last executing test programs: 25.75513147s ago: executing program 2 (id=2544): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x4}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000002000000140000000220000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000100)=r0}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', r0, 0x4000, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) getpid() 25.588885056s ago: executing program 2 (id=2546): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x20, 0xfd, 0x0, 0xfffffffffffffff8, 0x80218, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1, 0xfff}, 0x2005, 0x0, 0x54, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000020"], 0x5) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4, @ANYRES16, @ANYRESDEC, @ANYRES16=r2], 0x5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10005, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0xb, 0x0, 0x4000003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x674}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 25.161510271s ago: executing program 2 (id=2550): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18eba60000fffffffffffffff900ffff080000002a0000008300000000000000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000008000000600b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xc2ba, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)={0xc3d5df0}, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) 24.090929378s ago: executing program 4 (id=2552): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x16) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8810) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) getpid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x16, 0x8, 0x29, 0x0, 0x7fffffff, 0xff178d7635c760fc, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x1, 0x4}, 0x5, 0xb, 0x3, 0x8, 0x81, 0x2008004, 0x3, 0x0, 0x2c7, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) 23.024731435s ago: executing program 3 (id=2555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$SIOCSIFHWADDR(r0, 0x541b, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000002e008188040f46ecdb4cb97f014da7afbb480ef90eb2a100e3bd6efb640009000a000a000063b95a", 0x2c}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x400c84c) r5 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x113, 0x4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0a000000f8fffffeffff7f0000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4020804) 23.009632826s ago: executing program 1 (id=2556): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)='\\h', 0x2}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0xfff5, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 21.025641365s ago: executing program 4 (id=2558): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x300, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r0, 0x0, 0x19, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r1) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x4, 0x3, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0xe, &(0x7f0000000340), 0xfe62) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) recvmsg$kcm(r3, &(0x7f0000003740)={&(0x7f0000000180)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000014c0)=""/226, 0xe2}, {0x0}, {0x0}, {&(0x7f0000004d40)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/105, 0x69}], 0x5}, 0x40002163) sendmsg$kcm(r4, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x6, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722", 0x6f}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0", 0x31}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3b", 0xa8a}], 0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f00000001c0)="9e36d449b388", 0x0, 0x10727, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.024453215s ago: executing program 1 (id=2568): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x15, 0xc, 0x2, 0x3, 0x1000, 0xffffffffffffffff, 0x6, '\x00', r0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x22a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socketpair(0x8, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7fff"}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r6) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 20.968092177s ago: executing program 2 (id=2560): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x20, 0xfd, 0x0, 0xfffffffffffffff8, 0x80218, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1, 0xfff}, 0x2005, 0x0, 0x54, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000020"], 0x5) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4, @ANYRES16, @ANYRESDEC, @ANYRES16=r2], 0x5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10005, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0xb, 0x0, 0x4000003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x674}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 20.88080562s ago: executing program 3 (id=2561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xd28, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 20.440871976s ago: executing program 0 (id=2562): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 20.368388278s ago: executing program 2 (id=2563): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003"], 0x0, 0x53}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) syz_clone(0x6ea01aec3f355695, &(0x7f00000005c0)="ba8a86191b4c60d1a507dc934104c7679dcb48e5482e5ec765ba2e278482377634366b41365752cec6279da81a42a9caa40b2b52cf7080c36daa1c9f8b2825145a1cd48e60a9a12263b204fe37b8ded8a31f2dc271bb9db73e", 0x59, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000640)="dca1961493188351dbb571dfaa27dbd09091a2e85f91d67cc51858e322b3e8448143a095239483eb1da56fc213d4e3a069a129aa637d4d9ca1c595592cdc64a9db5894decd2f34d10906ba3c3bca0675205aef678a5a57ae13884debfd0934ddf4150b5e0c5270544a1b9ddf49087a41d7936bf093f094efa749e1d26e54354373ee7385ff710b4976fcbbc42142517678cf05910feaa22a1e527b33a4e888ec9460") r2 = socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x0, 0x0, 0x0, 0x924d, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x1, 0x3, 0x6, 0xc4d2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$kcm(r2, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x9}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000020000000000000095000000000000003f768547234ecd79f0f97246cdf3d99ac5a37169f8ca1057457104edeca5515b7139808481fd3ff22b0c0082c32426d5d43f91eb4a3d3a35fd203d0440046543243b30"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003f9010001"], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}, 0x2160) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x98240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x80000005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000002c0)='{:#%*\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000440)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0xc00, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 20.152314556s ago: executing program 3 (id=2564): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x81}, 0x100c, 0x0, 0xfffffffc, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x22, 0x2, 0x26) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x10005}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x521}, 0x57) socket$kcm(0x1e, 0x1, 0x0) write$cgroup_devices(r2, 0x0, 0xfffffeff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x80000000, 0xdd, &(0x7f0000000140)=""/221, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{0x1, 0x2, 0xf, 0x9}, {0x3, 0x1, 0x7, 0xc}, {0x4, 0x2, 0xe, 0xa}, {0x1, 0x5, 0x3, 0x1}, {0x5, 0x2, 0xb, 0x4}], 0x10, 0x100}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0xffffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x5, 0x8, 0x3, 0x1ff, 0xffff7fff}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000440)='GPL\x00', 0x30d5, 0x9, &(0x7f0000000480)=""/9, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0x6, 0xaf7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r1, r6, r6, r1, r6, r1, r1, r1], &(0x7f0000000540)=[{0x2, 0x4, 0x10, 0x4}, {0x2, 0x5, 0xe, 0x1}, {0x0, 0x5, 0x2, 0x5}], 0x10, 0x6}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000640)={r7, r8, 0x4, r9}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r6, 0x0}, 0x20) 20.067208439s ago: executing program 4 (id=2565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a776"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff2020c8050002000aac14140ce0320e6a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.834542997s ago: executing program 0 (id=2566): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x1ff) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x2e, 0xed, 0x1}, 0x28) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x8, @private=0xa010101}, 0x10, 0x0}, 0xc000) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10ff"], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x61}, 0x94) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xffc0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 19.681065423s ago: executing program 2 (id=2567): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x15, 0xc, 0x2, 0x3, 0x1000, 0xffffffffffffffff, 0x6, '\x00', r0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x22a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socketpair(0x8, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7fff"}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r6) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 19.632934204s ago: executing program 1 (id=2569): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x81}, 0x100c, 0x0, 0xfffffffc, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x22, 0x2, 0x26) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x10005}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x521}, 0x57) socket$kcm(0x1e, 0x1, 0x0) write$cgroup_devices(r2, 0x0, 0xfffffeff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x80000000, 0xdd, &(0x7f0000000140)=""/221, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000280)=[{0x1, 0x2, 0xf, 0x9}, {0x3, 0x1, 0x7, 0xc}, {0x3, 0x1, 0x2, 0x8}, {0x4, 0x2, 0xe, 0xa}, {0x1, 0x5, 0x3, 0x1}, {0x5, 0x2, 0xb, 0x4}], 0x10, 0x100}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x30d5, 0x9, &(0x7f0000000480)=""/9, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0x6, 0xaf7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r1, r6, r6, r1, r6, r1, r1, r1], &(0x7f0000000540)=[{0x2, 0x4, 0x10, 0x4}, {0x2, 0x5, 0xe, 0x1}, {0x0, 0x5, 0x2, 0x5}], 0x10, 0x6}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000640)={r7, r8, 0x4, r9}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r6, 0x0}, 0x20) 19.631433104s ago: executing program 3 (id=2570): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x16) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8810) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) getpid() socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x16, 0x8, 0x29, 0x0, 0x7fffffff, 0xff178d7635c760fc, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x1, 0x4}, 0x5, 0xb, 0x3, 0x8, 0x81, 0x2008004, 0x3, 0x0, 0x2c7, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 19.576721176s ago: executing program 4 (id=2571): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18eba60000fffffffffffffff900ffff080000002a0000008300000000000000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000008000000600b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xc2ba, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)={0xc3d5df0}, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000600)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x36) 19.482716859s ago: executing program 0 (id=2572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) ioctl$SIOCSIFHWADDR(r0, 0x541b, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000002e008188040f46ecdb4cb97f014da7afbb480ef90eb2a100e3bd6efb640009000a000a000063b95a", 0x2c}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0xc, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x400c84c) r5 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x113, 0x4, 0x0, 0x0) r6 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0a000000f8fffffeffff7f0000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4020804) 19.025648045s ago: executing program 1 (id=2573): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="b4bb48dbc90550741ebeb10000000000000000af43"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f00000003c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x0, r1, 0x8, &(0x7f0000000240)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000540)=[{0x5, 0x2, 0x6, 0xa}, {0x1, 0x4, 0x9, 0x8}], 0x10, 0x7}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@var={0xc, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000bc0)=""/248, 0x2b, 0xf8, 0x0, 0xfffff20b, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0x20, &(0x7f0000000e00)={&(0x7f0000000cc0)=""/187, 0xbb, 0x0, &(0x7f0000000d80)=""/128, 0x80}}, 0x10) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000ec0)=@generic={&(0x7f0000000e80)='./file0\x00', 0x0, 0x28}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1c, 0x3, &(0x7f0000000040)=@raw=[@alu={0x4, 0x1, 0x3, 0x6, 0x3, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @alu={0x7, 0x0, 0x8, 0xb, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc}], &(0x7f0000000180)='GPL\x00', 0x2, 0x26, &(0x7f0000000a80)=""/38, 0x41100, 0x60, '\x00', r2, @fallback=0x29, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x4, 0xb, 0x4, 0x2}, 0x10, r4, r5, 0x1, &(0x7f0000000f00)=[r0, r0, r0, r0], &(0x7f0000000f40)=[{0x0, 0x4, 0x4, 0xe}], 0x10, 0xfffffff8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, r7, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r11, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x18, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) r12 = openat$cgroup_int(r10, &(0x7f0000000b80)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f00000003c0)=0x202, 0x12) 18.958993537s ago: executing program 3 (id=2574): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x20, 0xfd, 0x0, 0xfffffffffffffff8, 0x80218, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1, 0xfff}, 0x2005, 0x0, 0x54, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000020"], 0x5) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4, @ANYRES16, @ANYRESDEC, @ANYRES16=r2], 0x5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10005, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0xb, 0x0, 0x4000003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x674}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 16.381304978s ago: executing program 0 (id=2575): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000500000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xd28, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16.354556939s ago: executing program 3 (id=2576): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r2, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xfffff4b7, 0x0, 0x1}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="eb673468a1d4b3f1ac274e1633766522438f7d55a7f22df8e28fc6ec8d677cf78b41c22adf922d8bef985d6e2242f74b76e8ca5dabc1927dfeca095f5560d6d775f9ee1ad23211415025ae15790d7c3f2fcb9953bca2f88e0798e851b188cb7c44a90bae28cc85cf22b325ff568f85d0124eea958e8cc8ca5f5983730a7f86af2f24d36ad2db161c3083", 0x8a}], 0x1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10080, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000280)={'wg1\x00', @broadcast}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40047440, 0xf0ff1f00000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) socketpair(0x1, 0x3, 0x1f, &(0x7f0000000340)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x23, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000000c0)=r7, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000940)={r7, r7}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 16.350215639s ago: executing program 1 (id=2586): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x20, 0xfd, 0x0, 0xfffffffffffffff8, 0x80218, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1, 0xfff}, 0x2005, 0x0, 0x54, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xeff, 0xffffffffffffffde, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000020"], 0x5) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYRESOCT=r4, @ANYRES16, @ANYRESDEC, @ANYRES16=r2], 0x5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10005, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x0, 0x0, 0xb, 0x0, 0x4000003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x674}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 16.337923889s ago: executing program 4 (id=2577): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x8000000000000001}, 0x215, 0x3ff, 0xfffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x6ebd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x14, &(0x7f0000000040), 0x3b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000005301410000000000dd998000040000001854000004000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000e427bb604099f3e74dc4fceefdc751b337a29c0494e09f96717a0d2d946c9a0c0c2996916eda4ce3ba"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x11c040, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext, 0x406, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, 0x0) 16.104928497s ago: executing program 0 (id=2578): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 16.057865719s ago: executing program 1 (id=2579): socket$kcm(0x21, 0x2, 0xa) r0 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x6, 0x0, 0x8, 0xfffd, 0x0, 0x0, 0x0, 0x6}, r0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000d00000062010c00800000089500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xf}, 0x94) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="d80000001a0081044e81f782db4cb904021d0800ff007c05e8fe55a115000200e580000000000000080005007a0104dea700160020000100e0000000035c0461c9ed7f6f940071342e875fab7cb6ce457f0189b316277ce06bbace8017cbec4c27c768252ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653de8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf6341b3414394dc5d470fa2bd588744e5951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee000000000000de82656d", 0xd8}], 0x1}, 0x40000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r2) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xc0189436, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6, 0x84600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x8) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x2, &(0x7f0000000000), 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 15.898674575s ago: executing program 0 (id=2580): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x15, 0xc, 0x2, 0x3, 0x1000, 0xffffffffffffffff, 0x6, '\x00', r0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x22a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socketpair(0x8, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7fff"}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r6) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 15.884295955s ago: executing program 4 (id=2581): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x81}, 0x100c, 0x0, 0xfffffffc, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x22, 0x2, 0x26) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x10005}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x521}, 0x57) socket$kcm(0x1e, 0x1, 0x0) write$cgroup_devices(r2, 0x0, 0xfffffeff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x80000000, 0xdd, &(0x7f0000000140)=""/221, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{0x1, 0x2, 0xf, 0x9}, {0x3, 0x1, 0x2, 0x8}, {0x4, 0x2, 0xe, 0xa}, {0x1, 0x5, 0x3, 0x1}, {0x5, 0x2, 0xb, 0x4}], 0x10, 0x100}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0xffffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x5, 0x8, 0x3, 0x1ff, 0xffff7fff}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000440)='GPL\x00', 0x30d5, 0x9, &(0x7f0000000480)=""/9, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0x6, 0xaf7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r1, r6, r6, r1, r6, r1, r1, r1], &(0x7f0000000540)=[{0x2, 0x4, 0x10, 0x4}, {0x2, 0x5, 0xe, 0x1}, {0x0, 0x5, 0x2, 0x5}], 0x10, 0x6}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000640)={r7, r8, 0x4, r9}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r6, 0x0}, 0x20) 4.519396012s ago: executing program 32 (id=2567): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x15, 0xc, 0x2, 0x3, 0x1000, 0xffffffffffffffff, 0x6, '\x00', r0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x22a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socketpair(0x8, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7fff"}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r6) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 605.263059ms ago: executing program 33 (id=2580): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x15, 0xc, 0x2, 0x3, 0x1000, 0xffffffffffffffff, 0x6, '\x00', r0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x22a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, 0x0, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) socketpair(0x8, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x149000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8918, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7fff"}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000100)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r6) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454ce, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) 472.288824ms ago: executing program 34 (id=2579): socket$kcm(0x21, 0x2, 0xa) r0 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x6, 0x0, 0x8, 0xfffd, 0x0, 0x0, 0x0, 0x6}, r0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000d00000062010c00800000089500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xf}, 0x94) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="d80000001a0081044e81f782db4cb904021d0800ff007c05e8fe55a115000200e580000000000000080005007a0104dea700160020000100e0000000035c0461c9ed7f6f940071342e875fab7cb6ce457f0189b316277ce06bbace8017cbec4c27c768252ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653de8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf6341b3414394dc5d470fa2bd588744e5951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee000000000000de82656d", 0xd8}], 0x1}, 0x40000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r2) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xc0189436, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6, 0x84600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8000}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x8) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x2, &(0x7f0000000000), 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) 284.477561ms ago: executing program 35 (id=2576): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r2, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xfffff4b7, 0x0, 0x1}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="eb673468a1d4b3f1ac274e1633766522438f7d55a7f22df8e28fc6ec8d677cf78b41c22adf922d8bef985d6e2242f74b76e8ca5dabc1927dfeca095f5560d6d775f9ee1ad23211415025ae15790d7c3f2fcb9953bca2f88e0798e851b188cb7c44a90bae28cc85cf22b325ff568f85d0124eea958e8cc8ca5f5983730a7f86af2f24d36ad2db161c3083", 0x8a}], 0x1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10080, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000280)={'wg1\x00', @broadcast}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x40047440, 0xf0ff1f00000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) socketpair(0x1, 0x3, 0x1f, &(0x7f0000000340)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x23, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000000c0)=r7, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000940)={r7, r7}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 0s ago: executing program 36 (id=2581): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x12, 0x6, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x81}, 0x100c, 0x0, 0xfffffffc, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x22, 0x2, 0x26) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x10005}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b70300000000000085000000330000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r5, 0xffffffffffffffff, 0x521}, 0x57) socket$kcm(0x1e, 0x1, 0x0) write$cgroup_devices(r2, 0x0, 0xfffffeff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @map_fd={0x18, 0xa, 0x1, 0x0, r1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x80000000, 0xdd, &(0x7f0000000140)=""/221, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000280)=[{0x1, 0x2, 0xf, 0x9}, {0x3, 0x1, 0x2, 0x8}, {0x4, 0x2, 0xe, 0xa}, {0x1, 0x5, 0x3, 0x1}, {0x5, 0x2, 0xb, 0x4}], 0x10, 0x100}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0xffffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x5, 0x8, 0x3, 0x1ff, 0xffff7fff}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_val={0x18, 0x9, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000440)='GPL\x00', 0x30d5, 0x9, &(0x7f0000000480)=""/9, 0x41000, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x10, 0x6, 0xaf7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[r1, r6, r6, r1, r6, r1, r1, r1], &(0x7f0000000540)=[{0x2, 0x4, 0x10, 0x4}, {0x2, 0x5, 0xe, 0x1}, {0x0, 0x5, 0x2, 0x5}], 0x10, 0x6}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000640)={r7, r8, 0x4, r9}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r6, 0x0}, 0x20) kernel console output (not intermixed with test programs): 127868 bytes leftover after parsing attributes in process `syz.1.905'. [ 309.849323][ T7246] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.908'. [ 309.961996][ T7248] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.906'. [ 309.988609][ T7250] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.907'. [ 310.026881][ T7246] device syzkaller0 entered promiscuous mode [ 310.150696][ T7248] device syzkaller0 entered promiscuous mode [ 310.248978][ T7250] device syzkaller0 entered promiscuous mode [ 310.277329][ T7256] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.910'. [ 310.686094][ T7262] netlink: 'syz.1.913': attribute type 6 has an invalid length. [ 310.695519][ T7262] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.913'. [ 315.573033][ T7282] netlink: 'syz.3.917': attribute type 3 has an invalid length. [ 315.593214][ T7282] netlink: 55252 bytes leftover after parsing attributes in process `syz.3.917'. [ 315.680332][ T7287] sctp: [Deprecated]: syz.3.917 (pid 7287) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.680332][ T7287] Use struct sctp_sack_info instead [ 317.185789][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.192164][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.256321][ T7287] netlink: 'syz.3.917': attribute type 10 has an invalid length. [ 317.283586][ T7287] netlink: 40 bytes leftover after parsing attributes in process `syz.3.917'. [ 317.313193][ T7287] device ipvlan1 entered promiscuous mode [ 317.346632][ T7290] delete_channel: no stack [ 317.354992][ T7287] bridge0: port 3(ipvlan1) entered blocking state [ 317.367799][ T7287] bridge0: port 3(ipvlan1) entered disabled state [ 317.406954][ T7291] netlink: 'syz.4.920': attribute type 6 has an invalid length. [ 317.417813][ T7287] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 317.446050][ T7291] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.920'. [ 317.901754][ T7303] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.925'. [ 318.320524][ T7303] device syzkaller0 entered promiscuous mode [ 318.597906][ T7322] FAULT_INJECTION: forcing a failure. [ 318.597906][ T7322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.614945][ T7322] CPU: 0 PID: 7322 Comm: syz.1.933 Not tainted syzkaller #0 [ 318.622305][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.632438][ T7322] Call Trace: [ 318.635770][ T7322] [ 318.638749][ T7322] dump_stack_lvl+0x188/0x24e [ 318.643487][ T7322] ? show_regs_print_info+0x12/0x12 [ 318.648737][ T7322] ? load_image+0x400/0x400 [ 318.653267][ T7322] ? __lock_acquire+0x7d10/0x7d10 [ 318.658462][ T7322] ? __virt_addr_valid+0x188/0x540 [ 318.663637][ T7322] should_fail_ex+0x399/0x4d0 [ 318.668343][ T7322] _copy_from_user+0x2c/0x170 [ 318.673071][ T7322] bpf_test_init+0xde/0x140 [ 318.677600][ T7322] bpf_prog_test_run_xdp+0x484/0xf10 [ 318.682926][ T7322] ? dev_put+0x80/0x80 [ 318.687024][ T7322] ? dev_put+0x80/0x80 [ 318.691110][ T7322] bpf_prog_test_run+0x31e/0x390 [ 318.696077][ T7322] __sys_bpf+0x62b/0x780 [ 318.700344][ T7322] ? bpf_link_show_fdinfo+0x380/0x380 [ 318.705753][ T7322] ? lock_chain_count+0x20/0x20 [ 318.710653][ T7322] __x64_sys_bpf+0x78/0x90 [ 318.715130][ T7322] do_syscall_64+0x4c/0xa0 [ 318.719617][ T7322] ? clear_bhb_loop+0x60/0xb0 [ 318.724338][ T7322] ? clear_bhb_loop+0x60/0xb0 [ 318.729053][ T7322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.734982][ T7322] RIP: 0033:0x7f5056d9c799 [ 318.739449][ T7322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.759093][ T7322] RSP: 002b:00007f5054ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.767574][ T7322] RAX: ffffffffffffffda RBX: 00007f5057015fa0 RCX: 00007f5056d9c799 [ 318.775599][ T7322] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 318.783613][ T7322] RBP: 00007f5054ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 318.791609][ T7322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.799620][ T7322] R13: 00007f5057016038 R14: 00007f5057015fa0 R15: 00007fff52849d88 [ 318.807649][ T7322] [ 318.838621][ T7325] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.932'. [ 320.452028][ T7325] device syzkaller0 entered promiscuous mode [ 320.487894][ T7330] delete_channel: no stack [ 320.520738][ T7332] delete_channel: no stack [ 320.729578][ T7337] netlink: 'syz.3.936': attribute type 6 has an invalid length. [ 320.748306][ T7337] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.936'. [ 321.139853][ T7341] netlink: 'syz.2.935': attribute type 3 has an invalid length. [ 321.195485][ T7341] netlink: 55252 bytes leftover after parsing attributes in process `syz.2.935'. [ 321.250473][ T7344] sctp: [Deprecated]: syz.2.935 (pid 7344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.250473][ T7344] Use struct sctp_sack_info instead [ 321.442155][ T7352] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.939'. [ 321.630308][ T7358] netlink: 'syz.1.939': attribute type 3 has an invalid length. [ 321.650616][ T7358] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.939'. [ 323.119660][ T7344] netlink: 'syz.2.935': attribute type 10 has an invalid length. [ 323.127749][ T7344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.935'. [ 323.138711][ T7352] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.939'. [ 323.399308][ T7370] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.946'. [ 323.667324][ T7376] delete_channel: no stack [ 323.692955][ T7371] device syzkaller0 entered promiscuous mode [ 325.988573][ T7382] netlink: 'syz.3.950': attribute type 2 has an invalid length. [ 325.996357][ T7382] netlink: 'syz.3.950': attribute type 8 has an invalid length. [ 326.006413][ T7382] netlink: 132 bytes leftover after parsing attributes in process `syz.3.950'. [ 326.016901][ T7389] netlink: 'syz.3.950': attribute type 25 has an invalid length. [ 326.025506][ T7389] netlink: 'syz.3.950': attribute type 29 has an invalid length. [ 326.211792][ T7401] netlink: 156 bytes leftover after parsing attributes in process `syz.1.955'. [ 326.229340][ T7401] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 326.310923][ T7400] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.956'. [ 326.408367][ T7408] device syzkaller0 entered promiscuous mode [ 326.862284][ T7417] netlink: 'syz.2.962': attribute type 6 has an invalid length. [ 326.888565][ T7417] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.962'. [ 327.628858][ T7434] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.966'. [ 328.104821][ T7440] delete_channel: no stack [ 330.009169][ T7452] netlink: 156 bytes leftover after parsing attributes in process `syz.4.972'. [ 330.040211][ T7452] netlink: 'syz.4.972': attribute type 1 has an invalid length. [ 330.101382][ T7451] netlink: 'syz.0.969': attribute type 2 has an invalid length. [ 330.118623][ T7451] netlink: 'syz.0.969': attribute type 8 has an invalid length. [ 330.128502][ T7451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.969'. [ 330.159365][ T7455] netlink: 'syz.0.969': attribute type 25 has an invalid length. [ 330.206707][ T7455] netlink: 'syz.0.969': attribute type 29 has an invalid length. [ 330.291617][ T7460] netlink: 'syz.3.974': attribute type 6 has an invalid length. [ 330.321000][ T7460] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.974'. [ 330.927124][ T7483] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.982'. [ 330.970029][ T7479] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.983'. [ 331.192803][ T7482] device syzkaller0 entered promiscuous mode [ 331.468443][ T7483] device syzkaller0 entered promiscuous mode [ 334.972376][ T7512] netlink: 'syz.1.990': attribute type 6 has an invalid length. [ 334.981477][ T7512] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.990'. [ 335.229112][ T7516] delete_channel: no stack [ 335.296205][ T7499] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.987'. [ 335.308161][ T7503] netlink: 156 bytes leftover after parsing attributes in process `syz.0.988'. [ 335.329642][ T7504] netlink: 'syz.0.988': attribute type 1 has an invalid length. [ 335.856769][ T7526] netlink: 'syz.0.997': attribute type 10 has an invalid length. [ 335.891926][ T7526] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 335.962668][ T7526] netlink: 'syz.0.997': attribute type 10 has an invalid length. [ 336.017008][ T7526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.997'. [ 336.037936][ T7526] bridge0: port 3(team0) entered blocking state [ 336.071312][ T7526] bridge0: port 3(team0) entered disabled state [ 336.084115][ T7526] bridge0: port 3(team0) entered blocking state [ 336.090588][ T7526] bridge0: port 3(team0) entered forwarding state [ 336.487428][ T7542] netlink: 'syz.1.1001': attribute type 6 has an invalid length. [ 336.547729][ T7542] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1001'. [ 336.621649][ T7540] netlink: 'syz.0.1002': attribute type 10 has an invalid length. [ 336.645121][ T7547] delete_channel: no stack [ 336.907549][ T7551] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1005'. [ 338.158383][ T7551] device syzkaller0 entered promiscuous mode [ 341.089669][ T7573] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1011'. [ 341.099077][ T7576] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 341.257758][ T7590] netlink: 'syz.1.1014': attribute type 6 has an invalid length. [ 341.294421][ T7590] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1014'. [ 341.371861][ T7593] delete_channel: no stack [ 342.822318][ T7604] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1018'. [ 343.031901][ T7604] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.071616][ T7604] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.175591][ T7604] bond0 (unregistering): Released all slaves [ 343.195334][ T7622] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1023'. [ 343.728525][ T7628] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1026'. [ 343.870272][ T7634] netlink: 'syz.1.1029': attribute type 6 has an invalid length. [ 343.882319][ T7634] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1029'. [ 343.921334][ T7622] device syzkaller0 entered promiscuous mode [ 344.039679][ T7632] device syzkaller0 entered promiscuous mode [ 347.612860][ T7650] device syzkaller0 entered promiscuous mode [ 347.643655][ T7662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 347.650967][ T7662] IPv6: NLM_F_CREATE should be set when creating new route [ 347.658334][ T7662] IPv6: NLM_F_CREATE should be set when creating new route [ 347.665617][ T7662] IPv6: NLM_F_CREATE should be set when creating new route [ 347.820480][ T7669] netlink: 'syz.1.1041': attribute type 6 has an invalid length. [ 347.842911][ T7669] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1041'. [ 348.038845][ T7676] delete_channel: no stack [ 348.730629][ T7690] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1048'. [ 348.769005][ T7692] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1049'. [ 349.365489][ T7701] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1051'. [ 350.378439][ T7690] netlink: 'syz.2.1048': attribute type 21 has an invalid length. [ 350.386388][ T7690] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1048'. [ 350.530886][ T7701] device syzkaller0 entered promiscuous mode [ 350.660424][ T7710] netlink: 'syz.2.1054': attribute type 6 has an invalid length. [ 350.695698][ T7710] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1054'. [ 352.511612][ T7712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.518993][ T7712] IPv6: NLM_F_CREATE should be set when creating new route [ 352.526343][ T7712] IPv6: NLM_F_CREATE should be set when creating new route [ 352.533633][ T7712] IPv6: NLM_F_CREATE should be set when creating new route [ 352.544326][ T7717] netlink: 'syz.2.1056': attribute type 13 has an invalid length. [ 352.552211][ T7717] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1056'. [ 352.582044][ T7721] netlink: 'syz.4.1057': attribute type 25 has an invalid length. [ 352.907945][ T7731] FAULT_INJECTION: forcing a failure. [ 352.907945][ T7731] name failslab, interval 1, probability 0, space 0, times 0 [ 352.946176][ T7731] CPU: 1 PID: 7731 Comm: syz.4.1062 Not tainted syzkaller #0 [ 352.953638][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.963746][ T7731] Call Trace: [ 352.967061][ T7731] [ 352.970031][ T7731] dump_stack_lvl+0x188/0x24e [ 352.974775][ T7731] ? sctp_sendmsg+0x15b0/0x2940 [ 352.979706][ T7731] ? ___sys_sendmsg+0x2a2/0x360 [ 352.984628][ T7731] ? show_regs_print_info+0x12/0x12 [ 352.989893][ T7731] ? load_image+0x400/0x400 [ 352.994485][ T7731] should_fail_ex+0x399/0x4d0 [ 352.999230][ T7731] should_failslab+0x5/0x20 [ 353.003792][ T7731] slab_pre_alloc_hook+0x59/0x310 [ 353.008883][ T7731] ? sctp_add_bind_addr+0x89/0x350 [ 353.014064][ T7731] __kmem_cache_alloc_node+0x4f/0x260 [ 353.019489][ T7731] ? sctp_add_bind_addr+0x89/0x350 [ 353.024624][ T7731] kmalloc_trace+0x26/0xe0 [ 353.029162][ T7731] sctp_add_bind_addr+0x89/0x350 [ 353.034172][ T7731] sctp_copy_local_addr_list+0x311/0x4e0 [ 353.039828][ T7731] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 353.045591][ T7731] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 353.051707][ T7731] ? sctp_v4_is_any+0x31/0x50 [ 353.056416][ T7731] ? sctp_copy_one_addr+0x93/0x660 [ 353.061585][ T7731] sctp_bind_addr_copy+0xaf/0x3c0 [ 353.066662][ T7731] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 353.073037][ T7731] sctp_connect_new_asoc+0x2f5/0x6a0 [ 353.078384][ T7731] ? __sctp_connect+0xd80/0xd80 [ 353.083284][ T7731] ? __local_bh_enable_ip+0x136/0x1c0 [ 353.088689][ T7731] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 353.094266][ T7731] ? security_sctp_bind_connect+0x85/0xb0 [ 353.100019][ T7731] sctp_sendmsg+0x15b0/0x2940 [ 353.104749][ T7731] ? aa_sk_perm+0x741/0x950 [ 353.109302][ T7731] ? sctp_getsockopt+0x8a0/0x8a0 [ 353.114272][ T7731] ? __might_fault+0xa6/0x120 [ 353.118971][ T7731] ? aa_af_perm+0x340/0x340 [ 353.123501][ T7731] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 353.129956][ T7731] ? inet_sendmsg+0xe5/0x2f0 [ 353.134595][ T7731] ? inet_send_prepare+0x260/0x260 [ 353.139765][ T7731] ____sys_sendmsg+0x5be/0x970 [ 353.144573][ T7731] ? __sys_sendmsg_sock+0x30/0x30 [ 353.149629][ T7731] ? __import_iovec+0x315/0x500 [ 353.154513][ T7731] ? import_iovec+0x6f/0xa0 [ 353.159046][ T7731] ___sys_sendmsg+0x2a2/0x360 [ 353.163812][ T7731] ? __sys_sendmsg+0x290/0x290 [ 353.168648][ T7731] ? __lock_acquire+0x7d10/0x7d10 [ 353.173743][ T7731] __se_sys_sendmsg+0x1bb/0x2a0 [ 353.178655][ T7731] ? __x64_sys_sendmsg+0x80/0x80 [ 353.183839][ T7731] ? lockdep_hardirqs_on+0x94/0x140 [ 353.189092][ T7731] do_syscall_64+0x4c/0xa0 [ 353.193552][ T7731] ? clear_bhb_loop+0x60/0xb0 [ 353.198265][ T7731] ? clear_bhb_loop+0x60/0xb0 [ 353.202985][ T7731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.208929][ T7731] RIP: 0033:0x7fad9ef9c799 [ 353.213379][ T7731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.233017][ T7731] RSP: 002b:00007fad9fdde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.241452][ T7731] RAX: ffffffffffffffda RBX: 00007fad9f215fa0 RCX: 00007fad9ef9c799 [ 353.249441][ T7731] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 353.257438][ T7731] RBP: 00007fad9fdde090 R08: 0000000000000000 R09: 0000000000000000 [ 353.265427][ T7731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.273419][ T7731] R13: 00007fad9f216038 R14: 00007fad9f215fa0 R15: 00007ffdda798fa8 [ 353.281487][ T7731] [ 353.513127][ T7740] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1065'. [ 353.610102][ T7740] device syzkaller0 entered promiscuous mode [ 353.638623][ T7743] netlink: 'syz.4.1066': attribute type 6 has an invalid length. [ 353.653858][ T7743] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1066'. [ 353.872560][ T4275] Bluetooth: hci3: ISO packet for unknown connection handle 15 [ 354.139620][ T7761] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1070'. [ 355.636327][ T7754] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1068'. [ 355.682003][ T7748] device syzkaller0 entered promiscuous mode [ 355.910695][ T7772] delete_channel: no stack [ 357.408037][ T7774] netlink: 'syz.1.1072': attribute type 13 has an invalid length. [ 357.423490][ T7774] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.1072'. [ 357.618632][ T7779] delete_channel: no stack [ 358.002301][ T7794] netlink: 'syz.3.1083': attribute type 6 has an invalid length. [ 358.010352][ T7794] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1083'. [ 358.159812][ T7796] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1082'. [ 358.360586][ T7796] device syzkaller0 entered promiscuous mode [ 360.401422][ T7817] netlink: 'syz.0.1088': attribute type 13 has an invalid length. [ 360.409652][ T7817] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1088'. [ 360.767895][ T7832] delete_channel: no stack [ 360.795229][ T7836] netlink: 'syz.0.1094': attribute type 6 has an invalid length. [ 360.803205][ T7836] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1094'. [ 361.337998][ T7848] IPv6: Can't replace route, no match found [ 361.785115][ T7856] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1101'. [ 361.993836][ T7862] device syzkaller0 entered promiscuous mode [ 362.079548][ T7870] netlink: 'syz.4.1106': attribute type 6 has an invalid length. [ 362.112120][ T7870] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1106'. [ 362.128718][ T7864] device syzkaller0 entered promiscuous mode [ 362.362454][ T7874] delete_channel: no stack [ 366.391260][ T7893] netlink: 'syz.1.1112': attribute type 3 has an invalid length. [ 366.413701][ T7893] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1112'. [ 366.650968][ T7909] netlink: 'syz.0.1118': attribute type 6 has an invalid length. [ 366.680130][ T7909] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1118'. [ 366.936933][ T7915] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1120'. [ 367.049896][ T7915] device syzkaller0 entered promiscuous mode [ 369.572636][ T7955] delete_channel: no stack [ 370.422866][ T7958] netlink: 'syz.3.1133': attribute type 6 has an invalid length. [ 370.466470][ T7958] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1133'. [ 370.726369][ T7967] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1137'. [ 371.061425][ T7970] device syzkaller0 entered promiscuous mode [ 373.254296][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1139'. [ 373.263545][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 373.272556][ T7985] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1139'. [ 373.293557][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 373.302758][ T7985] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1139'. [ 373.316957][ T7985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 373.326158][ T7985] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1139'. [ 373.596223][ T8000] FAULT_INJECTION: forcing a failure. [ 373.596223][ T8000] name failslab, interval 1, probability 0, space 0, times 0 [ 373.630158][ T8004] delete_channel: no stack [ 373.654212][ T8000] CPU: 1 PID: 8000 Comm: syz.2.1144 Not tainted syzkaller #0 [ 373.661777][ T8000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.671877][ T8000] Call Trace: [ 373.675206][ T8000] [ 373.678205][ T8000] dump_stack_lvl+0x188/0x24e [ 373.682975][ T8000] ? show_regs_print_info+0x12/0x12 [ 373.688235][ T8000] ? load_image+0x400/0x400 [ 373.692803][ T8000] should_fail_ex+0x399/0x4d0 [ 373.697528][ T8000] should_failslab+0x5/0x20 [ 373.702072][ T8000] slab_pre_alloc_hook+0x59/0x310 [ 373.707151][ T8000] ? verify_lock_unused+0x140/0x140 [ 373.712404][ T8000] ? bpf_test_init+0x9f/0x140 [ 373.717138][ T8000] __kmem_cache_alloc_node+0x4f/0x260 [ 373.722576][ T8000] ? bpf_test_init+0x9f/0x140 [ 373.727298][ T8000] __kmalloc+0xa0/0x240 [ 373.731505][ T8000] bpf_test_init+0x9f/0x140 [ 373.736057][ T8000] bpf_prog_test_run_xdp+0x484/0xf10 [ 373.741406][ T8000] ? dev_put+0x80/0x80 [ 373.745533][ T8000] ? dev_put+0x80/0x80 [ 373.749659][ T8000] bpf_prog_test_run+0x31e/0x390 [ 373.754656][ T8000] __sys_bpf+0x62b/0x780 [ 373.758958][ T8000] ? bpf_link_show_fdinfo+0x380/0x380 [ 373.764395][ T8000] ? lock_chain_count+0x20/0x20 [ 373.769311][ T8000] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 373.775368][ T8000] __x64_sys_bpf+0x78/0x90 [ 373.779844][ T8000] do_syscall_64+0x4c/0xa0 [ 373.784305][ T8000] ? clear_bhb_loop+0x60/0xb0 [ 373.789039][ T8000] ? clear_bhb_loop+0x60/0xb0 [ 373.793771][ T8000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.799715][ T8000] RIP: 0033:0x7f082239c799 [ 373.804177][ T8000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.823833][ T8000] RSP: 002b:00007f08232bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.832313][ T8000] RAX: ffffffffffffffda RBX: 00007f0822615fa0 RCX: 00007f082239c799 [ 373.840352][ T8000] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 373.848381][ T8000] RBP: 00007f08232bb090 R08: 0000000000000000 R09: 0000000000000000 [ 373.856410][ T8000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.864443][ T8000] R13: 00007f0822616038 R14: 00007f0822615fa0 R15: 00007ffe669b7898 [ 373.872480][ T8000] [ 374.037807][ T8013] netlink: 'syz.4.1148': attribute type 6 has an invalid length. [ 374.050779][ T8013] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1148'. [ 374.390695][ T8020] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1151'. [ 374.632921][ T8020] device syzkaller0 entered promiscuous mode [ 377.318239][ T8032] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 377.327739][ T26] audit: type=1800 audit(1774681372.718:3): pid=8032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1155" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 377.348471][ T8032] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 377.360890][ T8032] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 377.623505][ T8054] delete_channel: no stack [ 377.740323][ T8055] netlink: 'syz.0.1161': attribute type 6 has an invalid length. [ 377.751675][ T8055] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1161'. [ 378.604504][ T8086] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1170'. [ 378.634275][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.640734][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.672000][ T8092] FAULT_INJECTION: forcing a failure. [ 380.672000][ T8092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.724014][ T8092] CPU: 1 PID: 8092 Comm: syz.0.1173 Not tainted syzkaller #0 [ 380.731483][ T8092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.741595][ T8092] Call Trace: [ 380.744917][ T8092] [ 380.747894][ T8092] dump_stack_lvl+0x188/0x24e [ 380.752653][ T8092] ? show_regs_print_info+0x12/0x12 [ 380.757922][ T8092] ? load_image+0x400/0x400 [ 380.762490][ T8092] ? __lock_acquire+0x7d10/0x7d10 [ 380.767578][ T8092] ? lockdep_hardirqs_on+0x94/0x140 [ 380.772832][ T8092] should_fail_ex+0x399/0x4d0 [ 380.777565][ T8092] _copy_from_user+0x2c/0x170 [ 380.782301][ T8092] __sys_bpf+0x2ea/0x780 [ 380.786611][ T8092] ? bpf_link_show_fdinfo+0x380/0x380 [ 380.792048][ T8092] ? lock_chain_count+0x20/0x20 [ 380.796939][ T8092] __x64_sys_bpf+0x78/0x90 [ 380.801400][ T8092] do_syscall_64+0x4c/0xa0 [ 380.805850][ T8092] ? clear_bhb_loop+0x60/0xb0 [ 380.810557][ T8092] ? clear_bhb_loop+0x60/0xb0 [ 380.815265][ T8092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.821185][ T8092] RIP: 0033:0x7f55c059c799 [ 380.825622][ T8092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.845264][ T8092] RSP: 002b:00007f55c1402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.853717][ T8092] RAX: ffffffffffffffda RBX: 00007f55c0815fa0 RCX: 00007f55c059c799 [ 380.861730][ T8092] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 380.869732][ T8092] RBP: 00007f55c1402090 R08: 0000000000000000 R09: 0000000000000000 [ 380.877721][ T8092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.885713][ T8092] R13: 00007f55c0816038 R14: 00007f55c0815fa0 R15: 00007ffdf6e60fa8 [ 380.893721][ T8092] [ 380.971640][ T8096] device sit0 entered promiscuous mode [ 380.975434][ T8099] netlink: 'syz.1.1176': attribute type 6 has an invalid length. [ 380.991354][ T8099] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1176'. [ 381.044659][ T8102] delete_channel: no stack [ 381.245099][ T8104] netlink: 'syz.1.1177': attribute type 13 has an invalid length. [ 381.253020][ T8104] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.1177'. [ 381.851492][ T8121] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1185'. [ 382.077489][ T8129] netlink: 'syz.4.1187': attribute type 6 has an invalid length. [ 382.098705][ T8126] device syzkaller0 entered promiscuous mode [ 382.105985][ T8129] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1187'. [ 385.337184][ T8142] delete_channel: no stack [ 387.093748][ T8156] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1195'. [ 387.251541][ T8162] netlink: 'syz.4.1198': attribute type 6 has an invalid length. [ 387.308612][ T8162] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1198'. [ 387.992639][ T8166] netlink: 'syz.2.1200': attribute type 10 has an invalid length. [ 388.009010][ T8175] delete_channel: no stack [ 389.008950][ T8193] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1207'. [ 392.252587][ T8166] team0 (unregistering): Port device team_slave_1 removed [ 392.651800][ T8212] netlink: 'syz.2.1212': attribute type 6 has an invalid length. [ 392.713477][ T8212] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1212'. [ 393.194728][ T8226] device syzkaller0 entered promiscuous mode [ 393.481574][ T8238] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1221'. [ 398.076962][ T8250] delete_channel: no stack [ 398.170728][ T8252] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1225'. [ 398.206546][ T8256] netlink: 'syz.4.1227': attribute type 6 has an invalid length. [ 398.223504][ T8256] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1227'. [ 398.397123][ T8258] device syzkaller0 entered promiscuous mode [ 400.991821][ T8293] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1239'. [ 401.070657][ T8295] netlink: 'syz.1.1241': attribute type 6 has an invalid length. [ 401.130158][ T8295] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1241'. [ 401.249145][ T8300] delete_channel: no stack [ 401.737418][ T8293] device syzkaller0 entered promiscuous mode [ 404.251835][ T8335] device syzkaller0 entered promiscuous mode [ 404.368712][ T8346] netlink: 'syz.4.1256': attribute type 6 has an invalid length. [ 404.398689][ T8346] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1256'. [ 404.734949][ T8354] netlink: 'syz.3.1261': attribute type 29 has an invalid length. [ 406.087552][ T8348] netlink: 'syz.2.1257': attribute type 11 has an invalid length. [ 406.095609][ T8348] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1257'. [ 406.105170][ T8354] netlink: 'syz.3.1261': attribute type 29 has an invalid length. [ 406.434841][ T8368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1264'. [ 406.995725][ T8376] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1267'. [ 407.128120][ T8377] device syzkaller0 entered promiscuous mode [ 407.419006][ T8388] netlink: 'syz.0.1271': attribute type 6 has an invalid length. [ 407.443488][ T8388] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1271'. [ 407.569499][ T8391] delete_channel: no stack [ 407.768343][ T8400] FAULT_INJECTION: forcing a failure. [ 407.768343][ T8400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.783384][ T8400] CPU: 1 PID: 8400 Comm: syz.0.1276 Not tainted syzkaller #0 [ 407.790823][ T8400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 407.801114][ T8400] Call Trace: [ 407.804432][ T8400] [ 407.807400][ T8400] dump_stack_lvl+0x188/0x24e [ 407.812143][ T8400] ? show_regs_print_info+0x12/0x12 [ 407.817406][ T8400] ? load_image+0x400/0x400 [ 407.821983][ T8400] ? __lock_acquire+0x7d10/0x7d10 [ 407.827073][ T8400] should_fail_ex+0x399/0x4d0 [ 407.831802][ T8400] _copy_from_user+0x2c/0x170 [ 407.836536][ T8400] __copy_msghdr+0x3b7/0x580 [ 407.841187][ T8400] ___sys_sendmsg+0x210/0x360 [ 407.845926][ T8400] ? __sys_sendmsg+0x290/0x290 [ 407.850761][ T8400] ? __lock_acquire+0x7d10/0x7d10 [ 407.855854][ T8400] __se_sys_sendmsg+0x1bb/0x2a0 [ 407.860775][ T8400] ? __x64_sys_sendmsg+0x80/0x80 [ 407.865788][ T8400] ? lockdep_hardirqs_on+0x94/0x140 [ 407.871033][ T8400] do_syscall_64+0x4c/0xa0 [ 407.875496][ T8400] ? clear_bhb_loop+0x60/0xb0 [ 407.880222][ T8400] ? clear_bhb_loop+0x60/0xb0 [ 407.884942][ T8400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.890885][ T8400] RIP: 0033:0x7f55c059c799 [ 407.895347][ T8400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.915163][ T8400] RSP: 002b:00007f55c1402028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.923606][ T8400] RAX: ffffffffffffffda RBX: 00007f55c0815fa0 RCX: 00007f55c059c799 [ 407.931605][ T8400] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 407.939598][ T8400] RBP: 00007f55c1402090 R08: 0000000000000000 R09: 0000000000000000 [ 407.947594][ T8400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.955621][ T8400] R13: 00007f55c0816038 R14: 00007f55c0815fa0 R15: 00007ffdf6e60fa8 [ 407.963632][ T8400] [ 409.750940][ T8422] netlink: 'syz.0.1284': attribute type 6 has an invalid length. [ 409.758940][ T8422] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1284'. [ 410.199630][ T8430] FAULT_INJECTION: forcing a failure. [ 410.199630][ T8430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.221417][ T8428] delete_channel: no stack [ 410.291488][ T8430] CPU: 1 PID: 8430 Comm: syz.3.1296 Not tainted syzkaller #0 [ 410.298960][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.309088][ T8430] Call Trace: [ 410.312406][ T8430] [ 410.315392][ T8430] dump_stack_lvl+0x188/0x24e [ 410.320131][ T8430] ? show_regs_print_info+0x12/0x12 [ 410.325396][ T8430] ? load_image+0x400/0x400 [ 410.329952][ T8430] ? __lock_acquire+0x7d10/0x7d10 [ 410.335045][ T8430] ? __mutex_trylock_common+0x155/0x260 [ 410.340659][ T8430] should_fail_ex+0x399/0x4d0 [ 410.345390][ T8430] _copy_from_user+0x2c/0x170 [ 410.350126][ T8430] do_tcp_setsockopt+0x5e4/0x1d40 [ 410.355206][ T8430] ? __might_sleep+0xd0/0xd0 [ 410.359841][ T8430] ? tcp_set_window_clamp+0x590/0x590 [ 410.365282][ T8430] ? smc_setsockopt+0x18c/0xb80 [ 410.370190][ T8430] ? mutex_lock_nested+0x10/0x10 [ 410.375193][ T8430] ? aa_sk_perm+0x81f/0x950 [ 410.379746][ T8430] ? sock_common_setsockopt+0x32/0xb0 [ 410.385178][ T8430] ? tcp_setsockopt+0x39/0xe0 [ 410.389906][ T8430] ? tcp_enable_tx_delay+0x70/0x70 [ 410.395153][ T8430] ? sock_common_recvmsg+0x190/0x190 [ 410.400495][ T8430] smc_setsockopt+0x235/0xb80 [ 410.405238][ T8430] ? smc_shutdown+0x9a0/0x9a0 [ 410.409973][ T8430] ? aa_sock_opt_perm+0x74/0x100 [ 410.414967][ T8430] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 410.420565][ T8430] ? security_socket_setsockopt+0x7a/0xa0 [ 410.426338][ T8430] ? smc_shutdown+0x9a0/0x9a0 [ 410.431072][ T8430] __sys_setsockopt+0x2bf/0x3d0 [ 410.436156][ T8430] __x64_sys_setsockopt+0xb1/0xc0 [ 410.441239][ T8430] do_syscall_64+0x4c/0xa0 [ 410.445721][ T8430] ? clear_bhb_loop+0x60/0xb0 [ 410.450447][ T8430] ? clear_bhb_loop+0x60/0xb0 [ 410.455174][ T8430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.461130][ T8430] RIP: 0033:0x7f753ef9c799 [ 410.465591][ T8430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.485244][ T8430] RSP: 002b:00007f753fea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 410.493712][ T8430] RAX: ffffffffffffffda RBX: 00007f753f215fa0 RCX: 00007f753ef9c799 [ 410.501730][ T8430] RDX: 000000000000001d RSI: 0000000000000006 RDI: 0000000000000004 [ 410.509770][ T8430] RBP: 00007f753fea2090 R08: 0000000000000004 R09: 0000000000000000 [ 410.517797][ T8430] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 410.525815][ T8430] R13: 00007f753f216038 R14: 00007f753f215fa0 R15: 00007fff798329f8 [ 410.533856][ T8430] [ 411.056517][ T8448] FAULT_INJECTION: forcing a failure. [ 411.056517][ T8448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.146063][ T8448] CPU: 1 PID: 8448 Comm: syz.3.1293 Not tainted syzkaller #0 [ 411.153531][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.163617][ T8448] Call Trace: [ 411.166919][ T8448] [ 411.169871][ T8448] dump_stack_lvl+0x188/0x24e [ 411.174594][ T8448] ? show_regs_print_info+0x12/0x12 [ 411.179833][ T8448] ? load_image+0x400/0x400 [ 411.184374][ T8448] ? __lock_acquire+0x7d10/0x7d10 [ 411.189440][ T8448] should_fail_ex+0x399/0x4d0 [ 411.194154][ T8448] _copy_from_user+0x2c/0x170 [ 411.198882][ T8448] __sys_bpf+0x2ea/0x780 [ 411.203165][ T8448] ? bpf_link_show_fdinfo+0x380/0x380 [ 411.208580][ T8448] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 411.214779][ T8448] __x64_sys_bpf+0x78/0x90 [ 411.219237][ T8448] do_syscall_64+0x4c/0xa0 [ 411.223700][ T8448] ? clear_bhb_loop+0x60/0xb0 [ 411.228415][ T8448] ? clear_bhb_loop+0x60/0xb0 [ 411.233135][ T8448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.239070][ T8448] RIP: 0033:0x7f753ef9c799 [ 411.243514][ T8448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.263148][ T8448] RSP: 002b:00007f753fea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.271599][ T8448] RAX: ffffffffffffffda RBX: 00007f753f215fa0 RCX: 00007f753ef9c799 [ 411.279597][ T8448] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 411.287595][ T8448] RBP: 00007f753fea2090 R08: 0000000000000000 R09: 0000000000000000 [ 411.295680][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.303679][ T8448] R13: 00007f753f216038 R14: 00007f753f215fa0 R15: 00007fff798329f8 [ 411.311693][ T8448] [ 411.518077][ T8456] netlink: 'syz.0.1295': attribute type 6 has an invalid length. [ 411.536130][ T8456] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1295'. [ 411.882540][ T8463] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1298'. [ 411.947790][ T8463] device syzkaller0 entered promiscuous mode [ 414.277223][ T8468] netlink: 'syz.1.1300': attribute type 3 has an invalid length. [ 414.285042][ T8468] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1300'. [ 414.398421][ T8476] device bridge0 entered promiscuous mode [ 415.362888][ T8496] netlink: 'syz.0.1308': attribute type 6 has an invalid length. [ 415.371705][ T8496] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1308'. [ 415.546192][ T8499] netlink: 'syz.0.1310': attribute type 3 has an invalid length. [ 415.810878][ T8504] delete_channel: no stack [ 416.519777][ T8517] sock: sock_set_timeout: `syz.3.1317' (pid 8517) tries to set negative timeout [ 416.681795][ T8520] netlink: 'syz.2.1314': attribute type 3 has an invalid length. [ 416.718731][ T8520] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1314'. [ 416.756738][ T8526] delete_channel: no stack [ 417.046229][ T8531] netlink: 'syz.1.1321': attribute type 6 has an invalid length. [ 417.083862][ T8531] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1321'. [ 417.098668][ T8532] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 417.124707][ T8532] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1322'. [ 417.423375][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 418.346979][ T8567] netlink: 'syz.3.1335': attribute type 6 has an invalid length. [ 418.383853][ T8567] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1335'. [ 418.696059][ T8577] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1337'. [ 418.720219][ T8576] device syzkaller0 entered promiscuous mode [ 418.917992][ T8577] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1337'. [ 418.939117][ T8576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1337'. [ 420.008818][ T8616] netlink: 'syz.2.1348': attribute type 6 has an invalid length. [ 420.026828][ T8616] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1348'. [ 421.584313][ T8602] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 421.603374][ T26] audit: type=1800 audit(1774681416.988:4): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1344" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 421.626799][ T8602] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 421.649970][ T8602] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 423.241467][ T8644] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1355'. [ 423.598688][ T8619] device syzkaller0 entered promiscuous mode [ 423.614582][ T8628] netlink: 'syz.1.1351': attribute type 10 has an invalid length. [ 423.636620][ T8628] team0: Port device wlan1 added [ 423.812910][ T8644] device syzkaller0 entered promiscuous mode [ 424.129283][ T8655] netlink: 'syz.1.1359': attribute type 6 has an invalid length. [ 424.138498][ T8655] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1359'. [ 427.642790][ T8665] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.1363'. [ 427.652366][ T8666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1363'. [ 427.662675][ T8675] netlink: 'syz.2.1366': attribute type 1 has an invalid length. [ 427.902713][ T8688] netlink: 'syz.2.1371': attribute type 6 has an invalid length. [ 427.924664][ T8688] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1371'. [ 428.553124][ T4275] Bluetooth: hci0: ISO packet for unknown connection handle 1854 [ 428.735044][ T8709] netlink: 65043 bytes leftover after parsing attributes in process `syz.0.1378'. [ 428.921990][ T8714] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1379'. [ 429.073825][ T8714] device syzkaller0 entered promiscuous mode [ 429.081887][ T8721] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1381'. [ 429.289663][ T8730] netlink: 'syz.0.1384': attribute type 6 has an invalid length. [ 429.313116][ T8730] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1384'. [ 429.621044][ T8740] netlink: 'syz.0.1387': attribute type 10 has an invalid length. [ 430.012073][ T8740] bond0: (slave wlan1): Releasing backup interface [ 430.029184][ T8740] device wlan1 entered promiscuous mode [ 430.044299][ T8740] team0: Port device wlan1 added [ 430.096416][ T8733] syz.1.1385 (8733) used greatest stack depth: 17136 bytes left [ 432.651751][ T8770] netlink: 'syz.0.1397': attribute type 6 has an invalid length. [ 432.727505][ T8770] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1397'. [ 432.740602][ T8775] FAULT_INJECTION: forcing a failure. [ 432.740602][ T8775] name failslab, interval 1, probability 0, space 0, times 0 [ 432.784463][ T8775] CPU: 1 PID: 8775 Comm: syz.4.1400 Not tainted syzkaller #0 [ 432.791941][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.802058][ T8775] Call Trace: [ 432.805383][ T8775] [ 432.808363][ T8775] dump_stack_lvl+0x188/0x24e [ 432.813110][ T8775] ? show_regs_print_info+0x12/0x12 [ 432.818458][ T8775] ? load_image+0x400/0x400 [ 432.823033][ T8775] ? perf_trace_lock_acquire+0x100/0x3e0 [ 432.828736][ T8775] ? verify_lock_unused+0x140/0x140 [ 432.834013][ T8775] ? perf_trace_lock_acquire+0x100/0x3e0 [ 432.839720][ T8775] should_fail_ex+0x399/0x4d0 [ 432.844468][ T8775] should_failslab+0x5/0x20 [ 432.849027][ T8775] slab_pre_alloc_hook+0x59/0x310 [ 432.854112][ T8775] kmem_cache_alloc+0x56/0x2f0 [ 432.858927][ T8775] ? skb_clone+0x1e7/0x370 [ 432.863421][ T8775] skb_clone+0x1e7/0x370 [ 432.867732][ T8775] __netlink_deliver_tap+0x3ed/0x800 [ 432.873132][ T8775] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.878420][ T8775] netlink_deliver_tap+0x19c/0x1b0 [ 432.883685][ T8775] netlink_unicast+0x728/0x8d0 [ 432.888535][ T8775] netlink_sendmsg+0x8ad/0xbd0 [ 432.893368][ T8775] ? netlink_getsockopt+0x550/0x550 [ 432.898634][ T8775] ? aa_sock_msg_perm+0x94/0x150 [ 432.903626][ T8775] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 432.908958][ T8775] ? security_socket_sendmsg+0x7c/0xa0 [ 432.914551][ T8775] ? netlink_getsockopt+0x550/0x550 [ 432.919831][ T8775] ____sys_sendmsg+0x5be/0x970 [ 432.924665][ T8775] ? __sys_sendmsg_sock+0x30/0x30 [ 432.929744][ T8775] ? __import_iovec+0x315/0x500 [ 432.934709][ T8775] ? import_iovec+0x6f/0xa0 [ 432.939277][ T8775] ___sys_sendmsg+0x2a2/0x360 [ 432.944123][ T8775] ? __sys_sendmsg+0x290/0x290 [ 432.949075][ T8775] ? __lock_acquire+0x7d10/0x7d10 [ 432.954221][ T8775] __se_sys_sendmsg+0x1bb/0x2a0 [ 432.959146][ T8775] ? __x64_sys_sendmsg+0x80/0x80 [ 432.964165][ T8775] ? lockdep_hardirqs_on+0x94/0x140 [ 432.969434][ T8775] do_syscall_64+0x4c/0xa0 [ 432.973922][ T8775] ? clear_bhb_loop+0x60/0xb0 [ 432.978673][ T8775] ? clear_bhb_loop+0x60/0xb0 [ 432.983419][ T8775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 432.989388][ T8775] RIP: 0033:0x7fad9ef9c799 [ 432.993864][ T8775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.013526][ T8775] RSP: 002b:00007fad9fdde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.022038][ T8775] RAX: ffffffffffffffda RBX: 00007fad9f215fa0 RCX: 00007fad9ef9c799 [ 433.030097][ T8775] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 433.038137][ T8775] RBP: 00007fad9fdde090 R08: 0000000000000000 R09: 0000000000000000 [ 433.046175][ T8775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.054202][ T8775] R13: 00007fad9f216038 R14: 00007fad9f215fa0 R15: 00007ffdda798fa8 [ 433.062247][ T8775] [ 433.130436][ T8775] netlink: 'syz.4.1400': attribute type 10 has an invalid length. [ 433.442286][ T8791] netlink: 'syz.0.1403': attribute type 29 has an invalid length. [ 433.677771][ T8791] netlink: 'syz.0.1403': attribute type 29 has an invalid length. [ 434.324460][ T8807] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1408'. [ 434.869578][ T8819] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1411'. [ 435.021406][ T8822] netlink: 'syz.3.1413': attribute type 6 has an invalid length. [ 435.037617][ T8820] device syzkaller0 entered promiscuous mode [ 435.040338][ T8822] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1413'. [ 435.374621][ T8828] FAULT_INJECTION: forcing a failure. [ 435.374621][ T8828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.441441][ T8828] CPU: 0 PID: 8828 Comm: syz.0.1417 Not tainted syzkaller #0 [ 435.448916][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.459021][ T8828] Call Trace: [ 435.462344][ T8828] [ 435.465357][ T8828] dump_stack_lvl+0x188/0x24e [ 435.470096][ T8828] ? show_regs_print_info+0x12/0x12 [ 435.475351][ T8828] ? load_image+0x400/0x400 [ 435.479902][ T8828] ? __might_fault+0xa6/0x120 [ 435.484630][ T8828] should_fail_ex+0x399/0x4d0 [ 435.489355][ T8828] copyin+0x1b/0x120 [ 435.493303][ T8828] _copy_from_iter+0x447/0x1130 [ 435.498239][ T8828] ? copyout_mc+0x110/0x110 [ 435.502896][ T8828] ? dev_get_by_index+0x1e/0x2d0 [ 435.507925][ T8828] ? dev_get_by_index+0x1e/0x2d0 [ 435.512945][ T8828] packet_sendmsg+0x3099/0x4e60 [ 435.517862][ T8828] ? aa_sk_perm+0x950/0x950 [ 435.522425][ T8828] ? __might_sleep+0xd0/0xd0 [ 435.527042][ T8828] ? verify_lock_unused+0x140/0x140 [ 435.532297][ T8828] ? aa_sk_perm+0x81f/0x950 [ 435.536858][ T8828] ? packet_getsockopt+0x9a0/0x9a0 [ 435.542014][ T8828] ? aa_sock_msg_perm+0x94/0x150 [ 435.547002][ T8828] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 435.552329][ T8828] ? security_socket_sendmsg+0x7c/0xa0 [ 435.557838][ T8828] ? packet_getsockopt+0x9a0/0x9a0 [ 435.562992][ T8828] ____sys_sendmsg+0x5be/0x970 [ 435.567824][ T8828] ? __sys_sendmsg_sock+0x30/0x30 [ 435.572923][ T8828] ? __import_iovec+0x315/0x500 [ 435.577828][ T8828] ? import_iovec+0x6f/0xa0 [ 435.582386][ T8828] ___sys_sendmsg+0x2a2/0x360 [ 435.587120][ T8828] ? __sys_sendmsg+0x290/0x290 [ 435.591936][ T8828] ? __lock_acquire+0x7d10/0x7d10 [ 435.597017][ T8828] __se_sys_sendmsg+0x1bb/0x2a0 [ 435.601904][ T8828] ? __x64_sys_sendmsg+0x80/0x80 [ 435.606893][ T8828] ? lockdep_hardirqs_on+0x94/0x140 [ 435.612120][ T8828] do_syscall_64+0x4c/0xa0 [ 435.616574][ T8828] ? clear_bhb_loop+0x60/0xb0 [ 435.621310][ T8828] ? clear_bhb_loop+0x60/0xb0 [ 435.626071][ T8828] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.632142][ T8828] RIP: 0033:0x7f55c059c799 [ 435.636607][ T8828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.656250][ T8828] RSP: 002b:00007f55c1402028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.664724][ T8828] RAX: ffffffffffffffda RBX: 00007f55c0815fa0 RCX: 00007f55c059c799 [ 435.672729][ T8828] RDX: 0000000000008001 RSI: 0000200000000040 RDI: 0000000000000004 [ 435.680727][ T8828] RBP: 00007f55c1402090 R08: 0000000000000000 R09: 0000000000000000 [ 435.688723][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.696720][ T8828] R13: 00007f55c0816038 R14: 00007f55c0815fa0 R15: 00007ffdf6e60fa8 [ 435.704738][ T8828] [ 438.083884][ T8836] syzkaller0: tun_chr_ioctl cmd 1074025680 [ 438.302412][ T8859] netlink: 'syz.0.1424': attribute type 6 has an invalid length. [ 438.311639][ T8859] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1424'. [ 438.373794][ T8861] delete_channel: no stack [ 439.167514][ T8887] delete_channel: no stack [ 439.174260][ T8889] netlink: 'syz.0.1432': attribute type 21 has an invalid length. [ 439.182262][ T8889] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1432'. [ 439.300064][ T8889] netlink: 'syz.0.1432': attribute type 4 has an invalid length. [ 439.355693][ T8897] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1435'. [ 439.676134][ T8901] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1437'. [ 439.865191][ T8906] netlink: 'syz.3.1438': attribute type 6 has an invalid length. [ 439.890774][ T8906] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1438'. [ 440.049330][ T8897] device syzkaller0 entered promiscuous mode [ 440.064860][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.071260][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.699949][ T8927] delete_channel: no stack [ 444.373230][ T8936] delete_channel: no stack [ 444.434579][ T8938] netlink: 'syz.4.1449': attribute type 6 has an invalid length. [ 444.492653][ T8938] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1449'. [ 444.757513][ T8949] netlink: 'syz.3.1464': attribute type 6 has an invalid length. [ 444.833695][ T8949] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1464'. [ 445.267872][ T8959] delete_channel: no stack [ 445.519916][ T8963] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1459'. [ 445.638421][ T8964] device syzkaller0 entered promiscuous mode [ 445.783018][ T8973] delete_channel: no stack [ 446.862670][ T8992] netlink: 'syz.3.1469': attribute type 6 has an invalid length. [ 446.870720][ T8992] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1469'. [ 448.648053][ T9010] delete_channel: no stack [ 449.565195][ T9020] netlink: 'syz.0.1480': attribute type 6 has an invalid length. [ 449.573113][ T9020] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1480'. [ 449.813008][ T9029] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1483'. [ 450.049752][ T9031] device syzkaller0 entered promiscuous mode [ 452.275759][ T9049] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1490'. [ 452.444034][ T9049] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.477760][ T9053] delete_channel: no stack [ 452.520748][ T9049] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.570383][ T9049] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 452.609361][ T9049] bond0 (unregistering): Released all slaves [ 452.659753][ T9056] netlink: 'syz.3.1493': attribute type 21 has an invalid length. [ 452.731903][ T9063] netlink: 'syz.0.1495': attribute type 6 has an invalid length. [ 452.752305][ T9063] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1495'. [ 453.011800][ T9069] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1498'. [ 453.089135][ T9073] netlink: 'syz.1.1500': attribute type 29 has an invalid length. [ 453.114593][ T9073] netlink: 'syz.1.1500': attribute type 29 has an invalid length. [ 453.323692][ T9080] netlink: 'syz.3.1502': attribute type 3 has an invalid length. [ 453.362463][ T9080] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.1502'. [ 453.535057][ T9079] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1503'. [ 453.724351][ T9083] device syzkaller0 entered promiscuous mode [ 454.332448][ T9098] netlink: 'syz.3.1508': attribute type 6 has an invalid length. [ 454.340622][ T9098] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1508'. [ 455.377376][ T9115] sock: sock_set_timeout: `syz.3.1513' (pid 9115) tries to set negative timeout [ 457.482161][ T9124] netlink: 'syz.2.1517': attribute type 3 has an invalid length. [ 457.535088][ T9124] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.1517'. [ 458.776067][ T9151] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1526'. [ 458.949211][ T9154] device syzkaller0 entered promiscuous mode [ 459.544378][ T9170] netlink: 'syz.0.1533': attribute type 3 has an invalid length. [ 459.552560][ T9170] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.1533'. [ 460.193882][ T4275] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 463.055599][ T9205] delete_channel: no stack [ 463.814808][ T9217] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1547'. [ 464.028305][ T9227] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1549'. [ 464.664396][ T9241] delete_channel: no stack [ 464.917475][ T9221] device syzkaller0 entered promiscuous mode [ 465.197084][ T9247] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1557'. [ 468.750385][ T9258] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1560'. [ 468.784038][ T9258] device bond_slave_0 entered promiscuous mode [ 468.790561][ T9258] device bond_slave_1 entered promiscuous mode [ 469.170122][ T9262] can: request_module (can-proto-0) failed. [ 469.186805][ T9272] netlink: 'syz.0.1565': attribute type 4 has an invalid length. [ 469.210084][ T9272] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1565'. [ 469.281524][ T9274] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1566'. [ 469.343457][ T9274] openvswitch: netlink: Flow key attr not present in new flow. [ 469.359709][ T9278] delete_channel: no stack [ 470.009495][ T9293] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1572'. [ 470.602421][ T9293] device syzkaller0 entered promiscuous mode [ 471.786968][ T9317] delete_channel: no stack [ 476.386465][ T9356] delete_channel: no stack [ 476.399812][ T9358] netlink: 'syz.1.1593': attribute type 4 has an invalid length. [ 476.486218][ T9358] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1593'. [ 477.211344][ T9366] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1595'. [ 477.760189][ T9367] device syzkaller0 entered promiscuous mode [ 480.090157][ T9396] delete_channel: no stack [ 481.178270][ T9424] netlink: 'syz.0.1614': attribute type 10 has an invalid length. [ 481.883361][ T9424] device geneve0 entered promiscuous mode [ 481.996708][ T9424] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 482.099194][ T9430] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1616'. [ 482.101126][ T9423] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1615'. [ 484.478938][ T9465] IPv6: Can't replace route, no match found [ 484.504338][ T9469] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 484.812018][ T9477] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1631'. [ 484.976085][ T9478] device syzkaller0 entered promiscuous mode [ 485.861085][ T9485] FAULT_INJECTION: forcing a failure. [ 485.861085][ T9485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.894490][ T9485] CPU: 0 PID: 9485 Comm: syz.0.1634 Not tainted syzkaller #0 [ 485.901971][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 485.912083][ T9485] Call Trace: [ 485.915409][ T9485] [ 485.918378][ T9485] dump_stack_lvl+0x188/0x24e [ 485.923150][ T9485] ? show_regs_print_info+0x12/0x12 [ 485.928389][ T9485] ? load_image+0x400/0x400 [ 485.932923][ T9485] ? __lock_acquire+0x7d10/0x7d10 [ 485.938023][ T9485] should_fail_ex+0x399/0x4d0 [ 485.942727][ T9485] _copy_from_user+0x2c/0x170 [ 485.947440][ T9485] __sys_bpf+0x2ea/0x780 [ 485.951722][ T9485] ? bpf_link_show_fdinfo+0x380/0x380 [ 485.957145][ T9485] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 485.963358][ T9485] __x64_sys_bpf+0x78/0x90 [ 485.967811][ T9485] do_syscall_64+0x4c/0xa0 [ 485.972262][ T9485] ? clear_bhb_loop+0x60/0xb0 [ 485.976976][ T9485] ? clear_bhb_loop+0x60/0xb0 [ 485.981687][ T9485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.987609][ T9485] RIP: 0033:0x7f55c059c799 [ 485.992049][ T9485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.011691][ T9485] RSP: 002b:00007f55c1402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 486.020138][ T9485] RAX: ffffffffffffffda RBX: 00007f55c0815fa0 RCX: 00007f55c059c799 [ 486.028153][ T9485] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 486.036159][ T9485] RBP: 00007f55c1402090 R08: 0000000000000000 R09: 0000000000000000 [ 486.044167][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.052186][ T9485] R13: 00007f55c0816038 R14: 00007f55c0815fa0 R15: 00007ffdf6e60fa8 [ 486.060211][ T9485] [ 487.788617][ T9490] netlink: 'syz.2.1636': attribute type 10 has an invalid length. [ 487.796694][ T9490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1636'. [ 488.071174][ T9507] C: renamed from team_slave_0 [ 489.334297][ T9507] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1640'. [ 489.397021][ T9511] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1640'. [ 489.803552][ T9526] netlink: 'syz.4.1646': attribute type 10 has an invalid length. [ 489.812317][ T9526] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1646'. [ 490.179147][ T9531] netlink: 'syz.0.1648': attribute type 10 has an invalid length. [ 490.188559][ T9531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1648'. [ 490.733549][ T9540] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1651'. [ 490.953707][ T9543] device syzkaller0 entered promiscuous mode [ 494.697154][ T9560] netlink: 'syz.1.1660': attribute type 10 has an invalid length. [ 494.714685][ T9560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1660'. [ 494.738573][ T9560] device team0 entered promiscuous mode [ 494.752816][ T9560] device team_slave_0 entered promiscuous mode [ 494.768392][ T9560] device team_slave_1 entered promiscuous mode [ 494.781556][ T9560] device wlan1 entered promiscuous mode [ 494.818095][ T9560] bridge0: port 3(team0) entered blocking state [ 494.833650][ T9560] bridge0: port 3(team0) entered disabled state [ 494.847557][ T9560] bridge0: port 3(team0) entered blocking state [ 494.854117][ T9560] bridge0: port 3(team0) entered forwarding state [ 494.875775][ T9566] netlink: 'syz.2.1662': attribute type 10 has an invalid length. [ 494.904446][ T9566] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1662'. [ 495.322363][ T9586] delete_channel: no stack [ 495.792334][ T9601] netlink: 'syz.0.1672': attribute type 10 has an invalid length. [ 495.820659][ T9602] netlink: 'syz.3.1675': attribute type 29 has an invalid length. [ 495.825530][ T9601] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1672'. [ 495.854624][ T9601] bridge0: port 4(ipvlan1) entered blocking state [ 495.876338][ T9596] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.1674'. [ 495.880284][ T9604] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1675'. [ 495.896685][ T9601] bridge0: port 4(ipvlan1) entered disabled state [ 495.908451][ T9601] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 495.927801][ T9602] netlink: 'syz.3.1675': attribute type 29 has an invalid length. [ 496.062110][ T9599] device syzkaller0 entered promiscuous mode [ 496.082792][ T9604] netlink: 'syz.3.1675': attribute type 10 has an invalid length. [ 496.105980][ T9604] device hsr0 entered promiscuous mode [ 496.124603][ T9604] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 496.157652][ T9604] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 496.171965][ T9604] bond0: (slave hsr0): Error -95 calling set_mac_address [ 497.961691][ T9621] delete_channel: no stack [ 499.283000][ T9655] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1693'. [ 499.296638][ T9659] delete_channel: no stack [ 499.511148][ T9657] device syzkaller0 entered promiscuous mode [ 501.497356][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.504363][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.980615][ T9681] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.1703'. [ 502.652622][ T9681] device syzkaller0 entered promiscuous mode [ 502.729394][ T9694] delete_channel: no stack [ 503.858809][ T9702] delete_channel: no stack [ 504.739689][ T9706] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1713'. [ 504.862657][ T9707] device syzkaller0 entered promiscuous mode [ 505.330777][ T9725] delete_channel: no stack [ 507.274436][ T9732] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 507.293374][ T9732] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 507.303013][ T9732] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 507.930985][ T9755] delete_channel: no stack [ 508.081771][ T9759] delete_channel: no stack [ 508.503002][ T9765] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1735'. [ 508.706240][ T9769] FAULT_INJECTION: forcing a failure. [ 508.706240][ T9769] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 508.767292][ T9767] device syzkaller0 entered promiscuous mode [ 508.786311][ T9769] CPU: 1 PID: 9769 Comm: syz.4.1736 Not tainted syzkaller #0 [ 508.793786][ T9769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 508.803893][ T9769] Call Trace: [ 508.807218][ T9769] [ 508.810195][ T9769] dump_stack_lvl+0x188/0x24e [ 508.814947][ T9769] ? show_regs_print_info+0x12/0x12 [ 508.820209][ T9769] ? load_image+0x400/0x400 [ 508.824772][ T9769] ? __lock_acquire+0x7d10/0x7d10 [ 508.829851][ T9769] ? verify_lock_unused+0x140/0x140 [ 508.835118][ T9769] should_fail_ex+0x399/0x4d0 [ 508.839858][ T9769] prepare_alloc_pages+0x1e2/0x5f0 [ 508.845041][ T9769] __alloc_pages+0x130/0x4f0 [ 508.849703][ T9769] ? lock_chain_count+0x20/0x20 [ 508.854641][ T9769] ? zone_statistics+0x170/0x170 [ 508.859643][ T9769] ? count_memcg_event_mm+0x8a/0x3c0 [ 508.864997][ T9769] ? count_memcg_event_mm+0x36b/0x3c0 [ 508.870422][ T9769] ? __lock_acquire+0x7d10/0x7d10 [ 508.875508][ T9769] ? count_memcg_event_mm+0x8a/0x3c0 [ 508.880847][ T9769] __folio_alloc+0xe/0x30 [ 508.885247][ T9769] vma_alloc_folio+0x4a3/0x900 [ 508.890084][ T9769] handle_mm_fault+0x22b1/0x3ee0 [ 508.895067][ T9769] ? mt_find+0x157/0x830 [ 508.899414][ T9769] ? numa_migrate_prep+0x250/0x250 [ 508.904591][ T9769] ? lock_chain_count+0x20/0x20 [ 508.909506][ T9769] ? lock_mm_and_find_vma+0xae/0x2f0 [ 508.914860][ T9769] do_user_addr_fault+0x51f/0xb10 [ 508.919992][ T9769] exc_page_fault+0x60/0x100 [ 508.924645][ T9769] asm_exc_page_fault+0x22/0x30 [ 508.929557][ T9769] RIP: 0010:copy_user_short_string+0xd/0x40 [ 508.935508][ T9769] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 508.955175][ T9769] RSP: 0018:ffffc90003cb7728 EFLAGS: 00050202 [ 508.961292][ T9769] RAX: ffffffff840f0601 RBX: 000000000000000a RCX: 0000000000000001 [ 508.969312][ T9769] RDX: 0000000000000002 RSI: ffffc90003cb7960 RDI: 00002000000011c0 [ 508.977330][ T9769] RBP: 0000000000000000 R08: 0028025902a20401 R09: 0000000000000002 [ 508.985358][ T9769] R10: dffffc0000000000 R11: fffff52000796f2d R12: 00007fffffffeff6 [ 508.993381][ T9769] R13: 000000000000000a R14: ffffc90003cb7960 R15: 00002000000011c0 [ 509.001416][ T9769] ? copyout+0x41/0x120 [ 509.005650][ T9769] copyout+0xe7/0x120 [ 509.009705][ T9769] _copy_to_iter+0x48b/0x1040 [ 509.014473][ T9769] ? iov_iter_init+0x1f0/0x1f0 [ 509.019333][ T9769] ? skb_recv_datagram+0x142/0x180 [ 509.024508][ T9769] packet_recvmsg+0x8ee/0x1560 [ 509.029340][ T9769] ? packet_sendmsg+0x4e60/0x4e60 [ 509.034414][ T9769] ? aa_af_perm+0x340/0x340 [ 509.038996][ T9769] ? __might_fault+0xa6/0x120 [ 509.043729][ T9769] ? aa_sock_msg_perm+0x94/0x150 [ 509.048746][ T9769] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 509.054079][ T9769] ? security_socket_recvmsg+0x85/0xb0 [ 509.059610][ T9769] ? packet_sendmsg+0x4e60/0x4e60 [ 509.064701][ T9769] ____sys_recvmsg+0x2cb/0x5e0 [ 509.069556][ T9769] ? __sys_recvmsg_sock+0x40/0x40 [ 509.074666][ T9769] ? import_iovec+0x6f/0xa0 [ 509.079232][ T9769] ___sys_recvmsg+0x212/0x590 [ 509.083996][ T9769] ? __sys_recvmsg+0x290/0x290 [ 509.088838][ T9769] ? common_file_perm+0x171/0x1c0 [ 509.093935][ T9769] ? __fget_files+0x43d/0x4b0 [ 509.098691][ T9769] __x64_sys_recvmsg+0x205/0x2e0 [ 509.103696][ T9769] ? ___sys_recvmsg+0x590/0x590 [ 509.108625][ T9769] ? lockdep_hardirqs_on+0x94/0x140 [ 509.113880][ T9769] do_syscall_64+0x4c/0xa0 [ 509.118350][ T9769] ? clear_bhb_loop+0x60/0xb0 [ 509.123085][ T9769] ? clear_bhb_loop+0x60/0xb0 [ 509.127830][ T9769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 509.133780][ T9769] RIP: 0033:0x7fad9ef9c799 [ 509.138229][ T9769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.157870][ T9769] RSP: 002b:00007fad9fdde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 509.166318][ T9769] RAX: ffffffffffffffda RBX: 00007fad9f215fa0 RCX: 00007fad9ef9c799 [ 509.174328][ T9769] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 509.182329][ T9769] RBP: 00007fad9fdde090 R08: 0000000000000000 R09: 0000000000000000 [ 509.190331][ T9769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.198337][ T9769] R13: 00007fad9f216038 R14: 00007fad9f215fa0 R15: 00007ffdda798fa8 [ 509.206359][ T9769] [ 509.300513][ T9772] netlink: 'syz.0.1737': attribute type 3 has an invalid length. [ 509.334241][ T9772] netlink: 'syz.0.1737': attribute type 1 has an invalid length. [ 509.342052][ T9772] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1737'. [ 511.256318][ T9773] netlink: 'syz.0.1737': attribute type 5 has an invalid length. [ 511.264645][ T9773] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1737'. [ 511.294897][ T9781] device wg2 entered promiscuous mode [ 511.538524][ T9790] delete_channel: no stack [ 511.861015][ T9803] delete_channel: no stack [ 512.402865][ T9814] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1753'. [ 513.181525][ T9814] device syzkaller0 entered promiscuous mode [ 514.950843][ T9847] delete_channel: no stack [ 516.093449][ T9861] delete_channel: no stack [ 516.879884][ T9881] delete_channel: no stack [ 517.070462][ T9885] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1775'. [ 517.092588][ T9887] delete_channel: no stack [ 517.389471][ T9885] device syzkaller0 entered promiscuous mode [ 519.985319][ T9908] delete_channel: no stack [ 521.994551][ T9923] delete_channel: no stack [ 522.086673][ T9925] delete_channel: no stack [ 522.466300][ T9945] netlink: 'syz.3.1795': attribute type 29 has an invalid length. [ 522.536934][ T9945] netlink: 'syz.3.1795': attribute type 29 has an invalid length. [ 522.582417][ T9948] netlink: 'syz.3.1795': attribute type 29 has an invalid length. [ 522.617102][ T9951] netlink: 'syz.3.1795': attribute type 29 has an invalid length. [ 522.711309][ T9950] netlink: 'syz.0.1797': attribute type 46 has an invalid length. [ 522.831619][ T9948] netlink: 'syz.3.1795': attribute type 29 has an invalid length. [ 522.899332][ T9945] netlink: 'syz.3.1795': attribute type 10 has an invalid length. [ 523.032914][ T9945] device wlan1 entered promiscuous mode [ 523.049326][ T9945] team0: Port device wlan1 added [ 523.061822][ T9964] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1799'. [ 524.119168][ T9973] delete_channel: no stack [ 526.135638][ T9966] device syzkaller0 entered promiscuous mode [ 526.349547][ T9978] delete_channel: no stack [ 527.812532][T10003] netlink: 'syz.2.1814': attribute type 29 has an invalid length. [ 528.561057][T10003] netlink: 'syz.2.1814': attribute type 29 has an invalid length. [ 528.570924][T10004] netlink: 'syz.2.1814': attribute type 29 has an invalid length. [ 528.666390][T10008] netlink: 'syz.2.1814': attribute type 10 has an invalid length. [ 528.710383][T10005] netlink: 'syz.2.1814': attribute type 29 has an invalid length. [ 528.721784][T10011] delete_channel: no stack [ 528.728202][T10007] netlink: 'syz.2.1814': attribute type 29 has an invalid length. [ 528.968580][T10018] delete_channel: no stack [ 529.265068][T10027] netlink: 'syz.2.1823': attribute type 29 has an invalid length. [ 529.297715][T10027] netlink: 'syz.2.1823': attribute type 29 has an invalid length. [ 529.420539][T10033] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1825'. [ 530.062368][T10035] device syzkaller0 entered promiscuous mode [ 530.405189][T10043] delete_channel: no stack [ 530.714158][T10054] delete_channel: no stack [ 530.817768][T10055] netlink: 'syz.1.1832': attribute type 29 has an invalid length. [ 532.829838][T10055] netlink: 'syz.1.1832': attribute type 29 has an invalid length. [ 532.862892][T10064] netlink: 'syz.1.1832': attribute type 10 has an invalid length. [ 533.388631][T10087] delete_channel: no stack [ 533.874763][T10099] delete_channel: no stack [ 534.313153][T10102] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1849'. [ 534.779983][T10103] device syzkaller0 entered promiscuous mode [ 537.340563][T10108] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1851'. [ 537.786049][T10130] delete_channel: no stack [ 538.758621][T10152] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1866'. [ 538.782099][T10152] openvswitch: netlink: Flow key attr not present in new flow. [ 538.819973][T10152] bridge0: port 3(erspan0) entered blocking state [ 538.837426][T10152] bridge0: port 3(erspan0) entered disabled state [ 538.892625][T10152] device erspan0 entered promiscuous mode [ 539.392672][T10164] delete_channel: no stack [ 540.451579][T10183] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.1877'. [ 540.477268][T10183] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 541.552170][T10203] delete_channel: no stack [ 541.916893][T10211] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1887'. [ 541.941584][T10211] device caif0 entered promiscuous mode [ 542.770838][T10223] netlink: 'syz.4.1889': attribute type 29 has an invalid length. [ 542.820726][T10223] netlink: 'syz.4.1889': attribute type 29 has an invalid length. [ 544.000826][T10250] delete_channel: no stack [ 544.340705][T10258] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 545.309155][T10272] FAULT_INJECTION: forcing a failure. [ 545.309155][T10272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.343030][T10272] CPU: 1 PID: 10272 Comm: syz.0.1905 Not tainted syzkaller #0 [ 545.350599][T10272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 545.360711][T10272] Call Trace: [ 545.364029][T10272] [ 545.367005][T10272] dump_stack_lvl+0x188/0x24e [ 545.371747][T10272] ? show_regs_print_info+0x12/0x12 [ 545.377008][T10272] ? load_image+0x400/0x400 [ 545.381575][T10272] ? __lock_acquire+0x7d10/0x7d10 [ 545.386686][T10272] should_fail_ex+0x399/0x4d0 [ 545.391427][T10272] _copy_from_user+0x2c/0x170 [ 545.396179][T10272] __sys_bpf+0x2ea/0x780 [ 545.400588][T10272] ? bpf_link_show_fdinfo+0x380/0x380 [ 545.406036][T10272] ? lock_chain_count+0x20/0x20 [ 545.410967][T10272] __x64_sys_bpf+0x78/0x90 [ 545.415429][T10272] do_syscall_64+0x4c/0xa0 [ 545.419879][T10272] ? clear_bhb_loop+0x60/0xb0 [ 545.424599][T10272] ? clear_bhb_loop+0x60/0xb0 [ 545.429307][T10272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.435236][T10272] RIP: 0033:0x7f55c059c799 [ 545.439676][T10272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.459330][T10272] RSP: 002b:00007f55c13e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 545.467774][T10272] RAX: ffffffffffffffda RBX: 00007f55c0816090 RCX: 00007f55c059c799 [ 545.475770][T10272] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 545.483766][T10272] RBP: 00007f55c13e1090 R08: 0000000000000000 R09: 0000000000000000 [ 545.491853][T10272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.499854][T10272] R13: 00007f55c0816128 R14: 00007f55c0816090 R15: 00007ffdf6e60fa8 [ 545.507961][T10272] [ 546.216126][T10295] delete_channel: no stack [ 547.541019][T10306] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 548.419054][T10323] netlink: 'syz.1.1921': attribute type 10 has an invalid length. [ 548.468216][T10323] device veth1_macvtap entered promiscuous mode [ 548.492141][T10325] netlink: 'syz.4.1920': attribute type 3 has an invalid length. [ 548.511486][T10323] team0: Port device veth1_macvtap added [ 548.517959][T10325] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1920'. [ 548.565085][T10321] netlink: 'syz.4.1920': attribute type 10 has an invalid length. [ 548.612600][T10321] team0: Device veth1_macvtap failed to register rx_handler [ 548.839426][T10328] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1923'. [ 549.039452][T10336] delete_channel: no stack [ 549.750260][T10328] device syzkaller0 entered promiscuous mode [ 552.057425][T10365] FAULT_INJECTION: forcing a failure. [ 552.057425][T10365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.074462][T10365] CPU: 0 PID: 10365 Comm: syz.3.1936 Not tainted syzkaller #0 [ 552.082025][T10365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.092142][T10365] Call Trace: [ 552.095479][T10365] [ 552.098458][T10365] dump_stack_lvl+0x188/0x24e [ 552.103165][T10365] ? show_regs_print_info+0x12/0x12 [ 552.108393][T10365] ? load_image+0x400/0x400 [ 552.112935][T10365] ? __lock_acquire+0x7d10/0x7d10 [ 552.118074][T10365] ? snprintf+0xe5/0x140 [ 552.122339][T10365] should_fail_ex+0x399/0x4d0 [ 552.127069][T10365] _copy_to_user+0x2c/0x130 [ 552.131627][T10365] simple_read_from_buffer+0xe3/0x150 [ 552.137028][T10365] proc_fail_nth_read+0x1a6/0x220 [ 552.142075][T10365] ? proc_fault_inject_write+0x310/0x310 [ 552.147784][T10365] ? fsnotify_perm+0x248/0x550 [ 552.152576][T10365] ? proc_fault_inject_write+0x310/0x310 [ 552.158233][T10365] vfs_read+0x2de/0xa00 [ 552.162417][T10365] ? kernel_read+0x1e0/0x1e0 [ 552.167033][T10365] ? __fget_files+0x28/0x4b0 [ 552.171656][T10365] ? __fget_files+0x28/0x4b0 [ 552.176273][T10365] ? __fget_files+0x43d/0x4b0 [ 552.180996][T10365] ? __fdget_pos+0x2ae/0x360 [ 552.185627][T10365] ? ksys_read+0x71/0x250 [ 552.190008][T10365] ksys_read+0x14c/0x250 [ 552.194288][T10365] ? vfs_write+0xa30/0xa30 [ 552.198773][T10365] ? lockdep_hardirqs_on+0x94/0x140 [ 552.204036][T10365] do_syscall_64+0x4c/0xa0 [ 552.208523][T10365] ? clear_bhb_loop+0x60/0xb0 [ 552.213260][T10365] ? clear_bhb_loop+0x60/0xb0 [ 552.217996][T10365] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.223953][T10365] RIP: 0033:0x7f753ef5cfce [ 552.228432][T10365] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 552.248099][T10365] RSP: 002b:00007f753fea1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.256578][T10365] RAX: ffffffffffffffda RBX: 00007f753fea26c0 RCX: 00007f753ef5cfce [ 552.264616][T10365] RDX: 000000000000000f RSI: 00007f753fea20a0 RDI: 000000000000000b [ 552.272642][T10365] RBP: 00007f753fea2090 R08: 0000000000000000 R09: 0000000000000000 [ 552.280641][T10365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.288642][T10365] R13: 00007f753f216038 R14: 00007f753f215fa0 R15: 00007fff798329f8 [ 552.296709][T10365] [ 552.418852][T10368] delete_channel: no stack [ 552.846084][T10358] netlink: 'syz.0.1933': attribute type 10 has an invalid length. [ 552.856772][T10358] device veth1_macvtap left promiscuous mode [ 553.170347][T10379] delete_channel: no stack [ 554.439558][T10404] netlink: 'syz.0.1948': attribute type 10 has an invalid length. [ 554.460158][T10402] delete_channel: no stack [ 554.652337][T10406] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1950'. [ 555.354879][T10406] device syzkaller0 entered promiscuous mode [ 555.368803][T10415] netlink: 'syz.2.1953': attribute type 10 has an invalid length. [ 555.521585][T10419] device syzkaller0 entered promiscuous mode [ 555.622176][T10417] delete_channel: no stack [ 559.466404][T10427] netlink: 'syz.2.1956': attribute type 10 has an invalid length. [ 559.653485][T10448] delete_channel: no stack [ 559.871563][T10453] delete_channel: no stack [ 560.018408][T10457] delete_channel: no stack [ 560.742786][T10477] netlink: 'syz.3.1973': attribute type 10 has an invalid length. [ 560.847093][T10477] team0: Device veth1_macvtap failed to register rx_handler [ 561.671754][T10485] device syzkaller0 entered promiscuous mode [ 561.768819][T10484] delete_channel: no stack [ 562.226238][T10495] delete_channel: no stack [ 562.736601][T10503] delete_channel: no stack [ 562.939719][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.946184][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.822932][T10524] netlink: 'syz.3.1990': attribute type 10 has an invalid length. [ 564.881131][T10524] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1990'. [ 564.921880][T10527] delete_channel: no stack [ 565.130688][T10532] delete_channel: no stack [ 566.021687][T10552] device syzkaller0 entered promiscuous mode [ 566.208469][T10549] delete_channel: no stack [ 566.308280][T10563] delete_channel: no stack [ 566.506801][T10566] FAULT_INJECTION: forcing a failure. [ 566.506801][T10566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.520965][T10566] CPU: 1 PID: 10566 Comm: syz.1.2007 Not tainted syzkaller #0 [ 566.528488][T10566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 566.538594][T10566] Call Trace: [ 566.541909][T10566] [ 566.544877][T10566] dump_stack_lvl+0x188/0x24e [ 566.549619][T10566] ? show_regs_print_info+0x12/0x12 [ 566.554882][T10566] ? load_image+0x400/0x400 [ 566.559439][T10566] ? __lock_acquire+0x7d10/0x7d10 [ 566.564540][T10566] should_fail_ex+0x399/0x4d0 [ 566.569268][T10566] _copy_from_user+0x2c/0x170 [ 566.574009][T10566] __sys_bpf+0x2ea/0x780 [ 566.578322][T10566] ? bpf_link_show_fdinfo+0x380/0x380 [ 566.583759][T10566] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 566.589981][T10566] __x64_sys_bpf+0x78/0x90 [ 566.594451][T10566] do_syscall_64+0x4c/0xa0 [ 566.598918][T10566] ? clear_bhb_loop+0x60/0xb0 [ 566.603650][T10566] ? clear_bhb_loop+0x60/0xb0 [ 566.608367][T10566] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 566.614309][T10566] RIP: 0033:0x7f5056d9c799 [ 566.618750][T10566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.638396][T10566] RSP: 002b:00007f5054ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.646844][T10566] RAX: ffffffffffffffda RBX: 00007f5057015fa0 RCX: 00007f5056d9c799 [ 566.654857][T10566] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 566.662859][T10566] RBP: 00007f5054ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 566.670859][T10566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.678873][T10566] R13: 00007f5057016038 R14: 00007f5057015fa0 R15: 00007fff52849d88 [ 566.686896][T10566] [ 568.768875][T10564] netlink: 'syz.2.2004': attribute type 3 has an invalid length. [ 568.777117][T10564] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2004'. [ 569.111686][T10589] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2025'. [ 569.443388][T10598] netlink: 'syz.4.2018': attribute type 3 has an invalid length. [ 569.468891][T10598] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2018'. [ 569.535436][T10600] delete_channel: no stack [ 569.942786][T10607] delete_channel: no stack [ 569.968894][T10589] device syzkaller0 entered promiscuous mode [ 570.474507][T10616] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2023'. [ 572.115244][T10623] netlink: 'syz.4.2027': attribute type 10 has an invalid length. [ 572.146573][T10623] device geneve0 entered promiscuous mode [ 572.226581][T10627] FAULT_INJECTION: forcing a failure. [ 572.226581][T10627] name failslab, interval 1, probability 0, space 0, times 0 [ 572.258572][T10627] CPU: 0 PID: 10627 Comm: syz.1.2029 Not tainted syzkaller #0 [ 572.266114][T10627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 572.276215][T10627] Call Trace: [ 572.279535][T10627] [ 572.282497][T10627] dump_stack_lvl+0x188/0x24e [ 572.287226][T10627] ? lockdep_hardirqs_on+0x94/0x140 [ 572.292469][T10627] ? show_regs_print_info+0x12/0x12 [ 572.297754][T10627] ? audit_tree_destroy_watch+0x20/0x20 [ 572.303357][T10627] should_fail_ex+0x399/0x4d0 [ 572.308082][T10627] should_failslab+0x5/0x20 [ 572.312626][T10627] slab_pre_alloc_hook+0x59/0x310 [ 572.317705][T10627] kmem_cache_alloc_lru+0x49/0x2e0 [ 572.322875][T10627] ? __d_alloc+0x31/0x700 [ 572.327255][T10627] __d_alloc+0x31/0x700 [ 572.331460][T10627] d_alloc_pseudo+0x19/0x70 [ 572.336007][T10627] alloc_file_pseudo+0xe0/0x200 [ 572.340913][T10627] ? alloc_empty_file_noaccount+0x80/0x80 [ 572.346687][T10627] ? unclone_ctx+0xca/0x120 [ 572.351250][T10627] anon_inode_getfile+0xc1/0x1a0 [ 572.356248][T10627] __se_sys_perf_event_open+0xc26/0x1ec0 [ 572.361939][T10627] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 572.367661][T10627] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 572.373361][T10627] do_syscall_64+0x4c/0xa0 [ 572.377833][T10627] ? clear_bhb_loop+0x60/0xb0 [ 572.382566][T10627] ? clear_bhb_loop+0x60/0xb0 [ 572.387298][T10627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.393239][T10627] RIP: 0033:0x7f5056d9c799 [ 572.397716][T10627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.417382][T10627] RSP: 002b:00007f5054ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 572.425852][T10627] RAX: ffffffffffffffda RBX: 00007f5057015fa0 RCX: 00007f5056d9c799 [ 572.433886][T10627] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000500 [ 572.441899][T10627] RBP: 00007f5054ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 572.449919][T10627] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 572.457945][T10627] R13: 00007f5057016038 R14: 00007f5057015fa0 R15: 00007fff52849d88 [ 572.465977][T10627] [ 572.592744][T10623] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 572.679767][T10636] FAULT_INJECTION: forcing a failure. [ 572.679767][T10636] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 572.700324][T10636] CPU: 1 PID: 10636 Comm: syz.0.2031 Not tainted syzkaller #0 [ 572.707859][T10636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 572.717948][T10636] Call Trace: [ 572.721264][T10636] [ 572.724241][T10636] dump_stack_lvl+0x188/0x24e [ 572.728977][T10636] ? show_regs_print_info+0x12/0x12 [ 572.734229][T10636] ? load_image+0x400/0x400 [ 572.738781][T10636] ? __lock_acquire+0x7d10/0x7d10 [ 572.743859][T10636] ? slab_post_alloc_hook+0x4b/0x480 [ 572.749197][T10636] should_fail_ex+0x399/0x4d0 [ 572.753925][T10636] prepare_alloc_pages+0x1e2/0x5f0 [ 572.759103][T10636] __alloc_pages+0x130/0x4f0 [ 572.763747][T10636] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 572.769529][T10636] ? zone_statistics+0x170/0x170 [ 572.774531][T10636] ? __rwlock_init+0x140/0x140 [ 572.779378][T10636] ? do_raw_spin_unlock+0x11d/0x230 [ 572.784632][T10636] __get_free_pages+0x8/0x30 [ 572.789280][T10636] kasan_populate_vmalloc_pte+0x31/0xf0 [ 572.794876][T10636] ? __apply_to_page_range+0x977/0xd10 [ 572.800394][T10636] __apply_to_page_range+0x989/0xd10 [ 572.805743][T10636] ? kasan_populate_vmalloc+0x70/0x70 [ 572.811172][T10636] alloc_vmap_area+0x178f/0x18c0 [ 572.816200][T10636] ? vm_map_ram+0xab0/0xab0 [ 572.820772][T10636] ? rcu_is_watching+0x11/0xa0 [ 572.825599][T10636] __get_vm_area_node+0x158/0x330 [ 572.830684][T10636] __vmalloc_node_range+0x357/0x13b0 [ 572.836025][T10636] ? sock_map_alloc+0x1ce/0x2e0 [ 572.840959][T10636] ? memset+0x1e/0x40 [ 572.844991][T10636] ? lockdep_init_map_type+0x98/0x8d0 [ 572.850421][T10636] ? free_vm_area+0x50/0x50 [ 572.854976][T10636] ? __kmem_cache_alloc_node+0x140/0x260 [ 572.860660][T10636] ? rcu_is_watching+0x11/0xa0 [ 572.865511][T10636] bpf_map_area_alloc+0xd4/0xe0 [ 572.870414][T10636] ? sock_map_alloc+0x1ce/0x2e0 [ 572.875325][T10636] sock_map_alloc+0x1ce/0x2e0 [ 572.880069][T10636] map_create+0x534/0x1000 [ 572.884563][T10636] ? bpf_lsm_bpf+0x5/0x10 [ 572.888943][T10636] __sys_bpf+0x38b/0x780 [ 572.893234][T10636] ? bpf_link_show_fdinfo+0x380/0x380 [ 572.898666][T10636] ? lock_chain_count+0x20/0x20 [ 572.903575][T10636] __x64_sys_bpf+0x78/0x90 [ 572.908042][T10636] do_syscall_64+0x4c/0xa0 [ 572.912512][T10636] ? clear_bhb_loop+0x60/0xb0 [ 572.917235][T10636] ? clear_bhb_loop+0x60/0xb0 [ 572.921963][T10636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.927911][T10636] RIP: 0033:0x7f55c059c799 [ 572.932380][T10636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.952040][T10636] RSP: 002b:00007f55c1402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 572.960519][T10636] RAX: ffffffffffffffda RBX: 00007f55c0815fa0 RCX: 00007f55c059c799 [ 572.968555][T10636] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0600000000000000 [ 572.976595][T10636] RBP: 00007f55c1402090 R08: 0000000000000000 R09: 0000000000000000 [ 572.984615][T10636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.992664][T10636] R13: 00007f55c0816038 R14: 00007f55c0815fa0 R15: 00007ffdf6e60fa8 [ 573.000711][T10636] [ 573.011057][T10624] delete_channel: no stack [ 573.058722][T10639] delete_channel: no stack [ 573.315209][T10647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2035'. [ 573.350024][T10647] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.2035'. [ 573.755090][T10658] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2039'. [ 574.045957][T10664] delete_channel: no stack [ 574.060819][T10665] delete_channel: no stack [ 574.495927][T10662] device syzkaller0 entered promiscuous mode [ 577.525781][T10688] delete_channel: no stack [ 577.719023][T10696] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2052'. [ 577.902933][T10700] delete_channel: no stack [ 577.941796][T10703] delete_channel: no stack [ 578.414624][T10708] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2057'. [ 578.662745][T10715] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2058'. [ 579.343694][T10731] delete_channel: no stack [ 580.053382][T10714] device syzkaller0 entered promiscuous mode [ 580.138954][T10718] device syzkaller0 entered promiscuous mode [ 583.418419][T10736] netlink: 'syz.3.2064': attribute type 10 has an invalid length. [ 583.431336][T10736] device geneve0 entered promiscuous mode [ 583.478098][T10736] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 583.722151][T10749] delete_channel: no stack [ 584.586717][T10774] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2078'. [ 584.612373][T10774] openvswitch: netlink: Flow key attr not present in new flow. [ 585.272416][T10780] delete_channel: no stack [ 585.541223][T10782] device syzkaller0 entered promiscuous mode [ 585.849301][T10797] device syzkaller0 entered promiscuous mode [ 588.116040][T10816] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2093'. [ 588.138707][T10816] openvswitch: netlink: Flow key attr not present in new flow. [ 590.965546][T10851] FAULT_INJECTION: forcing a failure. [ 590.965546][T10851] name failslab, interval 1, probability 0, space 0, times 0 [ 591.044840][T10851] CPU: 0 PID: 10851 Comm: syz.4.2106 Not tainted syzkaller #0 [ 591.052396][T10851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 591.062497][T10851] Call Trace: [ 591.065826][T10851] [ 591.068795][T10851] dump_stack_lvl+0x188/0x24e [ 591.073537][T10851] ? verify_lock_unused+0x140/0x140 [ 591.078794][T10851] ? show_regs_print_info+0x12/0x12 [ 591.084050][T10851] ? load_image+0x400/0x400 [ 591.088610][T10851] should_fail_ex+0x399/0x4d0 [ 591.093345][T10851] should_failslab+0x5/0x20 [ 591.097900][T10851] slab_pre_alloc_hook+0x59/0x310 [ 591.102985][T10851] kmem_cache_alloc+0x56/0x2f0 [ 591.107816][T10851] ? __nf_conntrack_alloc+0x99/0x380 [ 591.113173][T10851] __nf_conntrack_alloc+0x99/0x380 [ 591.118358][T10851] init_conntrack+0x25b/0x11a0 [ 591.123196][T10851] ? early_drop+0x870/0x870 [ 591.127752][T10851] ? nf_conntrack_find_get+0x670/0x670 [ 591.133277][T10851] ? __siphash_unaligned+0x25b/0x3a0 [ 591.138622][T10851] nf_conntrack_in+0xd3e/0x17b0 [ 591.143567][T10851] ? nf_ct_pernet+0x270/0x270 [ 591.148320][T10851] ? ip6t_alloc_initial_table+0x640/0x640 [ 591.154103][T10851] ? ipv6_defrag+0x2d2/0x3a0 [ 591.158791][T10851] ? ipv6_conntrack_in+0x20/0x20 [ 591.163766][T10851] nf_hook_slow+0xb9/0x200 [ 591.168229][T10851] rawv6_send_hdrinc+0x157d/0x16c0 [ 591.173400][T10851] ? rawv6_send_hdrinc+0xb41/0x16c0 [ 591.178646][T10851] ? rawv6_probe_proto_opt+0x300/0x300 [ 591.184148][T10851] ? txopt_get+0x340/0x3f0 [ 591.188626][T10851] ? rawv6_push_pending_frames+0x8d0/0x8d0 [ 591.194468][T10851] ? fl6_sock_lookup+0xc0/0xc0 [ 591.199282][T10851] rawv6_sendmsg+0x11b3/0x1700 [ 591.204098][T10851] ? compat_rawv6_ioctl+0x60/0x60 [ 591.209174][T10851] ? aa_sk_perm+0x81f/0x950 [ 591.213732][T10851] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 591.220372][T10851] ? inet_sendmsg+0x78/0x2f0 [ 591.225003][T10851] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 591.230317][T10851] ? security_socket_sendmsg+0x7c/0xa0 [ 591.235820][T10851] ? inet_send_prepare+0x260/0x260 [ 591.240970][T10851] ____sys_sendmsg+0x5be/0x970 [ 591.245780][T10851] ? __sys_sendmsg_sock+0x30/0x30 [ 591.250850][T10851] ? __import_iovec+0x315/0x500 [ 591.255757][T10851] ? import_iovec+0x6f/0xa0 [ 591.260289][T10851] ___sys_sendmsg+0x2a2/0x360 [ 591.265056][T10851] ? __sys_sendmsg+0x290/0x290 [ 591.269881][T10851] ? __lock_acquire+0x7d10/0x7d10 [ 591.274965][T10851] __se_sys_sendmsg+0x1bb/0x2a0 [ 591.279859][T10851] ? __x64_sys_sendmsg+0x80/0x80 [ 591.284850][T10851] ? lockdep_hardirqs_on+0x94/0x140 [ 591.290095][T10851] do_syscall_64+0x4c/0xa0 [ 591.294554][T10851] ? clear_bhb_loop+0x60/0xb0 [ 591.299263][T10851] ? clear_bhb_loop+0x60/0xb0 [ 591.303988][T10851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.309913][T10851] RIP: 0033:0x7fad9ef9c799 [ 591.314362][T10851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.334085][T10851] RSP: 002b:00007fad9fdde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.342534][T10851] RAX: ffffffffffffffda RBX: 00007fad9f215fa0 RCX: 00007fad9ef9c799 [ 591.350545][T10851] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 591.358546][T10851] RBP: 00007fad9fdde090 R08: 0000000000000000 R09: 0000000000000000 [ 591.366558][T10851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.374553][T10851] R13: 00007fad9f216038 R14: 00007fad9f215fa0 R15: 00007ffdda798fa8 [ 591.382566][T10851] [ 591.841820][T10865] netlink: 'syz.4.2109': attribute type 21 has an invalid length. [ 591.872931][T10865] netlink: 'syz.4.2109': attribute type 6 has an invalid length. [ 591.933423][T10865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2109'. [ 591.976430][T10869] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2111'. [ 591.994037][T10869] openvswitch: netlink: Flow key attr not present in new flow. [ 592.027981][T10869] bridge0: port 4(erspan0) entered blocking state [ 592.035557][T10869] bridge0: port 4(erspan0) entered disabled state [ 592.047999][T10869] device erspan0 entered promiscuous mode [ 592.059839][T10869] bridge0: port 4(erspan0) entered blocking state [ 592.066617][T10869] bridge0: port 4(erspan0) entered forwarding state [ 593.161086][T10892] delete_channel: no stack [ 593.779962][T10905] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2123'. [ 593.882635][T10909] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.892377][T10909] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.333054][T10920] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2128'. [ 594.369019][T10920] openvswitch: netlink: Flow key attr not present in new flow. [ 594.532470][T10926] netlink: 'syz.4.2130': attribute type 10 has an invalid length. [ 594.540875][T10926] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2130'. [ 594.556287][T10926] device hsr0 entered promiscuous mode [ 594.570702][T10926] bridge0: port 3(hsr0) entered blocking state [ 594.578414][T10926] bridge0: port 3(hsr0) entered disabled state [ 594.825538][T10934] delete_channel: no stack [ 596.329737][T10964] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2142'. [ 596.339656][T10964] openvswitch: netlink: Flow key attr not present in new flow. [ 598.924612][T10978] netlink: 'syz.1.2147': attribute type 21 has an invalid length. [ 598.948440][T10978] netlink: 'syz.1.2147': attribute type 6 has an invalid length. [ 598.971729][T10978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2147'. [ 599.615150][T10995] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2155'. [ 599.669103][T10998] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2156'. [ 599.744263][T10998] openvswitch: netlink: Flow key attr not present in new flow. [ 600.231998][T11007] netlink: 'syz.0.2158': attribute type 10 has an invalid length. [ 600.249284][T11007] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2158'. [ 600.300594][T11007] device hsr0 entered promiscuous mode [ 600.328505][T11007] bridge0: port 5(hsr0) entered blocking state [ 600.359297][T11007] bridge0: port 5(hsr0) entered disabled state [ 600.441202][T11007] bridge0: port 5(hsr0) entered blocking state [ 600.448936][T11007] bridge0: port 5(hsr0) entered forwarding state [ 601.994604][T11042] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2171'. [ 602.015119][T11042] openvswitch: netlink: Flow key attr not present in new flow. [ 602.424313][T11050] netlink: 8743 bytes leftover after parsing attributes in process `syz.2.2174'. [ 602.851386][T11061] netlink: 'syz.2.2178': attribute type 10 has an invalid length. [ 602.898412][T11061] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2178'. [ 602.942757][T11061] netlink: 'syz.2.2178': attribute type 10 has an invalid length. [ 602.958455][T11061] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2178'. [ 602.978528][T11058] netlink: 'syz.2.2178': attribute type 10 has an invalid length. [ 602.992999][T11058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2178'. [ 603.308689][T11065] netlink: 'syz.3.2176': attribute type 10 has an invalid length. [ 603.409215][T11065] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2176'. [ 603.445634][T11065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 603.507188][T11065] bridge0: port 3(hsr0) entered blocking state [ 603.563792][T11065] bridge0: port 3(hsr0) entered disabled state [ 603.615488][T11065] bridge0: port 3(hsr0) entered blocking state [ 603.621992][T11065] bridge0: port 3(hsr0) entered forwarding state [ 604.846255][T11087] delete_channel: no stack [ 604.942955][T11089] __nla_validate_parse: 1 callbacks suppressed [ 604.942979][T11089] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2185'. [ 605.035001][T11089] openvswitch: netlink: Flow key attr not present in new flow. [ 605.095799][T11089] bridge0: port 4(erspan0) entered blocking state [ 605.124342][T11089] bridge0: port 4(erspan0) entered disabled state [ 605.132962][T11089] device erspan0 entered promiscuous mode [ 605.540282][T11102] delete_channel: no stack [ 605.936631][T11111] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.2195'. [ 606.222107][T11116] device syzkaller0 entered promiscuous mode [ 609.836108][T11129] delete_channel: no stack [ 610.210429][T11137] delete_channel: no stack [ 611.729479][T11161] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2212'. [ 612.020907][T11162] device syzkaller0 entered promiscuous mode [ 612.056436][T11166] bridge0: port 4(erspan0) entered blocking state [ 612.074495][T11166] bridge0: port 4(erspan0) entered disabled state [ 612.083480][T11166] device erspan0 entered promiscuous mode [ 612.090088][T11166] bridge0: port 4(erspan0) entered blocking state [ 612.096804][T11166] bridge0: port 4(erspan0) entered forwarding state [ 615.868929][T11198] sctp: [Deprecated]: syz.3.2225 (pid 11198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 615.868929][T11198] Use struct sctp_sack_info instead [ 617.712425][T11233] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2237'. [ 617.835965][T11236] device syzkaller0 entered promiscuous mode [ 618.272759][T11242] delete_channel: no stack [ 620.746822][T11275] bridge0: port 4(erspan0) entered blocking state [ 620.754743][T11275] bridge0: port 4(erspan0) entered disabled state [ 620.775451][T11275] device erspan0 entered promiscuous mode [ 620.791644][T11275] bridge0: port 4(erspan0) entered blocking state [ 620.798560][T11275] bridge0: port 4(erspan0) entered forwarding state [ 621.047383][T11279] delete_channel: no stack [ 621.076656][T11276] delete_channel: no stack [ 621.848627][T11291] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.2259'. [ 622.255403][T11304] FAULT_INJECTION: forcing a failure. [ 622.255403][T11304] name failslab, interval 1, probability 0, space 0, times 0 [ 622.308159][T11304] CPU: 0 PID: 11304 Comm: syz.0.2264 Not tainted syzkaller #0 [ 622.315800][T11304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 622.325904][T11304] Call Trace: [ 622.329224][T11304] [ 622.332200][T11304] dump_stack_lvl+0x188/0x24e [ 622.336946][T11304] ? show_regs_print_info+0x12/0x12 [ 622.342205][T11304] ? load_image+0x400/0x400 [ 622.346772][T11304] ? __might_sleep+0xd0/0xd0 [ 622.351413][T11304] ? __lock_acquire+0x7d10/0x7d10 [ 622.356564][T11304] should_fail_ex+0x399/0x4d0 [ 622.361402][T11304] should_failslab+0x5/0x20 [ 622.365953][T11304] slab_pre_alloc_hook+0x59/0x310 [ 622.371040][T11304] kmem_cache_alloc_node+0x5a/0x320 [ 622.376314][T11304] ? lock_chain_count+0x20/0x20 [ 622.381227][T11304] ? dup_task_struct+0x57/0x6b0 [ 622.386146][T11304] dup_task_struct+0x57/0x6b0 [ 622.390883][T11304] ? lockdep_hardirqs_on+0x94/0x140 [ 622.396149][T11304] copy_process+0x5fa/0x4030 [ 622.400791][T11304] ? trace_event_raw_event_lock+0x250/0x250 [ 622.406743][T11304] ? perf_trace_lock+0xf8/0x390 [ 622.411656][T11304] ? perf_trace_lock+0xf8/0x390 [ 622.416563][T11304] ? idle_dummy+0x10/0x10 [ 622.420950][T11304] kernel_clone+0x24b/0x900 [ 622.425497][T11304] ? ksys_write+0x1c0/0x250 [ 622.430059][T11304] ? create_io_thread+0x170/0x170 [ 622.435148][T11304] __x64_sys_clone+0x1a7/0x220 [ 622.439952][T11304] ? __fget_files+0x43d/0x4b0 [ 622.444688][T11304] ? __ia32_sys_vfork+0x140/0x140 [ 622.449774][T11304] ? lock_chain_count+0x20/0x20 [ 622.454684][T11304] ? lockdep_hardirqs_on+0x94/0x140 [ 622.459939][T11304] do_syscall_64+0x4c/0xa0 [ 622.464447][T11304] ? clear_bhb_loop+0x60/0xb0 [ 622.469192][T11304] ? clear_bhb_loop+0x60/0xb0 [ 622.473918][T11304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.479860][T11304] RIP: 0033:0x7f55c059c799 [ 622.484322][T11304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.503998][T11304] RSP: 002b:00007f55c1401fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 622.512467][T11304] RAX: ffffffffffffffda RBX: 00007f55c0815fa0 RCX: 00007f55c059c799 [ 622.520488][T11304] RDX: 00002000000017c0 RSI: 0000000000004100 RDI: 0000000001205000 [ 622.528513][T11304] RBP: 00007f55c1402090 R08: 0000000000000000 R09: 0000000000000000 [ 622.536538][T11304] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 622.544553][T11304] R13: 00007f55c0816038 R14: 00007f55c0815fa0 R15: 00007ffdf6e60fa8 [ 622.552597][T11304] [ 622.601643][T11291] device syzkaller0 entered promiscuous mode [ 624.377410][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.383910][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.488754][T11352] delete_channel: no stack [ 627.739552][T11359] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2279'. [ 628.259768][T11369] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.2281'. [ 629.169675][T11369] device syzkaller0 entered promiscuous mode [ 629.517968][T11397] delete_channel: no stack [ 631.343492][T11406] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2294'. [ 633.602855][T11472] delete_channel: no stack [ 634.949787][T11501] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2332'. [ 635.107084][T11509] delete_channel: no stack [ 635.786594][T11523] FAULT_INJECTION: forcing a failure. [ 635.786594][T11523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.806006][T11523] CPU: 1 PID: 11523 Comm: syz.3.2340 Not tainted syzkaller #0 [ 635.813666][T11523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.823769][T11523] Call Trace: [ 635.827087][T11523] [ 635.830064][T11523] dump_stack_lvl+0x188/0x24e [ 635.834802][T11523] ? show_regs_print_info+0x12/0x12 [ 635.840064][T11523] ? load_image+0x400/0x400 [ 635.844618][T11523] ? __lock_acquire+0x7d10/0x7d10 [ 635.849705][T11523] should_fail_ex+0x399/0x4d0 [ 635.854436][T11523] _copy_from_user+0x2c/0x170 [ 635.859166][T11523] __sys_bpf+0x2ea/0x780 [ 635.863466][T11523] ? bpf_link_show_fdinfo+0x380/0x380 [ 635.868908][T11523] ? lock_chain_count+0x20/0x20 [ 635.873815][T11523] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 635.879867][T11523] __x64_sys_bpf+0x78/0x90 [ 635.884344][T11523] do_syscall_64+0x4c/0xa0 [ 635.888813][T11523] ? clear_bhb_loop+0x60/0xb0 [ 635.893539][T11523] ? clear_bhb_loop+0x60/0xb0 [ 635.898270][T11523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.904226][T11523] RIP: 0033:0x7f753ef9c799 [ 635.908687][T11523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.928343][T11523] RSP: 002b:00007f753fea2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 635.936822][T11523] RAX: ffffffffffffffda RBX: 00007f753f215fa0 RCX: 00007f753ef9c799 [ 635.944854][T11523] RDX: 0000000000000090 RSI: 0000200000000600 RDI: 0000000000000005 [ 635.952883][T11523] RBP: 00007f753fea2090 R08: 0000000000000000 R09: 0000000000000000 [ 635.960913][T11523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.968934][T11523] R13: 00007f753f216038 R14: 00007f753f215fa0 R15: 00007fff798329f8 [ 635.976978][T11523] [ 636.127394][T11525] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2341'. [ 636.882355][T11525] device syzkaller0 entered promiscuous mode [ 637.045870][T11547] delete_channel: no stack [ 637.191970][T11549] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 643.009152][T11546] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2349'. [ 643.093758][T11561] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2353'. [ 643.115247][T11561] device veth0_macvtap left promiscuous mode [ 643.514520][T11572] netlink: 'syz.1.2357': attribute type 10 has an invalid length. [ 643.551019][T11572] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2357'. [ 643.756748][T11580] netlink: 'syz.3.2360': attribute type 10 has an invalid length. [ 643.825524][T11580] device wlan1 left promiscuous mode [ 643.884181][T11580] team0: Port device wlan1 removed [ 643.890009][T11580] wlan1: mtu less than device minimum [ 643.933499][T11580] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 643.956421][T11582] netlink: 'syz.3.2360': attribute type 10 has an invalid length. [ 643.984711][T11582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2360'. [ 643.997476][T11582] bridge0: port 5(team0) entered blocking state [ 644.008738][T11582] bridge0: port 5(team0) entered disabled state [ 644.018976][T11582] bridge0: port 5(team0) entered blocking state [ 644.025447][T11582] bridge0: port 5(team0) entered forwarding state [ 644.453100][T11600] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2365'. [ 644.712541][T11601] device syzkaller0 entered promiscuous mode [ 648.742415][T11639] delete_channel: no stack [ 649.584156][T11656] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2388'. [ 651.008368][T11654] device syzkaller0 entered promiscuous mode [ 653.707946][T11682] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2406'. [ 653.909350][T11688] delete_channel: no stack [ 654.563067][T11678] device syzkaller0 entered promiscuous mode [ 657.142300][T11729] delete_channel: no stack [ 658.268858][T11751] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2419'. [ 658.672415][T11764] device syzkaller0 entered promiscuous mode [ 659.817296][T11781] delete_channel: no stack [ 661.990329][T11785] netlink: 'syz.3.2428': attribute type 28 has an invalid length. [ 662.210432][T11790] netlink: 'syz.3.2429': attribute type 3 has an invalid length. [ 662.241120][T11790] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.2429'. [ 662.581520][T11805] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2436'. [ 662.696497][T11807] delete_channel: no stack [ 662.777388][T11811] delete_channel: no stack [ 663.247318][T11815] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2441'. [ 663.391109][T11819] device syzkaller0 entered promiscuous mode [ 663.403021][T11829] FAULT_INJECTION: forcing a failure. [ 663.403021][T11829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.470562][T11829] CPU: 0 PID: 11829 Comm: syz.3.2446 Not tainted syzkaller #0 [ 663.478128][T11829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 663.488228][T11829] Call Trace: [ 663.491549][T11829] [ 663.494526][T11829] dump_stack_lvl+0x188/0x24e [ 663.499273][T11829] ? show_regs_print_info+0x12/0x12 [ 663.504515][T11829] ? load_image+0x400/0x400 [ 663.509047][T11829] ? __lock_acquire+0x7d10/0x7d10 [ 663.514107][T11829] ? snprintf+0xe5/0x140 [ 663.518379][T11829] should_fail_ex+0x399/0x4d0 [ 663.523094][T11829] _copy_to_user+0x2c/0x130 [ 663.527795][T11829] simple_read_from_buffer+0xe3/0x150 [ 663.533218][T11829] proc_fail_nth_read+0x1a6/0x220 [ 663.538291][T11829] ? proc_fault_inject_write+0x310/0x310 [ 663.543966][T11829] ? fsnotify_perm+0x248/0x550 [ 663.548767][T11829] ? proc_fault_inject_write+0x310/0x310 [ 663.554424][T11829] vfs_read+0x2de/0xa00 [ 663.558618][T11829] ? kernel_read+0x1e0/0x1e0 [ 663.563248][T11829] ? __fget_files+0x28/0x4b0 [ 663.567879][T11829] ? __fget_files+0x28/0x4b0 [ 663.572509][T11829] ? __fget_files+0x43d/0x4b0 [ 663.577233][T11829] ? __fdget_pos+0x2ae/0x360 [ 663.581858][T11829] ? ksys_read+0x71/0x250 [ 663.586222][T11829] ksys_read+0x14c/0x250 [ 663.590493][T11829] ? vfs_write+0xa30/0xa30 [ 663.594943][T11829] ? lockdep_hardirqs_on+0x94/0x140 [ 663.600180][T11829] do_syscall_64+0x4c/0xa0 [ 663.604637][T11829] ? clear_bhb_loop+0x60/0xb0 [ 663.609348][T11829] ? clear_bhb_loop+0x60/0xb0 [ 663.614057][T11829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 663.619986][T11829] RIP: 0033:0x7f753ef5cfce [ 663.624429][T11829] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 663.644075][T11829] RSP: 002b:00007f753fea1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 663.652518][T11829] RAX: ffffffffffffffda RBX: 00007f753fea26c0 RCX: 00007f753ef5cfce [ 663.660522][T11829] RDX: 000000000000000f RSI: 00007f753fea20a0 RDI: 0000000000000004 [ 663.668615][T11829] RBP: 00007f753fea2090 R08: 0000000000000000 R09: 0000000000000000 [ 663.676618][T11829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 663.684625][T11829] R13: 00007f753f216038 R14: 00007f753f215fa0 R15: 00007fff798329f8 [ 663.692647][T11829] [ 663.899527][T11838] delete_channel: no stack [ 665.616929][T11845] netlink: 22 bytes leftover after parsing attributes in process `syz.4.2451'. [ 665.722667][T11842] device syzkaller0 entered promiscuous mode [ 666.617667][T11874] netlink: 'syz.2.2456': attribute type 11 has an invalid length. [ 666.643575][T11874] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2456'. [ 666.858127][T11873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 668.025187][T11885] delete_channel: no stack [ 669.402581][T11896] tap0: tun_chr_ioctl cmd 2147767517 [ 669.440740][T11895] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2465'. [ 669.662833][T11899] device syzkaller0 entered promiscuous mode [ 673.675438][T11946] FAULT_INJECTION: forcing a failure. [ 673.675438][T11946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.728234][T11946] CPU: 0 PID: 11946 Comm: syz.1.2480 Not tainted syzkaller #0 [ 673.735844][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 673.745942][T11946] Call Trace: [ 673.749272][T11946] [ 673.752228][T11946] dump_stack_lvl+0x188/0x24e [ 673.756968][T11946] ? show_regs_print_info+0x12/0x12 [ 673.762212][T11946] ? load_image+0x400/0x400 [ 673.766766][T11946] ? __lock_acquire+0x7d10/0x7d10 [ 673.771842][T11946] should_fail_ex+0x399/0x4d0 [ 673.776553][T11946] _copy_from_user+0x2c/0x170 [ 673.781267][T11946] iovec_from_user+0x143/0x360 [ 673.786070][T11946] __import_iovec+0x6d/0x500 [ 673.790703][T11946] import_iovec+0x6f/0xa0 [ 673.795075][T11946] ___sys_sendmsg+0x252/0x360 [ 673.799820][T11946] ? __sys_sendmsg+0x290/0x290 [ 673.804636][T11946] ? __lock_acquire+0x7d10/0x7d10 [ 673.809729][T11946] __se_sys_sendmsg+0x1bb/0x2a0 [ 673.814626][T11946] ? __x64_sys_sendmsg+0x80/0x80 [ 673.819618][T11946] ? lockdep_hardirqs_on+0x94/0x140 [ 673.824864][T11946] do_syscall_64+0x4c/0xa0 [ 673.829332][T11946] ? clear_bhb_loop+0x60/0xb0 [ 673.834040][T11946] ? clear_bhb_loop+0x60/0xb0 [ 673.838756][T11946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 673.844682][T11946] RIP: 0033:0x7f5056d9c799 [ 673.849126][T11946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.868765][T11946] RSP: 002b:00007f5054ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 673.877211][T11946] RAX: ffffffffffffffda RBX: 00007f5057015fa0 RCX: 00007f5056d9c799 [ 673.885213][T11946] RDX: 0000000004044800 RSI: 0000200000000800 RDI: 0000000000000006 [ 673.893213][T11946] RBP: 00007f5054ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 673.901212][T11946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.909224][T11946] R13: 00007f5057016038 R14: 00007f5057015fa0 R15: 00007fff52849d88 [ 673.917243][T11946] [ 674.203264][ T4269] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 674.658418][T11963] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.2487'. [ 674.887288][T11964] device syzkaller0 entered promiscuous mode [ 678.630901][T12009] tap0: tun_chr_ioctl cmd 2147767517 [ 678.902940][T12016] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2508'. [ 679.195499][T12001] device syzkaller0 entered promiscuous mode [ 679.327647][T12020] netlink: 'syz.0.2519': attribute type 25 has an invalid length. [ 679.368880][T12020] netlink: 'syz.0.2519': attribute type 9 has an invalid length. [ 681.901926][T12026] bridge0: port 5(hsr0) entered disabled state [ 681.908441][T12026] bridge0: port 4(erspan0) entered disabled state [ 681.915097][T12026] bridge0: port 3(team0) entered disabled state [ 681.921647][T12026] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.928992][T12026] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.199500][T12031] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.2511'. [ 682.217594][T12034] FAULT_INJECTION: forcing a failure. [ 682.217594][T12034] name failslab, interval 1, probability 0, space 0, times 0 [ 682.257659][T12034] CPU: 0 PID: 12034 Comm: syz.0.2512 Not tainted syzkaller #0 [ 682.265218][T12034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 682.275325][T12034] Call Trace: [ 682.278651][T12034] [ 682.281626][T12034] dump_stack_lvl+0x188/0x24e [ 682.286374][T12034] ? show_regs_print_info+0x12/0x12 [ 682.291642][T12034] ? load_image+0x400/0x400 [ 682.296217][T12034] should_fail_ex+0x399/0x4d0 [ 682.300955][T12034] should_failslab+0x5/0x20 [ 682.305506][T12034] slab_pre_alloc_hook+0x59/0x310 [ 682.310591][T12034] ? bpf_test_init+0x9f/0x140 [ 682.315321][T12034] __kmem_cache_alloc_node+0x4f/0x260 [ 682.320756][T12034] ? bpf_test_init+0x9f/0x140 [ 682.325504][T12034] __kmalloc+0xa0/0x240 [ 682.329725][T12034] bpf_test_init+0x9f/0x140 [ 682.334287][T12034] bpf_prog_test_run_xdp+0x484/0xf10 [ 682.339645][T12034] ? dev_put+0x80/0x80 [ 682.343791][T12034] ? dev_put+0x80/0x80 [ 682.347930][T12034] bpf_prog_test_run+0x31e/0x390 [ 682.352935][T12034] __sys_bpf+0x62b/0x780 [ 682.357234][T12034] ? bpf_link_show_fdinfo+0x380/0x380 [ 682.362678][T12034] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 682.368919][T12034] __x64_sys_bpf+0x78/0x90 [ 682.373393][T12034] do_syscall_64+0x4c/0xa0 [ 682.377869][T12034] ? clear_bhb_loop+0x60/0xb0 [ 682.382615][T12034] ? clear_bhb_loop+0x60/0xb0 [ 682.387350][T12034] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.393304][T12034] RIP: 0033:0x7f55c059c799 [ 682.397777][T12034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.417454][T12034] RSP: 002b:00007f55c1402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 682.425943][T12034] RAX: ffffffffffffffda RBX: 00007f55c0815fa0 RCX: 00007f55c059c799 [ 682.433998][T12034] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 682.442035][T12034] RBP: 00007f55c1402090 R08: 0000000000000000 R09: 0000000000000000 [ 682.450068][T12034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.458102][T12034] R13: 00007f55c0816038 R14: 00007f55c0815fa0 R15: 00007ffdf6e60fa8 [ 682.466147][T12034] [ 682.881159][T12048] delete_channel: no stack [ 682.916475][T12031] device syzkaller0 entered promiscuous mode [ 685.257820][T12080] netlink: 'syz.4.2524': attribute type 25 has an invalid length. [ 685.299285][T12080] netlink: 'syz.4.2524': attribute type 9 has an invalid length. [ 685.320339][T12076] netlink: 'syz.1.2522': attribute type 39 has an invalid length. [ 685.355585][T12085] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 685.362278][T12085] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 685.817081][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.823585][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.856214][T12093] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2527'. [ 685.979557][T12096] FAULT_INJECTION: forcing a failure. [ 685.979557][T12096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 686.038335][T12102] delete_channel: no stack [ 686.055902][T12096] CPU: 0 PID: 12096 Comm: syz.0.2527 Not tainted syzkaller #0 [ 686.063461][T12096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 686.073574][T12096] Call Trace: [ 686.076923][T12096] [ 686.079903][T12096] dump_stack_lvl+0x188/0x24e [ 686.084666][T12096] ? show_regs_print_info+0x12/0x12 [ 686.089927][T12096] ? load_image+0x400/0x400 [ 686.094479][T12096] ? __lock_acquire+0x7d10/0x7d10 [ 686.099543][T12096] should_fail_ex+0x399/0x4d0 [ 686.104259][T12096] _copy_from_iter+0x1c0/0x1130 [ 686.109191][T12096] ? __lock_acquire+0x7d10/0x7d10 [ 686.114270][T12096] ? mark_lock+0x94/0x320 [ 686.118670][T12096] ? copyout_mc+0x110/0x110 [ 686.123250][T12096] ? __virt_addr_valid+0x188/0x540 [ 686.128432][T12096] ? __virt_addr_valid+0x188/0x540 [ 686.133590][T12096] ? __virt_addr_valid+0x465/0x540 [ 686.138764][T12096] ? __check_object_size+0x500/0xa40 [ 686.144091][T12096] skb_copy_datagram_from_iter+0xef/0x690 [ 686.149856][T12096] ? napi_get_frags+0xb7/0x140 [ 686.154703][T12096] tun_get_user+0xb81/0x3c70 [ 686.159347][T12096] ? rcu_read_unlock+0xa0/0xa0 [ 686.164171][T12096] ? tun_get+0x1c/0x2e0 [ 686.168367][T12096] ? __lock_acquire+0x7d10/0x7d10 [ 686.173446][T12096] ? tun_get+0x1c/0x2e0 [ 686.177662][T12096] tun_chr_write_iter+0x112/0x1f0 [ 686.182737][T12096] vfs_write+0x4b1/0xa30 [ 686.187026][T12096] ? file_end_write+0x250/0x250 [ 686.191924][T12096] ? __fget_files+0x43d/0x4b0 [ 686.196656][T12096] ? __fdget_pos+0x1d4/0x360 [ 686.201377][T12096] ? ksys_write+0x71/0x250 [ 686.205832][T12096] ksys_write+0x14c/0x250 [ 686.210210][T12096] ? __ia32_sys_read+0x80/0x80 [ 686.215111][T12096] ? lockdep_hardirqs_on+0x94/0x140 [ 686.220356][T12096] do_syscall_64+0x4c/0xa0 [ 686.224838][T12096] ? clear_bhb_loop+0x60/0xb0 [ 686.229561][T12096] ? clear_bhb_loop+0x60/0xb0 [ 686.234277][T12096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 686.240204][T12096] RIP: 0033:0x7f55c059c799 [ 686.244652][T12096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 686.264295][T12096] RSP: 002b:00007f55c13e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 686.272752][T12096] RAX: ffffffffffffffda RBX: 00007f55c0816090 RCX: 00007f55c059c799 [ 686.280753][T12096] RDX: 0000000000000036 RSI: 0000200000000100 RDI: 0000000000000005 [ 686.288763][T12096] RBP: 00007f55c13e1090 R08: 0000000000000000 R09: 0000000000000000 [ 686.296769][T12096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 686.304799][T12096] R13: 00007f55c0816128 R14: 00007f55c0816090 R15: 00007ffdf6e60fa8 [ 686.312825][T12096] [ 686.415479][T12093] device syzkaller0 entered promiscuous mode [ 686.626232][T12113] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2535'. [ 688.951725][T12121] bridge0: port 4(erspan0) entered disabled state [ 688.960493][T12121] bridge0: port 3(team0) entered disabled state [ 688.974388][T12121] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.986718][T12121] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.386346][T12134] netlink: 'syz.4.2542': attribute type 39 has an invalid length. [ 689.643142][T12148] sock: sock_set_timeout: `syz.1.2547' (pid 12148) tries to set negative timeout [ 690.464906][T12158] delete_channel: no stack [ 690.732101][T12157] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.2550'. [ 691.628163][T12155] device syzkaller0 entered promiscuous mode [ 694.382311][T12193] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 694.389253][T12193] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 694.947070][T12199] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2563'. [ 695.062988][T12201] netlink: 'syz.2.2563': attribute type 29 has an invalid length. [ 695.096880][T12201] netlink: 'syz.2.2563': attribute type 29 has an invalid length. [ 695.132931][T12199] netlink: 'syz.2.2563': attribute type 29 has an invalid length. [ 695.164582][T12202] delete_channel: no stack [ 695.573658][T12218] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.2571'. [ 695.603939][T12215] delete_channel: no stack [ 696.166743][T12220] device syzkaller0 entered promiscuous mode [ 698.736609][T12240] sock: sock_set_timeout: `syz.4.2577' (pid 12240) tries to set negative timeout [ 698.814709][T12236] netlink: 'syz.3.2576': attribute type 39 has an invalid length. [ 699.010805][T12246] netlink: 'syz.1.2579': attribute type 2 has an invalid length. [ 699.049572][T12246] netlink: 'syz.1.2579': attribute type 1 has an invalid length. [ 699.071900][T12246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2579'. [ 711.085440][ T4275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 711.098111][ T4275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 711.111672][ T4275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 711.120699][ T4275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 711.129048][ T4275] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 711.136987][ T4275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 713.173860][T12261] Bluetooth: hci5: command 0x0409 tx timeout [ 715.253669][T12261] Bluetooth: hci5: command 0x041b tx timeout [ 716.976654][ T4269] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 717.254434][T12271] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 717.355708][T12275] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 717.364912][T12275] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 717.374181][T12275] Bluetooth: hci5: command 0x040f tx timeout [ 717.380336][T12275] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 717.388979][T12275] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 717.400228][T12275] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 717.407751][T12275] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 717.416342][T12275] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 717.425752][T12275] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 717.435718][T12275] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 717.443937][T12275] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 717.456687][T12275] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 717.464088][T12275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 717.473275][T12275] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 717.481028][T12275] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 717.490632][T12275] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 717.498603][T12275] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 717.507390][T12275] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 717.514876][T12275] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 717.523112][T12275] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 717.530486][T12275] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 717.540324][T12275] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 717.547965][T12275] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 719.413706][T12278] Bluetooth: hci5: command 0x0419 tx timeout [ 719.573430][T12278] Bluetooth: hci6: command 0x0409 tx timeout [ 719.653493][T12278] Bluetooth: hci7: command 0x0409 tx timeout [ 719.660055][T12278] Bluetooth: hci8: command 0x0409 tx timeout [ 719.666527][T12275] Bluetooth: hci9: command 0x0409 tx timeout [ 721.653439][T12278] Bluetooth: hci6: command 0x041b tx timeout [ 721.733414][T12278] Bluetooth: hci8: command 0x041b tx timeout [ 721.739530][T12278] Bluetooth: hci9: command 0x041b tx timeout [ 721.746199][T12271] Bluetooth: hci7: command 0x041b tx timeout [ 723.733673][T12278] Bluetooth: hci6: command 0x040f tx timeout [ 723.813482][T12278] Bluetooth: hci9: command 0x040f tx timeout [ 723.819602][T12278] Bluetooth: hci7: command 0x040f tx timeout [ 723.825883][T12275] Bluetooth: hci8: command 0x040f tx timeout [ 725.493540][ T27] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2631 jiffies s: 190765 root: 0x1/. [ 725.527264][ T27] rcu: blocking rcu_node structures (internal RCU debug): SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 725.547372][ T27] Sending NMI from CPU 1 to CPUs 0: [ 725.552688][ C0] NMI backtrace for cpu 0 [ 725.552700][ C0] CPU: 0 PID: 12248 Comm: syz-executor Not tainted syzkaller #0 [ 725.552720][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.552731][ C0] RIP: 0010:check_preemption_disabled+0x1/0x110 [ 725.552760][ C0] Code: a0 9d bc 8c 4c 89 f6 e8 8d 34 0b fa e9 6e ff ff ff 00 00 cc cc 00 00 cc cc 48 c7 c7 c0 0c df 8a 48 c7 c6 00 0d df 8a eb 00 55 <41> 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 [ 725.552775][ C0] RSP: 0000:ffffc90003f87478 EFLAGS: 00000002 [ 725.552792][ C0] RAX: 0000000000000003 RBX: ffff8880b8e3b9f0 RCX: ffffffff96bfe103 [ 725.552805][ C0] RDX: fffffffe7d23b901 RSI: ffffffff8adf0d00 RDI: ffffffff8adf0cc0 [ 725.552819][ C0] RBP: 0000000000000000 R08: ffffffff8e1fdeef R09: 1ffffffff1c3fbdd [ 725.552832][ C0] R10: dffffc0000000000 R11: fffffbfff1c3fbde R12: 0000000000000000 [ 725.552845][ C0] R13: dffffc0000000001 R14: 0000000000000000 R15: ffff8880b8e3b9f8 [ 725.552858][ C0] FS: 000055559081a500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 725.552875][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 725.552888][ C0] CR2: 00007fad9fd45690 CR3: 0000000024df1000 CR4: 00000000003506f0 [ 725.552904][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 725.552915][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 725.552927][ C0] Call Trace: [ 725.552935][ C0] [ 725.552942][ C0] irq_work_queue_on+0x11e/0x260 [ 725.552975][ C0] rcu_read_unlock_special+0x3c9/0x510 [ 725.553000][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 725.553020][ C0] ? __cant_sleep+0x220/0x220 [ 725.553045][ C0] __rcu_read_unlock+0x78/0xd0 [ 725.553062][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 725.553089][ C0] trace_call_bpf+0x5bb/0x6b0 [ 725.553115][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 725.553146][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 725.553173][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 725.553199][ C0] ? trace_call_bpf+0x5d6/0x6b0 [ 725.553226][ C0] ? trace_call_bpf+0xbf/0x6b0 [ 725.553255][ C0] perf_trace_run_bpf_submit+0x79/0x1c0 [ 725.553290][ C0] perf_trace_preemptirq_template+0x268/0x320 [ 725.553322][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 725.553348][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 725.553374][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 725.553411][ C0] ? lock_chain_count+0x20/0x20 [ 725.553439][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 725.553462][ C0] trace_irq_enable_rcuidle+0xd3/0x140 [ 725.553490][ C0] trace_hardirqs_on+0x24/0x40 [ 725.553513][ C0] asm_sysvec_irq_work+0x16/0x20 [ 725.553535][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 725.553554][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 725.553569][ C0] RSP: 0000:ffffc90003f87920 EFLAGS: 00000206 [ 725.553584][ C0] RAX: e3300396acfb9b00 RBX: 1ffff920007f0f2c RCX: e3300396acfb9b00 [ 725.553598][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 725.553612][ C0] RBP: ffffc90003f87a18 R08: ffffffff90af7247 R09: 1ffffffff215ee48 [ 725.553626][ C0] R10: dffffc0000000000 R11: fffffbfff215ee49 R12: 0000000000000246 [ 725.553638][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 725.553668][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 725.553687][ C0] ? folio_memcg_lock+0x1d1/0x320 [ 725.553711][ C0] ? folio_memcg_lock+0x7d/0x320 [ 725.553733][ C0] ? mem_cgroup_get_oom_group+0x350/0x350 [ 725.553759][ C0] __rcu_read_unlock+0x78/0xd0 [ 725.553779][ C0] __folio_memcg_unlock+0xea/0x110 [ 725.553803][ C0] page_remove_rmap+0x7e3/0xea0 [ 725.553828][ C0] wp_page_copy+0xc80/0x1680 [ 725.553848][ C0] ? do_wp_page+0xaf4/0x1680 [ 725.553877][ C0] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 725.553909][ C0] handle_mm_fault+0x1d19/0x3ee0 [ 725.553928][ C0] ? mt_find+0x157/0x830 [ 725.553962][ C0] ? numa_migrate_prep+0x250/0x250 [ 725.553986][ C0] ? lock_chain_count+0x20/0x20 [ 725.554015][ C0] ? lock_mm_and_find_vma+0xae/0x2f0 [ 725.554035][ C0] do_user_addr_fault+0x51f/0xb10 [ 725.554070][ C0] exc_page_fault+0x60/0x100 [ 725.554088][ C0] ? clear_bhb_loop+0x60/0xb0 [ 725.554113][ C0] asm_exc_page_fault+0x22/0x30 [ 725.554134][ C0] RIP: 0033:0x7fad9ee690a2 [ 725.554151][ C0] Code: 14 00 00 4c 8b 05 46 c6 ed 00 48 8b 0d ff c5 ed 00 31 c0 48 8d ac 24 30 01 00 00 48 8d 15 58 a9 1c 00 be 40 00 00 00 48 89 ef 05 e7 c5 ed 00 01 e8 c2 1b 0e 00 31 c0 48 89 ee bf 0f 00 00 00 [ 725.554166][ C0] RSP: 002b:00007ffdda799110 EFLAGS: 00010246 [ 725.554180][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004 [ 725.554191][ C0] RDX: 00007fad9f0339f2 RSI: 0000000000000040 RDI: 00007ffdda799240 [ 725.554204][ C0] RBP: 00007ffdda799240 R08: 0000000000000a15 R09: 0000000000000000 [ 725.554216][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000207 [ 725.554227][ C0] R13: 00000000000927c0 R14: 00000000000aaa13 R15: 00007ffdda7993a0 [ 725.554252][ C0] [ 726.054744][T12278] Bluetooth: hci6: command 0x0419 tx timeout [ 726.060853][T12278] Bluetooth: hci7: command 0x0419 tx timeout [ 726.068367][T12275] Bluetooth: hci9: command 0x0419 tx timeout [ 726.074583][T12271] Bluetooth: hci8: command 0x0419 tx timeout