last executing test programs: 2m51.746598274s ago: executing program 0 (id=3776): socket$kcm(0xa, 0x3, 0x3a) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x161) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000026000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000050000004943000005"], 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000300)=0xe3c2) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdff030018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7}, 0x94) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) close(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r9}, &(0x7f0000000000), &(0x7f0000000300)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r9}, &(0x7f00000014c0), &(0x7f0000001500)=r8}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001680)=ANY=[@ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x550}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2m51.494879426s ago: executing program 0 (id=3778): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="d8000000190081054e81f782db4cb9040a1d080006007c02e8fe55a10a0014000900142603600e1208000f4f1b000401a8001600200005400400027c035c0461c1d67f6f94007134cf6efb8000a007a29045bace8017cbec4c2ee5a7cef4090000001fb790643a5ee4ce1b14d6d9d428d9ab6fd1364c3871e66b30dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723", 0xd8}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x809, 0xfd, 0xfc, 0xfffff02a}, {0x6, 0x0, 0xfe}]}) 2m51.206444861s ago: executing program 0 (id=3781): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x7000000, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1, '\x00', 0x0, r1, 0x4, 0x5, 0x5}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0xfffffffe, 0x4, 0x3, 0x5}, 0x10, r5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x7, 0x25, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xfffffffb, 0x1000, &(0x7f0000001880)=""/4096, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x289d1edb4e738581, r4, 0x8, &(0x7f0000000180)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001480)={0x1, 0xa, 0xb1, 0x80000001}, 0x10, r5, r0, 0x0, &(0x7f00000014c0)=[0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) 2m50.823379895s ago: executing program 0 (id=3783): r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x24004804) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000740)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)="ee", 0x1}, {&(0x7f0000000200)="423432440982c7b138a4c0885d1edc86778894db2a", 0x15}, {&(0x7f00000005c0)="cc3dc7c3451cf0f82f5a81d58abd9930e211c4be92a7f50738ffe95b2e712a24d44d8ad367a1ec34c60b85b43456ad4d5c8d71ae85faee977ef72adeed7dda5cc376241607e893ff70213cec84a468fe70c1a35c9df97fa6d7c75826634ee8e3d9f8122c576cb9a46938c43a2f3777048a467173b526218f22436aace6467cf49cf69bc8c9bcd314beb93a9070cb2a7d50736c0df7faf0f2f402bcb97ca3f4042664a4187832ca49c0eda4aeff428306d5b453536e937cd32154d03fc675d8e91b6e40", 0xc3}, {&(0x7f0000000280)="a0803bd3178d5b534a3aa2dde198c0c9a57dddc379c6f9d571e5396929131ab1d3535b5583074318d07e433a57df9ab8d399fcc1e52f", 0x36}, {&(0x7f0000001ac0)="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", 0x46a}], 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2m50.747086191s ago: executing program 0 (id=3784): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 2m50.602696634s ago: executing program 0 (id=3786): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x402, 0x66157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x2, @perf_bp={0x0, 0x3143c06664a98617}, 0x0, 0x0, 0x40, 0x7, 0x9, 0x0, 0x20}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f0000000406a80016c0040002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000800000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500001800000008000000000000000180000085100000fdffffffbf91000000000000b70200000100000085000000591ba33cab7abccfeca50bbbd285000000b700"/128], 0x0, 0x2ac, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2m35.60367937s ago: executing program 32 (id=3786): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x402, 0x66157, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x2, @perf_bp={0x0, 0x3143c06664a98617}, 0x0, 0x0, 0x40, 0x7, 0x9, 0x0, 0x20}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f0000000406a80016c0040002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000800000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500001800000008000000000000000180000085100000fdffffffbf91000000000000b70200000100000085000000591ba33cab7abccfeca50bbbd285000000b700"/128], 0x0, 0x2ac, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 46.334991525s ago: executing program 1 (id=5080): r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x82, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x112c0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89fc, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2000) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0x0) sendmsg$kcm(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)="ac124655eadc755521715e720b4875d72b0816560f8c936e31c337a60b783cf817bd59d8be9b5c94efb5f1b0f1b2bdbad05dd99e7df8ecbd553d0d1035c43f9b1d35c9a994c3c1fe22d153a94093b13105d74b53d8c2ad2b5caa783ba20d11a404b6c501bbbce346f6dc2d2bb881c16cba3695670e3ad88fe9390844e550f34cff9c0118f81ebc0cd4012c5067b976167c1963f02799da469f71c6c24300a3a93fdcf4107f8390b45b", 0xa9}, {0x0}, {&(0x7f0000000180)="9a3c", 0x2}, {&(0x7f0000000500)="ac3a05535dc40840ceed23757c", 0xd}, {0x0}, {&(0x7f0000000200)="5d4b05185574d9011e6a52a4f9208392fdb62dee1bfb599028193020f1173bf82306afee232d56b8c2d9", 0x2a}, {0x0}, {&(0x7f0000000580)}, {0x0}], 0x9, &(0x7f0000000a00)=[{0x60, 0x6, 0x6b, "2a1fbbb9d626f29d6835a773df3422907183352f121aa37f76613d323e93d0c390142475d02fc82b5c109c12c9032433ffb96449a308168b4a8dcabbd50d2fa08e65654a1e8ee4d954bed576"}], 0x60}, 0x4044014) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61"], 0x10b8}, 0x0) recvmsg$kcm(r4, &(0x7f0000000a80)={&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=""/222, 0xde}, 0x40000002) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) sendmsg$kcm(r0, 0x0, 0x24004804) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000740)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)="ee", 0xffc7}, {&(0x7f0000000200)="423432440982c7b138a4c0885d1edc86778894db2a", 0x15}, {&(0x7f00000005c0)="cc3dc7c3451cf0f82f5a81d58abd9930e211c4be92a7f50738ffe95b2e712a24d44d8ad367a1ec34c60b85b43456ad4d5c8d71ae85faee977ef72adeed7dda5cc376241607e893ff70213cec84a468fe70c1a35c9df97fa6d7c75826634ee8e3d9f8122c576cb9a46938c43a2f3777048a467173b526218f22436aace6467cf49cf69bc8c9bcd314beb93a9070cb2a7d50736c0df7faf0f2f402bcb97ca3f4042664a4187832ca49c0eda4aeff428306d5b453536e937cd32154d03fc675d8e91b6e40d3f6b7331cc18cc1fb89efe5", 0xcf}, {&(0x7f0000000280)="a0803bd3178d5b534a3aa2dde198c0c9a57dddc379c6f9d571e5396929131ab1d3535b5583074318d07e433a57df9ab8d399fcc1e52f", 0x36}, {&(0x7f0000001ac0)="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", 0x46a}], 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r6, 0x4) 45.239201711s ago: executing program 1 (id=5093): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x51, 0x0}}, 0x10) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 45.137201709s ago: executing program 1 (id=5096): close(0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000280)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x300}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000001880)=""/4092}, 0x94) 44.907948919s ago: executing program 1 (id=5098): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8610, 0x3, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x20000001, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8112032900fc08000000000200875a65969ff57b00fc"], 0xfdef) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8ad, 0x0, r3, 0x4, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={r3, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x9, 0x3, 0x0, 0x401, r3, 0x3a09, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x19, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x7, 0x6, 0x8, 0x9, 0x3ff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x72}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x98, &(0x7f0000000600)=""/152, 0x40f00, 0x2, '\x00', r5, @cgroup_skb, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x1, &(0x7f0000000800)=[r3, r3, r6], &(0x7f0000000840)=[{0x2, 0x2, 0xc, 0xa}], 0x10, 0x2}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r7}, 0x38) r8 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r9 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x2, 0xa, 0x4, 0x1, 0x0, 0x9, 0x25a0, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc5, 0x4, @perf_config_ext={0x1, 0x9}, 0x404, 0xfff, 0x4, 0x2, 0x2, 0x2, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, r8, 0x3) ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0x8) 44.621224044s ago: executing program 1 (id=5101): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 44.282290054s ago: executing program 1 (id=5103): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000f7ffff2300000024"], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r2, &(0x7f0000000880)="a21e076cc585e44f930c5790cf72d8a7dc7c30da1fea201a377cf6a498838a2da05f801c64d2b9a5fb41eee248a4b0720625f15c3454d6bbd7921084bd0159c40a26695583e74c86e910e0aab2357ce292ecf4a5bbfefe9b607e043596916419a24cc1acb27cf55e9bdc48022c10ebe4ff457befebca27515831669ba78c606495be4a1ec21fd15c0665ebfe9b7452afaad702da03d1c7957ffde13762537cbada9809798bec5d7338ab2b2e9f5eced6d11792e02f3eb2c2d6d4b6a158fbff77c2ec1fc9d9c431cc4381"}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0xfffffffffffffe91, &(0x7f0000000740)}, 0x10) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000d44ce387230000000000000000008500000061000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000980)=ANY=[@ANYBLOB='b ', @ANYRESOCT=r6], 0xe) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000340)='syzkaller\x00', 0x7fff, 0x39, &(0x7f0000000380)=""/57, 0x40f00, 0x48, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000440)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x4, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r3], &(0x7f0000000600)=[{0x1, 0x1, 0xd, 0x5}, {0x1, 0x4, 0x4}, {0x2, 0x4, 0x9}], 0x10, 0xffffffff}, 0x94) 29.239393364s ago: executing program 33 (id=5103): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000f7ffff2300000024"], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r2, &(0x7f0000000880)="a21e076cc585e44f930c5790cf72d8a7dc7c30da1fea201a377cf6a498838a2da05f801c64d2b9a5fb41eee248a4b0720625f15c3454d6bbd7921084bd0159c40a26695583e74c86e910e0aab2357ce292ecf4a5bbfefe9b607e043596916419a24cc1acb27cf55e9bdc48022c10ebe4ff457befebca27515831669ba78c606495be4a1ec21fd15c0665ebfe9b7452afaad702da03d1c7957ffde13762537cbada9809798bec5d7338ab2b2e9f5eced6d11792e02f3eb2c2d6d4b6a158fbff77c2ec1fc9d9c431cc4381"}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0xfffffffffffffe91, &(0x7f0000000740)}, 0x10) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000d44ce387230000000000000000008500000061000000950000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', r1}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000980)=ANY=[@ANYBLOB='b ', @ANYRESOCT=r6], 0xe) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000340)='syzkaller\x00', 0x7fff, 0x39, &(0x7f0000000380)=""/57, 0x40f00, 0x48, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000440)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x3, 0x4, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r3], &(0x7f0000000600)=[{0x1, 0x1, 0xd, 0x5}, {0x1, 0x4, 0x4}, {0x2, 0x4, 0x9}], 0x10, 0xffffffff}, 0x94) 10.434302022s ago: executing program 6 (id=5495): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="61123000000000006113140000000000bf1000000000000015000200091b00003d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000014000000160300000ee600f0bf050000000000000f610007000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c78cd3e7dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 10.315059632s ago: executing program 6 (id=5497): r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x24004804) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000740)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)="ee", 0xffc7}, {&(0x7f0000000200)="423432440982c7b138a4c0885d1edc86778894db2a", 0x15}, {&(0x7f00000005c0)="cc3dc7c3451cf0f82f5a81d58abd9930e211c4be92a7f50738ffe95b2e712a24d44d8ad367a1ec34c60b85b43456ad4d5c8d71ae85faee977ef72adeed7dda5cc376241607e893ff70213cec84a468fe70c1a35c9df97fa6d7c75826634ee8e3d9f8122c576cb9a46938c43a2f3777048a467173b526218f22436aace6467cf49cf69bc8c9bcd314beb93a9070cb2a7d50736c0df7faf0f2f402bcb97ca3f4042664a4187832ca49c0eda4aeff428306d5b453536e937cd32154d03fc675d8e91b6e40d3f6b7331cc18cc1fb89efe5", 0xcf}, {&(0x7f0000000280)="a0803bd3178d5b534a3aa2dde198c0c9a57dddc379c6f9d571e5396929131ab1d3535b5583074318d07e433a57df9ab8d399fcc1e52f", 0x36}, {&(0x7f0000001ac0)="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", 0x46a}], 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000000000001c010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 10.300816653s ago: executing program 6 (id=5498): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.119088979s ago: executing program 6 (id=5500): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x800000040000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1}, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000800000000f9ffffff0010009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0xfe45) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202c, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x1, 0xfffd, 0x0, 0x8, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@ptr={0xc}, @var={0xf, 0x0, 0x0, 0xe, 0x1, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x10, 0x1}, {0xe, 0x2}]}, @ptr={0xd, 0x0, 0x0, 0x2, 0x4}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000780)=""/244, 0x70, 0xf4, 0x1}, 0x28) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000002700)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x0, 0xc8, 0x0, 0x3, 0x5, 0x800000, 0xfffd}, 0x0, 0x10008, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 9.482545314s ago: executing program 6 (id=5506): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x108}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 9.263932743s ago: executing program 6 (id=5512): close(0xffffffffffffffff) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00'}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000000000000000060000bfa200000000000007020000f8ffe5ffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) r3 = openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100ac2780000000", @ANYRES32=r2, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000100"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000f32355980000000000000000f21d104dab", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5d31, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b000000000000000000ae50aed78b00"/25, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_ext={0x1c, 0x24, &(0x7f0000000c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff82d1, 0x0, 0x0, 0x0, 0x100}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @generic={0x5, 0x0, 0x6, 0x9, 0x9}, @ringbuf_query, @jmp={0x5, 0x0, 0x1, 0xa, 0x0, 0xfffffffffffffff4, 0x8}, @alu={0x4, 0x0, 0xc, 0x7, 0x6}, @call={0x85, 0x0, 0x0, 0x39}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0xbb1b6591e942fe74, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001140)={0x2, 0x6, 0x3, 0x7}, 0x10, 0x2a798, r3, 0x3, 0x0, &(0x7f0000001180)=[{0x5, 0x1, 0xa, 0x1}, {0x0, 0x4, 0x0, 0x3}, {0x5, 0x3, 0xe, 0x1}], 0x10, 0xffff}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8) close(r7) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a000000c5000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000e00)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRESOCT=r0], &(0x7f0000000680)='GPL\x00', 0xf, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11}, 0xa) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x2}, 0x0, 0x7, 0x0, 0x9, 0x4, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x11, &(0x7f0000000280)=@ringbuf={{}, {{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x300}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0xffc, &(0x7f0000001880)=""/4092}, 0x94) 2.591343125s ago: executing program 3 (id=5597): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 1.61244511s ago: executing program 3 (id=5604): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000008000000000000000200000d0200000003000000020000000000000000000000060000000000000c010000000000005f00002e"], 0x0, 0x48}, 0x28) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c09", 0x27}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c09", 0x27}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a077828123d181d"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x20000000000003e2, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa", @ANYRES8], 0xfdef) 1.327119105s ago: executing program 3 (id=5609): r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x24004804) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000740)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000ac0)="ee", 0xffc7}, {&(0x7f0000000200)="423432440982c7b138a4c0885d1edc86778894db2a", 0x15}, {&(0x7f00000005c0)="cc3dc7c3451cf0f82f5a81d58abd9930e211c4be92a7f50738ffe95b2e712a24d44d8ad367a1ec34c60b85b43456ad4d5c8d71ae85faee977ef72adeed7dda5cc376241607e893ff70213cec84a468fe70c1a35c9df97fa6d7c75826634ee8e3d9f8122c576cb9a46938c43a2f3777048a467173b526218f22436aace6467cf49cf69bc8c9bcd314beb93a9070cb2a7d50736c0df7faf0f2f402bcb97ca3f4042664a4187832ca49c0eda4aeff428306d5b453536e937cd32154d03fc675d8e91b6e40d3f6b7331cc18cc1fb89efe5", 0xcf}, {&(0x7f0000000280)="a0803bd3178d5b534a3aa2dde198c0c9a57dddc379c6f9d571e5396929131ab1d3535b5583074318d07e433a57df9ab8d399fcc1e52f", 0x36}, {&(0x7f0000001ac0)="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", 0x46a}], 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000070000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.248819491s ago: executing program 3 (id=5611): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x108}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 780.612762ms ago: executing program 4 (id=5617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 713.742468ms ago: executing program 2 (id=5618): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) 667.332383ms ago: executing program 5 (id=5619): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x1e}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 636.671255ms ago: executing program 2 (id=5620): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) 595.993818ms ago: executing program 5 (id=5621): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af8", 0x55}, {&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f7c014e2a2e2192542afa9748dcd0a777e403000000290d970e2f9a1d8f527923b0f362103e5bbeda2dca0d9d2b1e5238329691753f1860286f1aaa0786ba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979d81faac0930900"/189, 0xbd}, {&(0x7f0000000280)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f406c4aec4bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c53e7017cf0fe0275d2d6f9531b12f12e29b903ffd774272360efe35269a1835d8f3e07382952f4fd47c9025f538c0bf576243026ed3d16af515d4e31055e765380602c4b42cb4e178350c5f387bdf01ff822a6a26b4cbd04523921adb0bddfd4c657e626ffa46f0a565ee807b56f98d90a48858679c0e5cada93389b479e4547690951c952e877d4139aaddd84d8b01dd791eff7b2c20cad3", 0x139}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="b6a0a4", 0x3}], 0x1, 0x0, 0x0, 0x900}, 0x8080) 551.310603ms ago: executing program 4 (id=5622): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 513.857265ms ago: executing program 2 (id=5623): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4000002}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000340)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdf7e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000001900)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 478.016099ms ago: executing program 5 (id=5624): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x43}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 379.291957ms ago: executing program 4 (id=5625): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 379.182277ms ago: executing program 2 (id=5626): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffc}}, @func_proto]}}, 0x0, 0x3e}, 0x28) 350.85768ms ago: executing program 5 (id=5627): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) 264.127187ms ago: executing program 4 (id=5628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0x4}, 0x38) 211.219592ms ago: executing program 5 (id=5629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x43}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xfcd5, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) 211.145192ms ago: executing program 2 (id=5630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000008000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b01010000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 148.608628ms ago: executing program 4 (id=5631): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e"], 0x0, 0x37}, 0x28) 138.776268ms ago: executing program 3 (id=5632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000}, 0x50) 55.331235ms ago: executing program 5 (id=5633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xfffffffffffffcc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 55.229935ms ago: executing program 2 (id=5634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) 50.006356ms ago: executing program 3 (id=5635): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2d, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x1108) 0s ago: executing program 4 (id=5636): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) kernel console output (not intermixed with test programs): : no params data found [ 468.412414][T16612] syz.4.3933[16612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.412734][T16612] syz.4.3933[16612] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.493726][T16577] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.595880][T16577] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.616657][T16577] device bridge_slave_0 entered promiscuous mode [ 468.637751][T16577] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.646053][T16577] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.656597][T16577] device bridge_slave_1 entered promiscuous mode [ 468.812175][T16626] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3938'. [ 468.824668][T16626] sctp: [Deprecated]: syz.2.3938 (pid 16626) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.824668][T16626] Use struct sctp_sack_info instead [ 468.881074][T16577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.959685][T16577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.979591][T16635] syz.1.3941[16635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 468.981287][T16635] syz.1.3941[16635] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.063911][T15290] Bluetooth: hci1: command 0x0409 tx timeout [ 469.098490][T16577] team0: Port device team_slave_0 added [ 469.173245][T16577] team0: Port device team_slave_1 added [ 469.263462][T16577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.308927][T16649] syz.4.3947[16649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.309623][T16649] syz.4.3947[16649] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.341697][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.470691][T16577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.604427][T16577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.621257][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.884084][T16577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.222924][T16577] device hsr_slave_0 entered promiscuous mode [ 470.266641][T16577] device hsr_slave_1 entered promiscuous mode [ 470.364402][T16667] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3952'. [ 470.378177][T16577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.393733][T16577] Cannot create hsr debugfs directory [ 471.144065][ T4229] Bluetooth: hci1: command 0x041b tx timeout [ 471.214246][T16685] syz.2.3959[16685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.214975][T16685] syz.2.3959[16685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.277618][ T5911] tipc: Left network mode [ 471.448386][T16577] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 471.511398][T16577] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 471.606066][T16701] netlink: 'syz.1.3963': attribute type 1 has an invalid length. [ 471.647310][T16701] netlink: 'syz.1.3963': attribute type 3 has an invalid length. [ 471.673786][T16701] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3963'. [ 471.687024][T16696] netlink: 'syz.2.3962': attribute type 10 has an invalid length. [ 471.710164][T16696] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3962'. [ 472.268547][T16577] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 472.343051][T16577] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 472.616693][T16720] sctp: [Deprecated]: syz.1.3969 (pid 16720) Use of int in maxseg socket option. [ 472.616693][T16720] Use struct sctp_assoc_value instead [ 472.828465][T16577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.851262][T16728] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.3971'. [ 472.904717][T15290] Bluetooth: hci5: command 0x0406 tx timeout [ 472.975896][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 473.018697][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 473.029920][T16731] syz.3.3972[16731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.030261][T16731] syz.3.3972[16731] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.075137][T16577] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.158800][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 473.185695][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 473.224069][T15287] Bluetooth: hci1: command 0x040f tx timeout [ 473.231378][ T538] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.238564][ T538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.309990][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 473.370207][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 473.426771][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 473.449315][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.456537][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.520952][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 473.707937][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 473.725172][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 473.767970][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 473.784718][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 473.833915][T16742] netlink: 'syz.2.3976': attribute type 10 has an invalid length. [ 473.878503][T16742] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3976'. [ 473.967091][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 473.986982][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 474.022525][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 474.047179][ T538] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 474.190968][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 474.218920][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 474.248874][T16751] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3980'. [ 474.354677][T16751] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.418187][T16765] syz.2.3985[16765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.419428][T16765] syz.2.3985[16765] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 474.518761][T16751] bond0 (unregistering): Released all slaves [ 474.572832][T16577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 474.627348][T16771] netlink: 'syz.1.3987': attribute type 1 has an invalid length. [ 474.637763][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3987'. [ 475.133395][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 475.143376][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 475.178798][T16577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.258460][T16801] netlink: 'syz.2.3995': attribute type 10 has an invalid length. [ 475.307250][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 475.320135][T16801] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 475.595144][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 475.617754][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 475.738779][ T5911] bridge0: port 3(team0) entered disabled state [ 475.755581][ T5911] device bridge_slave_1 left promiscuous mode [ 475.772331][T16816] syz.1.3998[16816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.783372][T16816] syz.1.3998[16816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.799093][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.839190][ T5911] device bridge_slave_0 left promiscuous mode [ 475.847906][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.219246][ T5911] device team_slave_1 left promiscuous mode [ 476.237029][ T5911] team0 (unregistering): Port device team_slave_1 removed [ 476.253297][ T5911] device team_slave_0 left promiscuous mode [ 476.273197][ T5911] team0 (unregistering): Port device team_slave_0 removed [ 476.301822][ T5911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.311030][ T5911] device bond_slave_1 left promiscuous mode [ 476.328738][ T5911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.338292][ T5911] device bond_slave_0 left promiscuous mode [ 476.492844][ T5911] bond0 (unregistering): Released all slaves [ 476.617137][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 476.634244][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 476.645970][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 476.657344][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 476.677645][T16829] netlink: 'syz.3.4001': attribute type 16 has an invalid length. [ 476.691487][T16829] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4001'. [ 476.712438][T16577] device veth0_vlan entered promiscuous mode [ 476.740299][T16577] device veth1_vlan entered promiscuous mode [ 476.760629][T16853] syz.2.4010[16853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.764315][T16853] syz.2.4010[16853] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 476.867123][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 476.901297][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 476.992275][T16577] device veth0_macvtap entered promiscuous mode [ 477.038947][T16577] device veth1_macvtap entered promiscuous mode [ 477.099804][T16577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.118991][T16877] netlink: 'syz.4.4019': attribute type 27 has an invalid length. [ 477.134283][T16577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.146873][T16877] netlink: 'syz.4.4019': attribute type 3 has an invalid length. [ 477.154961][T16877] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4019'. [ 477.164630][T16577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.176575][T16577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.190199][T16577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.215173][T16577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.233241][T16577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.244255][T16577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.257768][T16577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.272494][T16577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.285213][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 477.299927][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 477.314694][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 477.332799][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 477.351836][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 477.364407][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 477.416447][T16887] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4021'. [ 477.440892][T16577] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.473678][T16577] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.506709][T16577] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.556628][T16577] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.597318][T16899] syz.4.4025[16899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.597839][T16899] syz.4.4025[16899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 477.805823][T16909] sctp: [Deprecated]: syz.4.4028 (pid 16909) Use of int in maxseg socket option. [ 477.805823][T16909] Use struct sctp_assoc_value instead [ 477.821227][ T5907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.863073][ T5907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.907401][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 477.923205][ T5905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.952702][ T5905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.974178][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 478.004176][T16915] netlink: 'syz.4.4030': attribute type 21 has an invalid length. [ 478.031967][T16913] syz.1.4038[16913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.032540][T16913] syz.1.4038[16913] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.212472][T16921] netlink: 'syz.4.4031': attribute type 10 has an invalid length. [ 478.292100][T16921] bond0: (slave bond_slave_0): Releasing backup interface [ 478.532552][T16939] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.4035'. [ 478.640353][T16939] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4035'. [ 478.861518][T16919] delete_channel: no stack [ 479.102864][T16965] netlink: 'syz.3.4044': attribute type 21 has an invalid length. [ 479.152585][T16966] syz.2.4045[16966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.153120][T16966] syz.2.4045[16966] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.181890][T16965] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4044'. [ 480.488387][T17009] syz.4.4059[17009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.488833][T17009] syz.4.4059[17009] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 481.194445][T17028] netlink: 'syz.4.4064': attribute type 10 has an invalid length. [ 481.305269][T17028] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4064'. [ 481.427442][T17036] netlink: 'syz.5.4066': attribute type 4 has an invalid length. [ 481.452430][T17036] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.4066'. [ 482.151691][T17064] syz.4.4074[17064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 482.152372][T17064] syz.4.4074[17064] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.376256][T17102] syz.2.4089[17102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 483.434959][T17102] syz.2.4089[17102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.978275][T17149] syz.4.4105[17149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.015157][T17149] syz.4.4105[17149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 485.872150][T17177] netlink: 'syz.3.4113': attribute type 3 has an invalid length. [ 485.933247][T17177] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4113'. [ 486.117216][T17181] netlink: 'syz.2.4114': attribute type 10 has an invalid length. [ 486.236138][T17194] syz.5.4118[17194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 486.236608][T17194] syz.5.4118[17194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 486.289517][T17198] netlink: 'syz.3.4120': attribute type 1 has an invalid length. [ 486.314014][T17181] bond0: (slave bond_slave_0): Releasing backup interface [ 486.364509][T17198] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.4120'. [ 486.624920][T17180] delete_channel: no stack [ 487.535507][T17233] syz.1.4131[17233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.535785][T17233] syz.1.4131[17233] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 487.558941][T17237] netlink: 'syz.3.4133': attribute type 12 has an invalid length. [ 487.695990][T17242] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.4136'. [ 487.703269][T17237] netlink: 'syz.3.4133': attribute type 11 has an invalid length. [ 487.718519][T17237] netlink: 178840 bytes leftover after parsing attributes in process `syz.3.4133'. [ 488.263790][ T9317] Bluetooth: hci0: command 0x0406 tx timeout [ 488.494815][T17280] syz.3.4147[17280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 488.499794][T17280] syz.3.4147[17280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 488.669652][T17275] netlink: 'syz.1.4145': attribute type 41 has an invalid length. [ 488.778728][T17275] netlink: 'syz.1.4145': attribute type 4 has an invalid length. [ 488.828587][T17275] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4145'. [ 489.173506][T17275] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 489.253357][T17284] netlink: 'syz.1.4145': attribute type 2 has an invalid length. [ 489.373338][T17303] netlink: 'syz.4.4153': attribute type 29 has an invalid length. [ 489.420879][T17303] netlink: 'syz.4.4153': attribute type 29 has an invalid length. [ 489.435935][T17307] netlink: 'syz.4.4153': attribute type 29 has an invalid length. [ 489.622465][T17318] team0: Device vxcan1 is of different type [ 489.839685][T17330] syz.4.4160[17330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 489.839962][T17330] syz.4.4160[17330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.489311][T17342] netlink: 209860 bytes leftover after parsing attributes in process `syz.5.4167'. [ 490.536710][T17342] openvswitch: netlink: Message has 4 unknown bytes. [ 491.125513][T17374] syz.5.4175[17374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.125950][T17374] syz.5.4175[17374] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.362156][T17389] validate_nla: 2 callbacks suppressed [ 491.362178][T17389] netlink: 'syz.5.4178': attribute type 9 has an invalid length. [ 491.587995][T17389] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4178'. [ 491.806942][T17399] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.4183'. [ 491.951009][T17399] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 491.991681][T17399] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 492.024841][T17399] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 492.319297][T17414] syz.2.4188[17414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.321721][T17414] syz.2.4188[17414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 492.397769][T17419] FAULT_INJECTION: forcing a failure. [ 492.397769][T17419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.413461][T17415] netlink: 'syz.1.4186': attribute type 9 has an invalid length. [ 492.472476][T17415] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4186'. [ 492.511808][T17419] CPU: 0 PID: 17419 Comm: syz.5.4190 Not tainted syzkaller #0 [ 492.519326][T17419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.529379][T17419] Call Trace: [ 492.532663][T17419] [ 492.535602][T17419] dump_stack_lvl+0x188/0x250 [ 492.540280][T17419] ? show_regs_print_info+0x20/0x20 [ 492.545477][T17419] ? load_image+0x400/0x400 [ 492.550010][T17419] ? __lock_acquire+0x7d10/0x7d10 [ 492.555081][T17419] should_fail+0x38c/0x4c0 [ 492.559537][T17419] _copy_from_user+0x2e/0x170 [ 492.564334][T17419] tipc_setsockopt+0x355/0x960 [ 492.569126][T17419] ? tipc_shutdown+0x4d0/0x4d0 [ 492.573916][T17419] ? aa_sock_opt_perm+0x74/0x100 [ 492.578898][T17419] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 492.584481][T17419] ? security_socket_setsockopt+0x7a/0xa0 [ 492.590227][T17419] ? tipc_shutdown+0x4d0/0x4d0 [ 492.595018][T17419] __sys_setsockopt+0x2bf/0x3d0 [ 492.599909][T17419] __x64_sys_setsockopt+0xb1/0xc0 [ 492.604963][T17419] do_syscall_64+0x4c/0xa0 [ 492.609396][T17419] ? clear_bhb_loop+0x30/0x80 [ 492.614089][T17419] ? clear_bhb_loop+0x30/0x80 [ 492.618786][T17419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 492.624702][T17419] RIP: 0033:0x7f65e1f6a629 [ 492.629239][T17419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.649119][T17419] RSP: 002b:00007f65e01c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 492.657558][T17419] RAX: ffffffffffffffda RBX: 00007f65e21e3fa0 RCX: 00007f65e1f6a629 [ 492.665541][T17419] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 492.673795][T17419] RBP: 00007f65e01c4090 R08: 0000000000000043 R09: 0000000000000000 [ 492.681778][T17419] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 492.689770][T17419] R13: 00007f65e21e4038 R14: 00007f65e21e3fa0 R15: 00007fff12bd9468 [ 492.697867][T17419] [ 492.723048][T17426] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4193'. [ 492.753759][T17426] netlink: 3064 bytes leftover after parsing attributes in process `syz.4.4193'. [ 492.891334][T17438] netlink: 'syz.1.4195': attribute type 10 has an invalid length. [ 492.931970][T17438] bond0: (slave bond_slave_0): Releasing backup interface [ 492.981300][T17453] netlink: 'syz.3.4196': attribute type 29 has an invalid length. [ 493.001045][T17447] can: request_module (can-proto-0) failed. [ 493.058292][T17440] netlink: 'syz.3.4196': attribute type 10 has an invalid length. [ 493.131039][T17461] syz.2.4202[17461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.132797][T17461] syz.2.4202[17461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 493.179844][T17440] team0: Port device geneve1 added [ 493.207665][T17453] netlink: 'syz.3.4196': attribute type 29 has an invalid length. [ 493.236813][T17456] netlink: 'syz.3.4196': attribute type 29 has an invalid length. [ 493.333152][T17469] netlink: 'syz.2.4206': attribute type 21 has an invalid length. [ 493.348133][T17469] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4206'. [ 493.383868][ T9316] Bluetooth: hci2: command 0x0406 tx timeout [ 493.394078][T17437] delete_channel: no stack [ 493.506216][T17482] FAULT_INJECTION: forcing a failure. [ 493.506216][T17482] name failslab, interval 1, probability 0, space 0, times 0 [ 493.530155][T17475] device syzkaller0 entered promiscuous mode [ 493.540240][T17479] netlink: 'syz.3.4209': attribute type 3 has an invalid length. [ 493.560995][T17479] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4209'. [ 493.573485][T17482] CPU: 1 PID: 17482 Comm: syz.4.4211 Not tainted syzkaller #0 [ 493.580998][T17482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.591079][T17482] Call Trace: [ 493.594377][T17482] [ 493.597337][T17482] dump_stack_lvl+0x188/0x250 [ 493.602051][T17482] ? show_regs_print_info+0x20/0x20 [ 493.607282][T17482] ? load_image+0x400/0x400 [ 493.611899][T17482] ? __lock_acquire+0x13bc/0x7d10 [ 493.616972][T17482] should_fail+0x38c/0x4c0 [ 493.621426][T17482] should_failslab+0x5/0x20 [ 493.625954][T17482] slab_pre_alloc_hook+0x51/0xc0 [ 493.630933][T17482] kmem_cache_alloc_trace+0x47/0x2a0 [ 493.636249][T17482] ? tipc_group_create+0x9d/0x4f0 [ 493.641281][T17482] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 493.647267][T17482] tipc_group_create+0x9d/0x4f0 [ 493.652147][T17482] tipc_sk_join+0x24f/0x6a0 [ 493.656685][T17482] ? lockdep_hardirqs_on+0x94/0x140 [ 493.661924][T17482] ? __local_bh_enable_ip+0x136/0x1c0 [ 493.667335][T17482] ? __tipc_sendstream+0x1270/0x1270 [ 493.672656][T17482] tipc_setsockopt+0x6bf/0x960 [ 493.677454][T17482] ? tipc_shutdown+0x4d0/0x4d0 [ 493.682244][T17482] ? aa_sock_opt_perm+0x74/0x100 [ 493.687209][T17482] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 493.692780][T17482] ? security_socket_setsockopt+0x7a/0xa0 [ 493.698519][T17482] ? tipc_shutdown+0x4d0/0x4d0 [ 493.703313][T17482] __sys_setsockopt+0x2bf/0x3d0 [ 493.708199][T17482] __x64_sys_setsockopt+0xb1/0xc0 [ 493.713258][T17482] do_syscall_64+0x4c/0xa0 [ 493.717695][T17482] ? clear_bhb_loop+0x30/0x80 [ 493.722392][T17482] ? clear_bhb_loop+0x30/0x80 [ 493.727095][T17482] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 493.733010][T17482] RIP: 0033:0x7f59ae10c629 [ 493.737441][T17482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.757053][T17482] RSP: 002b:00007f59ac366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 493.765499][T17482] RAX: ffffffffffffffda RBX: 00007f59ae385fa0 RCX: 00007f59ae10c629 [ 493.773493][T17482] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 493.781483][T17482] RBP: 00007f59ac366090 R08: 0000000000000043 R09: 0000000000000000 [ 493.789473][T17482] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 493.797468][T17482] R13: 00007f59ae386038 R14: 00007f59ae385fa0 R15: 00007ffd2d222a08 [ 493.805482][T17482] [ 494.050772][T17493] syz.1.4215[17493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.051337][T17493] syz.1.4215[17493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 494.109403][T17496] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.4216'. [ 494.160677][T17501] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4218'. [ 494.195039][T17501] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 494.223109][T17501] openvswitch: netlink: Message has 1 unknown bytes. [ 494.262373][T17495] netlink: 'syz.2.4216': attribute type 3 has an invalid length. [ 494.315579][T17495] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4216'. [ 494.637402][T17523] FAULT_INJECTION: forcing a failure. [ 494.637402][T17523] name failslab, interval 1, probability 0, space 0, times 0 [ 494.720079][T17523] CPU: 0 PID: 17523 Comm: syz.2.4226 Not tainted syzkaller #0 [ 494.727604][T17523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.737683][T17523] Call Trace: [ 494.740973][T17523] [ 494.743902][T17523] dump_stack_lvl+0x188/0x250 [ 494.748601][T17523] ? show_regs_print_info+0x20/0x20 [ 494.753841][T17523] ? load_image+0x400/0x400 [ 494.758390][T17523] should_fail+0x38c/0x4c0 [ 494.762854][T17523] should_failslab+0x5/0x20 [ 494.767387][T17523] slab_pre_alloc_hook+0x51/0xc0 [ 494.772367][T17523] kmem_cache_alloc_trace+0x47/0x2a0 [ 494.777678][T17523] ? tipc_conn_alloc+0x57/0x4a0 [ 494.782562][T17523] tipc_conn_alloc+0x57/0x4a0 [ 494.787282][T17523] tipc_topsrv_kern_subscr+0xf5/0x250 [ 494.792681][T17523] ? conn_put+0x310/0x310 [ 494.797040][T17523] tipc_group_create+0x360/0x4f0 [ 494.802011][T17523] tipc_sk_join+0x24f/0x6a0 [ 494.806543][T17523] ? lockdep_hardirqs_on+0x94/0x140 [ 494.811769][T17523] ? __local_bh_enable_ip+0x136/0x1c0 [ 494.817166][T17523] ? __tipc_sendstream+0x1270/0x1270 [ 494.822487][T17523] tipc_setsockopt+0x6bf/0x960 [ 494.827303][T17523] ? tipc_shutdown+0x4d0/0x4d0 [ 494.832089][T17523] ? aa_sock_opt_perm+0x74/0x100 [ 494.837048][T17523] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 494.842596][T17523] ? security_socket_setsockopt+0x7a/0xa0 [ 494.848312][T17523] ? tipc_shutdown+0x4d0/0x4d0 [ 494.853095][T17523] __sys_setsockopt+0x2bf/0x3d0 [ 494.857979][T17523] __x64_sys_setsockopt+0xb1/0xc0 [ 494.863032][T17523] do_syscall_64+0x4c/0xa0 [ 494.867470][T17523] ? clear_bhb_loop+0x30/0x80 [ 494.872174][T17523] ? clear_bhb_loop+0x30/0x80 [ 494.876878][T17523] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 494.882884][T17523] RIP: 0033:0x7fcacdcbf629 [ 494.887335][T17523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.906969][T17523] RSP: 002b:00007fcacbf19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 494.915395][T17523] RAX: ffffffffffffffda RBX: 00007fcacdf38fa0 RCX: 00007fcacdcbf629 [ 494.923383][T17523] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 494.931456][T17523] RBP: 00007fcacbf19090 R08: 0000000000000043 R09: 0000000000000000 [ 494.939443][T17523] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 494.947424][T17523] R13: 00007fcacdf39038 R14: 00007fcacdf38fa0 R15: 00007fff70153628 [ 494.955434][T17523] [ 494.996486][T17512] team0: Port device geneve1 added [ 495.207131][T17535] syz.5.4229[17535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.207507][T17535] syz.5.4229[17535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.600800][T17550] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.805910][T17561] FAULT_INJECTION: forcing a failure. [ 495.805910][T17561] name failslab, interval 1, probability 0, space 0, times 0 [ 495.903828][T17561] CPU: 0 PID: 17561 Comm: syz.4.4238 Not tainted syzkaller #0 [ 495.911347][T17561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.921425][T17561] Call Trace: [ 495.924734][T17561] [ 495.927696][T17561] dump_stack_lvl+0x188/0x250 [ 495.932425][T17561] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 495.939059][T17561] ? show_regs_print_info+0x20/0x20 [ 495.944270][T17561] ? load_image+0x400/0x400 [ 495.948814][T17561] should_fail+0x38c/0x4c0 [ 495.953267][T17561] should_failslab+0x5/0x20 [ 495.957797][T17561] slab_pre_alloc_hook+0x51/0xc0 [ 495.962781][T17561] kmem_cache_alloc_trace+0x47/0x2a0 [ 495.968096][T17561] ? tipc_sub_subscribe+0x115/0x760 [ 495.973318][T17561] tipc_sub_subscribe+0x115/0x760 [ 495.978418][T17561] tipc_conn_rcv_sub+0x136/0x350 [ 495.983385][T17561] tipc_topsrv_kern_subscr+0x185/0x250 [ 495.988876][T17561] ? conn_put+0x310/0x310 [ 495.993239][T17561] tipc_group_create+0x360/0x4f0 [ 495.998239][T17561] tipc_sk_join+0x24f/0x6a0 [ 496.002767][T17561] ? lockdep_hardirqs_on+0x94/0x140 [ 496.007997][T17561] ? __local_bh_enable_ip+0x136/0x1c0 [ 496.013404][T17561] ? __tipc_sendstream+0x1270/0x1270 [ 496.018718][T17561] tipc_setsockopt+0x6bf/0x960 [ 496.023511][T17561] ? tipc_shutdown+0x4d0/0x4d0 [ 496.028297][T17561] ? aa_sock_opt_perm+0x74/0x100 [ 496.033344][T17561] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 496.038925][T17561] ? security_socket_setsockopt+0x7a/0xa0 [ 496.044709][T17561] ? tipc_shutdown+0x4d0/0x4d0 [ 496.049494][T17561] __sys_setsockopt+0x2bf/0x3d0 [ 496.054382][T17561] __x64_sys_setsockopt+0xb1/0xc0 [ 496.059451][T17561] do_syscall_64+0x4c/0xa0 [ 496.063900][T17561] ? clear_bhb_loop+0x30/0x80 [ 496.068598][T17561] ? clear_bhb_loop+0x30/0x80 [ 496.073305][T17561] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 496.079223][T17561] RIP: 0033:0x7f59ae10c629 [ 496.083655][T17561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.103479][T17561] RSP: 002b:00007f59ac366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 496.112121][T17561] RAX: ffffffffffffffda RBX: 00007f59ae385fa0 RCX: 00007f59ae10c629 [ 496.120148][T17561] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 496.128153][T17561] RBP: 00007f59ac366090 R08: 0000000000000043 R09: 0000000000000000 [ 496.136137][T17561] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 496.144106][T17561] R13: 00007f59ae386038 R14: 00007f59ae385fa0 R15: 00007ffd2d222a08 [ 496.152095][T17561] [ 496.233796][T17561] tipc: Subscription rejected, no memory [ 496.309110][T17566] FAULT_INJECTION: forcing a failure. [ 496.309110][T17566] name failslab, interval 1, probability 0, space 0, times 0 [ 496.322406][T17566] CPU: 1 PID: 17566 Comm: syz.5.4250 Not tainted syzkaller #0 [ 496.329897][T17566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 496.339968][T17566] Call Trace: [ 496.343258][T17566] [ 496.346200][T17566] dump_stack_lvl+0x188/0x250 [ 496.351094][T17566] ? show_regs_print_info+0x20/0x20 [ 496.356472][T17566] ? load_image+0x400/0x400 [ 496.361008][T17566] ? __local_bh_enable_ip+0x136/0x1c0 [ 496.366430][T17566] ? __local_bh_enable_ip+0x136/0x1c0 [ 496.371858][T17566] should_fail+0x38c/0x4c0 [ 496.376330][T17566] should_failslab+0x5/0x20 [ 496.380879][T17566] slab_pre_alloc_hook+0x51/0xc0 [ 496.385871][T17566] kmem_cache_alloc_trace+0x47/0x2a0 [ 496.391189][T17566] ? tipc_group_create_member+0x60/0x530 [ 496.396878][T17566] tipc_group_create_member+0x60/0x530 [ 496.402387][T17566] ? tipc_nametbl_build_group+0x1ad/0x490 [ 496.408136][T17566] tipc_nametbl_build_group+0x2ad/0x490 [ 496.413730][T17566] tipc_sk_join+0x399/0x6a0 [ 496.418375][T17566] ? lockdep_hardirqs_on+0x94/0x140 [ 496.423614][T17566] ? __local_bh_enable_ip+0x136/0x1c0 [ 496.429022][T17566] ? __tipc_sendstream+0x1270/0x1270 [ 496.434352][T17566] tipc_setsockopt+0x6bf/0x960 [ 496.439147][T17566] ? tipc_shutdown+0x4d0/0x4d0 [ 496.443935][T17566] ? aa_sock_opt_perm+0x74/0x100 [ 496.448894][T17566] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 496.454476][T17566] ? security_socket_setsockopt+0x7a/0xa0 [ 496.460226][T17566] ? tipc_shutdown+0x4d0/0x4d0 [ 496.465023][T17566] __sys_setsockopt+0x2bf/0x3d0 [ 496.469918][T17569] syz.3.4241[17569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 496.469919][T17566] __x64_sys_setsockopt+0xb1/0xc0 [ 496.481421][T17566] do_syscall_64+0x4c/0xa0 [ 496.481525][T17566] ? clear_bhb_loop+0x30/0x80 [ 496.481542][T17566] ? clear_bhb_loop+0x30/0x80 [ 496.481557][T17566] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 496.481576][T17566] RIP: 0033:0x7f65e1f6a629 [ 496.481595][T17566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.481609][T17566] RSP: 002b:00007f65e01c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 496.481630][T17566] RAX: ffffffffffffffda RBX: 00007f65e21e3fa0 RCX: 00007f65e1f6a629 [ 496.481644][T17566] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 496.481655][T17566] RBP: 00007f65e01c4090 R08: 0000000000000043 R09: 0000000000000000 [ 496.481664][T17566] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 496.481672][T17566] R13: 00007f65e21e4038 R14: 00007f65e21e3fa0 R15: 00007fff12bd9468 [ 496.481697][T17566] [ 496.887434][T17576] validate_nla: 5 callbacks suppressed [ 496.887475][T17576] netlink: 'syz.2.4243': attribute type 11 has an invalid length. [ 497.024341][T17569] syz.3.4241[17569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 497.052349][T17580] netlink: 'syz.4.4240': attribute type 10 has an invalid length. [ 497.129862][T17587] netlink: 'syz.4.4240': attribute type 29 has an invalid length. [ 497.282117][T17580] team0: Port device geneve1 added [ 497.323939][T17587] netlink: 'syz.4.4240': attribute type 29 has an invalid length. [ 497.384065][T17591] netlink: 'syz.4.4240': attribute type 29 has an invalid length. [ 497.488302][T17608] netlink: 'syz.2.4253': attribute type 3 has an invalid length. [ 497.542863][T17608] __nla_validate_parse: 2 callbacks suppressed [ 497.542878][T17608] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4253'. [ 497.628909][T17622] FAULT_INJECTION: forcing a failure. [ 497.628909][T17622] name failslab, interval 1, probability 0, space 0, times 0 [ 497.642150][T17622] CPU: 1 PID: 17622 Comm: syz.4.4257 Not tainted syzkaller #0 [ 497.649639][T17622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.659724][T17622] Call Trace: [ 497.663023][T17622] [ 497.665980][T17622] dump_stack_lvl+0x188/0x250 [ 497.670696][T17622] ? show_regs_print_info+0x20/0x20 [ 497.675931][T17622] ? load_image+0x400/0x400 [ 497.680471][T17622] ? stack_trace_save+0xa6/0xf0 [ 497.685350][T17622] ? verify_lock_unused+0x140/0x140 [ 497.690586][T17622] should_fail+0x38c/0x4c0 [ 497.695060][T17622] should_failslab+0x5/0x20 [ 497.699594][T17622] slab_pre_alloc_hook+0x51/0xc0 [ 497.704581][T17622] kmem_cache_alloc_trace+0x47/0x2a0 [ 497.709928][T17622] ? tipc_nametbl_insert_publ+0x60/0x1310 [ 497.715775][T17622] tipc_nametbl_insert_publ+0x60/0x1310 [ 497.721364][T17622] ? do_raw_spin_lock+0x128/0x2f0 [ 497.726427][T17622] ? __rwlock_init+0x140/0x140 [ 497.731227][T17622] ? tipc_nametbl_publish+0x73/0x1e0 [ 497.736544][T17622] tipc_nametbl_publish+0xc3/0x1e0 [ 497.741679][T17622] tipc_sk_publish+0x1c4/0x450 [ 497.746465][T17622] ? __lock_acquire+0x7d10/0x7d10 [ 497.751543][T17622] ? tipc_sk_withdraw+0x640/0x640 [ 497.756632][T17622] ? tipc_nametbl_build_group+0x451/0x490 [ 497.762390][T17622] tipc_sk_join+0x3a4/0x6a0 [ 497.766925][T17622] ? lockdep_hardirqs_on+0x94/0x140 [ 497.772260][T17622] ? __local_bh_enable_ip+0x136/0x1c0 [ 497.777675][T17622] ? __tipc_sendstream+0x1270/0x1270 [ 497.783003][T17622] tipc_setsockopt+0x6bf/0x960 [ 497.787803][T17622] ? tipc_shutdown+0x4d0/0x4d0 [ 497.792604][T17622] ? aa_sock_opt_perm+0x74/0x100 [ 497.797593][T17622] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 497.803181][T17622] ? security_socket_setsockopt+0x7a/0xa0 [ 497.808933][T17622] ? tipc_shutdown+0x4d0/0x4d0 [ 497.813732][T17622] __sys_setsockopt+0x2bf/0x3d0 [ 497.818618][T17622] __x64_sys_setsockopt+0xb1/0xc0 [ 497.823680][T17622] do_syscall_64+0x4c/0xa0 [ 497.828125][T17622] ? clear_bhb_loop+0x30/0x80 [ 497.832833][T17622] ? clear_bhb_loop+0x30/0x80 [ 497.837540][T17622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 497.843453][T17622] RIP: 0033:0x7f59ae10c629 [ 497.847889][T17622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.867550][T17622] RSP: 002b:00007f59ac366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 497.876011][T17622] RAX: ffffffffffffffda RBX: 00007f59ae385fa0 RCX: 00007f59ae10c629 [ 497.884015][T17622] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 497.892111][T17622] RBP: 00007f59ac366090 R08: 0000000000000043 R09: 0000000000000000 [ 497.900110][T17622] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 497.908194][T17622] R13: 00007f59ae386038 R14: 00007f59ae385fa0 R15: 00007ffd2d222a08 [ 497.916213][T17622] [ 498.057146][T17625] syz.1.4259[17625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.059852][T17625] syz.1.4259[17625] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 498.748964][T17662] FAULT_INJECTION: forcing a failure. [ 498.748964][T17662] name failslab, interval 1, probability 0, space 0, times 0 [ 498.773718][T17662] CPU: 0 PID: 17662 Comm: syz.4.4270 Not tainted syzkaller #0 [ 498.781194][T17662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 498.791276][T17662] Call Trace: [ 498.794577][T17662] [ 498.797546][T17662] dump_stack_lvl+0x188/0x250 [ 498.802280][T17662] ? show_regs_print_info+0x20/0x20 [ 498.807520][T17662] ? load_image+0x400/0x400 [ 498.812070][T17662] ? __local_bh_enable_ip+0x136/0x1c0 [ 498.817474][T17662] ? _local_bh_enable+0xa0/0xa0 [ 498.822374][T17662] should_fail+0x38c/0x4c0 [ 498.826838][T17662] should_failslab+0x5/0x20 [ 498.831377][T17662] slab_pre_alloc_hook+0x51/0xc0 [ 498.836344][T17662] kmem_cache_alloc_trace+0x47/0x2a0 [ 498.841643][T17662] ? tipc_topsrv_queue_evt+0xeb/0x2d0 [ 498.847039][T17662] tipc_topsrv_queue_evt+0xeb/0x2d0 [ 498.852278][T17662] tipc_sub_report_overlap+0x4b4/0x8a0 [ 498.857785][T17662] tipc_nametbl_insert_publ+0xdb9/0x1310 [ 498.863486][T17662] tipc_nametbl_publish+0xc3/0x1e0 [ 498.868646][T17662] tipc_sk_publish+0x1c4/0x450 [ 498.873450][T17662] ? __lock_acquire+0x7d10/0x7d10 [ 498.878520][T17662] ? tipc_sk_withdraw+0x640/0x640 [ 498.883595][T17662] ? tipc_nametbl_build_group+0x451/0x490 [ 498.889444][T17662] tipc_sk_join+0x3a4/0x6a0 [ 498.893978][T17662] ? lockdep_hardirqs_on+0x94/0x140 [ 498.899214][T17662] ? __local_bh_enable_ip+0x136/0x1c0 [ 498.904624][T17662] ? __tipc_sendstream+0x1270/0x1270 [ 498.909956][T17662] tipc_setsockopt+0x6bf/0x960 [ 498.914758][T17662] ? tipc_shutdown+0x4d0/0x4d0 [ 498.919558][T17662] ? aa_sock_opt_perm+0x74/0x100 [ 498.924562][T17662] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 498.930156][T17662] ? security_socket_setsockopt+0x7a/0xa0 [ 498.935907][T17662] ? tipc_shutdown+0x4d0/0x4d0 [ 498.940694][T17662] __sys_setsockopt+0x2bf/0x3d0 [ 498.945570][T17662] __x64_sys_setsockopt+0xb1/0xc0 [ 498.950638][T17662] do_syscall_64+0x4c/0xa0 [ 498.955087][T17662] ? clear_bhb_loop+0x30/0x80 [ 498.959799][T17662] ? clear_bhb_loop+0x30/0x80 [ 498.964513][T17662] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 498.970457][T17662] RIP: 0033:0x7f59ae10c629 [ 498.974901][T17662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.994535][T17662] RSP: 002b:00007f59ac366028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 499.002999][T17662] RAX: ffffffffffffffda RBX: 00007f59ae385fa0 RCX: 00007f59ae10c629 [ 499.011000][T17662] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 499.019008][T17662] RBP: 00007f59ac366090 R08: 0000000000000043 R09: 0000000000000000 [ 499.027007][T17662] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 499.035094][T17662] R13: 00007f59ae386038 R14: 00007f59ae385fa0 R15: 00007ffd2d222a08 [ 499.043100][T17662] [ 499.169895][T17667] syz.5.4272[17667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.170237][T17667] syz.5.4272[17667] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 499.217173][T17673] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4274'. [ 499.787978][T17703] FAULT_INJECTION: forcing a failure. [ 499.787978][T17703] name failslab, interval 1, probability 0, space 0, times 0 [ 499.800813][T17703] CPU: 1 PID: 17703 Comm: syz.5.4284 Not tainted syzkaller #0 [ 499.808300][T17703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 499.818387][T17703] Call Trace: [ 499.821691][T17703] [ 499.824648][T17703] dump_stack_lvl+0x188/0x250 [ 499.829370][T17703] ? show_regs_print_info+0x20/0x20 [ 499.834608][T17703] ? load_image+0x400/0x400 [ 499.839141][T17703] ? __local_bh_enable_ip+0x136/0x1c0 [ 499.844533][T17703] ? _local_bh_enable+0xa0/0xa0 [ 499.849424][T17703] should_fail+0x38c/0x4c0 [ 499.853893][T17703] should_failslab+0x5/0x20 [ 499.858421][T17703] slab_pre_alloc_hook+0x51/0xc0 [ 499.863393][T17703] kmem_cache_alloc_trace+0x47/0x2a0 [ 499.868711][T17703] ? tipc_topsrv_queue_evt+0xeb/0x2d0 [ 499.874133][T17703] tipc_topsrv_queue_evt+0xeb/0x2d0 [ 499.879381][T17703] tipc_sub_report_overlap+0x4b4/0x8a0 [ 499.884893][T17703] tipc_nametbl_insert_publ+0xdb9/0x1310 [ 499.890592][T17703] tipc_nametbl_publish+0xc3/0x1e0 [ 499.895899][T17703] tipc_sk_publish+0x1c4/0x450 [ 499.900716][T17703] ? __lock_acquire+0x7d10/0x7d10 [ 499.905820][T17703] ? tipc_sk_withdraw+0x640/0x640 [ 499.910986][T17703] ? tipc_nametbl_build_group+0x451/0x490 [ 499.916754][T17703] tipc_sk_join+0x3a4/0x6a0 [ 499.921307][T17703] ? lockdep_hardirqs_on+0x94/0x140 [ 499.926546][T17703] ? __local_bh_enable_ip+0x136/0x1c0 [ 499.931959][T17703] ? __tipc_sendstream+0x1270/0x1270 [ 499.937287][T17703] tipc_setsockopt+0x6bf/0x960 [ 499.942076][T17703] ? tipc_shutdown+0x4d0/0x4d0 [ 499.946862][T17703] ? aa_sock_opt_perm+0x74/0x100 [ 499.951835][T17703] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 499.957414][T17703] ? security_socket_setsockopt+0x7a/0xa0 [ 499.963163][T17703] ? tipc_shutdown+0x4d0/0x4d0 [ 499.967952][T17703] __sys_setsockopt+0x2bf/0x3d0 [ 499.972834][T17703] __x64_sys_setsockopt+0xb1/0xc0 [ 499.977983][T17703] do_syscall_64+0x4c/0xa0 [ 499.982418][T17703] ? clear_bhb_loop+0x30/0x80 [ 499.987122][T17703] ? clear_bhb_loop+0x30/0x80 [ 499.991832][T17703] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 499.997759][T17703] RIP: 0033:0x7f65e1f6a629 [ 500.002198][T17703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.021834][T17703] RSP: 002b:00007f65e01c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 500.030442][T17703] RAX: ffffffffffffffda RBX: 00007f65e21e3fa0 RCX: 00007f65e1f6a629 [ 500.038422][T17703] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 500.046409][T17703] RBP: 00007f65e01c4090 R08: 0000000000000043 R09: 0000000000000000 [ 500.054389][T17703] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 500.062373][T17703] R13: 00007f65e21e4038 R14: 00007f65e21e3fa0 R15: 00007fff12bd9468 [ 500.070553][T17703] [ 500.284545][T17709] syz.2.4286[17709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.285123][T17709] syz.2.4286[17709] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.807583][T17740] syz.4.4297[17740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.851880][T17740] syz.4.4297[17740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.918838][T17732] netlink: 'syz.5.4295': attribute type 1 has an invalid length. [ 500.957235][T17743] IPv6: Can't replace route, no match found [ 501.579704][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.586356][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.745163][T17758] syz.4.4301[17758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.746500][T17758] syz.4.4301[17758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 502.160130][T17771] netlink: 'syz.5.4306': attribute type 3 has an invalid length. [ 502.315930][T17765] delete_channel: no stack [ 502.323524][T17771] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4306'. [ 502.656063][T17778] netlink: 'syz.5.4309': attribute type 1 has an invalid length. [ 503.206622][T17795] syz.1.4315[17795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.207048][T17795] syz.1.4315[17795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 503.454781][T17801] IPv6: Can't replace route, no match found [ 503.623906][ T4229] Bluetooth: hci4: command 0x0406 tx timeout [ 503.639928][T17809] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4317'. [ 503.728696][T17818] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4322'. [ 503.757509][T17819] FAULT_INJECTION: forcing a failure. [ 503.757509][T17819] name failslab, interval 1, probability 0, space 0, times 0 [ 503.783459][T17815] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4322'. [ 503.802292][T17819] CPU: 1 PID: 17819 Comm: syz.1.4324 Not tainted syzkaller #0 [ 503.809820][T17819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.819909][T17819] Call Trace: [ 503.823212][T17819] [ 503.826182][T17819] dump_stack_lvl+0x188/0x250 [ 503.830997][T17819] ? show_regs_print_info+0x20/0x20 [ 503.836243][T17819] ? load_image+0x400/0x400 [ 503.840772][T17819] should_fail+0x38c/0x4c0 [ 503.845199][T17819] should_failslab+0x5/0x20 [ 503.849759][T17819] slab_pre_alloc_hook+0x51/0xc0 [ 503.854722][T17819] __kmalloc_node_track_caller+0x68/0x3a0 [ 503.860469][T17819] ? tipc_msg_create+0x4b/0x4d0 [ 503.865346][T17819] ? kmem_cache_alloc_node+0x162/0x2d0 [ 503.870826][T17819] ? __alloc_skb+0xf4/0x750 [ 503.875359][T17819] ? tipc_msg_create+0x4b/0x4d0 [ 503.880237][T17819] __alloc_skb+0x22c/0x750 [ 503.884686][T17819] tipc_msg_create+0x4b/0x4d0 [ 503.889400][T17819] tipc_group_proto_xmit+0xcd/0x870 [ 503.894634][T17819] tipc_group_join+0x15d/0x6f0 [ 503.899426][T17819] ? tipc_nametbl_publish+0x14e/0x1e0 [ 503.904835][T17819] ? tipc_own_addr+0x270/0x270 [ 503.909626][T17819] ? tipc_sk_publish+0x225/0x450 [ 503.914608][T17819] ? tipc_nametbl_build_group+0x451/0x490 [ 503.920374][T17819] tipc_sk_join+0x471/0x6a0 [ 503.924912][T17819] ? lockdep_hardirqs_on+0x94/0x140 [ 503.930149][T17819] ? __local_bh_enable_ip+0x136/0x1c0 [ 503.935560][T17819] ? __tipc_sendstream+0x1270/0x1270 [ 503.940872][T17819] tipc_setsockopt+0x6bf/0x960 [ 503.945656][T17819] ? tipc_shutdown+0x4d0/0x4d0 [ 503.950449][T17819] ? aa_sock_opt_perm+0x74/0x100 [ 503.955423][T17819] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 503.961005][T17819] ? security_socket_setsockopt+0x7a/0xa0 [ 503.966753][T17819] ? tipc_shutdown+0x4d0/0x4d0 [ 503.971632][T17819] __sys_setsockopt+0x2bf/0x3d0 [ 503.976564][T17819] __x64_sys_setsockopt+0xb1/0xc0 [ 503.981635][T17819] do_syscall_64+0x4c/0xa0 [ 503.986076][T17819] ? clear_bhb_loop+0x30/0x80 [ 503.990790][T17819] ? clear_bhb_loop+0x30/0x80 [ 503.995496][T17819] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 504.001418][T17819] RIP: 0033:0x7f5ea5dda629 [ 504.005861][T17819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.025490][T17819] RSP: 002b:00007f5ea4034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 504.033934][T17819] RAX: ffffffffffffffda RBX: 00007f5ea6053fa0 RCX: 00007f5ea5dda629 [ 504.042055][T17819] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 504.050046][T17819] RBP: 00007f5ea4034090 R08: 0000000000000043 R09: 0000000000000000 [ 504.058048][T17819] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000002 [ 504.066051][T17819] R13: 00007f5ea6054038 R14: 00007f5ea6053fa0 R15: 00007ffc18ee0838 [ 504.074058][T17819] [ 504.369251][T17829] syz.5.4329[17829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 504.370053][T17829] syz.5.4329[17829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 505.413239][T17870] syz.4.4341[17870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 505.479444][T17870] syz.4.4341[17870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 505.539025][T17873] netlink: 'syz.3.4344': attribute type 3 has an invalid length. [ 505.647823][T17873] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4344'. [ 505.762912][T17873] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4344'. [ 505.805233][T17880] IPv6: Can't replace route, no match found [ 506.001144][T17896] netlink: 'syz.4.4349': attribute type 7 has an invalid length. [ 506.839403][T17912] netlink: 'syz.2.4355': attribute type 21 has an invalid length. [ 506.870653][T17912] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4355'. [ 506.979691][T17912] netlink: 'syz.2.4355': attribute type 4 has an invalid length. [ 507.010746][T17912] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4355'. [ 507.085889][T17914] netlink: 'syz.2.4355': attribute type 4 has an invalid length. [ 507.116653][T17914] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4355'. [ 507.163624][T17914] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 507.242306][T17924] netlink: 'syz.1.4359': attribute type 49 has an invalid length. [ 507.461210][T17931] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.4362'. [ 507.618381][T17937] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4363'. [ 508.673089][T17985] netlink: 'syz.3.4378': attribute type 21 has an invalid length. [ 509.314524][T17996] syz.5.4382[17996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.314811][T17996] syz.5.4382[17996] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.720865][T18012] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4387'. [ 510.099897][T18035] netlink: 'syz.4.4393': attribute type 19 has an invalid length. [ 510.167953][T18035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4393'. [ 510.274638][T18039] netlink: 'syz.4.4393': attribute type 2 has an invalid length. [ 510.367479][T18039] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4393'. [ 510.754470][T18059] syz.2.4399[18059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 510.754804][T18059] syz.2.4399[18059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 511.166780][T18079] netlink: 'syz.3.4404': attribute type 29 has an invalid length. [ 511.640261][T18082] device syzkaller0 entered promiscuous mode [ 511.654774][T18079] netlink: 'syz.3.4404': attribute type 29 has an invalid length. [ 511.751956][T18091] netlink: 'syz.1.4406': attribute type 33 has an invalid length. [ 511.823340][T18091] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4406'. [ 511.861907][T18091] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 512.857546][T18121] syz.1.4414[18121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.857659][T18121] syz.1.4414[18121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 513.430696][T18137] bridge0: port 3(gretap0) entered blocking state [ 513.457634][T18135] netlink: 399 bytes leftover after parsing attributes in process `syz.1.4418'. [ 513.495037][T18137] bridge0: port 3(gretap0) entered disabled state [ 513.538812][T18137] device gretap0 entered promiscuous mode [ 513.561599][T18137] bridge0: port 3(gretap0) entered blocking state [ 513.568360][T18137] bridge0: port 3(gretap0) entered forwarding state [ 513.697952][T18143] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.4420'. [ 513.857779][T18143] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 513.878291][T18153] device pim6reg1 entered promiscuous mode [ 513.961535][ T5907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.171965][ T5907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.610832][ T5907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.707911][T18168] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4430'. [ 514.856792][ T5907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.126325][T18176] pim6reg: tun_chr_ioctl cmd 1074025677 [ 515.132814][T18176] pim6reg: linktype set to 776 [ 515.199797][T18176] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4432'. [ 515.264660][T18188] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4432'. [ 515.459064][T18187] netlink: 'syz.5.4441': attribute type 7 has an invalid length. [ 516.489115][T18225] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4442'. [ 516.563202][T18219] netlink: 'syz.1.4438': attribute type 10 has an invalid length. [ 516.597388][T18225] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 516.634711][T18216] netlink: 'syz.5.4437': attribute type 21 has an invalid length. [ 516.663684][T18225] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 516.707327][T18216] IPv6: NLM_F_CREATE should be specified when creating new route [ 516.834425][T18216] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.841673][T18216] IPv6: NLM_F_CREATE should be set when creating new route [ 516.849018][T18216] IPv6: NLM_F_CREATE should be set when creating new route [ 516.856344][T18216] IPv6: NLM_F_CREATE should be set when creating new route [ 518.854072][T18208] delete_channel: no stack [ 519.371306][T18257] netlink: 'syz.3.4449': attribute type 1 has an invalid length. [ 519.427450][T18257] netlink: 167664 bytes leftover after parsing attributes in process `syz.3.4449'. [ 519.528899][ T4238] tipc: Subscription rejected, illegal request [ 519.746112][T18268] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.4453'. [ 519.777556][T18275] netlink: 'syz.4.4453': attribute type 22 has an invalid length. [ 519.853858][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4453'. [ 520.177266][T18306] syz.5.4459[18306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.177386][T18306] syz.5.4459[18306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 520.440270][ T5907] device hsr_slave_0 left promiscuous mode [ 520.508086][ T5907] device hsr_slave_1 left promiscuous mode [ 520.519487][ T5907] device bridge_slave_1 left promiscuous mode [ 520.539313][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.617477][ T5907] device bridge_slave_0 left promiscuous mode [ 520.626824][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.711954][ T5907] device veth1_macvtap left promiscuous mode [ 520.729206][ T5907] device veth0_macvtap left promiscuous mode [ 520.739203][ T5907] device veth1_vlan left promiscuous mode [ 520.751252][ T5907] device veth0_vlan left promiscuous mode [ 521.465585][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 521.505070][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 521.544787][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.584191][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.749903][ T5907] bond0 (unregistering): Released all slaves [ 522.706046][T18363] syz.3.4476[18363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.706168][T18363] syz.3.4476[18363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 523.190457][T18387] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.4481'. [ 523.602188][T18390] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.4482'. [ 523.912686][T18392] netlink: 'syz.1.4482': attribute type 22 has an invalid length. [ 524.002204][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4482'. [ 524.228075][T18413] device syzkaller0 entered promiscuous mode [ 524.256093][ T5905] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 524.565758][T18439] syz.2.4498[18439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 524.565861][T18439] syz.2.4498[18439] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.058537][T18460] netlink: 'syz.4.4501': attribute type 10 has an invalid length. [ 525.112748][T18460] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 525.142010][T18464] netlink: 'syz.1.4505': attribute type 10 has an invalid length. [ 525.384934][T18472] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.4506'. [ 525.609430][T18477] netlink: 'syz.5.4506': attribute type 22 has an invalid length. [ 525.679552][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4506'. [ 525.680769][T18487] syz.2.4512[18487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.719950][T18487] syz.2.4512[18487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 525.967149][T18502] netlink: 'syz.1.4517': attribute type 21 has an invalid length. [ 526.035426][T18502] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4517'. [ 526.141531][T18513] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4520'. [ 526.182377][T18511] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4519'. [ 526.213865][T18513] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4520'. [ 526.256748][T18521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4520'. [ 526.345002][T18525] FAULT_INJECTION: forcing a failure. [ 526.345002][T18525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 526.438511][T18525] CPU: 1 PID: 18525 Comm: syz.1.4522 Not tainted syzkaller #0 [ 526.446033][T18525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 526.456111][T18525] Call Trace: [ 526.459412][T18525] [ 526.462364][T18525] dump_stack_lvl+0x188/0x250 [ 526.467101][T18525] ? show_regs_print_info+0x20/0x20 [ 526.472347][T18525] ? load_image+0x400/0x400 [ 526.476892][T18525] ? __lock_acquire+0x7d10/0x7d10 [ 526.481940][T18525] ? vfs_write+0x8b2/0xd60 [ 526.486398][T18525] should_fail+0x38c/0x4c0 [ 526.490853][T18525] _copy_from_user+0x2e/0x170 [ 526.495569][T18525] __sys_bpf+0x26d/0x6f0 [ 526.499861][T18525] ? bpf_link_show_fdinfo+0x380/0x380 [ 526.505284][T18525] ? vtime_user_exit+0x2c8/0x3e0 [ 526.510353][T18525] __x64_sys_bpf+0x78/0x90 [ 526.514803][T18525] do_syscall_64+0x4c/0xa0 [ 526.519261][T18525] ? clear_bhb_loop+0x30/0x80 [ 526.523976][T18525] ? clear_bhb_loop+0x30/0x80 [ 526.528697][T18525] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 526.534629][T18525] RIP: 0033:0x7f5ea5dda629 [ 526.539058][T18525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.558674][T18525] RSP: 002b:00007f5ea4034028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 526.567295][T18525] RAX: ffffffffffffffda RBX: 00007f5ea6053fa0 RCX: 00007f5ea5dda629 [ 526.575294][T18525] RDX: 0000000000000050 RSI: 0000200000000a00 RDI: 0000000000000000 [ 526.583295][T18525] RBP: 00007f5ea4034090 R08: 0000000000000000 R09: 0000000000000000 [ 526.591304][T18525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.599307][T18525] R13: 00007f5ea6054038 R14: 00007f5ea6053fa0 R15: 00007ffc18ee0838 [ 526.607330][T18525] [ 526.953148][T18540] IPv6: NLM_F_CREATE should be specified when creating new route [ 527.043473][T18540] device sit0 entered promiscuous mode [ 527.576963][T18570] netlink: 'syz.3.4532': attribute type 10 has an invalid length. [ 527.996983][T18597] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 528.042805][T18597] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.868808][T18638] netlink: 'syz.2.4549': attribute type 10 has an invalid length. [ 528.994603][T18638] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 529.490976][T18663] __nla_validate_parse: 5 callbacks suppressed [ 529.491000][T18663] netlink: 209592 bytes leftover after parsing attributes in process `syz.5.4560'. [ 529.738873][T18677] netlink: 'syz.2.4562': attribute type 10 has an invalid length. [ 529.768873][T18677] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4562'. [ 530.097611][T18682] device syzkaller0 entered promiscuous mode [ 533.051366][T18710] netlink: 'syz.2.4571': attribute type 3 has an invalid length. [ 533.091376][T18710] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4571'. [ 533.209056][T18718] netlink: 'syz.3.4574': attribute type 10 has an invalid length. [ 533.222874][T18718] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.4574'. [ 533.792828][T18756] netlink: 'syz.4.4585': attribute type 1 has an invalid length. [ 533.847913][T18763] netlink: 'syz.2.4588': attribute type 3 has an invalid length. [ 533.855926][T18756] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.4585'. [ 533.890909][T18763] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4588'. [ 533.976410][T18756] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4585'. [ 535.123541][T18820] pim6reg: tun_chr_ioctl cmd 1074025678 [ 535.133706][T18820] pim6reg: group set to 0 [ 535.310706][T18836] netlink: 'syz.4.4611': attribute type 10 has an invalid length. [ 535.428182][T18836] team0: Device hsr_slave_0 failed to register rx_handler [ 535.816985][T18860] netlink: 'syz.2.4619': attribute type 29 has an invalid length. [ 535.862738][T18858] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4617'. [ 535.879887][T18860] netlink: 'syz.2.4619': attribute type 29 has an invalid length. [ 535.904233][T18862] netlink: 'syz.2.4619': attribute type 29 has an invalid length. [ 536.518452][T18886] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4628'. [ 536.599240][T18888] netlink: 212940 bytes leftover after parsing attributes in process `syz.5.4627'. [ 536.599326][T18892] netlink: 'syz.3.4629': attribute type 10 has an invalid length. [ 536.723781][T18892] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4629'. [ 539.872763][T18908] netlink: 'syz.1.4633': attribute type 21 has an invalid length. [ 540.636429][T18993] netlink: 'syz.1.4657': attribute type 6 has an invalid length. [ 540.709262][T18993] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4657'. [ 542.087739][T19008] pim6reg: tun_chr_ioctl cmd 2148553947 [ 542.316826][T19039] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.4671'. [ 542.376832][T19050] netlink: 'syz.2.4676': attribute type 3 has an invalid length. [ 542.408093][T19039] netlink: zone id is out of range [ 542.468180][T19050] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4676'. [ 542.489388][T19039] netlink: del zone limit has 8 unknown bytes [ 543.016011][T19071] tap0: tun_chr_ioctl cmd 2147767506 [ 543.339023][T19086] netlink: 180 bytes leftover after parsing attributes in process `syz.5.4684'. [ 543.454121][T19084] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4684'. [ 543.542443][T19092] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4687'. [ 544.096948][T19113] device syzkaller0 entered promiscuous mode [ 544.199577][T19134] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4698'. [ 544.363541][T19134] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4698'. [ 544.764240][T19145] device syzkaller0 entered promiscuous mode [ 544.809074][T19150] netlink: 'syz.5.4703': attribute type 40 has an invalid length. [ 544.866746][T19150] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.918231][T19146] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4700'. [ 544.953809][T19156] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4703'. [ 545.176933][T19150] netlink: 'syz.5.4703': attribute type 16 has an invalid length. [ 545.194869][T19150] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4703'. [ 545.712868][T19195] netlink: 'syz.3.4716': attribute type 6 has an invalid length. [ 546.327702][T19210] pim6reg: tun_chr_ioctl cmd 2148553947 [ 546.623477][T19229] nr0: port 1(hsr0) entered blocking state [ 546.654083][T19229] nr0: port 1(hsr0) entered disabled state [ 546.743010][T19229] device hsr0 entered promiscuous mode [ 546.770269][T19247] netlink: 'syz.5.4729': attribute type 22 has an invalid length. [ 546.794254][T19235] Ÿë: port 1(ip6gretap0) entered blocking state [ 546.813095][T19235] Ÿë: port 1(ip6gretap0) entered disabled state [ 546.911782][T19235] device ip6gretap0 entered promiscuous mode [ 547.791615][T19276] netlink: 'syz.2.4734': attribute type 1 has an invalid length. [ 547.889568][T19276] netlink: 'syz.2.4734': attribute type 3 has an invalid length. [ 547.907515][T19276] __nla_validate_parse: 3 callbacks suppressed [ 547.907533][T19276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4734'. [ 548.305915][T19294] FAULT_INJECTION: forcing a failure. [ 548.305915][T19294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.352464][T19294] CPU: 1 PID: 19294 Comm: syz.4.4738 Not tainted syzkaller #0 [ 548.359991][T19294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 548.370530][T19294] Call Trace: [ 548.373841][T19294] [ 548.376809][T19294] dump_stack_lvl+0x188/0x250 [ 548.381536][T19294] ? show_regs_print_info+0x20/0x20 [ 548.387016][T19294] ? load_image+0x400/0x400 [ 548.391557][T19294] ? __lock_acquire+0x7d10/0x7d10 [ 548.396618][T19294] ? perf_trace_lock_acquire+0xed/0x3e0 [ 548.402214][T19294] should_fail+0x38c/0x4c0 [ 548.406684][T19294] _copy_from_user+0x2e/0x170 [ 548.411398][T19294] __copy_msghdr_from_user+0xc9/0x630 [ 548.416802][T19294] ? verify_lock_unused+0x140/0x140 [ 548.422049][T19294] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 548.427386][T19294] ___sys_sendmsg+0x19a/0x2e0 [ 548.432107][T19294] ? __sys_sendmsg+0x2a0/0x2a0 [ 548.436892][T19294] ? vfs_write+0x8b2/0xd60 [ 548.441319][T19294] __se_sys_sendmsg+0x1af/0x290 [ 548.446269][T19294] ? __x64_sys_sendmsg+0x80/0x80 [ 548.451224][T19294] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 548.457250][T19294] ? lockdep_hardirqs_on+0x94/0x140 [ 548.462563][T19294] do_syscall_64+0x4c/0xa0 [ 548.467055][T19294] ? clear_bhb_loop+0x30/0x80 [ 548.471755][T19294] ? clear_bhb_loop+0x30/0x80 [ 548.476461][T19294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 548.482377][T19294] RIP: 0033:0x7f59ae10c629 [ 548.486823][T19294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.506456][T19294] RSP: 002b:00007f59ac366028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.514887][T19294] RAX: ffffffffffffffda RBX: 00007f59ae385fa0 RCX: 00007f59ae10c629 [ 548.523043][T19294] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 548.531173][T19294] RBP: 00007f59ac366090 R08: 0000000000000000 R09: 0000000000000000 [ 548.539150][T19294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.547122][T19294] R13: 00007f59ae386038 R14: 00007f59ae385fa0 R15: 00007ffd2d222a08 [ 548.555118][T19294] [ 549.040181][T19319] netlink: 247 bytes leftover after parsing attributes in process `syz.3.4745'. [ 549.115321][T19324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4746'. [ 549.263384][T19330] netlink: 'syz.4.4746': attribute type 3 has an invalid length. [ 549.271784][T19329] netlink: 'syz.2.4748': attribute type 10 has an invalid length. [ 549.324050][T19330] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4746'. [ 549.344376][T19329] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4748'. [ 549.353564][T19329] device team0 entered promiscuous mode [ 549.442412][T19329] device team_slave_0 entered promiscuous mode [ 549.445227][T19345] FAULT_INJECTION: forcing a failure. [ 549.445227][T19345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.480758][T19329] device team_slave_1 entered promiscuous mode [ 549.493848][T19345] CPU: 1 PID: 19345 Comm: syz.3.4753 Not tainted syzkaller #0 [ 549.501365][T19345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.510974][T19329] device geneve1 entered promiscuous mode [ 549.511542][T19345] Call Trace: [ 549.511554][T19345] [ 549.511563][T19345] dump_stack_lvl+0x188/0x250 [ 549.511599][T19345] ? show_regs_print_info+0x20/0x20 [ 549.511619][T19345] ? load_image+0x400/0x400 [ 549.537945][T19345] ? __lock_acquire+0x7d10/0x7d10 [ 549.542994][T19345] ? perf_trace_lock_acquire+0xed/0x3e0 [ 549.548555][T19329] bridge0: port 4(team0) entered blocking state [ 549.548582][T19345] should_fail+0x38c/0x4c0 [ 549.559276][T19345] _copy_from_user+0x2e/0x170 [ 549.563994][T19345] __copy_msghdr_from_user+0x48a/0x630 [ 549.569494][T19345] ? verify_lock_unused+0x140/0x140 [ 549.574743][T19345] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 549.580082][T19345] ___sys_sendmsg+0x19a/0x2e0 [ 549.584709][T19329] bridge0: port 4(team0) entered disabled state [ 549.584800][T19345] ? __sys_sendmsg+0x2a0/0x2a0 [ 549.595868][T19345] ? trace_event_raw_event_lock+0x270/0x270 [ 549.601796][T19345] ? vfs_write+0x8b2/0xd60 [ 549.606282][T19345] __se_sys_sendmsg+0x1af/0x290 [ 549.607734][T19329] bridge0: port 4(team0) entered blocking state [ 549.611178][T19345] ? __x64_sys_sendmsg+0x80/0x80 [ 549.611211][T19345] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 549.611245][T19345] ? lockdep_hardirqs_on+0x94/0x140 [ 549.617653][T19329] bridge0: port 4(team0) entered forwarding state [ 549.622444][T19345] do_syscall_64+0x4c/0xa0 [ 549.644462][T19345] ? clear_bhb_loop+0x30/0x80 [ 549.649176][T19345] ? clear_bhb_loop+0x30/0x80 [ 549.653888][T19345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 549.659816][T19345] RIP: 0033:0x7ff0ab1fa629 [ 549.664277][T19345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.683931][T19345] RSP: 002b:00007ff0a9454028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.692391][T19345] RAX: ffffffffffffffda RBX: 00007ff0ab473fa0 RCX: 00007ff0ab1fa629 [ 549.700396][T19345] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 549.708388][T19345] RBP: 00007ff0a9454090 R08: 0000000000000000 R09: 0000000000000000 [ 549.716386][T19345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.724386][T19345] R13: 00007ff0ab474038 R14: 00007ff0ab473fa0 R15: 00007ffd0539c528 [ 549.732400][T19345] [ 550.039818][T19364] device wlan0 left promiscuous mode [ 550.097837][T19368] device wlan0 entered promiscuous mode [ 550.276230][T19379] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4763'. [ 550.451384][T19390] delete_channel: no stack [ 550.489892][T19390] delete_channel: no stack [ 550.716225][T19412] netlink: 'syz.5.4775': attribute type 9 has an invalid length. [ 550.743361][T19410] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4772'. [ 550.751166][T19412] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.4775'. [ 550.829225][T19420] netlink: 'syz.4.4777': attribute type 2 has an invalid length. [ 551.039223][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4778'. [ 552.073405][T19461] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4790'. [ 552.323185][T19469] netlink: 'syz.4.4792': attribute type 10 has an invalid length. [ 552.332703][T19469] device team0 entered promiscuous mode [ 552.338887][T19469] device team_slave_0 entered promiscuous mode [ 552.346508][T19469] device team_slave_1 entered promiscuous mode [ 552.353550][T19469] device geneve1 entered promiscuous mode [ 552.371121][T19469] bridge0: port 3(team0) entered blocking state [ 552.387284][T19469] bridge0: port 3(team0) entered disabled state [ 552.423193][T19469] bridge0: port 3(team0) entered blocking state [ 552.429933][T19469] bridge0: port 3(team0) entered forwarding state [ 552.675865][T19485] netlink: 'syz.5.4794': attribute type 1 has an invalid length. [ 553.051255][T19517] netlink: 'syz.3.4806': attribute type 21 has an invalid length. [ 553.066699][T19517] __nla_validate_parse: 2 callbacks suppressed [ 553.066715][T19517] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4806'. [ 553.096813][T19517] netlink: 'syz.3.4806': attribute type 46 has an invalid length. [ 553.476009][T19537] FAULT_INJECTION: forcing a failure. [ 553.476009][T19537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.533535][T19537] CPU: 1 PID: 19537 Comm: syz.5.4813 Not tainted syzkaller #0 [ 553.541053][T19537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.551134][T19537] Call Trace: [ 553.554433][T19537] [ 553.557388][T19537] dump_stack_lvl+0x188/0x250 [ 553.562110][T19537] ? show_regs_print_info+0x20/0x20 [ 553.567340][T19537] ? load_image+0x400/0x400 [ 553.571872][T19537] ? __lock_acquire+0x7d10/0x7d10 [ 553.577018][T19537] should_fail+0x38c/0x4c0 [ 553.581471][T19537] _copy_from_user+0x2e/0x170 [ 553.586181][T19537] __copy_msghdr_from_user+0xc9/0x630 [ 553.591586][T19537] ? verify_lock_unused+0x140/0x140 [ 553.596832][T19537] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 553.602162][T19537] ___sys_sendmsg+0x19a/0x2e0 [ 553.606888][T19537] ? __sys_sendmsg+0x2a0/0x2a0 [ 553.611693][T19537] ? trace_event_raw_event_lock+0x270/0x270 [ 553.617625][T19537] ? vfs_write+0x8b2/0xd60 [ 553.622080][T19537] __se_sys_sendmsg+0x1af/0x290 [ 553.626957][T19537] ? __x64_sys_sendmsg+0x80/0x80 [ 553.631909][T19537] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 553.637901][T19537] ? lockdep_hardirqs_on+0x94/0x140 [ 553.643103][T19537] do_syscall_64+0x4c/0xa0 [ 553.647539][T19537] ? clear_bhb_loop+0x30/0x80 [ 553.652235][T19537] ? clear_bhb_loop+0x30/0x80 [ 553.656938][T19537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 553.662850][T19537] RIP: 0033:0x7f65e1f6a629 [ 553.667287][T19537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.686903][T19537] RSP: 002b:00007f65e01c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 553.695326][T19537] RAX: ffffffffffffffda RBX: 00007f65e21e3fa0 RCX: 00007f65e1f6a629 [ 553.703309][T19537] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 553.711298][T19537] RBP: 00007f65e01c4090 R08: 0000000000000000 R09: 0000000000000000 [ 553.719283][T19537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.727276][T19537] R13: 00007f65e21e4038 R14: 00007f65e21e3fa0 R15: 00007fff12bd9468 [ 553.735366][T19537] [ 554.088368][T19566] netlink: 'syz.4.4823': attribute type 1 has an invalid length. [ 554.116894][T19566] netlink: 'syz.4.4823': attribute type 1 has an invalid length. [ 554.137902][T19566] netlink: 'syz.4.4823': attribute type 11 has an invalid length. [ 554.163233][T19566] netlink: 198172 bytes leftover after parsing attributes in process `syz.4.4823'. [ 554.192233][T19565] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4824'. [ 554.893553][T19599] FAULT_INJECTION: forcing a failure. [ 554.893553][T19599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.958660][T19599] CPU: 1 PID: 19599 Comm: syz.2.4832 Not tainted syzkaller #0 [ 554.966544][T19599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 554.976645][T19599] Call Trace: [ 554.979943][T19599] [ 554.982900][T19599] dump_stack_lvl+0x188/0x250 [ 554.987623][T19599] ? show_regs_print_info+0x20/0x20 [ 554.992847][T19599] ? load_image+0x400/0x400 [ 554.997385][T19599] ? __lock_acquire+0x7d10/0x7d10 [ 555.002500][T19599] should_fail+0x38c/0x4c0 [ 555.006943][T19599] _copy_from_user+0x2e/0x170 [ 555.011652][T19599] iovec_from_user+0x142/0x370 [ 555.016450][T19599] __import_iovec+0x70/0x490 [ 555.021077][T19599] import_iovec+0x6f/0xa0 [ 555.025431][T19599] ___sys_sendmsg+0x1fd/0x2e0 [ 555.030143][T19599] ? __sys_sendmsg+0x2a0/0x2a0 [ 555.034931][T19599] ? trace_event_raw_event_lock+0x270/0x270 [ 555.040936][T19599] ? vfs_write+0x8b2/0xd60 [ 555.045391][T19599] __se_sys_sendmsg+0x1af/0x290 [ 555.050272][T19599] ? __x64_sys_sendmsg+0x80/0x80 [ 555.055236][T19599] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 555.061259][T19599] ? lockdep_hardirqs_on+0x94/0x140 [ 555.066498][T19599] do_syscall_64+0x4c/0xa0 [ 555.070933][T19599] ? clear_bhb_loop+0x30/0x80 [ 555.075748][T19599] ? clear_bhb_loop+0x30/0x80 [ 555.080463][T19599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 555.086391][T19599] RIP: 0033:0x7fcacdcbf629 [ 555.090832][T19599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.110760][T19599] RSP: 002b:00007fcacbf19028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.119199][T19599] RAX: ffffffffffffffda RBX: 00007fcacdf38fa0 RCX: 00007fcacdcbf629 [ 555.127191][T19599] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 555.135174][T19599] RBP: 00007fcacbf19090 R08: 0000000000000000 R09: 0000000000000000 [ 555.143299][T19599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.151296][T19599] R13: 00007fcacdf39038 R14: 00007fcacdf38fa0 R15: 00007fff70153628 [ 555.159329][T19599] [ 555.308435][T19605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4829'. [ 555.429623][T19616] netlink: 'syz.4.4836': attribute type 3 has an invalid length. [ 555.459190][T19616] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4836'. [ 555.896617][T19645] IPv6: Can't replace route, no match found [ 556.177686][T19667] netlink: 'syz.5.4853': attribute type 10 has an invalid length. [ 556.224053][T19667] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4853'. [ 556.246822][T19667] device team0 entered promiscuous mode [ 556.252558][T19667] device team_slave_0 entered promiscuous mode [ 556.303082][T19667] device team_slave_1 entered promiscuous mode [ 556.321181][T19667] device geneve1 entered promiscuous mode [ 556.330053][T19667] bridge0: port 3(team0) entered blocking state [ 556.336899][T19667] bridge0: port 3(team0) entered disabled state [ 556.345875][T19667] bridge0: port 3(team0) entered blocking state [ 556.352300][T19667] bridge0: port 3(team0) entered forwarding state [ 556.821694][T19686] netlink: 'syz.3.4858': attribute type 10 has an invalid length. [ 557.652787][T19721] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.4868'. [ 558.076733][T19731] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4869'. [ 558.430330][T19753] netlink: 'syz.1.4876': attribute type 10 has an invalid length. [ 558.579894][T19753] team0: Port device wlan1 added [ 558.630784][T19755] netlink: 'syz.1.4876': attribute type 10 has an invalid length. [ 558.884860][T19771] netlink: 'syz.1.4882': attribute type 3 has an invalid length. [ 558.937150][T19771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4882'. [ 559.388832][T19791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4888'. [ 559.459684][T19791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4888'. [ 559.510690][T19791] netlink: 13 bytes leftover after parsing attributes in process `syz.4.4888'. [ 559.830524][T19806] netlink: 'syz.5.4893': attribute type 9 has an invalid length. [ 559.859578][T19806] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.4893'. [ 559.868388][T19814] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4896'. [ 559.939049][T19818] netlink: 'syz.2.4896': attribute type 10 has an invalid length. [ 559.963765][T19818] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4896'. [ 559.972699][T19818] device bond0 entered promiscuous mode [ 560.047991][T19818] device bond_slave_1 entered promiscuous mode [ 560.068166][T19818] device dummy0 entered promiscuous mode [ 560.078041][T19818] bridge0: port 5(bond0) entered blocking state [ 560.113896][T19818] bridge0: port 5(bond0) entered disabled state [ 560.168030][T19818] bridge0: port 5(bond0) entered blocking state [ 560.174475][T19818] bridge0: port 5(bond0) entered forwarding state [ 560.537905][T19844] syz.4.4907[19844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.538310][T19844] syz.4.4907[19844] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 560.640340][T19848] device wlan0 entered promiscuous mode [ 560.738222][T19843] netlink: 'syz.1.4905': attribute type 9 has an invalid length. [ 560.817796][T19843] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4905'. [ 560.988778][T19869] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4914'. [ 561.260839][T19873] netlink: 'syz.5.4915': attribute type 10 has an invalid length. [ 561.960392][T19906] syz.5.4924[19906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 561.960870][T19906] syz.5.4924[19906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 562.985653][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.007096][T19939] netlink: 'syz.4.4935': attribute type 25 has an invalid length. [ 563.007530][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.562870][T19955] syz.1.4940[19955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.563233][T19955] syz.1.4940[19955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 563.865182][T19970] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4948'. [ 564.051065][T19978] netlink: 'syz.1.4948': attribute type 29 has an invalid length. [ 564.082439][T19978] netlink: 'syz.1.4948': attribute type 29 has an invalid length. [ 564.203342][T19989] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.4953'. [ 564.580719][T19999] syz.2.4954[19999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 564.581147][T19999] syz.2.4954[19999] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 565.110585][T20005] device syzkaller0 entered promiscuous mode [ 565.613543][T20033] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.4968'. [ 566.084793][T20047] netlink: 'syz.2.4973': attribute type 33 has an invalid length. [ 566.159307][T20047] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4973'. [ 566.681109][T20069] netlink: 'syz.4.4981': attribute type 10 has an invalid length. [ 566.718224][T20069] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4981'. [ 566.752172][T20069] device bond0 entered promiscuous mode [ 566.802967][T20069] device bond_slave_1 entered promiscuous mode [ 566.856085][T20083] netlink: 'syz.4.4981': attribute type 8 has an invalid length. [ 566.871604][T20083] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4981'. [ 566.886859][T20069] device dummy0 entered promiscuous mode [ 566.918640][T20069] bridge0: port 4(bond0) entered blocking state [ 566.959799][T20069] bridge0: port 4(bond0) entered disabled state [ 566.985983][T20069] bridge0: port 4(bond0) entered blocking state [ 566.992420][T20069] bridge0: port 4(bond0) entered forwarding state [ 567.721191][T20108] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4993'. [ 568.976662][T20158] netlink: 'syz.3.5011': attribute type 2 has an invalid length. [ 569.013971][T20158] netlink: 'syz.3.5011': attribute type 8 has an invalid length. [ 569.054401][T20158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5011'. [ 569.468376][T20168] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5014'. [ 569.844453][T20172] device veth1_macvtap left promiscuous mode [ 570.452859][T20202] netlink: 'syz.5.5023': attribute type 1 has an invalid length. [ 570.466092][T20202] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.5023'. [ 571.188182][T20215] netlink: 'syz.1.5029': attribute type 7 has an invalid length. [ 571.291220][T20215] netlink: 'syz.1.5029': attribute type 1 has an invalid length. [ 571.344081][T20215] netlink: 179708 bytes leftover after parsing attributes in process `syz.1.5029'. [ 571.477282][T20221] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.5033'. [ 572.130895][T20239] device wlan0 entered promiscuous mode [ 572.205202][T20234] netlink: 'syz.5.5038': attribute type 9 has an invalid length. [ 572.233802][T20234] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.5038'. [ 572.506676][T20259] netlink: 'syz.4.5045': attribute type 9 has an invalid length. [ 572.524492][T20259] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.5045'. [ 573.022788][T20269] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5048'. [ 575.710237][T20353] netlink: 'syz.4.5079': attribute type 2 has an invalid length. [ 575.765068][T20353] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.5079'. [ 578.241060][T20439] netlink: 'syz.3.5110': attribute type 3 has an invalid length. [ 578.282484][T20439] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.5110'. [ 578.570189][T20446] netlink: 'syz.4.5113': attribute type 10 has an invalid length. [ 578.585844][T20446] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5113'. [ 578.685451][T20451] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 586.512910][T20647] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5194'. [ 586.525071][T20648] netlink: 138024 bytes leftover after parsing attributes in process `syz.3.5192'. [ 588.040095][T20670] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5202'. [ 588.103035][T20670] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 589.917895][T20719] netlink: 'syz.3.5219': attribute type 1 has an invalid length. [ 590.036058][T20719] device syzkaller0 entered promiscuous mode [ 590.663807][ T9317] Bluetooth: hci1: command 0x0406 tx timeout [ 593.038993][T20807] netlink: 'syz.2.5256': attribute type 29 has an invalid length. [ 593.529643][T20828] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5262'. [ 594.144614][T20843] syz.3.5269[20843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.144755][T20843] syz.3.5269[20843] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.166462][T20822] chnl_net:caif_netlink_parms(): no params data found [ 594.469196][T20822] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.525504][T20822] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.533386][T20822] device bridge_slave_0 entered promiscuous mode [ 594.626152][T20822] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.649041][T20822] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.670648][T20822] device bridge_slave_1 entered promiscuous mode [ 594.726890][T20866] netlink: 'syz.3.5276': attribute type 19 has an invalid length. [ 594.812185][T20822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.901564][T20822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.051674][T20822] team0: Port device team_slave_0 added [ 595.082952][T20822] team0: Port device team_slave_1 added [ 595.205657][T20822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.229721][T20822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.230757][T20889] syz.4.5283[20889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.292607][T20889] syz.4.5283[20889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 595.323033][T20822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.376283][T20822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.383772][ T9317] Bluetooth: hci0: command 0x0409 tx timeout [ 595.409438][T20822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.560641][T20822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.859499][T20822] device hsr_slave_0 entered promiscuous mode [ 595.887170][T20822] device hsr_slave_1 entered promiscuous mode [ 596.064541][T20918] syz.4.5295[20918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.064637][T20918] syz.4.5295[20918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 596.199975][T20920] netlink: 'syz.3.5294': attribute type 10 has an invalid length. [ 596.358847][T20920] team0: Port device wlan1 added [ 596.381144][T20926] netlink: 'syz.4.5297': attribute type 10 has an invalid length. [ 596.401488][T20919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 596.421841][T20926] team0: Device ip6_vti0 is up. Set it down before adding it as a team port [ 596.572745][T20822] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 596.636905][T20822] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 596.679026][T20822] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 596.772698][T20822] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 596.782480][T20944] netlink: 'syz.2.5305': attribute type 1 has an invalid length. [ 596.860701][T20944] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5305'. [ 596.954753][T20944] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5305'. [ 597.061537][T20954] syz.4.5308[20954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 597.061635][T20954] syz.4.5308[20954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 597.332042][T20961] netlink: 763 bytes leftover after parsing attributes in process `syz.2.5311'. [ 597.425096][T20822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.469987][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 597.477856][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 597.497072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.517862][T20822] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.566009][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 597.586565][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 597.600820][ T4238] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.608073][ T4238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.639526][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 597.688195][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 597.726118][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 597.765847][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.773037][ T5919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.850034][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 597.873292][T20982] syz.4.5320[20982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 597.873393][T20982] syz.4.5320[20982] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 597.903172][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 598.046492][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 598.087357][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 598.115929][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 598.132209][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 598.178795][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 598.226550][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 598.236621][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 598.268414][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 598.299315][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 598.318282][T20822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 598.928304][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 598.954615][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 599.037102][T20822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.553850][ T4229] Bluetooth: hci0: command 0x040f tx timeout [ 599.996526][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 600.018672][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 600.118802][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 600.130821][T21057] bpf_get_probe_write_proto: 2 callbacks suppressed [ 600.130841][T21057] syz.5.5346[21057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.143206][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 600.171633][T21057] syz.5.5346[21057] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.209277][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 600.308330][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 600.339694][T20822] device veth0_vlan entered promiscuous mode [ 600.388689][T20822] device veth1_vlan entered promiscuous mode [ 600.528523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 600.559140][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 600.603369][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 600.647751][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 600.696967][T20822] device veth0_macvtap entered promiscuous mode [ 600.747625][T20822] device veth1_macvtap entered promiscuous mode [ 600.874528][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.909005][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.963911][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.995503][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.035080][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.068724][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.092322][T20822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.256627][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 601.285150][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 601.315829][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 601.348123][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 601.381887][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.415863][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.447943][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.472428][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.489880][T20822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.506625][T20822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.530807][T20822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.577312][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 601.604736][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 601.639519][ T4229] Bluetooth: hci0: command 0x0419 tx timeout [ 601.647401][T21088] syz.5.5357[21088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 601.647500][T21088] syz.5.5357[21088] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 601.648786][T20822] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.683536][T20822] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.692928][T20822] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.701829][T20822] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.866073][T21092] mac80211_hwsim hwsim33 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 602.053876][ T5907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.080095][ T5907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.138379][ T4238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 602.184799][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.220451][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.236977][ T5919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 603.028460][T21127] syz.2.5371[21127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.028598][T21127] syz.2.5371[21127] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.824776][T21157] syz.6.5382[21157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 603.874073][T21157] syz.6.5382[21157] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.771379][T21197] syz.5.5398[21197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 604.848291][T21197] syz.5.5398[21197] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 605.344045][T21217] pimreg: tun_chr_ioctl cmd 2147767521 [ 605.414479][T21217] netlink: 'syz.3.5405': attribute type 3 has an invalid length. [ 605.422767][T21217] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.5405'. [ 605.664149][T21244] syz.3.5414[21244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 605.664259][T21244] syz.3.5414[21244] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.545700][T21278] syz.2.5427[21278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.561069][T21278] syz.2.5427[21278] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.132973][T21293] FAULT_INJECTION: forcing a failure. [ 607.132973][T21293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.174570][T21293] CPU: 0 PID: 21293 Comm: syz.3.5434 Not tainted syzkaller #0 [ 607.182101][T21293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.192195][T21293] Call Trace: [ 607.195531][T21293] [ 607.198682][T21293] dump_stack_lvl+0x188/0x250 [ 607.203428][T21293] ? show_regs_print_info+0x20/0x20 [ 607.208696][T21293] ? load_image+0x400/0x400 [ 607.213258][T21293] ? __lock_acquire+0x7d10/0x7d10 [ 607.218341][T21293] ? vfs_write+0x8b2/0xd60 [ 607.222823][T21293] should_fail+0x38c/0x4c0 [ 607.227301][T21293] _copy_from_user+0x2e/0x170 [ 607.232005][T21293] __sys_bpf+0x26d/0x6f0 [ 607.236269][T21293] ? bpf_link_show_fdinfo+0x380/0x380 [ 607.241699][T21293] ? vtime_user_exit+0x2c8/0x3e0 [ 607.246718][T21293] __x64_sys_bpf+0x78/0x90 [ 607.251176][T21293] do_syscall_64+0x4c/0xa0 [ 607.255625][T21293] ? clear_bhb_loop+0x30/0x80 [ 607.260539][T21293] ? clear_bhb_loop+0x30/0x80 [ 607.265261][T21293] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 607.271198][T21293] RIP: 0033:0x7ff0ab1fa629 [ 607.275664][T21293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.295296][T21293] RSP: 002b:00007ff0a9454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 607.303766][T21293] RAX: ffffffffffffffda RBX: 00007ff0ab473fa0 RCX: 00007ff0ab1fa629 [ 607.311759][T21293] RDX: 0000000000000050 RSI: 00002000000006c0 RDI: 0000000000000000 [ 607.319764][T21293] RBP: 00007ff0a9454090 R08: 0000000000000000 R09: 0000000000000000 [ 607.327772][T21293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.335749][T21293] R13: 00007ff0ab474038 R14: 00007ff0ab473fa0 R15: 00007ffd0539c528 [ 607.343767][T21293] [ 607.507248][T21305] syz.2.5440[21305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.507364][T21305] syz.2.5440[21305] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.821586][T21335] netlink: 'syz.4.5450': attribute type 10 has an invalid length. [ 608.850518][T21341] syz.2.5453[21341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.850640][T21341] syz.2.5453[21341] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 608.929096][T21335] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5450'. [ 609.416903][T21363] netlink: 158020 bytes leftover after parsing attributes in process `syz.4.5460'. [ 609.481466][T21364] netlink: 'syz.4.5460': attribute type 10 has an invalid length. [ 609.511665][T21364] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5460'. [ 610.073316][T21375] syz.2.5466[21375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.074255][T21375] syz.2.5466[21375] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.682103][T21406] netlink: 'syz.6.5478': attribute type 3 has an invalid length. [ 610.747470][T21409] syz.5.5481[21409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.747570][T21409] syz.5.5481[21409] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 610.774410][T21406] netlink: 105116 bytes leftover after parsing attributes in process `syz.6.5478'. [ 611.083793][T21431] netlink: 'syz.5.5485': attribute type 21 has an invalid length. [ 611.413141][T21445] syz.6.5494[21445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.413250][T21445] syz.6.5494[21445] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 611.766695][T21456] device sit0 entered promiscuous mode [ 612.059686][T21460] netlink: 'syz.6.5500': attribute type 1 has an invalid length. [ 612.081099][T21460] netlink: 'syz.6.5500': attribute type 4 has an invalid length. [ 612.126512][T21460] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.5500'. [ 612.475663][T21478] syz.3.5508[21478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.475779][T21478] syz.3.5508[21478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.555730][T21485] FAULT_INJECTION: forcing a failure. [ 612.555730][T21485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.628345][T21485] CPU: 1 PID: 21485 Comm: syz.2.5509 Not tainted syzkaller #0 [ 612.635849][T21485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.645926][T21485] Call Trace: [ 612.649244][T21485] [ 612.652196][T21485] dump_stack_lvl+0x188/0x250 [ 612.656911][T21485] ? show_regs_print_info+0x20/0x20 [ 612.662303][T21485] ? load_image+0x400/0x400 [ 612.666840][T21485] ? __lock_acquire+0x7d10/0x7d10 [ 612.671881][T21485] ? vfs_write+0x8b2/0xd60 [ 612.676339][T21485] should_fail+0x38c/0x4c0 [ 612.680797][T21485] _copy_from_user+0x2e/0x170 [ 612.685501][T21485] __sys_bpf+0x26d/0x6f0 [ 612.689780][T21485] ? bpf_link_show_fdinfo+0x380/0x380 [ 612.695197][T21485] ? vtime_user_exit+0x2c8/0x3e0 [ 612.700163][T21485] __x64_sys_bpf+0x78/0x90 [ 612.704608][T21485] do_syscall_64+0x4c/0xa0 [ 612.709044][T21485] ? clear_bhb_loop+0x30/0x80 [ 612.713731][T21485] ? clear_bhb_loop+0x30/0x80 [ 612.718431][T21485] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 612.724343][T21485] RIP: 0033:0x7fcacdcbf629 [ 612.728782][T21485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.748484][T21485] RSP: 002b:00007fcacbf19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 612.756917][T21485] RAX: ffffffffffffffda RBX: 00007fcacdf38fa0 RCX: 00007fcacdcbf629 [ 612.765021][T21485] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 612.773013][T21485] RBP: 00007fcacbf19090 R08: 0000000000000000 R09: 0000000000000000 [ 612.781127][T21485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.789146][T21485] R13: 00007fcacdf39038 R14: 00007fcacdf38fa0 R15: 00007fff70153628 [ 612.797146][T21485] [ 613.647939][T21509] netlink: 182 bytes leftover after parsing attributes in process `syz.4.5519'. [ 613.816019][T21523] syz.4.5525[21523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.816162][T21523] syz.4.5525[21523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 613.985340][T21532] FAULT_INJECTION: forcing a failure. [ 613.985340][T21532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 614.084645][T21532] CPU: 1 PID: 21532 Comm: syz.2.5528 Not tainted syzkaller #0 [ 614.092435][T21532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 614.102525][T21532] Call Trace: [ 614.105852][T21532] [ 614.108804][T21532] dump_stack_lvl+0x188/0x250 [ 614.113526][T21532] ? show_regs_print_info+0x20/0x20 [ 614.118769][T21532] ? load_image+0x400/0x400 [ 614.123295][T21532] ? __lock_acquire+0x7d10/0x7d10 [ 614.128323][T21532] ? __lock_acquire+0x13bc/0x7d10 [ 614.133343][T21532] ? trace_event_raw_event_lock+0x270/0x270 [ 614.139494][T21532] should_fail+0x38c/0x4c0 [ 614.143924][T21532] strncpy_from_user+0x32/0x360 [ 614.148827][T21532] bpf_prog_load+0x1f0/0x1510 [ 614.153552][T21532] ? map_freeze+0x350/0x350 [ 614.158092][T21532] ? __might_fault+0xb7/0x110 [ 614.162796][T21532] ? __might_fault+0xb3/0x110 [ 614.167492][T21532] ? bpf_lsm_bpf+0x5/0x10 [ 614.171844][T21532] ? security_bpf+0x7a/0xa0 [ 614.176417][T21532] __sys_bpf+0x532/0x6f0 [ 614.180804][T21532] ? bpf_link_show_fdinfo+0x380/0x380 [ 614.186192][T21532] ? vtime_user_exit+0x2c8/0x3e0 [ 614.191177][T21532] __x64_sys_bpf+0x78/0x90 [ 614.195613][T21532] do_syscall_64+0x4c/0xa0 [ 614.200081][T21532] ? clear_bhb_loop+0x30/0x80 [ 614.204794][T21532] ? clear_bhb_loop+0x30/0x80 [ 614.209510][T21532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 614.215442][T21532] RIP: 0033:0x7fcacdcbf629 [ 614.219885][T21532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.239492][T21532] RSP: 002b:00007fcacbf19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 614.247912][T21532] RAX: ffffffffffffffda RBX: 00007fcacdf38fa0 RCX: 00007fcacdcbf629 [ 614.255912][T21532] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 614.263916][T21532] RBP: 00007fcacbf19090 R08: 0000000000000000 R09: 0000000000000000 [ 614.271925][T21532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.279924][T21532] R13: 00007fcacdf39038 R14: 00007fcacdf38fa0 R15: 00007fff70153628 [ 614.287952][T21532] [ 614.511208][T21551] netlink: 'syz.5.5534': attribute type 17 has an invalid length. [ 614.586863][T21551] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5534'. [ 614.622187][T21551] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.679470][T21552] netlink: 14560 bytes leftover after parsing attributes in process `syz.5.5534'. [ 614.801759][T21563] syz.5.5539[21563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 614.801873][T21563] syz.5.5539[21563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 614.982681][T21574] FAULT_INJECTION: forcing a failure. [ 614.982681][T21574] name failslab, interval 1, probability 0, space 0, times 0 [ 615.065761][T21574] CPU: 1 PID: 21574 Comm: syz.3.5544 Not tainted syzkaller #0 [ 615.075244][T21574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.086208][T21574] Call Trace: [ 615.089516][T21574] [ 615.092495][T21574] dump_stack_lvl+0x188/0x250 [ 615.097209][T21574] ? show_regs_print_info+0x20/0x20 [ 615.102447][T21574] ? load_image+0x400/0x400 [ 615.106993][T21574] ? __might_sleep+0xf0/0xf0 [ 615.111625][T21574] ? __lock_acquire+0x7d10/0x7d10 [ 615.116704][T21574] should_fail+0x38c/0x4c0 [ 615.121312][T21574] should_failslab+0x5/0x20 [ 615.125844][T21574] slab_pre_alloc_hook+0x51/0xc0 [ 615.130814][T21574] kmem_cache_alloc_node_trace+0x4a/0x300 [ 615.136551][T21574] ? __get_vm_area_node+0x119/0x2d0 [ 615.141898][T21574] __get_vm_area_node+0x119/0x2d0 [ 615.146963][T21574] __vmalloc_node_range+0xef/0x8b0 [ 615.152104][T21574] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 615.157693][T21574] ? end_current_label_crit_section+0x170/0x170 [ 615.163978][T21574] ? __lock_acquire+0x7d10/0x7d10 [ 615.169026][T21574] ? __lock_acquire+0x13bc/0x7d10 [ 615.174071][T21574] ? trace_event_raw_event_lock+0x270/0x270 [ 615.180005][T21574] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 615.185590][T21574] __vmalloc+0x76/0x80 [ 615.189688][T21574] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 615.195260][T21574] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 615.200666][T21574] bpf_prog_alloc+0x1a/0x1e0 [ 615.205309][T21574] bpf_prog_load+0x7c6/0x1510 [ 615.210021][T21574] ? map_freeze+0x350/0x350 [ 615.214549][T21574] ? __might_fault+0xb7/0x110 [ 615.219265][T21574] ? __might_fault+0xb3/0x110 [ 615.223967][T21574] ? bpf_lsm_bpf+0x5/0x10 [ 615.228311][T21574] ? security_bpf+0x7a/0xa0 [ 615.232813][T21574] __sys_bpf+0x532/0x6f0 [ 615.237059][T21574] ? bpf_link_show_fdinfo+0x380/0x380 [ 615.242460][T21574] ? vtime_user_exit+0x2c8/0x3e0 [ 615.247437][T21574] __x64_sys_bpf+0x78/0x90 [ 615.251881][T21574] do_syscall_64+0x4c/0xa0 [ 615.256324][T21574] ? clear_bhb_loop+0x30/0x80 [ 615.261157][T21574] ? clear_bhb_loop+0x30/0x80 [ 615.265975][T21574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 615.271890][T21574] RIP: 0033:0x7ff0ab1fa629 [ 615.276327][T21574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.296487][T21574] RSP: 002b:00007ff0a9454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 615.304918][T21574] RAX: ffffffffffffffda RBX: 00007ff0ab473fa0 RCX: 00007ff0ab1fa629 [ 615.312919][T21574] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 615.320927][T21574] RBP: 00007ff0a9454090 R08: 0000000000000000 R09: 0000000000000000 [ 615.329009][T21574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.336985][T21574] R13: 00007ff0ab474038 R14: 00007ff0ab473fa0 R15: 00007ffd0539c528 [ 615.344991][T21574] [ 615.479814][T21574] syz.3.5544: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 615.528489][T21574] CPU: 0 PID: 21574 Comm: syz.3.5544 Not tainted syzkaller #0 [ 615.536009][T21574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 615.546086][T21574] Call Trace: [ 615.549394][T21574] [ 615.552354][T21574] dump_stack_lvl+0x188/0x250 [ 615.557074][T21574] ? rcu_lock_release+0x5/0x20 [ 615.561890][T21574] ? show_regs_print_info+0x20/0x20 [ 615.567133][T21574] ? load_image+0x400/0x400 [ 615.571671][T21574] warn_alloc+0x243/0x320 [ 615.576037][T21574] ? zone_watermark_ok_safe+0x240/0x240 [ 615.581631][T21574] ? __get_vm_area_node+0x2b5/0x2d0 [ 615.586866][T21574] __vmalloc_node_range+0x2b1/0x8b0 [ 615.592123][T21574] ? end_current_label_crit_section+0x170/0x170 [ 615.598399][T21574] ? __lock_acquire+0x7d10/0x7d10 [ 615.603449][T21574] ? __lock_acquire+0x13bc/0x7d10 [ 615.608506][T21574] ? trace_event_raw_event_lock+0x270/0x270 [ 615.614433][T21574] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 615.620025][T21574] __vmalloc+0x76/0x80 [ 615.624136][T21574] ? bpf_prog_alloc_no_stats+0x36/0x2c0 [ 615.629715][T21574] bpf_prog_alloc_no_stats+0x36/0x2c0 [ 615.635127][T21574] bpf_prog_alloc+0x1a/0x1e0 [ 615.639730][T21574] bpf_prog_load+0x7c6/0x1510 [ 615.644455][T21574] ? map_freeze+0x350/0x350 [ 615.648990][T21574] ? __might_fault+0xb7/0x110 [ 615.653723][T21574] ? __might_fault+0xb3/0x110 [ 615.658431][T21574] ? bpf_lsm_bpf+0x5/0x10 [ 615.662789][T21574] ? security_bpf+0x7a/0xa0 [ 615.667322][T21574] __sys_bpf+0x532/0x6f0 [ 615.671600][T21574] ? bpf_link_show_fdinfo+0x380/0x380 [ 615.677008][T21574] ? vtime_user_exit+0x2c8/0x3e0 [ 615.682008][T21574] __x64_sys_bpf+0x78/0x90 [ 615.686463][T21574] do_syscall_64+0x4c/0xa0 [ 615.691031][T21574] ? clear_bhb_loop+0x30/0x80 [ 615.695751][T21574] ? clear_bhb_loop+0x30/0x80 [ 615.700551][T21574] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 615.706504][T21574] RIP: 0033:0x7ff0ab1fa629 [ 615.711066][T21574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.730693][T21574] RSP: 002b:00007ff0a9454028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 615.739127][T21574] RAX: ffffffffffffffda RBX: 00007ff0ab473fa0 RCX: 00007ff0ab1fa629 [ 615.747117][T21574] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 615.755140][T21574] RBP: 00007ff0a9454090 R08: 0000000000000000 R09: 0000000000000000 [ 615.763143][T21574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.771394][T21574] R13: 00007ff0ab474038 R14: 00007ff0ab473fa0 R15: 00007ffd0539c528 [ 615.779409][T21574] [ 615.932738][T21595] netlink: 'syz.5.5552': attribute type 10 has an invalid length. [ 615.971480][T21595] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5552'. [ 616.000685][T21574] Mem-Info: [ 616.007676][T21574] active_anon:283 inactive_anon:8343 isolated_anon:0 [ 616.007676][T21574] active_file:24624 inactive_file:36558 isolated_file:0 [ 616.007676][T21574] unevictable:768 dirty:192 writeback:0 [ 616.007676][T21574] slab_reclaimable:21029 slab_unreclaimable:104348 [ 616.007676][T21574] mapped:30254 shmem:1641 pagetables:715 bounce:0 [ 616.007676][T21574] kernel_misc_reclaimable:0 [ 616.007676][T21574] free:1315080 free_pcp:9664 free_cma:0 [ 616.053762][T21574] Node 0 active_anon:1100kB inactive_anon:32864kB active_file:98296kB inactive_file:146232kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121016kB dirty:768kB writeback:0kB shmem:4488kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11672kB pagetables:2860kB all_unreclaimable? no [ 616.104929][T21590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5548'. [ 616.146778][T21574] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 616.196916][T21574] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.333739][T21574] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 616.354366][T21595] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.5552'. [ 616.367158][T21574] Node 0 DMA32 free:1295592kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1100kB inactive_anon:32764kB active_file:98296kB inactive_file:146232kB unevictable:1536kB writepending:768kB present:3129332kB managed:2606556kB mlocked:0kB bounce:0kB free_pcp:37880kB local_pcp:21240kB free_cma:0kB [ 616.404648][T21595] netlink: 'syz.5.5552': attribute type 2 has an invalid length. [ 616.462801][T21574] lowmem_reserve[]: 0 0 0 0 0 [ 616.472972][T21574] Node 0 Normal free:4kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 616.592993][T21574] lowmem_reserve[]: 0 0 0 0 0 [ 616.630494][T21574] Node 1 Normal free:3924924kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:652kB local_pcp:652kB free_cma:0kB [ 616.744226][T21574] lowmem_reserve[]: 0 0 0 0 0 [ 616.749028][T21574] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 616.781057][T21574] Node 0 DMA32: 2153*4kB (ME) 1116*8kB (UM) 538*16kB (UME) 892*32kB (UME) 552*64kB (ME) 275*128kB (ME) 160*256kB (ME) 185*512kB (UME) 93*1024kB (UM) 17*2048kB (UME) 213*4096kB (UM) = 1263396kB [ 616.863718][T21574] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 616.881219][T21574] Node 1 Normal: 199*4kB (UME) 42*8kB (UME) 27*16kB (UME) 211*32kB (UME) 89*64kB (UME) 20*128kB (UE) 11*256kB (UM) 4*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 952*4096kB (M) = 3924924kB [ 616.903556][T21574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.914449][T21574] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 616.941384][T21574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.957235][T21574] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 616.978849][T21574] 62823 total pagecache pages [ 616.992753][T21574] 0 pages in swap cache [ 617.021907][T21574] Swap cache stats: add 0, delete 0, find 0/0 [ 617.028672][T21574] Free swap = 124996kB [ 617.032914][T21574] Total swap = 124996kB [ 617.037676][T21574] 2097051 pages RAM [ 617.041678][T21574] 0 pages HighMem/MovableOnly [ 617.053024][T21574] 411489 pages reserved [ 617.061231][T21574] 0 pages cma reserved [ 618.407545][T21678] netlink: 'syz.3.5585': attribute type 3 has an invalid length. [ 618.435370][T21678] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5585'. [ 618.646762][T21683] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.5587'. [ 619.166906][T21704] netlink: 'syz.5.5594': attribute type 29 has an invalid length. [ 619.201590][T21704] netlink: 'syz.5.5594': attribute type 29 has an invalid length. [ 619.355826][T21704] netlink: 'syz.5.5594': attribute type 29 has an invalid length. [ 619.397527][T21704] netlink: 'syz.5.5594': attribute type 29 has an invalid length. [ 619.431905][T21704] netlink: 'syz.5.5594': attribute type 29 has an invalid length. [ 620.376880][T21732] netlink: 'syz.3.5604': attribute type 9 has an invalid length. [ 620.417578][T21732] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.5604'. [ 621.874123][ C0] ------------[ cut here ]------------ [ 621.879671][ C0] WARNING: CPU: 0 PID: 13876 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 621.889085][ C0] Modules linked in: [ 621.892995][ C0] CPU: 0 PID: 13876 Comm: syz-executor Not tainted syzkaller #0 [ 621.900644][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 621.910721][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 621.916913][ C0] Code: 24 45 31 f6 31 ff 89 de e8 5d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 90 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 621.936539][ C0] RSP: 0018:ffffc900000074f0 EFLAGS: 00010006 [ 621.942622][ C0] RAX: ffffffff81a09160 RBX: 0000000000000008 RCX: ffff88801abfbb80 [ 621.950703][ C0] RDX: 0000000000010100 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.958695][ C0] RBP: 0000000000000000 R08: ffff88801abfbb87 R09: 1ffff1100357f770 [ 621.966681][ C0] R10: dffffc0000000000 R11: ffffed100357f771 R12: ffff88801abfd308 [ 621.974684][ C0] R13: 00007ffffffff000 R14: ffffc90000007568 R15: 0000000000000000 [ 621.982674][ C0] FS: 00005555710a4500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 621.991631][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.998230][ C0] CR2: 00007ffd2d221c8c CR3: 00000000565d8000 CR4: 00000000003506f0 [ 622.006220][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 622.014286][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 622.022277][ C0] Call Trace: [ 622.025590][ C0] [ 622.028455][ C0] bpf_probe_read_compat+0xdd/0x170 [ 622.033707][ C0] bpf_prog_bc47904a6221c669+0x5b/0x8d4 [ 622.039256][ C0] __bpf_prog_test_run_raw_tp+0x1cd/0x3f0 [ 622.045171][ C0] ? bpf_prog_test_run_raw_tp+0x650/0x650 [ 622.050933][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 622.056245][ C0] ? bpf_prog_test_run_raw_tp+0x650/0x650 [ 622.061981][ C0] flush_smp_call_function_queue+0x2a9/0x760 [ 622.067989][ C0] __sysvec_call_function_single+0x98/0x240 [ 622.073909][ C0] sysvec_call_function_single+0x4a/0xc0 [ 622.079577][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 622.085585][ C0] RIP: 0010:__napi_alloc_skb+0x1f9/0x2d0 [ 622.091256][ C0] Code: 3c 28 00 74 08 48 89 df e8 94 e7 e1 f9 4c 8b 3b 49 8d 5e 10 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f7 e7 e1 f9 <4c> 89 3b 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 81 db 9c f9 [ 622.111113][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00000246 [ 622.117215][ C0] RAX: 1ffff110090b18a2 RBX: ffff88804858c510 RCX: ffff88801abfbb80 [ 622.125212][ C0] RDX: 0000000000000100 RSI: 0000000000000004 RDI: ffff88804858c5d0 [ 622.133193][ C0] RBP: 0000000000000a20 R08: ffff8880626824e3 R09: 1ffff1100c4d049c [ 622.141167][ C0] R10: dffffc0000000000 R11: ffffed100c4d049d R12: 0000000000000001 [ 622.149158][ C0] R13: dffffc0000000000 R14: ffff88804858c500 R15: ffff888147b24000 [ 622.157167][ C0] ? __napi_alloc_skb+0x162/0x2d0 [ 622.162224][ C0] page_to_skb+0x26a/0xcf0 [ 622.166683][ C0] receive_buf+0x14db/0x58e0 [ 622.171313][ C0] ? virtnet_poll_tx+0x4c0/0x4c0 [ 622.176441][ C0] ? mark_lock+0x94/0x320 [ 622.180972][ C0] ? detach_buf_split+0x8a9/0xab0 [ 622.186203][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 622.191592][ C0] ? free_old_xmit_skbs+0x252/0x2b0 [ 622.197091][ C0] ? virtqueue_get_buf_ctx+0x716/0xfd0 [ 622.202590][ C0] virtnet_poll+0x571/0xf40 [ 622.207142][ C0] ? refill_work+0x210/0x210 [ 622.211752][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 622.217763][ C0] ? lock_chain_count+0x20/0x20 [ 622.222743][ C0] __napi_poll+0xc0/0x430 [ 622.227096][ C0] ? net_rx_action+0x307/0xa10 [ 622.231862][ C0] net_rx_action+0x4d4/0xa10 [ 622.236475][ C0] ? lockdep_softirqs_on+0x580/0x580 [ 622.241794][ C0] ? net_tx_action+0x880/0x880 [ 622.246582][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 622.252596][ C0] ? lock_chain_count+0x20/0x20 [ 622.257591][ C0] handle_softirqs+0x339/0x830 [ 622.262397][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 622.267357][ C0] ? do_softirq+0x210/0x210 [ 622.271887][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 622.277129][ C0] __irq_exit_rcu+0x13b/0x230 [ 622.281833][ C0] ? irq_exit_rcu+0x20/0x20 [ 622.286364][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 622.291599][ C0] irq_exit_rcu+0x5/0x20 [ 622.295869][ C0] common_interrupt+0xb5/0xd0 [ 622.300667][ C0] [ 622.303645][ C0] [ 622.306593][ C0] asm_common_interrupt+0x22/0x40 [ 622.311655][ C0] RIP: 0010:memset_erms+0xb/0x10 [ 622.316628][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 622.336246][ C0] RSP: 0018:ffffc9000350f440 EFLAGS: 00000202 [ 622.342329][ C0] RAX: 0000000000000000 RBX: ffffc9000350f508 RCX: 0000000000000000 [ 622.350315][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000350f568 [ 622.358304][ C0] RBP: ffffc9000350f550 R08: ffffc9000350f567 R09: ffffc9000350f558 [ 622.366290][ C0] R10: dffffc0000000000 R11: fffff520006a1ead R12: 1ffffffff1c1f1ee [ 622.374282][ C0] R13: dffffc0000000000 R14: ffffc9000350f558 R15: ffffc9000350f53d [ 622.382288][ C0] unwind_next_frame+0xa3d/0x1d90 [ 622.387350][ C0] ? do_filp_open+0x1e2/0x410 [ 622.392057][ C0] ? stack_trace_save+0xf0/0xf0 [ 622.397163][ C0] arch_stack_walk+0x10c/0x140 [ 622.401965][ C0] ? do_sys_openat2+0x150/0x4b0 [ 622.406852][ C0] stack_trace_save+0xa6/0xf0 [ 622.411639][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 622.416778][ C0] __kasan_slab_alloc+0x9c/0xd0 [ 622.421650][ C0] ? __kasan_slab_alloc+0x9c/0xd0 [ 622.426829][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 622.432113][ C0] ? kmem_cache_alloc+0x100/0x290 [ 622.437245][ C0] ? __alloc_file+0x25/0x240 [ 622.441858][ C0] ? alloc_empty_file+0x90/0x180 [ 622.446828][ C0] ? path_openat+0x10f/0x2fa0 [ 622.451636][ C0] ? do_filp_open+0x1e2/0x410 [ 622.456390][ C0] slab_post_alloc_hook+0x4c/0x380 [ 622.461542][ C0] ? __alloc_file+0x25/0x240 [ 622.466168][ C0] ? __alloc_file+0x25/0x240 [ 622.470778][ C0] kmem_cache_alloc+0x100/0x290 [ 622.475654][ C0] __alloc_file+0x25/0x240 [ 622.480194][ C0] alloc_empty_file+0x90/0x180 [ 622.484984][ C0] path_openat+0x10f/0x2fa0 [ 622.489577][ C0] ? perf_trace_lock+0xe4/0x390 [ 622.494457][ C0] ? __x64_sys_openat+0x135/0x160 [ 622.499502][ C0] ? do_filp_open+0x410/0x410 [ 622.504197][ C0] ? perf_trace_lock+0xe4/0x390 [ 622.509077][ C0] ? trace_event_raw_event_lock+0x270/0x270 [ 622.515018][ C0] do_filp_open+0x1e2/0x410 [ 622.519557][ C0] ? vfs_tmpfile+0x300/0x300 [ 622.524191][ C0] ? _raw_spin_unlock+0x24/0x40 [ 622.529053][ C0] ? alloc_fd+0x598/0x630 [ 622.533380][ C0] do_sys_openat2+0x150/0x4b0 [ 622.538052][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 622.543096][ C0] ? do_sys_open+0xe0/0xe0 [ 622.547627][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 622.553633][ C0] ? lock_chain_count+0x20/0x20 [ 622.558509][ C0] ? vtime_user_exit+0x2c8/0x3e0 [ 622.563662][ C0] __x64_sys_openat+0x135/0x160 [ 622.568603][ C0] do_syscall_64+0x4c/0xa0 [ 622.573065][ C0] ? clear_bhb_loop+0x30/0x80 [ 622.577765][ C0] ? clear_bhb_loop+0x30/0x80 [ 622.582574][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 622.588665][ C0] RIP: 0033:0x7f59ae10b94c [ 622.593120][ C0] Code: 4c 89 54 24 18 41 89 f2 41 83 e2 40 75 40 89 f0 f7 d0 a9 00 00 41 00 74 35 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 44 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 622.612844][ C0] RSP: 002b:00007ffd2d221c10 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 622.621383][ C0] RAX: ffffffffffffffda RBX: 00007f59ae1a1ef0 RCX: 00007f59ae10b94c [ 622.629381][ C0] RDX: 0000000000090800 RSI: 00007ffd2d222dc0 RDI: 00000000ffffff9c [ 622.637365][ C0] RBP: 00007ffd2d222dac R08: 0000000000000000 R09: 0000000000000000 [ 622.645345][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd2d222dc0 [ 622.653333][ C0] R13: 00007f59ae1a1ef0 R14: 0000000000097cee R15: 00007ffd2d222e00 [ 622.661342][ C0] [ 622.664390][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 622.671678][ C0] CPU: 0 PID: 13876 Comm: syz-executor Not tainted syzkaller #0 [ 622.679325][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 622.689395][ C0] Call Trace: [ 622.692691][ C0] [ 622.695560][ C0] dump_stack_lvl+0x188/0x250 [ 622.700283][ C0] ? show_regs_print_info+0x20/0x20 [ 622.705513][ C0] ? load_image+0x400/0x400 [ 622.710054][ C0] panic+0x2e5/0x810 [ 622.713971][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 622.718503][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 622.724071][ C0] __warn+0x248/0x2b0 [ 622.728068][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 622.733605][ C0] report_bug+0x1b7/0x2e0 [ 622.737946][ C0] handle_bug+0x3a/0x70 [ 622.742125][ C0] exc_invalid_op+0x16/0x40 [ 622.746651][ C0] asm_exc_invalid_op+0x16/0x20 [ 622.751523][ C0] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 622.757700][ C0] Code: 24 45 31 f6 31 ff 89 de e8 5d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 90 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 622.777319][ C0] RSP: 0018:ffffc900000074f0 EFLAGS: 00010006 [ 622.783414][ C0] RAX: ffffffff81a09160 RBX: 0000000000000008 RCX: ffff88801abfbb80 [ 622.791408][ C0] RDX: 0000000000010100 RSI: 0000000000000000 RDI: 0000000000000000 [ 622.799498][ C0] RBP: 0000000000000000 R08: ffff88801abfbb87 R09: 1ffff1100357f770 [ 622.807488][ C0] R10: dffffc0000000000 R11: ffffed100357f771 R12: ffff88801abfd308 [ 622.815482][ C0] R13: 00007ffffffff000 R14: ffffc90000007568 R15: 0000000000000000 [ 622.823590][ C0] ? copy_from_user_nofault+0x160/0x1c0 [ 622.829182][ C0] bpf_probe_read_compat+0xdd/0x170 [ 622.834386][ C0] bpf_prog_bc47904a6221c669+0x5b/0x8d4 [ 622.839941][ C0] __bpf_prog_test_run_raw_tp+0x1cd/0x3f0 [ 622.845692][ C0] ? bpf_prog_test_run_raw_tp+0x650/0x650 [ 622.851439][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 622.856667][ C0] ? bpf_prog_test_run_raw_tp+0x650/0x650 [ 622.862405][ C0] flush_smp_call_function_queue+0x2a9/0x760 [ 622.868418][ C0] __sysvec_call_function_single+0x98/0x240 [ 622.874337][ C0] sysvec_call_function_single+0x4a/0xc0 [ 622.880006][ C0] asm_sysvec_call_function_single+0x16/0x20 [ 622.886006][ C0] RIP: 0010:__napi_alloc_skb+0x1f9/0x2d0 [ 622.891659][ C0] Code: 3c 28 00 74 08 48 89 df e8 94 e7 e1 f9 4c 8b 3b 49 8d 5e 10 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f7 e7 e1 f9 <4c> 89 3b 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 81 db 9c f9 [ 622.911369][ C0] RSP: 0018:ffffc90000007788 EFLAGS: 00000246 [ 622.917460][ C0] RAX: 1ffff110090b18a2 RBX: ffff88804858c510 RCX: ffff88801abfbb80 [ 622.925445][ C0] RDX: 0000000000000100 RSI: 0000000000000004 RDI: ffff88804858c5d0 [ 622.933421][ C0] RBP: 0000000000000a20 R08: ffff8880626824e3 R09: 1ffff1100c4d049c [ 622.941396][ C0] R10: dffffc0000000000 R11: ffffed100c4d049d R12: 0000000000000001 [ 622.949871][ C0] R13: dffffc0000000000 R14: ffff88804858c500 R15: ffff888147b24000 [ 622.957886][ C0] ? __napi_alloc_skb+0x162/0x2d0 [ 622.963021][ C0] page_to_skb+0x26a/0xcf0 [ 622.967510][ C0] receive_buf+0x14db/0x58e0 [ 622.972152][ C0] ? virtnet_poll_tx+0x4c0/0x4c0 [ 622.977118][ C0] ? mark_lock+0x94/0x320 [ 622.981483][ C0] ? detach_buf_split+0x8a9/0xab0 [ 622.986540][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 622.991584][ C0] ? free_old_xmit_skbs+0x252/0x2b0 [ 622.996831][ C0] ? virtqueue_get_buf_ctx+0x716/0xfd0 [ 623.002315][ C0] virtnet_poll+0x571/0xf40 [ 623.006868][ C0] ? refill_work+0x210/0x210 [ 623.011484][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 623.017504][ C0] ? lock_chain_count+0x20/0x20 [ 623.022403][ C0] __napi_poll+0xc0/0x430 [ 623.026770][ C0] ? net_rx_action+0x307/0xa10 [ 623.031550][ C0] net_rx_action+0x4d4/0xa10 [ 623.036141][ C0] ? lockdep_softirqs_on+0x580/0x580 [ 623.041460][ C0] ? net_tx_action+0x880/0x880 [ 623.046254][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 623.052268][ C0] ? lock_chain_count+0x20/0x20 [ 623.057158][ C0] handle_softirqs+0x339/0x830 [ 623.061956][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 623.067114][ C0] ? do_softirq+0x210/0x210 [ 623.071658][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 623.076884][ C0] __irq_exit_rcu+0x13b/0x230 [ 623.081583][ C0] ? irq_exit_rcu+0x20/0x20 [ 623.086107][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 623.091332][ C0] irq_exit_rcu+0x5/0x20 [ 623.095598][ C0] common_interrupt+0xb5/0xd0 [ 623.100307][ C0] [ 623.103251][ C0] [ 623.106198][ C0] asm_common_interrupt+0x22/0x40 [ 623.111245][ C0] RIP: 0010:memset_erms+0xb/0x10 [ 623.116208][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 623.135836][ C0] RSP: 0018:ffffc9000350f440 EFLAGS: 00000202 [ 623.141923][ C0] RAX: 0000000000000000 RBX: ffffc9000350f508 RCX: 0000000000000000 [ 623.149914][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000350f568 [ 623.157901][ C0] RBP: ffffc9000350f550 R08: ffffc9000350f567 R09: ffffc9000350f558 [ 623.165884][ C0] R10: dffffc0000000000 R11: fffff520006a1ead R12: 1ffffffff1c1f1ee [ 623.173867][ C0] R13: dffffc0000000000 R14: ffffc9000350f558 R15: ffffc9000350f53d [ 623.181876][ C0] unwind_next_frame+0xa3d/0x1d90 [ 623.186934][ C0] ? do_filp_open+0x1e2/0x410 [ 623.191642][ C0] ? stack_trace_save+0xf0/0xf0 [ 623.196693][ C0] arch_stack_walk+0x10c/0x140 [ 623.201489][ C0] ? do_sys_openat2+0x150/0x4b0 [ 623.206367][ C0] stack_trace_save+0xa6/0xf0 [ 623.211062][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 623.216202][ C0] __kasan_slab_alloc+0x9c/0xd0 [ 623.221073][ C0] ? __kasan_slab_alloc+0x9c/0xd0 [ 623.226122][ C0] ? slab_post_alloc_hook+0x4c/0x380 [ 623.231429][ C0] ? kmem_cache_alloc+0x100/0x290 [ 623.236454][ C0] ? __alloc_file+0x25/0x240 [ 623.241078][ C0] ? alloc_empty_file+0x90/0x180 [ 623.246063][ C0] ? path_openat+0x10f/0x2fa0 [ 623.250760][ C0] ? do_filp_open+0x1e2/0x410 [ 623.255493][ C0] slab_post_alloc_hook+0x4c/0x380 [ 623.260630][ C0] ? __alloc_file+0x25/0x240 [ 623.265243][ C0] ? __alloc_file+0x25/0x240 [ 623.269858][ C0] kmem_cache_alloc+0x100/0x290 [ 623.274736][ C0] __alloc_file+0x25/0x240 [ 623.279178][ C0] alloc_empty_file+0x90/0x180 [ 623.283971][ C0] path_openat+0x10f/0x2fa0 [ 623.288515][ C0] ? perf_trace_lock+0xe4/0x390 [ 623.293398][ C0] ? __x64_sys_openat+0x135/0x160 [ 623.298452][ C0] ? do_filp_open+0x410/0x410 [ 623.303149][ C0] ? perf_trace_lock+0xe4/0x390 [ 623.308027][ C0] ? trace_event_raw_event_lock+0x270/0x270 [ 623.313946][ C0] do_filp_open+0x1e2/0x410 [ 623.318490][ C0] ? vfs_tmpfile+0x300/0x300 [ 623.323137][ C0] ? _raw_spin_unlock+0x24/0x40 [ 623.328000][ C0] ? alloc_fd+0x598/0x630 [ 623.332327][ C0] do_sys_openat2+0x150/0x4b0 [ 623.337007][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 623.342050][ C0] ? do_sys_open+0xe0/0xe0 [ 623.346498][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 623.352517][ C0] ? lock_chain_count+0x20/0x20 [ 623.357429][ C0] ? vtime_user_exit+0x2c8/0x3e0 [ 623.362395][ C0] __x64_sys_openat+0x135/0x160 [ 623.367270][ C0] do_syscall_64+0x4c/0xa0 [ 623.371704][ C0] ? clear_bhb_loop+0x30/0x80 [ 623.376404][ C0] ? clear_bhb_loop+0x30/0x80 [ 623.381118][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 623.387048][ C0] RIP: 0033:0x7f59ae10b94c [ 623.391618][ C0] Code: 4c 89 54 24 18 41 89 f2 41 83 e2 40 75 40 89 f0 f7 d0 a9 00 00 41 00 74 35 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 44 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 [ 623.411323][ C0] RSP: 002b:00007ffd2d221c10 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 623.419750][ C0] RAX: ffffffffffffffda RBX: 00007f59ae1a1ef0 RCX: 00007f59ae10b94c [ 623.427737][ C0] RDX: 0000000000090800 RSI: 00007ffd2d222dc0 RDI: 00000000ffffff9c [ 623.435713][ C0] RBP: 00007ffd2d222dac R08: 0000000000000000 R09: 0000000000000000 [ 623.443687][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffd2d222dc0 [ 623.451675][ C0] R13: 00007f59ae1a1ef0 R14: 0000000000097cee R15: 00007ffd2d222e00 [ 623.459690][ C0] [ 623.462828][ C0] Kernel Offset: disabled [ 623.467389][ C0] Rebooting in 86400 seconds..