+0x7d40/0x7d40 [ 1883.417088][T30453] __se_sys_sendmsg+0x1c2/0x2b0 [ 1883.421968][T30453] ? __x64_sys_sendmsg+0x80/0x80 [ 1883.426937][T30453] ? lockdep_hardirqs_on+0x98/0x150 [ 1883.432163][T30453] do_syscall_64+0x55/0xa0 [ 1883.436607][T30453] ? clear_bhb_loop+0x40/0x90 [ 1883.441393][T30453] ? clear_bhb_loop+0x40/0x90 [ 1883.446148][T30453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1883.452058][T30453] RIP: 0033:0x7fbd2b19acb9 [ 1883.456781][T30453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1883.476442][T30453] RSP: 002b:00007fbd293f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1883.484980][T30453] RAX: ffffffffffffffda RBX: 00007fbd2b415fa0 RCX: 00007fbd2b19acb9 [ 1883.493054][T30453] RDX: 000000000c040001 RSI: 0000200000004b40 RDI: 0000000000000003 [ 1883.501154][T30453] RBP: 00007fbd293f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1883.509406][T30453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1883.517424][T30453] R13: 00007fbd2b416038 R14: 00007fbd2b415fa0 R15: 00007ffcdc527528 [ 1883.525445][T30453] [ 1883.698561][T30456] netlink: 'syz.3.8172': attribute type 3 has an invalid length. [ 1883.706990][T30456] netlink: 130920 bytes leftover after parsing attributes in process `syz.3.8172'. [ 1883.856733][T30471] FAULT_INJECTION: forcing a failure. [ 1883.856733][T30471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1883.889147][T30471] CPU: 0 PID: 30471 Comm: syz.2.8176 Not tainted syzkaller #0 [ 1883.896667][T30471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1883.906865][T30471] Call Trace: [ 1883.910219][T30471] [ 1883.913289][T30471] dump_stack_lvl+0x18c/0x250 [ 1883.918027][T30471] ? show_regs_print_info+0x20/0x20 [ 1883.923287][T30471] ? load_image+0x400/0x400 [ 1883.927854][T30471] ? __lock_acquire+0x7d40/0x7d40 [ 1883.932929][T30471] ? snprintf+0xe9/0x140 [ 1883.937213][T30471] should_fail_ex+0x39d/0x4d0 [ 1883.941954][T30471] _copy_to_user+0x2f/0xa0 [ 1883.946415][T30471] simple_read_from_buffer+0xe7/0x150 [ 1883.951847][T30471] proc_fail_nth_read+0x1e8/0x260 [ 1883.956934][T30471] ? proc_fault_inject_write+0x360/0x360 [ 1883.963447][T30471] ? fsnotify_perm+0x271/0x5e0 [ 1883.968293][T30471] ? proc_fault_inject_write+0x360/0x360 [ 1883.974091][T30471] vfs_read+0x28b/0x970 [ 1883.978329][T30471] ? kernel_read+0x1e0/0x1e0 [ 1883.982985][T30471] ? __fget_files+0x28/0x4b0 [ 1883.987626][T30471] ? __fget_files+0x28/0x4b0 [ 1883.992271][T30471] ? __fget_files+0x43d/0x4b0 [ 1883.997422][T30471] ? __fdget_pos+0x2a3/0x330 [ 1884.002172][T30471] ? ksys_read+0x75/0x260 [ 1884.006519][T30471] ksys_read+0x150/0x260 [ 1884.010800][T30471] ? vfs_write+0x990/0x990 [ 1884.015255][T30471] ? lockdep_hardirqs_on+0x98/0x150 [ 1884.020493][T30471] do_syscall_64+0x55/0xa0 [ 1884.024926][T30471] ? clear_bhb_loop+0x40/0x90 [ 1884.029626][T30471] ? clear_bhb_loop+0x40/0x90 [ 1884.034353][T30471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1884.040349][T30471] RIP: 0033:0x7f264055b58e [ 1884.044812][T30471] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1884.064540][T30471] RSP: 002b:00007f2641517fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1884.072992][T30471] RAX: ffffffffffffffda RBX: 00007f26415186c0 RCX: 00007f264055b58e [ 1884.081094][T30471] RDX: 000000000000000f RSI: 00007f26415180a0 RDI: 0000000000000005 [ 1884.089190][T30471] RBP: 00007f2641518090 R08: 0000000000000000 R09: 0000000000000000 [ 1884.097382][T30471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1884.105543][T30471] R13: 00007f2640816038 R14: 00007f2640815fa0 R15: 00007ffc43030348 [ 1884.113599][T30471] [ 1884.402141][T30478] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8179'. [ 1884.529470][T30480] netlink: 'syz.2.8180': attribute type 27 has an invalid length. [ 1884.540236][T30480] netlink: 'syz.2.8180': attribute type 33 has an invalid length. [ 1884.556554][T30480] netlink: 116 bytes leftover after parsing attributes in process `syz.2.8180'. [ 1884.587821][T30480] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1884.622401][T30485] netlink: 'syz.2.8180': attribute type 28 has an invalid length. [ 1884.630571][T30485] netlink: 'syz.2.8180': attribute type 3 has an invalid length. [ 1884.653873][T30485] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8180'. [ 1884.695575][T30489] netlink: 'syz.0.8181': attribute type 2 has an invalid length. [ 1884.761567][T30489] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8181'. [ 1884.831745][T30494] FAULT_INJECTION: forcing a failure. [ 1884.831745][T30494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1884.876850][T30496] netlink: 'syz.2.8186': attribute type 10 has an invalid length. [ 1884.885943][T30494] CPU: 0 PID: 30494 Comm: syz.3.8185 Not tainted syzkaller #0 [ 1884.893438][T30494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1884.903798][T30494] Call Trace: [ 1884.907095][T30494] [ 1884.910037][T30494] dump_stack_lvl+0x18c/0x250 [ 1884.914755][T30494] ? show_regs_print_info+0x20/0x20 [ 1884.920201][T30494] ? load_image+0x400/0x400 [ 1884.924826][T30494] ? __might_fault+0xaa/0x120 [ 1884.929542][T30494] ? __lock_acquire+0x7d40/0x7d40 [ 1884.934611][T30494] should_fail_ex+0x39d/0x4d0 [ 1884.939422][T30494] _copy_from_iter+0x1d9/0x12e0 [ 1884.944304][T30494] ? rep_movs_alternative+0x4a/0x90 [ 1884.949538][T30494] ? _copy_from_iter+0x24e/0x12e0 [ 1884.954889][T30494] ? __virt_addr_valid+0x18c/0x540 [ 1884.960057][T30494] ? __lock_acquire+0x7d40/0x7d40 [ 1884.965328][T30494] ? copyout_mc+0x70/0x70 [ 1884.969877][T30494] ? copyout_mc+0x70/0x70 [ 1884.974535][T30494] ? __virt_addr_valid+0x18c/0x540 [ 1884.979799][T30494] ? page_copy_sane+0x16a/0x270 [ 1884.984807][T30494] copy_page_from_iter+0x7b/0x100 [ 1884.990485][T30494] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1884.996539][T30494] unix_stream_sendmsg+0x562/0xbf0 [ 1885.001791][T30494] ? unix_show_fdinfo+0x270/0x270 [ 1885.006950][T30494] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1885.013495][T30494] ? aa_sock_msg_perm+0x94/0x150 [ 1885.018445][T30494] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1885.023744][T30494] ? security_socket_sendmsg+0x80/0xa0 [ 1885.029196][T30494] ? unix_show_fdinfo+0x270/0x270 [ 1885.034246][T30494] ____sys_sendmsg+0x5ba/0x960 [ 1885.039020][T30494] ? __asan_memset+0x22/0x40 [ 1885.043620][T30494] ? __sys_sendmsg_sock+0x30/0x30 [ 1885.048645][T30494] ? __import_iovec+0x5f2/0x850 [ 1885.053494][T30494] ? import_iovec+0x73/0xa0 [ 1885.058006][T30494] ___sys_sendmsg+0x2a6/0x360 [ 1885.062799][T30494] ? get_pid_task+0x20/0x1e0 [ 1885.067411][T30494] ? __sys_sendmsg+0x2a0/0x2a0 [ 1885.072250][T30494] ? __lock_acquire+0x7d40/0x7d40 [ 1885.077506][T30494] __se_sys_sendmsg+0x1c2/0x2b0 [ 1885.082592][T30494] ? __x64_sys_sendmsg+0x80/0x80 [ 1885.087896][T30494] ? lockdep_hardirqs_on+0x98/0x150 [ 1885.093098][T30494] do_syscall_64+0x55/0xa0 [ 1885.097512][T30494] ? clear_bhb_loop+0x40/0x90 [ 1885.102368][T30494] ? clear_bhb_loop+0x40/0x90 [ 1885.107043][T30494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1885.113021][T30494] RIP: 0033:0x7f00c6f9acb9 [ 1885.117447][T30494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1885.137678][T30494] RSP: 002b:00007f00c7dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1885.146131][T30494] RAX: ffffffffffffffda RBX: 00007f00c7215fa0 RCX: 00007f00c6f9acb9 [ 1885.154306][T30494] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000006 [ 1885.162382][T30494] RBP: 00007f00c7dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1885.170371][T30494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1885.178448][T30494] R13: 00007f00c7216038 R14: 00007f00c7215fa0 R15: 00007ffca5417798 [ 1885.186563][T30494] [ 1885.194900][T30496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8186'. [ 1885.215385][T30496] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1885.443564][T30506] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8187'. [ 1885.847026][T30519] FAULT_INJECTION: forcing a failure. [ 1885.847026][T30519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1885.883719][T30519] CPU: 1 PID: 30519 Comm: syz.1.8195 Not tainted syzkaller #0 [ 1885.891261][T30519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1885.901820][T30519] Call Trace: [ 1885.905129][T30519] [ 1885.908084][T30519] dump_stack_lvl+0x18c/0x250 [ 1885.912813][T30519] ? show_regs_print_info+0x20/0x20 [ 1885.918057][T30519] ? load_image+0x400/0x400 [ 1885.922604][T30519] ? __might_fault+0xaa/0x120 [ 1885.927312][T30519] ? __lock_acquire+0x7d40/0x7d40 [ 1885.932390][T30519] should_fail_ex+0x39d/0x4d0 [ 1885.937087][T30519] _copy_from_user+0x2f/0xe0 [ 1885.941696][T30519] generic_map_update_batch+0x59a/0x810 [ 1885.947289][T30519] ? rcu_read_unlock+0xa0/0xa0 [ 1885.952096][T30519] ? __fdget+0x180/0x210 [ 1885.956426][T30519] ? rcu_read_unlock+0xa0/0xa0 [ 1885.961196][T30519] bpf_map_do_batch+0x3d7/0x610 [ 1885.966322][T30519] __sys_bpf+0x381/0x890 [ 1885.970691][T30519] ? bpf_link_show_fdinfo+0x390/0x390 [ 1885.976300][T30519] ? lock_chain_count+0x20/0x20 [ 1885.981369][T30519] __x64_sys_bpf+0x7c/0x90 [ 1885.985796][T30519] do_syscall_64+0x55/0xa0 [ 1885.990248][T30519] ? clear_bhb_loop+0x40/0x90 [ 1885.994938][T30519] ? clear_bhb_loop+0x40/0x90 [ 1885.999731][T30519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1886.005910][T30519] RIP: 0033:0x7fbd2b19acb9 [ 1886.010331][T30519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1886.030383][T30519] RSP: 002b:00007fbd293f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1886.039117][T30519] RAX: ffffffffffffffda RBX: 00007fbd2b415fa0 RCX: 00007fbd2b19acb9 [ 1886.047116][T30519] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 1886.055501][T30519] RBP: 00007fbd293f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.063499][T30519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1886.071562][T30519] R13: 00007fbd2b416038 R14: 00007fbd2b415fa0 R15: 00007ffcdc527528 [ 1886.079655][T30519] [ 1887.448613][T30590] netlink: 'syz.3.8230': attribute type 27 has an invalid length. [ 1887.467417][T30590] netlink: 'syz.3.8230': attribute type 33 has an invalid length. [ 1887.484844][T30590] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8230'. [ 1887.493678][T30588] netlink: 'syz.1.8228': attribute type 3 has an invalid length. [ 1887.507446][T30588] netlink: 130920 bytes leftover after parsing attributes in process `syz.1.8228'. [ 1887.516688][T30593] netlink: 'syz.3.8230': attribute type 28 has an invalid length. [ 1887.528412][T30593] netlink: 'syz.3.8230': attribute type 3 has an invalid length. [ 1887.540632][T30590] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1887.547848][T30593] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8230'. [ 1887.662399][T30598] FAULT_INJECTION: forcing a failure. [ 1887.662399][T30598] name failslab, interval 1, probability 0, space 0, times 0 [ 1887.705382][T30598] CPU: 1 PID: 30598 Comm: syz.0.8231 Not tainted syzkaller #0 [ 1887.713039][T30598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1887.723150][T30598] Call Trace: [ 1887.726459][T30598] [ 1887.729405][T30598] dump_stack_lvl+0x18c/0x250 [ 1887.734626][T30598] ? show_regs_print_info+0x20/0x20 [ 1887.739849][T30598] ? load_image+0x400/0x400 [ 1887.744485][T30598] ? __might_sleep+0xe0/0xe0 [ 1887.749259][T30598] ? __lock_acquire+0x7d40/0x7d40 [ 1887.754285][T30598] ? mark_lock+0x94/0x320 [ 1887.758628][T30598] should_fail_ex+0x39d/0x4d0 [ 1887.763406][T30598] should_failslab+0x9/0x20 [ 1887.767955][T30598] slab_pre_alloc_hook+0x59/0x310 [ 1887.773014][T30598] ? __get_vm_area_node+0x125/0x370 [ 1887.778241][T30598] __kmem_cache_alloc_node+0x53/0x250 [ 1887.783739][T30598] ? __get_vm_area_node+0x125/0x370 [ 1887.788953][T30598] kmalloc_node_trace+0x26/0xe0 [ 1887.794025][T30598] __get_vm_area_node+0x125/0x370 [ 1887.799248][T30598] __vmalloc_node_range+0x36e/0x1330 [ 1887.804651][T30598] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1887.810382][T30598] ? mark_lock+0x94/0x320 [ 1887.814723][T30598] ? __lock_acquire+0x1347/0x7d40 [ 1887.819752][T30598] ? verify_lock_unused+0x140/0x140 [ 1887.825007][T30598] ? free_vm_area+0x50/0x50 [ 1887.829575][T30598] ? end_current_label_crit_section+0x170/0x170 [ 1887.835934][T30598] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1887.841595][T30598] __vmalloc+0x7a/0x90 [ 1887.845684][T30598] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1887.851444][T30598] bpf_prog_alloc_no_stats+0x47/0x440 [ 1887.856948][T30598] ? bpf_prog_alloc+0x2b/0x1a0 [ 1887.861832][T30598] bpf_prog_alloc+0x3d/0x1a0 [ 1887.866462][T30598] bpf_prog_load+0x6eb/0x1670 [ 1887.871158][T30598] ? map_freeze+0x420/0x420 [ 1887.875671][T30598] ? __might_fault+0xaa/0x120 [ 1887.880347][T30598] ? __lock_acquire+0x7d40/0x7d40 [ 1887.885460][T30598] ? file_end_write+0x159/0x250 [ 1887.890307][T30598] ? __might_fault+0xaa/0x120 [ 1887.894980][T30598] ? __might_fault+0xc6/0x120 [ 1887.900115][T30598] ? __might_fault+0xaa/0x120 [ 1887.904888][T30598] ? bpf_lsm_bpf+0x9/0x10 [ 1887.909234][T30598] ? security_bpf+0x7e/0xa0 [ 1887.913762][T30598] __sys_bpf+0x5ba/0x890 [ 1887.918096][T30598] ? bpf_link_show_fdinfo+0x390/0x390 [ 1887.923652][T30598] ? lock_chain_count+0x20/0x20 [ 1887.928595][T30598] __x64_sys_bpf+0x7c/0x90 [ 1887.933099][T30598] do_syscall_64+0x55/0xa0 [ 1887.937511][T30598] ? clear_bhb_loop+0x40/0x90 [ 1887.942277][T30598] ? clear_bhb_loop+0x40/0x90 [ 1887.947207][T30598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1887.953094][T30598] RIP: 0033:0x7f91bd19acb9 [ 1887.957679][T30598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1887.978603][T30598] RSP: 002b:00007f91be035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1887.987210][T30598] RAX: ffffffffffffffda RBX: 00007f91bd415fa0 RCX: 00007f91bd19acb9 [ 1887.995242][T30598] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 1888.003439][T30598] RBP: 00007f91be035090 R08: 0000000000000000 R09: 0000000000000000 [ 1888.011557][T30598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1888.019828][T30598] R13: 00007f91bd416038 R14: 00007f91bd415fa0 R15: 00007fff68113c48 [ 1888.027815][T30598] [ 1888.037459][T30598] syz.0.8231: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1888.056308][T30598] CPU: 0 PID: 30598 Comm: syz.0.8231 Not tainted syzkaller #0 [ 1888.064263][T30598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1888.074522][T30598] Call Trace: [ 1888.078634][T30598] [ 1888.082123][T30598] dump_stack_lvl+0x18c/0x250 [ 1888.087096][T30598] ? show_regs_print_info+0x20/0x20 [ 1888.092539][T30598] ? load_image+0x400/0x400 [ 1888.097072][T30598] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1888.103552][T30598] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1888.110066][T30598] warn_alloc+0x246/0x340 [ 1888.114399][T30598] ? __get_vm_area_node+0x125/0x370 [ 1888.119605][T30598] ? zone_watermark_ok_safe+0x230/0x230 [ 1888.125166][T30598] ? rcu_is_watching+0x15/0xb0 [ 1888.129977][T30598] ? __get_vm_area_node+0x356/0x370 [ 1888.135217][T30598] __vmalloc_node_range+0x393/0x1330 [ 1888.140592][T30598] ? mark_lock+0x94/0x320 [ 1888.144923][T30598] ? __lock_acquire+0x1347/0x7d40 [ 1888.150153][T30598] ? verify_lock_unused+0x140/0x140 [ 1888.155404][T30598] ? free_vm_area+0x50/0x50 [ 1888.159927][T30598] ? end_current_label_crit_section+0x170/0x170 [ 1888.166260][T30598] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1888.171803][T30598] __vmalloc+0x7a/0x90 [ 1888.175894][T30598] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 1888.181459][T30598] bpf_prog_alloc_no_stats+0x47/0x440 [ 1888.186842][T30598] ? bpf_prog_alloc+0x2b/0x1a0 [ 1888.191617][T30598] bpf_prog_alloc+0x3d/0x1a0 [ 1888.196236][T30598] bpf_prog_load+0x6eb/0x1670 [ 1888.200928][T30598] ? map_freeze+0x420/0x420 [ 1888.205437][T30598] ? __might_fault+0xaa/0x120 [ 1888.210373][T30598] ? __lock_acquire+0x7d40/0x7d40 [ 1888.215496][T30598] ? file_end_write+0x159/0x250 [ 1888.220344][T30598] ? __might_fault+0xaa/0x120 [ 1888.225022][T30598] ? __might_fault+0xc6/0x120 [ 1888.229697][T30598] ? __might_fault+0xaa/0x120 [ 1888.234371][T30598] ? bpf_lsm_bpf+0x9/0x10 [ 1888.238712][T30598] ? security_bpf+0x7e/0xa0 [ 1888.243216][T30598] __sys_bpf+0x5ba/0x890 [ 1888.248115][T30598] ? bpf_link_show_fdinfo+0x390/0x390 [ 1888.253601][T30598] ? lock_chain_count+0x20/0x20 [ 1888.258563][T30598] __x64_sys_bpf+0x7c/0x90 [ 1888.262994][T30598] do_syscall_64+0x55/0xa0 [ 1888.267596][T30598] ? clear_bhb_loop+0x40/0x90 [ 1888.272272][T30598] ? clear_bhb_loop+0x40/0x90 [ 1888.277053][T30598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1888.283047][T30598] RIP: 0033:0x7f91bd19acb9 [ 1888.287475][T30598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.307228][T30598] RSP: 002b:00007f91be035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1888.315760][T30598] RAX: ffffffffffffffda RBX: 00007f91bd415fa0 RCX: 00007f91bd19acb9 [ 1888.323844][T30598] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000005 [ 1888.331854][T30598] RBP: 00007f91be035090 R08: 0000000000000000 R09: 0000000000000000 [ 1888.339935][T30598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1888.348020][T30598] R13: 00007f91bd416038 R14: 00007f91bd415fa0 R15: 00007fff68113c48 [ 1888.356029][T30598] [ 1888.376749][T30604] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8233'. [ 1888.381320][T30598] Mem-Info: [ 1888.405536][T30598] active_anon:7947 inactive_anon:0 isolated_anon:0 [ 1888.405536][T30598] active_file:23026 inactive_file:40632 isolated_file:0 [ 1888.405536][T30598] unevictable:768 dirty:166 writeback:3 [ 1888.405536][T30598] slab_reclaimable:10927 slab_unreclaimable:94405 [ 1888.405536][T30598] mapped:24922 shmem:1361 pagetables:528 [ 1888.405536][T30598] sec_pagetables:0 bounce:0 [ 1888.405536][T30598] kernel_misc_reclaimable:0 [ 1888.405536][T30598] free:1336432 free_pcp:7215 free_cma:0 [ 1888.502495][T30598] Node 0 active_anon:31888kB inactive_anon:0kB active_file:92104kB inactive_file:162328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99688kB dirty:660kB writeback:12kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10920kB pagetables:2112kB sec_pagetables:0kB all_unreclaimable? no [ 1888.555390][T30608] netlink: 'syz.1.8234': attribute type 6 has an invalid length. [ 1888.575519][T30608] netlink: 'syz.1.8234': attribute type 10 has an invalid length. [ 1888.577419][T30598] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1888.649571][T30608] geneve0: entered promiscuous mode [ 1888.680077][T30598] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1888.714830][T30598] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1888.723883][T30598] Node 0 DMA32 free:1424756kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:31652kB inactive_anon:0kB active_file:92104kB inactive_file:161500kB unevictable:1536kB writepending:672kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:21312kB local_pcp:16552kB free_cma:0kB [ 1888.755613][T30598] lowmem_reserve[]: 0 0 0 0 0 [ 1888.776012][T30598] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1888.790344][T30613] netlink: 'syz.3.8236': attribute type 27 has an invalid length. [ 1888.816133][T30598] lowmem_reserve[]: 0 0 0 0 0 [ 1888.854121][T30598] Node 1 Normal free:3905860kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8480kB local_pcp:0kB free_cma:0kB [ 1888.919448][T30598] lowmem_reserve[]: 0 0 0 0 0 [ 1888.924322][T30598] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1889.003098][T30598] Node 0 DMA32: 2717*4kB (UME) 2226*8kB (UME) 2427*16kB (UME) 2958*32kB (UME) 1757*64kB (UME) 650*128kB (UME) 284*256kB (UME) 113*512kB (UM) 42*1024kB (UME) 8*2048kB (UME) 214*4096kB (UM) = 1424308kB [ 1889.077741][T30598] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1889.140086][T30598] Node 1 Normal: 187*4kB (UME) 41*8kB (UME) 39*16kB (UME) 217*32kB (UME) 60*64kB (UE) 11*128kB (UME) 3*256kB (UE) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3905860kB [ 1889.209538][T30598] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1889.247305][T30598] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1889.284771][T30598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1889.302435][T30626] FAULT_INJECTION: forcing a failure. [ 1889.302435][T30626] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1889.324891][T30598] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1889.334616][T30626] CPU: 0 PID: 30626 Comm: syz.3.8240 Not tainted syzkaller #0 [ 1889.342114][T30626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1889.352282][T30626] Call Trace: [ 1889.355574][T30626] [ 1889.358525][T30626] dump_stack_lvl+0x18c/0x250 [ 1889.363329][T30626] ? show_regs_print_info+0x20/0x20 [ 1889.368558][T30626] ? load_image+0x400/0x400 [ 1889.373087][T30626] ? __lock_acquire+0x7d40/0x7d40 [ 1889.378319][T30626] ? _copy_from_iter+0x201/0x12e0 [ 1889.383558][T30626] should_fail_ex+0x39d/0x4d0 [ 1889.388310][T30626] prepare_alloc_pages+0x1e2/0x5f0 [ 1889.393464][T30626] __alloc_pages+0x134/0x460 [ 1889.398084][T30626] ? zone_statistics+0x170/0x170 [ 1889.403054][T30626] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1889.408823][T30626] ? copy_page_from_iter+0xe8/0x100 [ 1889.414080][T30626] pipe_write+0x62b/0x1b10 [ 1889.418585][T30626] ? pipe_read+0x1310/0x1310 [ 1889.423211][T30626] ? end_current_label_crit_section+0x149/0x170 [ 1889.430019][T30626] ? common_file_perm+0x198/0x1f0 [ 1889.435621][T30626] vfs_write+0x46c/0x990 [ 1889.439916][T30626] ? file_end_write+0x250/0x250 [ 1889.444804][T30626] ? __fget_files+0x43d/0x4b0 [ 1889.449600][T30626] ? __fdget_pos+0x1d8/0x330 [ 1889.454202][T30626] ? ksys_write+0x75/0x260 [ 1889.458986][T30626] ksys_write+0x150/0x260 [ 1889.463430][T30626] ? __ia32_sys_read+0x90/0x90 [ 1889.468613][T30626] ? lockdep_hardirqs_on+0x98/0x150 [ 1889.475102][T30626] do_syscall_64+0x55/0xa0 [ 1889.479624][T30626] ? clear_bhb_loop+0x40/0x90 [ 1889.484402][T30626] ? clear_bhb_loop+0x40/0x90 [ 1889.489077][T30626] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1889.495065][T30626] RIP: 0033:0x7f00c6f9acb9 [ 1889.499488][T30626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1889.508278][T30598] 65019 total pagecache pages [ 1889.519362][T30626] RSP: 002b:00007f00c7dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1889.519391][T30626] RAX: ffffffffffffffda RBX: 00007f00c7215fa0 RCX: 00007f00c6f9acb9 [ 1889.519403][T30626] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000000 [ 1889.519413][T30626] RBP: 00007f00c7dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1889.519424][T30626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1889.519433][T30626] R13: 00007f00c7216038 R14: 00007f00c7215fa0 R15: 00007ffca5417798 [ 1889.519459][T30626] [ 1889.605197][T30598] 0 pages in swap cache [ 1889.609815][T30598] Free swap = 124996kB [ 1889.613997][T30598] Total swap = 124996kB [ 1889.624077][T30598] 2097051 pages RAM [ 1889.628023][T30598] 0 pages HighMem/MovableOnly [ 1889.632718][T30598] 416922 pages reserved [ 1889.636967][T30598] 0 pages cma reserved [ 1890.037650][T30632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1890.141821][T30634] netlink: 'syz.2.8243': attribute type 3 has an invalid length. [ 1890.161476][T30634] netlink: 130920 bytes leftover after parsing attributes in process `syz.2.8243'. [ 1890.370374][T30649] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.8246'. [ 1890.389661][T30649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8246'. [ 1891.874296][T30655] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8250'. [ 1892.440916][T30668] netlink: 'syz.1.8256': attribute type 17 has an invalid length. [ 1892.450256][T30668] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8256'. [ 1892.469900][T30668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1892.542769][T30676] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 1892.558859][T30676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.587888][T30678] netlink: 'syz.2.8258': attribute type 1 has an invalid length. [ 1892.607499][T30678] netlink: 'syz.2.8258': attribute type 3 has an invalid length. [ 1892.615747][T30678] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8258'. [ 1892.903463][T30680] netlink: 'syz.1.8259': attribute type 27 has an invalid length. [ 1894.461348][T30709] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8267'. [ 1894.497348][T30709] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1894.730708][T30719] netlink: 'syz.2.8270': attribute type 27 has an invalid length. [ 1895.333260][T30738] netlink: 'syz.2.8277': attribute type 10 has an invalid length. [ 1895.354636][T30738] team0: Device vxcan1 is of different type [ 1895.625918][T30746] netlink: 'syz.2.8280': attribute type 10 has an invalid length. [ 1895.660839][T30746] team0: Device vxcan1 is of different type [ 1895.668476][T30746] FAULT_INJECTION: forcing a failure. [ 1895.668476][T30746] name failslab, interval 1, probability 0, space 0, times 0 [ 1895.707509][T30746] CPU: 1 PID: 30746 Comm: syz.2.8280 Not tainted syzkaller #0 [ 1895.715035][T30746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1895.725123][T30749] netlink: 'syz.1.8281': attribute type 2 has an invalid length. [ 1895.725263][T30746] Call Trace: [ 1895.725273][T30746] [ 1895.739292][T30746] dump_stack_lvl+0x18c/0x250 [ 1895.744026][T30746] ? show_regs_print_info+0x20/0x20 [ 1895.749519][T30746] ? load_image+0x400/0x400 [ 1895.754158][T30746] ? __might_sleep+0xe0/0xe0 [ 1895.758786][T30746] ? __lock_acquire+0x7d40/0x7d40 [ 1895.763865][T30746] should_fail_ex+0x39d/0x4d0 [ 1895.768677][T30746] should_failslab+0x9/0x20 [ 1895.773287][T30746] slab_pre_alloc_hook+0x59/0x310 [ 1895.778385][T30746] kmem_cache_alloc_node+0x60/0x320 [ 1895.783730][T30746] ? __alloc_skb+0x103/0x2c0 [ 1895.788380][T30746] __alloc_skb+0x103/0x2c0 [ 1895.792929][T30746] netlink_ack+0x376/0x1180 [ 1895.797481][T30746] ? __dev_queue_xmit+0x26b/0x36b0 [ 1895.802639][T30746] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1895.808836][T30746] ? netlink_dump+0xe50/0xe50 [ 1895.813543][T30746] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1895.819303][T30746] netlink_rcv_skb+0x2c5/0x4d0 [ 1895.824103][T30746] ? rtnetlink_bind+0x80/0x80 [ 1895.828820][T30746] ? netlink_ack+0x1180/0x1180 [ 1895.833624][T30746] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1895.839806][T30746] ? rtnetlink_rcv+0xd/0x20 [ 1895.844328][T30746] ? rtnetlink_bind+0x80/0x80 [ 1895.849115][T30746] netlink_unicast+0x751/0x8d0 [ 1895.853902][T30746] netlink_sendmsg+0x8d0/0xbf0 [ 1895.858845][T30746] ? netlink_getsockopt+0x590/0x590 [ 1895.864040][T30746] ? aa_sock_msg_perm+0x94/0x150 [ 1895.869002][T30746] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1895.874426][T30746] ? security_socket_sendmsg+0x80/0xa0 [ 1895.879887][T30746] ? netlink_getsockopt+0x590/0x590 [ 1895.885103][T30746] ____sys_sendmsg+0x5ba/0x960 [ 1895.889921][T30746] ? __asan_memset+0x22/0x40 [ 1895.894522][T30746] ? __sys_sendmsg_sock+0x30/0x30 [ 1895.899568][T30746] ? __import_iovec+0x5f2/0x850 [ 1895.904474][T30746] ? import_iovec+0x73/0xa0 [ 1895.909010][T30746] ___sys_sendmsg+0x2a6/0x360 [ 1895.913784][T30746] ? __sys_sendmsg+0x2a0/0x2a0 [ 1895.918591][T30746] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1895.925007][T30746] __se_sys_sendmsg+0x1c2/0x2b0 [ 1895.929903][T30746] ? __x64_sys_sendmsg+0x80/0x80 [ 1895.934868][T30746] ? lockdep_hardirqs_on+0x98/0x150 [ 1895.940087][T30746] do_syscall_64+0x55/0xa0 [ 1895.944512][T30746] ? clear_bhb_loop+0x40/0x90 [ 1895.949185][T30746] ? clear_bhb_loop+0x40/0x90 [ 1895.953880][T30746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1895.959995][T30746] RIP: 0033:0x7f264059acb9 [ 1895.964498][T30746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1895.984146][T30746] RSP: 002b:00007f2641518028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1895.986653][T30753] netlink: 'syz.3.8282': attribute type 3 has an invalid length. [ 1895.992676][T30746] RAX: ffffffffffffffda RBX: 00007f2640815fa0 RCX: 00007f264059acb9 [ 1895.992698][T30746] RDX: 0000000000080054 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1895.992708][T30746] RBP: 00007f2641518090 R08: 0000000000000000 R09: 0000000000000000 [ 1895.992718][T30746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1895.992727][T30746] R13: 00007f2640816038 R14: 00007f2640815fa0 R15: 00007ffc43030348 [ 1895.992755][T30746] [ 1896.077364][T30753] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.8282'. [ 1896.401854][T19413] Bluetooth: hci0: command 0x0406 tx timeout [ 1897.072298][T30769] netlink: 'syz.0.8287': attribute type 3 has an invalid length. [ 1897.141375][T30769] netlink: 130920 bytes leftover after parsing attributes in process `syz.0.8287'. [ 1897.342636][T30781] netlink: 'syz.3.8291': attribute type 3 has an invalid length. [ 1897.369633][T30781] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8291'. [ 1899.535425][T30803] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8299'. [ 1899.633706][T30806] netlink: 10 bytes leftover after parsing attributes in process `syz.2.8300'. [ 1900.111121][T30823] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8306'. [ 1900.320182][T30827] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.8308'. [ 1900.641448][T30833] syz.0.8311[30833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1900.641625][T30833] syz.0.8311[30833] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1900.860562][T30837] netlink: 'syz.0.8311': attribute type 21 has an invalid length. [ 1901.565684][T30853] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8316'. [ 1901.629508][T30854] delete_channel: no stack [ 1901.638813][T30854] delete_channel: no stack [ 1901.830960][T30862] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1901.838254][T30862] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1902.942825][T30898] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1902.951317][T30898] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1903.721881][T30943] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.8350'. [ 1903.759598][T30943] netlink: 9428 bytes leftover after parsing attributes in process `syz.2.8350'. [ 1903.799309][T30945] netlink: 'syz.0.8352': attribute type 10 has an invalid length. [ 1903.808122][T30945] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8352'. [ 1904.337940][T30952] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.8355'. [ 1904.767867][T30966] netlink: 'syz.3.8361': attribute type 2 has an invalid length. [ 1904.779188][T30966] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8361'. [ 1904.799112][T30966] netlink: 'syz.3.8361': attribute type 29 has an invalid length. [ 1904.820300][T30966] netlink: 'syz.3.8361': attribute type 9 has an invalid length. [ 1904.837266][T30966] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.8361'. [ 1904.889377][T30969] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8362'. [ 1904.899273][T30969] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1908.415783][T31017] netlink: 'syz.2.8380': attribute type 3 has an invalid length. [ 1908.433591][T31017] netlink: 130920 bytes leftover after parsing attributes in process `syz.2.8380'. [ 1908.520825][T31026] netlink: 'syz.3.8382': attribute type 10 has an invalid length. [ 1908.601612][T31029] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.8382'. [ 1908.611760][T31029] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1908.815278][T31033] netlink: 'syz.0.8385': attribute type 10 has an invalid length. [ 1908.872874][T31033] team0: Device ipvlan1 failed to register rx_handler [ 1909.250655][T31045] netlink: 'syz.1.8389': attribute type 10 has an invalid length. [ 1909.262854][T31045] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8389'. [ 1909.272680][T31045] dummy0: entered allmulticast mode [ 1909.280534][T31045] bond0: (slave dummy0): Releasing backup interface [ 1909.298190][T31045] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1909.486230][T31048] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8390'. [ 1909.978265][T31065] netlink: 'syz.0.8393': attribute type 9 has an invalid length. [ 1910.001937][T31065] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8393'. [ 1910.019602][T31066] FAULT_INJECTION: forcing a failure. [ 1910.019602][T31066] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.032762][T31066] CPU: 1 PID: 31066 Comm: syz.2.8394 Not tainted syzkaller #0 [ 1910.032789][T31066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1910.032799][T31066] Call Trace: [ 1910.032807][T31066] [ 1910.032816][T31066] dump_stack_lvl+0x18c/0x250 [ 1910.032848][T31066] ? show_regs_print_info+0x20/0x20 [ 1910.032870][T31066] ? load_image+0x400/0x400 [ 1910.032899][T31066] should_fail_ex+0x39d/0x4d0 [ 1910.032925][T31066] should_failslab+0x9/0x20 [ 1910.032947][T31066] slab_pre_alloc_hook+0x59/0x310 [ 1910.032974][T31066] kmem_cache_alloc+0x5a/0x2d0 [ 1910.032994][T31066] ? skb_clone+0x1eb/0x370 [ 1910.033016][T31066] skb_clone+0x1eb/0x370 [ 1910.033036][T31066] bpf_clone_redirect+0xad/0x3d0 [ 1910.033061][T31066] bpf_prog_e97454e6a39c6b06+0x61/0x66 [ 1910.033081][T31066] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1910.033104][T31066] ? lock_chain_count+0x20/0x20 [ 1910.033126][T31066] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 1910.033147][T31066] ? lockdep_softirqs_on+0x580/0x580 [ 1910.033166][T31066] ? ktime_get+0x7f/0x280 [ 1910.033183][T31066] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1910.033203][T31066] ? ktime_get_real_ts64+0x440/0x440 [ 1910.033222][T31066] ? __x64_sys_bpf+0x7c/0x90 [ 1910.033242][T31066] ? __local_bh_disable_ip+0x108/0x1a0 [ 1910.033260][T31066] ? __cant_sleep+0x220/0x220 [ 1910.033283][T31066] ? read_tsc+0x9/0x20 [ 1910.033300][T31066] ? ktime_get+0x24b/0x280 [ 1910.033322][T31066] ? bpf_test_run+0x174/0x870 [ 1910.033341][T31066] bpf_test_run+0x2df/0x870 [ 1910.033370][T31066] ? bpf_test_run+0x174/0x870 [ 1910.033399][T31066] ? convert___skb_to_skb+0x590/0x590 [ 1910.033420][T31066] ? eth_get_headlen+0x210/0x210 [ 1910.033446][T31066] ? slab_build_skb+0x25f/0x3f0 [ 1910.033469][T31066] ? convert___skb_to_skb+0x3d/0x590 [ 1910.033489][T31066] bpf_prog_test_run_skb+0xad2/0x12b0 [ 1910.033523][T31066] ? cpu_online+0x60/0x60 [ 1910.033541][T31066] bpf_prog_test_run+0x321/0x390 [ 1910.033561][T31066] __sys_bpf+0x49d/0x890 [ 1910.033581][T31066] ? bpf_link_show_fdinfo+0x390/0x390 [ 1910.118525][T31065] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8393'. [ 1910.121203][T31066] ? lock_chain_count+0x20/0x20 [ 1910.121241][T31066] __x64_sys_bpf+0x7c/0x90 [ 1910.249319][T31066] do_syscall_64+0x55/0xa0 [ 1910.253769][T31066] ? clear_bhb_loop+0x40/0x90 [ 1910.258506][T31066] ? clear_bhb_loop+0x40/0x90 [ 1910.263215][T31066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1910.269126][T31066] RIP: 0033:0x7f264059acb9 [ 1910.273567][T31066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.293288][T31066] RSP: 002b:00007f2641518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1910.301729][T31066] RAX: ffffffffffffffda RBX: 00007f2640815fa0 RCX: 00007f264059acb9 [ 1910.309804][T31066] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 1910.317809][T31066] RBP: 00007f2641518090 R08: 0000000000000000 R09: 0000000000000000 [ 1910.325802][T31066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1910.333806][T31066] R13: 00007f2640816038 R14: 00007f2640815fa0 R15: 00007ffc43030348 [ 1910.341873][T31066] [ 1910.352422][T31065] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 1910.357514][T31073] syz.3.8396[31073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1910.360868][T31073] syz.3.8396[31073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1910.384808][T31063] delete_channel: no stack [ 1910.587927][T31073] netlink: 'syz.3.8396': attribute type 21 has an invalid length. [ 1910.714830][T31079] netlink: 'syz.0.8398': attribute type 3 has an invalid length. [ 1910.723040][T31079] netlink: 130920 bytes leftover after parsing attributes in process `syz.0.8398'. [ 1911.554090][T31096] FAULT_INJECTION: forcing a failure. [ 1911.554090][T31096] name failslab, interval 1, probability 0, space 0, times 0 [ 1911.575347][T31096] CPU: 1 PID: 31096 Comm: syz.3.8405 Not tainted syzkaller #0 [ 1911.583073][T31096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1911.593764][T31096] Call Trace: [ 1911.597067][T31096] [ 1911.600055][T31096] dump_stack_lvl+0x18c/0x250 [ 1911.604846][T31096] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1911.610822][T31096] ? show_regs_print_info+0x20/0x20 [ 1911.616073][T31096] ? load_image+0x400/0x400 [ 1911.620598][T31096] ? mark_lock+0x94/0x320 [ 1911.624936][T31096] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1911.631036][T31096] should_fail_ex+0x39d/0x4d0 [ 1911.635735][T31096] should_failslab+0x9/0x20 [ 1911.640246][T31096] slab_pre_alloc_hook+0x59/0x310 [ 1911.645368][T31096] ? sctp_add_bind_addr+0x8c/0x360 [ 1911.650486][T31096] __kmem_cache_alloc_node+0x53/0x250 [ 1911.655867][T31096] ? sctp_add_bind_addr+0x8c/0x360 [ 1911.661069][T31096] kmalloc_trace+0x2a/0xe0 [ 1911.665490][T31096] sctp_add_bind_addr+0x8c/0x360 [ 1911.670536][T31096] sctp_copy_local_addr_list+0x315/0x4f0 [ 1911.676184][T31096] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1911.682004][T31096] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1911.688168][T31096] ? sctp_v4_is_any+0x35/0x60 [ 1911.692982][T31096] ? sctp_copy_one_addr+0x8c/0x350 [ 1911.698188][T31096] sctp_bind_addr_copy+0xb3/0x3c0 [ 1911.703237][T31096] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1911.709743][T31096] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1911.715029][T31096] ? __sctp_connect+0xd80/0xd80 [ 1911.719884][T31096] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1911.725608][T31096] ? security_sctp_bind_connect+0x89/0xb0 [ 1911.731487][T31096] sctp_sendmsg+0x1575/0x28c0 [ 1911.736257][T31096] ? sctp_getsockopt+0xb60/0xb60 [ 1911.741276][T31096] ? aa_sk_perm+0x83c/0x970 [ 1911.745783][T31096] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1911.751594][T31096] ? aa_af_perm+0x330/0x330 [ 1911.756100][T31096] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1911.762514][T31096] ? sock_rps_record_flow+0x19/0x3f0 [ 1911.767800][T31096] ? inet_sendmsg+0xe9/0x2f0 [ 1911.772383][T31096] ? inet_send_prepare+0x260/0x260 [ 1911.777496][T31096] ____sys_sendmsg+0x5ba/0x960 [ 1911.782293][T31096] ? __lock_acquire+0x7d40/0x7d40 [ 1911.787388][T31096] ? __asan_memset+0x22/0x40 [ 1911.791977][T31096] ? __sys_sendmsg_sock+0x30/0x30 [ 1911.797019][T31096] ? __import_iovec+0x5f2/0x850 [ 1911.801879][T31096] ? import_iovec+0x73/0xa0 [ 1911.806382][T31096] ___sys_sendmsg+0x2a6/0x360 [ 1911.811075][T31096] ? __sys_sendmsg+0x2a0/0x2a0 [ 1911.815890][T31096] __se_sys_sendmsg+0x1c2/0x2b0 [ 1911.820750][T31096] ? __x64_sys_sendmsg+0x80/0x80 [ 1911.825880][T31096] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1911.831775][T31096] do_syscall_64+0x55/0xa0 [ 1911.836568][T31096] ? clear_bhb_loop+0x40/0x90 [ 1911.841421][T31096] ? clear_bhb_loop+0x40/0x90 [ 1911.846252][T31096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1911.852436][T31096] RIP: 0033:0x7f00c6f9acb9 [ 1911.857033][T31096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1911.877029][T31096] RSP: 002b:00007f00c7dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1911.885604][T31096] RAX: ffffffffffffffda RBX: 00007f00c7215fa0 RCX: 00007f00c6f9acb9 [ 1911.893613][T31096] RDX: 00000000000000e0 RSI: 00002000000006c0 RDI: 0000000000000005 [ 1911.901622][T31096] RBP: 00007f00c7dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1911.909612][T31096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1911.917678][T31096] R13: 00007f00c7216038 R14: 00007f00c7215fa0 R15: 00007ffca5417798 [ 1911.925668][T31096] [ 1912.025605][T31105] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8407'. [ 1912.152984][T31113] FAULT_INJECTION: forcing a failure. [ 1912.152984][T31113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1912.173790][T31113] CPU: 0 PID: 31113 Comm: syz.3.8408 Not tainted syzkaller #0 [ 1912.181369][T31113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1912.191641][T31113] Call Trace: [ 1912.194919][T31113] [ 1912.197852][T31113] dump_stack_lvl+0x18c/0x250 [ 1912.202540][T31113] ? show_regs_print_info+0x20/0x20 [ 1912.207779][T31113] ? load_image+0x400/0x400 [ 1912.212466][T31113] ? __lock_acquire+0x7d40/0x7d40 [ 1912.217585][T31113] ? snprintf+0xe9/0x140 [ 1912.221835][T31113] should_fail_ex+0x39d/0x4d0 [ 1912.226531][T31113] _copy_to_user+0x2f/0xa0 [ 1912.231147][T31113] simple_read_from_buffer+0xe7/0x150 [ 1912.236538][T31113] proc_fail_nth_read+0x1e8/0x260 [ 1912.241576][T31113] ? proc_fault_inject_write+0x360/0x360 [ 1912.247563][T31113] ? fsnotify_perm+0x271/0x5e0 [ 1912.252336][T31113] ? proc_fault_inject_write+0x360/0x360 [ 1912.257999][T31113] vfs_read+0x28b/0x970 [ 1912.262291][T31113] ? kernel_read+0x1e0/0x1e0 [ 1912.266989][T31113] ? __fget_files+0x28/0x4b0 [ 1912.271577][T31113] ? __fget_files+0x28/0x4b0 [ 1912.276189][T31113] ? __fget_files+0x43d/0x4b0 [ 1912.280917][T31113] ? __fdget_pos+0x2a3/0x330 [ 1912.285555][T31113] ? ksys_read+0x75/0x260 [ 1912.289997][T31113] ksys_read+0x150/0x260 [ 1912.294346][T31113] ? vfs_write+0x990/0x990 [ 1912.298859][T31113] ? lockdep_hardirqs_on+0x98/0x150 [ 1912.304203][T31113] do_syscall_64+0x55/0xa0 [ 1912.308653][T31113] ? clear_bhb_loop+0x40/0x90 [ 1912.313339][T31113] ? clear_bhb_loop+0x40/0x90 [ 1912.318057][T31113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1912.324057][T31113] RIP: 0033:0x7f00c6f5b58e [ 1912.328487][T31113] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1912.348209][T31113] RSP: 002b:00007f00c7dc5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1912.356693][T31113] RAX: ffffffffffffffda RBX: 00007f00c7dc66c0 RCX: 00007f00c6f5b58e [ 1912.364849][T31113] RDX: 000000000000000f RSI: 00007f00c7dc60a0 RDI: 0000000000000005 [ 1912.373179][T31113] RBP: 00007f00c7dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1912.381163][T31113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1912.389158][T31113] R13: 00007f00c7216038 R14: 00007f00c7215fa0 R15: 00007ffca5417798 [ 1912.397256][T31113] [ 1912.556983][T31117] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.8410'. [ 1912.610376][T31117] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.8410'. [ 1912.880942][T31122] FAULT_INJECTION: forcing a failure. [ 1912.880942][T31122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1912.910993][T31122] CPU: 0 PID: 31122 Comm: syz.3.8411 Not tainted syzkaller #0 [ 1912.918970][T31122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1912.929331][T31122] Call Trace: [ 1912.932660][T31122] [ 1912.935632][T31122] dump_stack_lvl+0x18c/0x250 [ 1912.940564][T31122] ? show_regs_print_info+0x20/0x20 [ 1912.945823][T31122] ? load_image+0x400/0x400 [ 1912.950418][T31122] ? __might_fault+0xaa/0x120 [ 1912.955622][T31122] ? __lock_acquire+0x7d40/0x7d40 [ 1912.961877][T31122] should_fail_ex+0x39d/0x4d0 [ 1912.966736][T31122] _copy_from_user+0x2f/0xe0 [ 1912.971563][T31122] generic_map_update_batch+0x59a/0x810 [ 1912.977482][T31122] ? rcu_read_unlock+0xa0/0xa0 [ 1912.982433][T31122] ? __fdget+0x180/0x210 [ 1912.986765][T31122] ? rcu_read_unlock+0xa0/0xa0 [ 1912.991696][T31122] bpf_map_do_batch+0x3d7/0x610 [ 1912.996894][T31122] __sys_bpf+0x381/0x890 [ 1913.001526][T31122] ? bpf_link_show_fdinfo+0x390/0x390 [ 1913.007012][T31122] ? lock_chain_count+0x20/0x20 [ 1913.012245][T31122] __x64_sys_bpf+0x7c/0x90 [ 1913.016726][T31122] do_syscall_64+0x55/0xa0 [ 1913.021203][T31122] ? clear_bhb_loop+0x40/0x90 [ 1913.025938][T31122] ? clear_bhb_loop+0x40/0x90 [ 1913.030679][T31122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1913.036621][T31122] RIP: 0033:0x7f00c6f9acb9 [ 1913.041083][T31122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1913.060759][T31122] RSP: 002b:00007f00c7dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1913.069353][T31122] RAX: ffffffffffffffda RBX: 00007f00c7215fa0 RCX: 00007f00c6f9acb9 [ 1913.077378][T31122] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1913.085407][T31122] RBP: 00007f00c7dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1913.093431][T31122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1913.101455][T31122] R13: 00007f00c7216038 R14: 00007f00c7215fa0 R15: 00007ffca5417798 [ 1913.109550][T31122] [ 1913.525628][T31133] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8416'. [ 1913.638048][T31138] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.8419'. [ 1914.801673][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.819884][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.212706][T31138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8419'. [ 1916.223177][T31139] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.8419'. [ 1916.248033][T31139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8419'. [ 1916.353366][T31160] FAULT_INJECTION: forcing a failure. [ 1916.353366][T31160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1916.384275][T31160] CPU: 0 PID: 31160 Comm: syz.0.8423 Not tainted syzkaller #0 [ 1916.391801][T31160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1916.401892][T31160] Call Trace: [ 1916.405191][T31160] [ 1916.408140][T31160] dump_stack_lvl+0x18c/0x250 [ 1916.412856][T31160] ? show_regs_print_info+0x20/0x20 [ 1916.418091][T31160] ? load_image+0x400/0x400 [ 1916.421163][T31165] netlink: 'syz.3.8427': attribute type 10 has an invalid length. [ 1916.422606][T31160] ? __might_fault+0xaa/0x120 [ 1916.435090][T31160] ? __lock_acquire+0x7d40/0x7d40 [ 1916.440133][T31160] should_fail_ex+0x39d/0x4d0 [ 1916.444831][T31160] _copy_from_user+0x2f/0xe0 [ 1916.449445][T31160] generic_map_update_batch+0x59a/0x810 [ 1916.455020][T31160] ? rcu_read_unlock+0xa0/0xa0 [ 1916.459871][T31160] ? __fdget+0x180/0x210 [ 1916.464113][T31160] ? rcu_read_unlock+0xa0/0xa0 [ 1916.468866][T31160] bpf_map_do_batch+0x3d7/0x610 [ 1916.473720][T31160] __sys_bpf+0x381/0x890 [ 1916.478041][T31160] ? bpf_link_show_fdinfo+0x390/0x390 [ 1916.483489][T31160] ? lock_chain_count+0x20/0x20 [ 1916.488437][T31160] __x64_sys_bpf+0x7c/0x90 [ 1916.492864][T31160] do_syscall_64+0x55/0xa0 [ 1916.497368][T31160] ? clear_bhb_loop+0x40/0x90 [ 1916.502175][T31160] ? clear_bhb_loop+0x40/0x90 [ 1916.506851][T31160] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1916.512743][T31160] RIP: 0033:0x7f91bd19acb9 [ 1916.517177][T31160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1916.536875][T31160] RSP: 002b:00007f91be035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1916.545380][T31160] RAX: ffffffffffffffda RBX: 00007f91bd415fa0 RCX: 00007f91bd19acb9 [ 1916.553362][T31160] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 1916.561617][T31160] RBP: 00007f91be035090 R08: 0000000000000000 R09: 0000000000000000 [ 1916.569940][T31160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1916.577913][T31160] R13: 00007f91bd416038 R14: 00007f91bd415fa0 R15: 00007fff68113c48 [ 1916.585900][T31160] [ 1916.664240][T31165] geneve1: entered promiscuous mode [ 1916.670732][T31165] geneve1: entered allmulticast mode [ 1916.678398][T31165] team0: Port device geneve1 added [ 1916.701908][T31163] netlink: 'syz.1.8426': attribute type 3 has an invalid length. [ 1916.727620][T31163] netlink: 130920 bytes leftover after parsing attributes in process `syz.1.8426'. [ 1918.633774][T31183] FAULT_INJECTION: forcing a failure. [ 1918.633774][T31183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1918.686532][T31188] FAULT_INJECTION: forcing a failure. [ 1918.686532][T31188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1918.690148][T31183] CPU: 0 PID: 31183 Comm: syz.0.8433 Not tainted syzkaller #0 [ 1918.707253][T31183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1918.717420][T31183] Call Trace: [ 1918.720773][T31183] [ 1918.723751][T31183] dump_stack_lvl+0x18c/0x250 [ 1918.728444][T31183] ? show_regs_print_info+0x20/0x20 [ 1918.733651][T31183] ? load_image+0x400/0x400 [ 1918.738156][T31183] ? __lock_acquire+0x7d40/0x7d40 [ 1918.743195][T31183] should_fail_ex+0x39d/0x4d0 [ 1918.747884][T31183] _copy_from_user+0x2f/0xe0 [ 1918.752563][T31183] __copy_msghdr+0x3bb/0x580 [ 1918.757160][T31183] ___sys_sendmsg+0x214/0x360 [ 1918.761936][T31183] ? __sys_sendmsg+0x2a0/0x2a0 [ 1918.766756][T31183] __se_sys_sendmsg+0x1c2/0x2b0 [ 1918.771635][T31183] ? __x64_sys_sendmsg+0x80/0x80 [ 1918.776589][T31183] do_syscall_64+0x55/0xa0 [ 1918.780999][T31183] ? clear_bhb_loop+0x40/0x90 [ 1918.785670][T31183] ? clear_bhb_loop+0x40/0x90 [ 1918.790342][T31183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1918.796225][T31183] RIP: 0033:0x7f91bd19acb9 [ 1918.800638][T31183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1918.821038][T31183] RSP: 002b:00007f91be035028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1918.829553][T31183] RAX: ffffffffffffffda RBX: 00007f91bd415fa0 RCX: 00007f91bd19acb9 [ 1918.837538][T31183] RDX: 000000003000c085 RSI: 0000200000000080 RDI: 0000000000000005 [ 1918.845533][T31183] RBP: 00007f91be035090 R08: 0000000000000000 R09: 0000000000000000 [ 1918.853511][T31183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1918.861502][T31183] R13: 00007f91bd416038 R14: 00007f91bd415fa0 R15: 00007fff68113c48 [ 1918.869493][T31183] [ 1918.874026][T31188] CPU: 1 PID: 31188 Comm: syz.2.8435 Not tainted syzkaller #0 [ 1918.881621][T31188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1918.891750][T31188] Call Trace: [ 1918.895028][T31188] [ 1918.897956][T31188] dump_stack_lvl+0x18c/0x250 [ 1918.902692][T31188] ? show_regs_print_info+0x20/0x20 [ 1918.907975][T31188] ? load_image+0x400/0x400 [ 1918.912473][T31188] ? __might_fault+0xaa/0x120 [ 1918.917146][T31188] ? __lock_acquire+0x7d40/0x7d40 [ 1918.922289][T31188] should_fail_ex+0x39d/0x4d0 [ 1918.926969][T31188] _copy_from_user+0x2f/0xe0 [ 1918.931563][T31188] generic_map_update_batch+0x59a/0x810 [ 1918.937117][T31188] ? rcu_read_unlock+0xa0/0xa0 [ 1918.941886][T31188] ? __fdget+0x180/0x210 [ 1918.946129][T31188] ? rcu_read_unlock+0xa0/0xa0 [ 1918.950970][T31188] bpf_map_do_batch+0x3d7/0x610 [ 1918.955847][T31188] __sys_bpf+0x381/0x890 [ 1918.960131][T31188] ? bpf_link_show_fdinfo+0x390/0x390 [ 1918.965512][T31188] ? lock_chain_count+0x20/0x20 [ 1918.970367][T31188] __x64_sys_bpf+0x7c/0x90 [ 1918.974800][T31188] do_syscall_64+0x55/0xa0 [ 1918.979244][T31188] ? clear_bhb_loop+0x40/0x90 [ 1918.983930][T31188] ? clear_bhb_loop+0x40/0x90 [ 1918.988612][T31188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1918.994504][T31188] RIP: 0033:0x7f264059acb9 [ 1918.999000][T31188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1919.018788][T31188] RSP: 002b:00007f2641518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1919.027196][T31188] RAX: ffffffffffffffda RBX: 00007f2640815fa0 RCX: 00007f264059acb9 [ 1919.035343][T31188] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1919.043427][T31188] RBP: 00007f2641518090 R08: 0000000000000000 R09: 0000000000000000 [ 1919.051431][T31188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1919.059814][T31188] R13: 00007f2640816038 R14: 00007f2640815fa0 R15: 00007ffc43030348 [ 1919.067948][T31188] [ 1919.320439][T31192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1919.356519][T31197] netlink: 'syz.2.8438': attribute type 39 has an invalid length. [ 1919.489560][T31203] netlink: 'syz.3.8440': attribute type 2 has an invalid length. [ 1919.513755][T31203] netlink: 51 bytes leftover after parsing attributes in process `syz.3.8440'. [ 1919.623949][T31209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1919.693243][T31214] netlink: 'syz.1.8442': attribute type 10 has an invalid length. [ 1919.710284][T31214] team0: Device ipvlan1 failed to register rx_handler [ 1920.035343][T31221] netlink: 'syz.3.8445': attribute type 3 has an invalid length. [ 1920.043878][T31221] netlink: 130920 bytes leftover after parsing attributes in process `syz.3.8445'. [ 1920.087372][T31219] netlink: 'syz.1.8446': attribute type 10 has an invalid length. [ 1920.233456][T31227] netlink: 'syz.2.8448': attribute type 39 has an invalid length. [ 1920.410795][T31227] hsr_slave_1 (unregistering): left promiscuous mode [ 1920.740028][T31235] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1920.751557][T31235] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1920.762305][T31234] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1920.773545][T31235] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8450'. [ 1920.900951][T31237] netlink: 'syz.1.8451': attribute type 46 has an invalid length. [ 1922.126758][T31250] syzkaller0: entered promiscuous mode [ 1922.162593][T31250] syzkaller0: entered allmulticast mode [ 1922.196362][T31252] netlink: 'syz.2.8459': attribute type 10 has an invalid length. [ 1922.272398][T31257] syzkaller0: entered promiscuous mode [ 1922.287382][T31257] syzkaller0: entered allmulticast mode [ 1922.616070][T31270] FAULT_INJECTION: forcing a failure. [ 1922.616070][T31270] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.628912][T31270] CPU: 0 PID: 31270 Comm: syz.1.8466 Not tainted syzkaller #0 [ 1922.636662][T31270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1922.646744][T31270] Call Trace: [ 1922.650064][T31270] [ 1922.653023][T31270] dump_stack_lvl+0x18c/0x250 [ 1922.657749][T31270] ? show_regs_print_info+0x20/0x20 [ 1922.662988][T31270] ? load_image+0x400/0x400 [ 1922.667526][T31270] ? mark_lock+0x94/0x320 [ 1922.671891][T31270] should_fail_ex+0x39d/0x4d0 [ 1922.676604][T31270] should_failslab+0x9/0x20 [ 1922.681136][T31270] slab_pre_alloc_hook+0x59/0x310 [ 1922.686225][T31270] kmem_cache_alloc+0x5a/0x2d0 [ 1922.690996][T31270] ? dst_alloc+0x105/0x170 [ 1922.695410][T31270] dst_alloc+0x105/0x170 [ 1922.699652][T31270] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 1922.705719][T31270] ? ip_route_output_key_hash+0x13d/0x330 [ 1922.711436][T31270] ip_route_output_key_hash+0x1f3/0x330 [ 1922.716990][T31270] ? ip_route_input_rcu+0x30e0/0x30e0 [ 1922.722394][T31270] ? __asan_memset+0x22/0x40 [ 1922.727011][T31270] ip_route_output_flow+0x2a/0x150 [ 1922.732211][T31270] ip_tunnel_xmit+0x9b1/0x2410 [ 1922.737007][T31270] ? ip_tunnel_xmit+0x80/0x2410 [ 1922.741875][T31270] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1922.746900][T31270] ? validate_xmit_xfrm+0xbc/0x12c0 [ 1922.752100][T31270] ? gre_build_header+0x25b/0x990 [ 1922.757130][T31270] ipgre_xmit+0x7a6/0xb20 [ 1922.761507][T31270] dev_hard_start_xmit+0x246/0x740 [ 1922.766640][T31270] __dev_queue_xmit+0x1ac2/0x36b0 [ 1922.771685][T31270] ? __dev_queue_xmit+0x26b/0x36b0 [ 1922.776836][T31270] ? __kmem_cache_alloc_node+0x13a/0x250 [ 1922.782529][T31270] ? netdev_core_pick_tx+0x340/0x340 [ 1922.787824][T31270] ? skb_release_data+0x1cf/0x800 [ 1922.792891][T31270] ? pskb_expand_head+0xbfe/0x1230 [ 1922.798013][T31270] ? __bpf_redirect+0x534/0xe60 [ 1922.802872][T31270] __bpf_tx_skb+0x189/0x250 [ 1922.807426][T31270] bpf_clone_redirect+0x270/0x3d0 [ 1922.812495][T31270] bpf_prog_208b094576c80b22+0x5e/0x63 [ 1922.817966][T31270] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1922.823970][T31270] ? lock_chain_count+0x20/0x20 [ 1922.828828][T31270] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 1922.835075][T31270] ? lockdep_softirqs_on+0x580/0x580 [ 1922.840364][T31270] ? ktime_get+0x7f/0x280 [ 1922.844717][T31270] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1922.850978][T31270] ? ktime_get_real_ts64+0x440/0x440 [ 1922.856394][T31270] ? __x64_sys_bpf+0x7c/0x90 [ 1922.860983][T31270] ? __local_bh_disable_ip+0x108/0x1a0 [ 1922.866457][T31270] ? __cant_sleep+0x220/0x220 [ 1922.871139][T31270] ? read_tsc+0x9/0x20 [ 1922.875204][T31270] ? ktime_get+0x24b/0x280 [ 1922.879618][T31270] ? bpf_test_run+0x174/0x870 [ 1922.884393][T31270] bpf_test_run+0x2df/0x870 [ 1922.888994][T31270] ? bpf_test_run+0x174/0x870 [ 1922.893751][T31270] ? convert___skb_to_skb+0x590/0x590 [ 1922.899293][T31270] ? eth_get_headlen+0x210/0x210 [ 1922.904323][T31270] ? slab_build_skb+0x25f/0x3f0 [ 1922.909367][T31270] ? convert___skb_to_skb+0x3d/0x590 [ 1922.914673][T31270] bpf_prog_test_run_skb+0xad2/0x12b0 [ 1922.920086][T31270] ? cpu_online+0x60/0x60 [ 1922.924420][T31270] bpf_prog_test_run+0x321/0x390 [ 1922.929366][T31270] __sys_bpf+0x49d/0x890 [ 1922.933608][T31270] ? bpf_link_show_fdinfo+0x390/0x390 [ 1922.938987][T31270] ? lock_chain_count+0x20/0x20 [ 1922.943857][T31270] __x64_sys_bpf+0x7c/0x90 [ 1922.948269][T31270] do_syscall_64+0x55/0xa0 [ 1922.952681][T31270] ? clear_bhb_loop+0x40/0x90 [ 1922.957460][T31270] ? clear_bhb_loop+0x40/0x90 [ 1922.962569][T31270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1922.968460][T31270] RIP: 0033:0x7fbd2b19acb9 [ 1922.972869][T31270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1922.993204][T31270] RSP: 002b:00007fbd293f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1923.001857][T31270] RAX: ffffffffffffffda RBX: 00007fbd2b415fa0 RCX: 00007fbd2b19acb9 [ 1923.009930][T31270] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1923.017988][T31270] RBP: 00007fbd293f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1923.025950][T31270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1923.033946][T31270] R13: 00007fbd2b416038 R14: 00007fbd2b415fa0 R15: 00007ffcdc527528 [ 1923.042115][T31270] [ 1923.248552][T31278] syz.0.8468[31278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1923.248684][T31278] syz.0.8468[31278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1927.962664][T31291] netlink: 'syz.1.8480': attribute type 21 has an invalid length. [ 1927.982388][T31291] __nla_validate_parse: 2 callbacks suppressed [ 1927.982403][T31291] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.8480'. [ 1928.084793][T31297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8475'. [ 1928.114005][T31297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8475'. [ 1928.130577][T31295] netlink: 'syz.0.8473': attribute type 10 has an invalid length. [ 1928.150136][T31297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8475'. [ 1928.174202][T31297] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8475'. [ 1930.090310][T31346] netlink: 'syz.2.8495': attribute type 3 has an invalid length. [ 1930.119701][T31346] netlink: 130920 bytes leftover after parsing attributes in process `syz.2.8495'. [ 1931.186462][T31369] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.8503'. [ 1931.241878][T31373] FAULT_INJECTION: forcing a failure. [ 1931.241878][T31373] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.265604][T31373] CPU: 1 PID: 31373 Comm: syz.2.8505 Not tainted syzkaller #0 [ 1931.273128][T31373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1931.283559][T31373] Call Trace: [ 1931.286861][T31373] [ 1931.289809][T31373] dump_stack_lvl+0x18c/0x250 [ 1931.294510][T31373] ? show_regs_print_info+0x20/0x20 [ 1931.300091][T31373] ? load_image+0x400/0x400 [ 1931.305164][T31373] ? __might_sleep+0xe0/0xe0 [ 1931.309809][T31373] ? __lock_acquire+0x7d40/0x7d40 [ 1931.314866][T31373] should_fail_ex+0x39d/0x4d0 [ 1931.319662][T31373] should_failslab+0x9/0x20 [ 1931.324188][T31373] slab_pre_alloc_hook+0x59/0x310 [ 1931.329247][T31373] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 1931.334576][T31373] __kmem_cache_alloc_node+0x53/0x250 [ 1931.340073][T31373] ? __asan_memset+0x22/0x40 [ 1931.344687][T31373] ? __xdp_reg_mem_model+0x1e4/0x5c0 [ 1931.349984][T31373] kmalloc_trace+0x2a/0xe0 [ 1931.354674][T31373] __xdp_reg_mem_model+0x1e4/0x5c0 [ 1931.359889][T31373] ? kvmalloc_node+0x70/0x180 [ 1931.364762][T31373] ? kvmalloc_node+0x70/0x180 [ 1931.369536][T31373] ? xdp_reg_mem_model+0x40/0x40 [ 1931.374580][T31373] xdp_reg_mem_model+0x22/0x40 [ 1931.379456][T31373] bpf_test_run_xdp_live+0x262/0x1b20 [ 1931.384941][T31373] ? 0xffffffffa00044c0 [ 1931.389152][T31373] ? 0xffffffffa00044c0 [ 1931.393363][T31373] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1931.399271][T31373] ? 0xffffffffa00044c0 [ 1931.403456][T31373] ? xdp_convert_md_to_buff+0x330/0x330 [ 1931.409072][T31373] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1931.415357][T31373] ? _copy_from_user+0xa5/0xe0 [ 1931.420147][T31373] ? bpf_test_init+0x119/0x140 [ 1931.424949][T31373] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1931.430490][T31373] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1931.435914][T31373] ? dev_put+0x80/0x80 [ 1931.440016][T31373] ? dev_put+0x80/0x80 [ 1931.444105][T31373] bpf_prog_test_run+0x321/0x390 [ 1931.449079][T31373] __sys_bpf+0x49d/0x890 [ 1931.453546][T31373] ? bpf_link_show_fdinfo+0x390/0x390 [ 1931.458984][T31373] ? lock_chain_count+0x20/0x20 [ 1931.463862][T31373] __x64_sys_bpf+0x7c/0x90 [ 1931.468301][T31373] do_syscall_64+0x55/0xa0 [ 1931.472819][T31373] ? clear_bhb_loop+0x40/0x90 [ 1931.477495][T31373] ? clear_bhb_loop+0x40/0x90 [ 1931.482170][T31373] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1931.488058][T31373] RIP: 0033:0x7f264059acb9 [ 1931.492547][T31373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.512266][T31373] RSP: 002b:00007f2641518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1931.520703][T31373] RAX: ffffffffffffffda RBX: 00007f2640815fa0 RCX: 00007f264059acb9 [ 1931.528686][T31373] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1931.536699][T31373] RBP: 00007f2641518090 R08: 0000000000000000 R09: 0000000000000000 [ 1931.544752][T31373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1931.552839][T31373] R13: 00007f2640816038 R14: 00007f2640815fa0 R15: 00007ffc43030348 [ 1931.560947][T31373] [ 1931.600043][T31376] netlink: 'syz.0.8504': attribute type 39 has an invalid length. [ 1931.999352][T31395] netlink: 'syz.0.8511': attribute type 3 has an invalid length. [ 1932.013551][T31395] netlink: 130920 bytes leftover after parsing attributes in process `syz.0.8511'. [ 1932.946467][T31406] pim6reg1: entered promiscuous mode [ 1932.962780][T31406] pim6reg1: entered allmulticast mode [ 1932.997509][T31404] FAULT_INJECTION: forcing a failure. [ 1932.997509][T31404] name failslab, interval 1, probability 0, space 0, times 0 [ 1933.077285][T31404] CPU: 0 PID: 31404 Comm: syz.0.8516 Not tainted syzkaller #0 [ 1933.085186][T31404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1933.095273][T31404] Call Trace: [ 1933.098669][T31404] [ 1933.101623][T31404] dump_stack_lvl+0x18c/0x250 [ 1933.106357][T31404] ? show_regs_print_info+0x20/0x20 [ 1933.111703][T31404] ? load_image+0x400/0x400 [ 1933.116249][T31404] ? __might_sleep+0xe0/0xe0 [ 1933.120869][T31404] ? __lock_acquire+0x7d40/0x7d40 [ 1933.125916][T31404] ? rcu_is_watching+0x15/0xb0 [ 1933.130727][T31404] should_fail_ex+0x39d/0x4d0 [ 1933.135613][T31404] should_failslab+0x9/0x20 [ 1933.140153][T31404] slab_pre_alloc_hook+0x59/0x310 [ 1933.145381][T31404] ? do_syscall_64+0x55/0xa0 [ 1933.150084][T31404] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1933.156182][T31404] kmem_cache_alloc_node+0x60/0x320 [ 1933.161414][T31404] ? __alloc_skb+0x103/0x2c0 [ 1933.166273][T31404] __alloc_skb+0x103/0x2c0 [ 1933.171263][T31404] netlink_dump+0x1ec/0xe50 [ 1933.175813][T31404] ? lock_chain_count+0x20/0x20 [ 1933.180887][T31404] ? netlink_lookup+0x200/0x200 [ 1933.185788][T31404] ? slab_free_freelist_hook+0x130/0x1a0 [ 1933.191460][T31404] ? netlink_recvmsg+0x5e7/0xe60 [ 1933.196514][T31404] ? kmem_cache_free+0xf8/0x270 [ 1933.201492][T31404] netlink_recvmsg+0x693/0xe60 [ 1933.206302][T31404] ? netlink_sendmsg+0xbf0/0xbf0 [ 1933.211284][T31404] ? aa_af_perm+0x330/0x330 [ 1933.215819][T31404] ? __lock_acquire+0x1273/0x7d40 [ 1933.220975][T31404] ? verify_lock_unused+0x140/0x140 [ 1933.226288][T31404] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1933.231780][T31404] ? security_socket_recvmsg+0x89/0xb0 [ 1933.237265][T31404] ? netlink_sendmsg+0xbf0/0xbf0 [ 1933.242280][T31404] ____sys_recvmsg+0x2ce/0x5e0 [ 1933.247097][T31404] ? __sys_recvmsg_sock+0x50/0x50 [ 1933.252201][T31404] ? import_iovec+0x73/0xa0 [ 1933.256769][T31404] ___sys_recvmsg+0x216/0x590 [ 1933.261501][T31404] ? __sys_recvmsg+0x2a0/0x2a0 [ 1933.266576][T31404] ? ksys_write+0x1c4/0x260 [ 1933.271265][T31404] ? __fget_files+0x43d/0x4b0 [ 1933.275994][T31404] __x64_sys_recvmsg+0x20c/0x2e0 [ 1933.280996][T31404] ? ___sys_recvmsg+0x590/0x590 [ 1933.285900][T31404] ? lockdep_hardirqs_on+0x98/0x150 [ 1933.291225][T31404] do_syscall_64+0x55/0xa0 [ 1933.295755][T31404] ? clear_bhb_loop+0x40/0x90 [ 1933.300488][T31404] ? clear_bhb_loop+0x40/0x90 [ 1933.305192][T31404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1933.311377][T31404] RIP: 0033:0x7f91bd19acb9 [ 1933.315837][T31404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1933.335743][T31404] RSP: 002b:00007f91be035028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1933.344198][T31404] RAX: ffffffffffffffda RBX: 00007f91bd415fa0 RCX: 00007f91bd19acb9 [ 1933.352215][T31404] RDX: 0000000000010000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1933.360489][T31404] RBP: 00007f91be035090 R08: 0000000000000000 R09: 0000000000000000 [ 1933.368492][T31404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1933.376687][T31404] R13: 00007f91bd416038 R14: 00007f91bd415fa0 R15: 00007fff68113c48 [ 1933.384713][T31404] [ 1936.456699][T31432] netlink: 'syz.2.8525': attribute type 3 has an invalid length. [ 1936.493691][T31432] netlink: 130920 bytes leftover after parsing attributes in process `syz.2.8525'. [ 1939.532766][T31442] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.8527'. [ 1939.598926][T31446] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8529'. [ 1939.614326][T31446] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1940.124816][T31463] netlink: 'syz.3.8537': attribute type 3 has an invalid length. [ 1940.140079][T31463] netlink: 130920 bytes leftover after parsing attributes in process `syz.3.8537'. [ 1940.223472][T31466] FAULT_INJECTION: forcing a failure. [ 1940.223472][T31466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1940.247499][T31466] CPU: 0 PID: 31466 Comm: syz.2.8539 Not tainted syzkaller #0 [ 1940.255019][T31466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1940.265103][T31466] Call Trace: [ 1940.268403][T31466] [ 1940.271351][T31466] dump_stack_lvl+0x18c/0x250 [ 1940.276054][T31466] ? lock_chain_count+0x20/0x20 [ 1940.280926][T31466] ? show_regs_print_info+0x20/0x20 [ 1940.286156][T31466] ? load_image+0x400/0x400 [ 1940.290696][T31466] ? lockdep_hardirqs_on+0x98/0x150 [ 1940.296016][T31466] should_fail_ex+0x39d/0x4d0 [ 1940.300819][T31466] _copy_from_user+0x2f/0xe0 [ 1940.305441][T31466] bpf_prog_test_run_skb+0x266/0x12b0 [ 1940.310843][T31466] ? __fget_files+0x28/0x4b0 [ 1940.315558][T31466] ? __fget_files+0x28/0x4b0 [ 1940.320444][T31466] ? __fget_files+0x43d/0x4b0 [ 1940.325335][T31466] ? cpu_online+0x60/0x60 [ 1940.329697][T31466] bpf_prog_test_run+0x321/0x390 [ 1940.334671][T31466] __sys_bpf+0x49d/0x890 [ 1940.338949][T31466] ? bpf_link_show_fdinfo+0x390/0x390 [ 1940.344418][T31466] ? lock_chain_count+0x20/0x20 [ 1940.349321][T31466] __x64_sys_bpf+0x7c/0x90 [ 1940.353766][T31466] do_syscall_64+0x55/0xa0 [ 1940.358206][T31466] ? clear_bhb_loop+0x40/0x90 [ 1940.362904][T31466] ? clear_bhb_loop+0x40/0x90 [ 1940.367596][T31466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1940.373493][T31466] RIP: 0033:0x7f264059acb9 [ 1940.378018][T31466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1940.397630][T31466] RSP: 002b:00007f2641518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1940.406212][T31466] RAX: ffffffffffffffda RBX: 00007f2640815fa0 RCX: 00007f264059acb9 [ 1940.414205][T31466] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1940.422192][T31466] RBP: 00007f2641518090 R08: 0000000000000000 R09: 0000000000000000 [ 1940.430250][T31466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1940.438218][T31466] R13: 00007f2640816038 R14: 00007f2640815fa0 R15: 00007ffc43030348 [ 1940.446209][T31466] [ 1941.001931][T31484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8546'. [ 1941.280813][T31497] netlink: 'syz.1.8552': attribute type 10 has an invalid length. [ 1941.295793][T31497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8552'. [ 1941.318596][T31497] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1941.343971][T31497] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1941.565136][T31507] netlink: 'syz.0.8556': attribute type 3 has an invalid length. [ 1941.590201][T31507] netlink: 130920 bytes leftover after parsing attributes in process `syz.0.8556'. [ 1942.145514][T31535] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8564'. [ 1942.315114][T31540] FAULT_INJECTION: forcing a failure. [ 1942.315114][T31540] name failslab, interval 1, probability 0, space 0, times 0 [ 1942.335921][T31540] CPU: 0 PID: 31540 Comm: syz.2.8566 Not tainted syzkaller #0 [ 1942.343465][T31540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1942.353524][T31540] Call Trace: [ 1942.357057][T31540] [ 1942.360018][T31540] dump_stack_lvl+0x18c/0x250 [ 1942.364704][T31540] ? show_regs_print_info+0x20/0x20 [ 1942.369905][T31540] ? load_image+0x400/0x400 [ 1942.374410][T31540] ? __might_sleep+0xe0/0xe0 [ 1942.379005][T31540] ? __lock_acquire+0x7d40/0x7d40 [ 1942.384040][T31540] should_fail_ex+0x39d/0x4d0 [ 1942.388744][T31540] should_failslab+0x9/0x20 [ 1942.393256][T31540] slab_pre_alloc_hook+0x59/0x310 [ 1942.398306][T31540] ? page_pool_create+0x71/0x5c0 [ 1942.403364][T31540] __kmem_cache_alloc_node+0x53/0x250 [ 1942.408838][T31540] ? page_pool_create+0x71/0x5c0 [ 1942.413800][T31540] kmalloc_node_trace+0x26/0xe0 [ 1942.418737][T31540] page_pool_create+0x71/0x5c0 [ 1942.423541][T31540] bpf_test_run_xdp_live+0x203/0x1b20 [ 1942.429191][T31540] ? 0xffffffffa00044c0 [ 1942.433344][T31540] ? 0xffffffffa00044c0 [ 1942.437488][T31540] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1942.443377][T31540] ? 0xffffffffa00044c0 [ 1942.447617][T31540] ? xdp_convert_md_to_buff+0x330/0x330 [ 1942.453183][T31540] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1942.459498][T31540] ? _copy_from_user+0xa5/0xe0 [ 1942.465014][T31540] ? bpf_test_init+0x119/0x140 [ 1942.469784][T31540] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1942.475244][T31540] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1942.480645][T31540] ? dev_put+0x80/0x80 [ 1942.484722][T31540] ? dev_put+0x80/0x80 [ 1942.488842][T31540] bpf_prog_test_run+0x321/0x390 [ 1942.493792][T31540] __sys_bpf+0x49d/0x890 [ 1942.498034][T31540] ? bpf_link_show_fdinfo+0x390/0x390 [ 1942.503414][T31540] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1942.509572][T31540] __x64_sys_bpf+0x7c/0x90 [ 1942.513993][T31540] do_syscall_64+0x55/0xa0 [ 1942.518408][T31540] ? clear_bhb_loop+0x40/0x90 [ 1942.523095][T31540] ? clear_bhb_loop+0x40/0x90 [ 1942.528072][T31540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1942.534159][T31540] RIP: 0033:0x7f264059acb9 [ 1942.538571][T31540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1942.558223][T31540] RSP: 002b:00007f2641518028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1942.566638][T31540] RAX: ffffffffffffffda RBX: 00007f2640815fa0 RCX: 00007f264059acb9 [ 1942.574634][T31540] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1942.582614][T31540] RBP: 00007f2641518090 R08: 0000000000000000 R09: 0000000000000000 [ 1942.590579][T31540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1942.598545][T31540] R13: 00007f2640816038 R14: 00007f2640815fa0 R15: 00007ffc43030348 [ 1942.606522][T31540] [ 1942.748937][T31545] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8567'. [ 1943.023423][T31559] netlink: 'syz.2.8574': attribute type 2 has an invalid length. [ 1943.032005][T31559] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8574'. [ 1943.329739][T31570] netlink: 'syz.1.8579': attribute type 3 has an invalid length. [ 1943.343589][T31570] netlink: 130920 bytes leftover after parsing attributes in process `syz.1.8579'. [ 1944.227449][T31609] FAULT_INJECTION: forcing a failure. [ 1944.227449][T31609] name failslab, interval 1, probability 0, space 0, times 0 [ 1944.247689][T31609] CPU: 1 PID: 31609 Comm: syz.2.8596 Not tainted syzkaller #0 [ 1944.255209][T31609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1944.265262][T31609] Call Trace: [ 1944.268540][T31609] [ 1944.271479][T31609] dump_stack_lvl+0x18c/0x250 [ 1944.276253][T31609] ? sctp_sendmsg+0x1575/0x28c0 [ 1944.281121][T31609] ? ___sys_sendmsg+0x2a6/0x360 [ 1944.286044][T31609] ? show_regs_print_info+0x20/0x20 [ 1944.291249][T31609] ? load_image+0x400/0x400 [ 1944.295761][T31609] should_fail_ex+0x39d/0x4d0 [ 1944.300550][T31609] should_failslab+0x9/0x20 [ 1944.305518][T31609] slab_pre_alloc_hook+0x59/0x310 [ 1944.310573][T31609] ? sctp_add_bind_addr+0x8c/0x360 [ 1944.315850][T31609] __kmem_cache_alloc_node+0x53/0x250 [ 1944.321280][T31609] ? sctp_add_bind_addr+0x8c/0x360 [ 1944.326441][T31609] kmalloc_trace+0x2a/0xe0 [ 1944.330904][T31609] sctp_add_bind_addr+0x8c/0x360 [ 1944.335894][T31609] sctp_copy_local_addr_list+0x315/0x4f0 [ 1944.341662][T31609] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1944.347435][T31609] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1944.353546][T31609] ? sctp_v4_is_any+0x35/0x60 [ 1944.358431][T31609] ? sctp_copy_one_addr+0x8c/0x350 [ 1944.363650][T31609] sctp_bind_addr_copy+0xb3/0x3c0 [ 1944.368680][T31609] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1944.375130][T31609] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1944.380431][T31609] ? __sctp_connect+0xd80/0xd80 [ 1944.385374][T31609] ? security_sctp_bind_connect+0x46/0xb0 [ 1944.391441][T31609] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1944.396996][T31609] ? security_sctp_bind_connect+0x89/0xb0 [ 1944.402735][T31609] sctp_sendmsg+0x1575/0x28c0 [ 1944.407448][T31609] ? sctp_getsockopt+0xb60/0xb60 [ 1944.412421][T31609] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1944.418580][T31609] ? lockdep_hardirqs_on+0x98/0x150 [ 1944.423811][T31609] ? inet_sendmsg+0xe2/0x2f0 [ 1944.428424][T31609] ? inet_sendmsg+0xe9/0x2f0 [ 1944.433045][T31609] ? inet_send_prepare+0x260/0x260 [ 1944.438178][T31609] ____sys_sendmsg+0x5ba/0x960 [ 1944.443022][T31609] ? __lock_acquire+0x7d40/0x7d40 [ 1944.448083][T31609] ? __asan_memset+0x22/0x40 [ 1944.452786][T31609] ? __sys_sendmsg_sock+0x30/0x30 [ 1944.457815][T31609] ? __import_iovec+0x5f2/0x850 [ 1944.462675][T31609] ? import_iovec+0x73/0xa0 [ 1944.467182][T31609] ___sys_sendmsg+0x2a6/0x360 [ 1944.471861][T31609] ? get_pid_task+0x20/0x1e0 [ 1944.476511][T31609] ? __sys_sendmsg+0x2a0/0x2a0 [ 1944.481325][T31609] ? __lock_acquire+0x7d40/0x7d40 [ 1944.486369][T31609] __se_sys_sendmsg+0x1c2/0x2b0 [ 1944.491256][T31609] ? __x64_sys_sendmsg+0x80/0x80 [ 1944.496215][T31609] ? lockdep_hardirqs_on+0x98/0x150 [ 1944.501424][T31609] do_syscall_64+0x55/0xa0 [ 1944.505888][T31609] ? clear_bhb_loop+0x40/0x90 [ 1944.510661][T31609] ? clear_bhb_loop+0x40/0x90 [ 1944.515354][T31609] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1944.521367][T31609] RIP: 0033:0x7f264059acb9 [ 1944.525778][T31609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1944.545488][T31609] RSP: 002b:00007f2641518028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1944.553913][T31609] RAX: ffffffffffffffda RBX: 00007f2640815fa0 RCX: 00007f264059acb9 [ 1944.561886][T31609] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000010 [ 1944.570122][T31609] RBP: 00007f2641518090 R08: 0000000000000000 R09: 0000000000000000 [ 1944.578093][T31609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1944.586064][T31609] R13: 00007f2640816038 R14: 00007f2640815fa0 R15: 00007ffc43030348 [ 1944.594228][T31609] [ 1944.953334][T31630] netlink: 'syz.2.8603': attribute type 3 has an invalid length. [ 1944.961880][T31630] netlink: 130920 bytes leftover after parsing attributes in process `syz.2.8603'. [ 1945.177617][T31641] netlink: 'syz.3.8607': attribute type 2 has an invalid length. [ 1945.186968][T31641] netlink: 'syz.3.8607': attribute type 11 has an invalid length. [ 1945.200323][T31641] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8607'. [ 1945.306788][T31643] netlink: 'syz.1.8608': attribute type 19 has an invalid length. [ 1945.483933][T31647] netlink: 'syz.1.8608': attribute type 19 has an invalid length. [ 1945.769760][T31652] netlink: 'syz.1.8609': attribute type 1 has an invalid length. [ 1945.802401][T31652] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.8609'. [ 1946.221567][T31656] netlink: 'syz.0.8610': attribute type 10 has an invalid length. [ 1946.267403][T31656] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8610'. [ 1946.391493][T31656] team0: Port device syz_tun added [ 1946.411227][T31661] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8612'. [ 1946.449133][T31661] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1946.806992][T31679] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8619'. [ 1946.828341][T31679] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1946.881550][T31675] validate_nla: 1 callbacks suppressed [ 1946.881570][T31675] netlink: 'syz.0.8618': attribute type 28 has an invalid length. [ 1946.936631][T31679] netlink: 'syz.2.8619': attribute type 10 has an invalid length. [ 1946.975778][T31679] dummy0: entered promiscuous mode [ 1946.992189][T31679] dummy0: entered allmulticast mode [ 1947.001340][T31679] team0: Port device dummy0 added [ 1947.035406][T31684] netlink: 'syz.2.8619': attribute type 17 has an invalid length. [ 1947.049209][T31684] netlink: 'syz.2.8619': attribute type 16 has an invalid length. [ 1947.059926][T31684] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8619'. [ 1947.116540][T31679] netlink: 'syz.2.8619': attribute type 10 has an invalid length. [ 1947.154905][T31679] dummy0: left promiscuous mode [ 1947.165160][T31679] dummy0: left allmulticast mode [ 1947.215097][T31687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8619'. [ 1947.235027][T31679] team0: Port device dummy0 removed [ 1947.256947][T31679] dummy0: entered promiscuous mode [ 1947.270447][T31686] netlink: 'syz.0.8620': attribute type 3 has an invalid length. [ 1947.279002][T31679] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1947.280545][T31687] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8619'. [ 1947.307622][T31686] netlink: 130920 bytes leftover after parsing attributes in process `syz.0.8620'. [ 1947.348821][T31684] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8619'. [ 1947.389630][T31689] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8619'. [ 1947.894612][T31697] netlink: 'syz.3.8623': attribute type 41 has an invalid length. [ 1947.935249][T31697] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8623'. [ 1948.473701][T31712] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8630'. [ 1949.005879][T31725] netlink: 'syz.3.8635': attribute type 3 has an invalid length. [ 1949.014350][T31725] netlink: 130920 bytes leftover after parsing attributes in process `syz.3.8635'. [ 1957.272441][T31755] netlink: 'syz.1.8640': attribute type 39 has an invalid length. [ 1957.280455][T31759] netlink: 'syz.3.8641': attribute type 1 has an invalid length. [ 1957.297901][T31760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8641'. [ 1957.508405][T31774] netlink: 'syz.2.8648': attribute type 3 has an invalid length. [ 1957.516446][T31774] netlink: 130920 bytes leftover after parsing attributes in process `syz.2.8648'. [ 1958.128774][T31794] FAULT_INJECTION: forcing a failure. [ 1958.128774][T31794] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.153170][T31794] CPU: 0 PID: 31794 Comm: syz.3.8656 Not tainted syzkaller #0 [ 1958.160672][T31794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1958.170768][T31794] Call Trace: [ 1958.174079][T31794] [ 1958.177007][T31794] dump_stack_lvl+0x18c/0x250 [ 1958.181685][T31794] ? sctp_sendmsg+0x1575/0x28c0 [ 1958.186534][T31794] ? ___sys_sendmsg+0x2a6/0x360 [ 1958.191385][T31794] ? show_regs_print_info+0x20/0x20 [ 1958.196776][T31794] ? load_image+0x400/0x400 [ 1958.201290][T31794] should_fail_ex+0x39d/0x4d0 [ 1958.205972][T31794] should_failslab+0x9/0x20 [ 1958.210473][T31794] slab_pre_alloc_hook+0x59/0x310 [ 1958.215536][T31794] ? sctp_add_bind_addr+0x8c/0x360 [ 1958.220745][T31794] __kmem_cache_alloc_node+0x53/0x250 [ 1958.226137][T31794] ? sctp_add_bind_addr+0x8c/0x360 [ 1958.231254][T31794] kmalloc_trace+0x2a/0xe0 [ 1958.235675][T31794] sctp_add_bind_addr+0x8c/0x360 [ 1958.240710][T31794] sctp_copy_local_addr_list+0x315/0x4f0 [ 1958.246348][T31794] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1958.252070][T31794] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1958.258230][T31794] ? sctp_v4_is_any+0x35/0x60 [ 1958.263191][T31794] ? sctp_copy_one_addr+0x8c/0x350 [ 1958.268607][T31794] sctp_bind_addr_copy+0xb3/0x3c0 [ 1958.273758][T31794] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1958.280117][T31794] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1958.285417][T31794] ? __sctp_connect+0xd80/0xd80 [ 1958.290375][T31794] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1958.295770][T31794] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1958.301324][T31794] ? security_sctp_bind_connect+0x89/0xb0 [ 1958.307136][T31794] sctp_sendmsg+0x1575/0x28c0 [ 1958.311823][T31794] ? sctp_getsockopt+0xb60/0xb60 [ 1958.316892][T31794] ? aa_sk_perm+0x83c/0x970 [ 1958.321431][T31794] ? aa_af_perm+0x330/0x330 [ 1958.326138][T31794] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1958.332658][T31794] ? sock_rps_record_flow+0x19/0x3f0 [ 1958.338153][T31794] ? inet_sendmsg+0xe9/0x2f0 [ 1958.342798][T31794] ? inet_send_prepare+0x260/0x260 [ 1958.347922][T31794] ____sys_sendmsg+0x5ba/0x960 [ 1958.353073][T31794] ? __lock_acquire+0x7d40/0x7d40 [ 1958.358318][T31794] ? __sys_sendmsg_sock+0x30/0x30 [ 1958.363796][T31794] ? __import_iovec+0x5f2/0x850 [ 1958.368758][T31794] ? import_iovec+0x73/0xa0 [ 1958.373523][T31794] ___sys_sendmsg+0x2a6/0x360 [ 1958.378296][T31794] ? __sys_sendmsg+0x2a0/0x2a0 [ 1958.383077][T31794] ? preempt_schedule_irq+0xea/0x150 [ 1958.388388][T31794] __se_sys_sendmsg+0x1c2/0x2b0 [ 1958.393364][T31794] ? __x64_sys_sendmsg+0x80/0x80 [ 1958.398333][T31794] do_syscall_64+0x55/0xa0 [ 1958.402772][T31794] ? clear_bhb_loop+0x40/0x90 [ 1958.407818][T31794] ? clear_bhb_loop+0x40/0x90 [ 1958.412522][T31794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1958.418767][T31794] RIP: 0033:0x7f00c6f9acb9 [ 1958.423202][T31794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1958.443082][T31794] RSP: 002b:00007f00c7dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1958.451959][T31794] RAX: ffffffffffffffda RBX: 00007f00c7215fa0 RCX: 00007f00c6f9acb9 [ 1958.460402][T31794] RDX: 000000000c040001 RSI: 0000200000004b40 RDI: 0000000000000003 [ 1958.468592][T31794] RBP: 00007f00c7dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 1958.476680][T31794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1958.484664][T31794] R13: 00007f00c7216038 R14: 00007f00c7215fa0 R15: 00007ffca5417798 [ 1958.492652][T31794] [ 1958.748766][T31799] netlink: 'syz.3.8659': attribute type 39 has an invalid length. [ 1959.338567][T31804] netlink: 'syz.2.8658': attribute type 1 has an invalid length. [ 1959.357393][T31808] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8658'. [ 1959.704053][T31819] netlink: 'syz.1.8663': attribute type 10 has an invalid length. [ 1959.959990][T31824] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1960.057042][T31826] netlink: 142556 bytes leftover after parsing attributes in process `syz.2.8665'. [ 1960.076527][T31830] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8668'. [ 1960.105857][T31826] netlink: 'syz.2.8665': attribute type 1 has an invalid length. [ 1960.124593][T31826] netlink: 'syz.2.8665': attribute type 2 has an invalid length. [ 1960.146954][T31826] netlink: 'syz.2.8665': attribute type 3 has an invalid length. [ 1960.166332][T31826] netlink: 'syz.2.8665': attribute type 4 has an invalid length. [ 1960.839374][T31857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8674'. [ 1961.567784][T31865] FAULT_INJECTION: forcing a failure. [ 1961.567784][T31865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1961.587423][T31865] CPU: 0 PID: 31865 Comm: syz.2.8681 Not tainted syzkaller #0 [ 1961.595202][T31865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1961.605714][T31865] Call Trace: [ 1961.609039][T31865] [ 1961.611971][T31865] dump_stack_lvl+0x18c/0x250 [ 1961.616656][T31865] ? show_regs_print_info+0x20/0x20 [ 1961.621892][T31865] ? load_image+0x400/0x400 [ 1961.626406][T31865] ? __lock_acquire+0x7d40/0x7d40 [ 1961.631430][T31865] ? snprintf+0xe9/0x140 [ 1961.635672][T31865] should_fail_ex+0x39d/0x4d0 [ 1961.640357][T31865] _copy_to_user+0x2f/0xa0 [ 1961.644870][T31865] simple_read_from_buffer+0xe7/0x150 [ 1961.650375][T31865] proc_fail_nth_read+0x1e8/0x260 [ 1961.655406][T31865] ? proc_fault_inject_write+0x360/0x360 [ 1961.661039][T31865] ? fsnotify_perm+0x271/0x5e0 [ 1961.665802][T31865] ? proc_fault_inject_write+0x360/0x360 [ 1961.671520][T31865] vfs_read+0x28b/0x970 [ 1961.675681][T31865] ? kernel_read+0x1e0/0x1e0 [ 1961.680362][T31865] ? __fget_files+0x28/0x4b0 [ 1961.684948][T31865] ? __fget_files+0x28/0x4b0 [ 1961.689620][T31865] ? __fget_files+0x43d/0x4b0 [ 1961.694300][T31865] ? __fdget_pos+0x2a3/0x330 [ 1961.698884][T31865] ? ksys_read+0x75/0x260 [ 1961.703227][T31865] ksys_read+0x150/0x260 [ 1961.707478][T31865] ? vfs_write+0x990/0x990 [ 1961.711895][T31865] ? lockdep_hardirqs_on+0x98/0x150 [ 1961.717101][T31865] do_syscall_64+0x55/0xa0 [ 1961.721519][T31865] ? clear_bhb_loop+0x40/0x90 [ 1961.726189][T31865] ? clear_bhb_loop+0x40/0x90 [ 1961.730866][T31865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1961.736752][T31865] RIP: 0033:0x7f264055b58e [ 1961.741289][T31865] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1961.760904][T31865] RSP: 002b:00007f2641517fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1961.769316][T31865] RAX: ffffffffffffffda RBX: 00007f26415186c0 RCX: 00007f264055b58e [ 1961.777474][T31865] RDX: 000000000000000f RSI: 00007f26415180a0 RDI: 0000000000000007 [ 1961.785446][T31865] RBP: 00007f2641518090 R08: 0000000000000000 R09: 0000000000000000 [ 1961.793447][T31865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1961.801452][T31865] R13: 00007f2640816038 R14: 00007f2640815fa0 R15: 00007ffc43030348 [ 1961.809554][T31865] [ 1962.215363][T31887] FAULT_INJECTION: forcing a failure. [ 1962.215363][T31887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1962.230610][T31887] CPU: 1 PID: 31887 Comm: syz.1.8689 Not tainted syzkaller #0 [ 1962.238133][T31887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1962.248218][T31887] Call Trace: [ 1962.251595][T31887] [ 1962.254546][T31887] dump_stack_lvl+0x18c/0x250 [ 1962.259255][T31887] ? show_regs_print_info+0x20/0x20 [ 1962.264496][T31887] ? load_image+0x400/0x400 [ 1962.269030][T31887] ? __might_fault+0xaa/0x120 [ 1962.273740][T31887] ? __lock_acquire+0x7d40/0x7d40 [ 1962.278796][T31887] should_fail_ex+0x39d/0x4d0 [ 1962.283511][T31887] _copy_from_iter+0x1d9/0x12e0 [ 1962.288397][T31887] ? rep_movs_alternative+0x4a/0x90 [ 1962.293630][T31887] ? _copy_from_iter+0x24e/0x12e0 [ 1962.298678][T31887] ? __virt_addr_valid+0x18c/0x540 [ 1962.303810][T31887] ? __lock_acquire+0x7d40/0x7d40 [ 1962.308860][T31887] ? copyout_mc+0x70/0x70 [ 1962.313200][T31887] ? copyout_mc+0x70/0x70 [ 1962.317719][T31887] ? __virt_addr_valid+0x18c/0x540 [ 1962.322877][T31887] ? page_copy_sane+0x16a/0x270 [ 1962.327819][T31887] copy_page_from_iter+0x7b/0x100 [ 1962.332876][T31887] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1962.338949][T31887] unix_stream_sendmsg+0x562/0xbf0 [ 1962.344107][T31887] ? unix_show_fdinfo+0x270/0x270 [ 1962.349207][T31887] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1962.355660][T31887] ? aa_sock_msg_perm+0x94/0x150 [ 1962.360636][T31887] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1962.365922][T31887] ? security_socket_sendmsg+0x80/0xa0 [ 1962.371378][T31887] ? unix_show_fdinfo+0x270/0x270 [ 1962.376412][T31887] ____sys_sendmsg+0x5ba/0x960 [ 1962.381184][T31887] ? __asan_memset+0x22/0x40 [ 1962.385774][T31887] ? __sys_sendmsg_sock+0x30/0x30 [ 1962.390804][T31887] ? __import_iovec+0x5f2/0x850 [ 1962.395677][T31887] ? import_iovec+0x73/0xa0 [ 1962.400185][T31887] ___sys_sendmsg+0x2a6/0x360 [ 1962.404891][T31887] ? get_pid_task+0x20/0x1e0 [ 1962.409591][T31887] ? __sys_sendmsg+0x2a0/0x2a0 [ 1962.414381][T31887] ? __lock_acquire+0x7d40/0x7d40 [ 1962.419419][T31887] __se_sys_sendmsg+0x1c2/0x2b0 [ 1962.424274][T31887] ? __x64_sys_sendmsg+0x80/0x80 [ 1962.429221][T31887] ? lockdep_hardirqs_on+0x98/0x150 [ 1962.434418][T31887] do_syscall_64+0x55/0xa0 [ 1962.438831][T31887] ? clear_bhb_loop+0x40/0x90 [ 1962.443596][T31887] ? clear_bhb_loop+0x40/0x90 [ 1962.448279][T31887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1962.454177][T31887] RIP: 0033:0x7fbd2b19acb9 [ 1962.458673][T31887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1962.478282][T31887] RSP: 002b:00007fbd293f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1962.486689][T31887] RAX: ffffffffffffffda RBX: 00007fbd2b415fa0 RCX: 00007fbd2b19acb9 [ 1962.494676][T31887] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000006 [ 1962.502732][T31887] RBP: 00007fbd293f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1962.510709][T31887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1962.518703][T31887] R13: 00007fbd2b416038 R14: 00007fbd2b415fa0 R15: 00007ffcdc527528 [ 1962.526683][T31887] [ 1962.676836][T31896] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8690'. [ 1962.703396][T31896] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8690'. [ 1962.751674][T31895] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.8690'. [ 1962.786564][T31895] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8690'. [ 1962.820762][T31902] validate_nla: 1 callbacks suppressed [ 1962.820783][T31902] netlink: 'syz.1.8694': attribute type 1 has an invalid length. [ 1962.850532][T31896] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8690'. [ 1962.892629][T31895] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8690'. [ 1962.992890][T31902] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8694'. [ 1964.852020][T31927] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.8704'. [ 1964.861742][T31927] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.8704'. [ 1964.976981][T31927] netlink: 'syz.0.8704': attribute type 46 has an invalid length. [ 1964.990134][T31927] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8704'. [ 1965.136733][T31938] FAULT_INJECTION: forcing a failure. [ 1965.136733][T31938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1965.151647][T31938] CPU: 0 PID: 31938 Comm: syz.0.8708 Not tainted syzkaller #0 [ 1965.159162][T31938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1965.169251][T31938] Call Trace: [ 1965.172679][T31938] [ 1965.175733][T31938] dump_stack_lvl+0x18c/0x250 [ 1965.180443][T31938] ? show_regs_print_info+0x20/0x20 [ 1965.185739][T31938] ? load_image+0x400/0x400 [ 1965.190504][T31938] ? __might_fault+0xaa/0x120 [ 1965.195179][T31938] ? __lock_acquire+0x7d40/0x7d40 [ 1965.200209][T31938] should_fail_ex+0x39d/0x4d0 [ 1965.204894][T31938] _copy_from_user+0x2f/0xe0 [ 1965.209485][T31938] generic_map_update_batch+0x54b/0x810 [ 1965.215036][T31938] ? rcu_read_unlock+0xa0/0xa0 [ 1965.219797][T31938] ? __fdget+0x180/0x210 [ 1965.224044][T31938] ? rcu_read_unlock+0xa0/0xa0 [ 1965.228803][T31938] bpf_map_do_batch+0x3d7/0x610 [ 1965.233684][T31938] __sys_bpf+0x381/0x890 [ 1965.238060][T31938] ? bpf_link_show_fdinfo+0x390/0x390 [ 1965.243477][T31938] ? lock_chain_count+0x20/0x20 [ 1965.248350][T31938] __x64_sys_bpf+0x7c/0x90 [ 1965.252769][T31938] do_syscall_64+0x55/0xa0 [ 1965.257184][T31938] ? clear_bhb_loop+0x40/0x90 [ 1965.261858][T31938] ? clear_bhb_loop+0x40/0x90 [ 1965.266535][T31938] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1965.272425][T31938] RIP: 0033:0x7f91bd19acb9 [ 1965.276842][T31938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1965.296451][T31938] RSP: 002b:00007f91be035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1965.304875][T31938] RAX: ffffffffffffffda RBX: 00007f91bd415fa0 RCX: 00007f91bd19acb9 [ 1965.312867][T31938] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 1965.321058][T31938] RBP: 00007f91be035090 R08: 0000000000000000 R09: 0000000000000000 [ 1965.329137][T31938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1965.337193][T31938] R13: 00007f91bd416038 R14: 00007f91bd415fa0 R15: 00007fff68113c48 [ 1965.345197][T31938] [ 1975.715970][T31953] FAULT_INJECTION: forcing a failure. [ 1975.715970][T31953] name failslab, interval 1, probability 0, space 0, times 0 [ 1975.728709][T31953] CPU: 1 PID: 31953 Comm: syz.1.8714 Not tainted syzkaller #0 [ 1975.736371][T31953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1975.746620][T31953] Call Trace: [ 1975.749917][T31953] [ 1975.752893][T31953] dump_stack_lvl+0x18c/0x250 [ 1975.757685][T31953] ? show_regs_print_info+0x20/0x20 [ 1975.762913][T31953] ? load_image+0x400/0x400 [ 1975.767432][T31953] ? mark_lock+0x94/0x320 [ 1975.771877][T31953] should_fail_ex+0x39d/0x4d0 [ 1975.776583][T31953] should_failslab+0x9/0x20 [ 1975.781277][T31953] slab_pre_alloc_hook+0x59/0x310 [ 1975.786417][T31953] kmem_cache_alloc+0x5a/0x2d0 [ 1975.791199][T31953] ? dst_alloc+0x105/0x170 [ 1975.795641][T31953] dst_alloc+0x105/0x170 [ 1975.799909][T31953] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 1975.806014][T31953] ? ip_route_output_key_hash+0x13d/0x330 [ 1975.811762][T31953] ip_route_output_key_hash+0x1f3/0x330 [ 1975.817331][T31953] ? ip_route_input_rcu+0x30e0/0x30e0 [ 1975.822737][T31953] ? __asan_memset+0x22/0x40 [ 1975.827362][T31953] ip_route_output_flow+0x2a/0x150 [ 1975.832520][T31953] ip_tunnel_xmit+0x9b1/0x2410 [ 1975.837321][T31953] ? ip_tunnel_xmit+0x80/0x2410 [ 1975.842294][T31953] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 1975.847356][T31953] ? validate_xmit_xfrm+0xbc/0x12c0 [ 1975.852587][T31953] ? gre_build_header+0x25b/0x990 [ 1975.857639][T31953] ipgre_xmit+0x7a6/0xb20 [ 1975.862000][T31953] dev_hard_start_xmit+0x246/0x740 [ 1975.867153][T31953] __dev_queue_xmit+0x1ac2/0x36b0 [ 1975.872281][T31953] ? __dev_queue_xmit+0x26b/0x36b0 [ 1975.877646][T31953] ? __kmem_cache_alloc_node+0x13a/0x250 [ 1975.883300][T31953] ? netdev_core_pick_tx+0x340/0x340 [ 1975.888792][T31953] ? skb_release_data+0x1cf/0x800 [ 1975.893857][T31953] ? pskb_expand_head+0xbfe/0x1230 [ 1975.898986][T31953] ? __bpf_redirect+0x534/0xe60 [ 1975.903948][T31953] __bpf_tx_skb+0x189/0x250 [ 1975.908480][T31953] bpf_clone_redirect+0x270/0x3d0 [ 1975.913534][T31953] ? bpf_test_run+0x174/0x870 [ 1975.918230][T31953] bpf_prog_208b094576c80b22+0x5e/0x63 [ 1975.923710][T31953] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1975.929713][T31953] ? perf_trace_preemptirq_template+0xac/0x330 [ 1975.936067][T31953] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1975.942062][T31953] ? lockdep_softirqs_on+0x580/0x580 [ 1975.947359][T31953] ? lock_chain_count+0x20/0x20 [ 1975.952655][T31953] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1975.958938][T31953] ? __local_bh_disable_ip+0x108/0x1a0 [ 1975.964700][T31953] ? __cant_sleep+0x220/0x220 [ 1975.969410][T31953] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1975.974897][T31953] ? _local_bh_enable+0xa0/0xa0 [ 1975.979766][T31953] ? bpf_test_run+0x174/0x870 [ 1975.984839][T31953] ? kvm_sched_clock_read+0x11/0x20 [ 1975.990062][T31953] bpf_test_run+0x4fa/0x870 [ 1975.994803][T31953] ? bpf_test_run+0x174/0x870 [ 1975.999514][T31953] ? convert___skb_to_skb+0x590/0x590 [ 1976.004917][T31953] ? eth_get_headlen+0x210/0x210 [ 1976.009998][T31953] ? slab_build_skb+0x25f/0x3f0 [ 1976.014987][T31953] ? convert___skb_to_skb+0x3d/0x590 [ 1976.020307][T31953] bpf_prog_test_run_skb+0xad2/0x12b0 [ 1976.025729][T31953] ? cpu_online+0x60/0x60 [ 1976.030099][T31953] bpf_prog_test_run+0x321/0x390 [ 1976.035054][T31953] __sys_bpf+0x49d/0x890 [ 1976.039317][T31953] ? bpf_link_show_fdinfo+0x390/0x390 [ 1976.044728][T31953] ? lock_chain_count+0x20/0x20 [ 1976.049618][T31953] __x64_sys_bpf+0x7c/0x90 [ 1976.054157][T31953] do_syscall_64+0x55/0xa0 [ 1976.058604][T31953] ? clear_bhb_loop+0x40/0x90 [ 1976.063454][T31953] ? clear_bhb_loop+0x40/0x90 [ 1976.068147][T31953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1976.074053][T31953] RIP: 0033:0x7fbd2b19acb9 [ 1976.078486][T31953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1976.098284][T31953] RSP: 002b:00007fbd293f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1976.106715][T31953] RAX: ffffffffffffffda RBX: 00007fbd2b415fa0 RCX: 00007fbd2b19acb9 [ 1976.114704][T31953] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1976.122687][T31953] RBP: 00007fbd293f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1976.130665][T31953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1976.138641][T31953] R13: 00007fbd2b416038 R14: 00007fbd2b415fa0 R15: 00007ffcdc527528 [ 1976.146648][T31953] [ 1977.192473][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1977.199191][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1984.056564][T19413] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1984.066691][T19413] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1984.075434][T19413] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1984.087177][T19413] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1984.095107][T19413] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1984.104523][T19413] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1984.214629][T19413] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1984.224874][T19413] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1984.233949][T19413] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1984.242422][T19413] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1984.250695][T19413] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1984.258471][T19413] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1984.376421][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1984.386949][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1984.395877][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1984.418618][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1984.431815][ T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1984.439543][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1985.021441][T31966] chnl_net:caif_netlink_parms(): no params data found [ 1985.101778][T31962] chnl_net:caif_netlink_parms(): no params data found [ 1985.265815][T31968] chnl_net:caif_netlink_parms(): no params data found [ 1985.474778][T31966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1985.491217][T31966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1985.503593][T31966] bridge_slave_0: entered allmulticast mode [ 1985.515376][T31966] bridge_slave_0: entered promiscuous mode [ 1985.540344][T31966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1985.548023][T31966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1985.555523][T31966] bridge_slave_1: entered allmulticast mode [ 1985.575456][T31966] bridge_slave_1: entered promiscuous mode [ 1985.687440][T31962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1985.694781][T31962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1985.712104][T31962] bridge_slave_0: entered allmulticast mode [ 1985.719968][T31962] bridge_slave_0: entered promiscuous mode [ 1985.759462][T31968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1985.766624][T31968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1985.786393][T31968] bridge_slave_0: entered allmulticast mode [ 1985.803679][T31968] bridge_slave_0: entered promiscuous mode [ 1985.825317][T31966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1985.840659][T31966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1985.859375][T31962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1985.866559][T31962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1985.883159][T31962] bridge_slave_1: entered allmulticast mode [ 1985.904191][T31962] bridge_slave_1: entered promiscuous mode [ 1985.913924][T31968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1985.927863][T31968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1985.935155][T31968] bridge_slave_1: entered allmulticast mode [ 1985.950672][T31968] bridge_slave_1: entered promiscuous mode [ 1986.157396][ T51] Bluetooth: hci3: command tx timeout [ 1986.317378][ T51] Bluetooth: hci5: command tx timeout [ 1986.557525][ T51] Bluetooth: hci6: command tx timeout [ 1988.237419][ T51] Bluetooth: hci3: command tx timeout [ 1988.397364][ T51] Bluetooth: hci5: command tx timeout [ 1991.071222][ T51] Bluetooth: hci6: command tx timeout [ 1991.076737][ T51] Bluetooth: hci3: command tx timeout [ 1991.083108][T19413] Bluetooth: hci5: command tx timeout [ 1995.587878][T19413] Bluetooth: hci5: command tx timeout [ 1995.593352][T19413] Bluetooth: hci3: command tx timeout [ 1995.599143][T19413] Bluetooth: hci6: command tx timeout [ 1996.153654][T19413] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1996.180863][T19413] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1996.190283][T19413] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1996.198981][T19413] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1996.206855][T19413] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1996.214734][T19413] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1997.686742][T19413] Bluetooth: hci6: command tx timeout [ 1998.237403][T19413] Bluetooth: hci7: command tx timeout [ 2001.267251][T19413] Bluetooth: hci7: command tx timeout [ 2003.277833][T19413] Bluetooth: hci7: command tx timeout [ 2005.357810][T19413] Bluetooth: hci7: command tx timeout [ 2039.886855][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 2039.895406][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 2045.039878][T26796] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2045.050790][T26796] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2045.067339][T26796] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2045.076706][T26796] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2045.090648][T26796] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2045.099030][T26796] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2045.203412][T26796] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2045.214804][T26796] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2045.224426][T26796] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2045.237394][T26796] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2045.245404][T26796] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2045.253593][T26796] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2045.325748][T19413] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2045.337560][T19413] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2045.345896][T19413] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2045.355869][T19413] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2045.364755][T19413] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2045.377368][T19413] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2047.197846][T26796] Bluetooth: hci8: command tx timeout [ 2047.357317][T26796] Bluetooth: hci9: command tx timeout [ 2047.437583][T26796] Bluetooth: hci10: command tx timeout [ 2049.280598][T26796] Bluetooth: hci8: command tx timeout [ 2049.438496][T26796] Bluetooth: hci9: command tx timeout [ 2049.517203][T26796] Bluetooth: hci10: command tx timeout [ 2051.357515][T26796] Bluetooth: hci8: command tx timeout [ 2051.517301][T26796] Bluetooth: hci9: command tx timeout [ 2051.597311][T26796] Bluetooth: hci10: command tx timeout [ 2053.437620][T26796] Bluetooth: hci8: command tx timeout [ 2053.597308][T26796] Bluetooth: hci9: command tx timeout [ 2053.677364][T26796] Bluetooth: hci10: command tx timeout [ 2056.378394][T19413] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2056.395727][T19413] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2056.410032][T19413] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2056.428442][T19413] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2056.436415][T19413] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2056.444153][T19413] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2058.477488][T19413] Bluetooth: hci11: command tx timeout [ 2060.557382][T19413] Bluetooth: hci11: command tx timeout [ 2062.637543][T19413] Bluetooth: hci11: command tx timeout [ 2064.717831][T19413] Bluetooth: hci11: command tx timeout [ 2083.207035][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 2083.213681][ C0] rcu: 0-....: (10403 ticks this GP) idle=2144/1/0x4000000000000000 softirq=125657/125714 fqs=4672 [ 2083.225444][ C0] rcu: hardirqs softirqs csw/system [ 2083.231931][ C0] rcu: number: 1445812 272 0 [ 2083.238331][ C0] rcu: cputime: 20074 32414 30 ==> 52500(ms) [ 2083.246123][ C0] rcu: (t=10502 jiffies g=166377 q=2726 ncpus=2) [ 2083.252549][ C0] CPU: 0 PID: 31949 Comm: syz.3.8712 Not tainted syzkaller #0 [ 2083.260112][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2083.270169][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x82/0x90 [ 2083.276515][ C0] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 04 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 [ 2083.296126][ C0] RSP: 0018:ffffc90000007390 EFLAGS: 00000246 [ 2083.302187][ C0] RAX: ffffffff813b38d2 RBX: dffffc0000000000 RCX: 0000000000000100 [ 2083.310180][ C0] RDX: ffff888068910000 RSI: 000000000019b2bf RDI: 000000000019b2ca [ 2083.318149][ C0] RBP: 000000000019b2ca R08: ffffc90000007530 R09: 000000000000000b [ 2083.326123][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90000007468 [ 2083.334288][ C0] R13: 000000000019b2bf R14: ffffc9000000749d R15: 000000000009042d [ 2083.342271][ C0] FS: 00007f00c7dc66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2083.351209][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2083.357795][ C0] CR2: 00005555794374e8 CR3: 00000000313af000 CR4: 00000000003506f0 [ 2083.365807][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 2083.373787][ C0] DR3: 0000200000000300 DR6: 00000000ffff0fff DR7: 0000000000000600 [ 2083.381771][ C0] Call Trace: [ 2083.385137][ C0] [ 2083.388082][ C0] unwind_next_frame+0x2b2/0x2970 [ 2083.393111][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xda/0x180 [ 2083.400307][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2083.407515][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2083.414764][ C0] ? stack_trace_save+0x100/0x100 [ 2083.419801][ C0] arch_stack_walk+0x144/0x190 [ 2083.424573][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2083.431774][ C0] stack_trace_save+0xaa/0x100 [ 2083.436557][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 2083.441695][ C0] ? memset_orig+0x46/0xac [ 2083.446134][ C0] kasan_set_track+0x4e/0x70 [ 2083.450731][ C0] ? kasan_set_track+0x4e/0x70 [ 2083.455495][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 2083.460902][ C0] ? slab_post_alloc_hook+0x6e/0x4b0 [ 2083.466375][ C0] ? kmem_cache_alloc_node+0x14c/0x320 [ 2083.471847][ C0] ? kmalloc_reserve+0x95/0x240 [ 2083.476722][ C0] ? __alloc_skb+0x138/0x2c0 [ 2083.481335][ C0] ? __netdev_alloc_skb+0x10c/0x500 [ 2083.486565][ C0] ? __ieee80211_beacon_get+0xe17/0x1600 [ 2083.492216][ C0] ? ieee80211_beacon_get_tim+0xbf/0x580 [ 2083.497859][ C0] ? mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 2083.503617][ C0] ? __iterate_interfaces+0x243/0x500 [ 2083.509003][ C0] ? ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2083.516242][ C0] ? kasan_save_alloc_info+0xb/0x30 [ 2083.521448][ C0] __kasan_slab_alloc+0x6c/0x80 [ 2083.526307][ C0] slab_post_alloc_hook+0x6e/0x4b0 [ 2083.531439][ C0] kmem_cache_alloc_node+0x14c/0x320 [ 2083.536740][ C0] ? kmalloc_reserve+0x95/0x240 [ 2083.541605][ C0] kmalloc_reserve+0x95/0x240 [ 2083.546299][ C0] __alloc_skb+0x138/0x2c0 [ 2083.550718][ C0] ? ieee80211_beacon_cntdwn_is_complete+0x590/0x5e0 [ 2083.557396][ C0] __netdev_alloc_skb+0x10c/0x500 [ 2083.562428][ C0] ? sched_clock_cpu+0x75/0x430 [ 2083.567274][ C0] ? kmalloc_reserve+0x240/0x240 [ 2083.572211][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 2083.577781][ C0] __ieee80211_beacon_get+0xe17/0x1600 [ 2083.583263][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 2083.588832][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 2083.594298][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 2083.601092][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 2083.606732][ C0] __iterate_interfaces+0x243/0x500 [ 2083.611937][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2083.618187][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2083.625379][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2083.631609][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2083.638635][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 2083.643831][ C0] __hrtimer_run_queues+0x52a/0xc40 [ 2083.649031][ C0] ? hw_scan_work+0xf60/0xf60 [ 2083.653707][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 2083.658811][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 2083.664875][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 2083.669982][ C0] handle_softirqs+0x280/0x820 [ 2083.674742][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 2083.679504][ C0] ? do_softirq+0x1a0/0x1a0 [ 2083.683999][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 2083.689193][ C0] __irq_exit_rcu+0xd3/0x190 [ 2083.693774][ C0] ? irq_exit_rcu+0x20/0x20 [ 2083.698276][ C0] irq_exit_rcu+0x9/0x20 [ 2083.702602][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2083.708235][ C0] [ 2083.711332][ C0] [ 2083.714252][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2083.720226][ C0] RIP: 0010:preempt_schedule_irq+0xba/0x150 [ 2083.726116][ C0] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 6f bf 01 00 00 00 e8 01 2d d0 f6 e8 9c 31 01 f7 fb bf 01 00 00 00 f1 b4 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 2083.745721][ C0] RSP: 0018:ffffc90003597960 EFLAGS: 00000286 [ 2083.751785][ C0] RAX: ab2ad331cf26ef00 RBX: 0000000000000000 RCX: ab2ad331cf26ef00 [ 2083.759760][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: 0000000000000001 [ 2083.767734][ C0] RBP: ffffc90003597a00 R08: ffffffff8e8ad9ef R09: 1ffffffff1d15b3d [ 2083.775714][ C0] R10: dffffc0000000000 R11: fffffbfff1d15b3e R12: 0000000000000000 [ 2083.783764][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920006b2f2c [ 2083.791749][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 2083.797478][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2083.803283][ C0] irqentry_exit+0x67/0x70 [ 2083.807868][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2083.813861][ C0] RIP: 0010:task_mm_cid_work+0x115/0x770 [ 2083.819580][ C0] Code: 11 06 00 00 48 81 c3 40 05 00 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 1b d7 80 00 <48> 8b 03 48 89 44 24 18 48 85 c0 0f 84 da 05 00 00 48 8b 44 24 18 [ 2083.839631][ C0] RSP: 0018:ffffc90003597ac0 EFLAGS: 00000246 [ 2083.845706][ C0] RAX: 1ffff1100d1220a8 RBX: ffff888068910540 RCX: dffffc0000000000 [ 2083.853677][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffff888068911580 [ 2083.861653][ C0] RBP: ffffc90003597bb0 R08: ffffffff8e8ad9ef R09: 1ffffffff1d15b3d [ 2083.869708][ C0] R10: dffffc0000000000 R11: fffffbfff1d15b3e R12: dffffc0000000000 [ 2083.877682][ C0] R13: ffff888068911580 R14: ffff88806891002c R15: 0000000100028d49 [ 2083.885663][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2083.891817][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2083.897019][ C0] ? init_sched_mm_cid+0x130/0x130 [ 2083.902150][ C0] task_work_run+0x1d4/0x260 [ 2083.906739][ C0] ? task_work_cancel+0x220/0x220 [ 2083.911763][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2083.917744][ C0] ? lock_chain_count+0x20/0x20 [ 2083.922592][ C0] get_signal+0x1235/0x13f0 [ 2083.927090][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2083.932283][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2083.938448][ C0] arch_do_signal_or_restart+0xc2/0x800 [ 2083.944024][ C0] ? lock_chain_count+0x20/0x20 [ 2083.948975][ C0] ? get_sigframe_size+0x20/0x20 [ 2083.954066][ C0] exit_to_user_mode_loop+0x70/0x110 [ 2083.959364][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 2083.965271][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 2083.970733][ C0] do_syscall_64+0x61/0xa0 [ 2083.975149][ C0] ? clear_bhb_loop+0x40/0x90 [ 2083.979822][ C0] ? clear_bhb_loop+0x40/0x90 [ 2083.984596][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2083.990487][ C0] RIP: 0033:0x7f00c6f9acb9 [ 2083.994897][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2084.014545][ C0] RSP: 002b:00007f00c7dc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2084.022989][ C0] RAX: 0000000000000004 RBX: 00007f00c7215fa0 RCX: 00007f00c6f9acb9 [ 2084.030955][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 2084.039010][ C0] RBP: 00007f00c7008bf7 R08: 0000000000000002 R09: 0000000000000000 [ 2084.047067][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 2084.055038][ C0] R13: 00007f00c7216038 R14: 00007f00c7215fa0 R15: 00007ffca5417798 [ 2084.063020][ C0]