last executing test programs: 1m22.190427574s ago: executing program 3 (id=3786): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x7, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000007000000060000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) 1m21.806290745s ago: executing program 3 (id=3789): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x4, 0xfc, 0x4, 0x0, 0x0, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1890a, 0x100003, 0x3, 0xfe8d42e69ac4daf8, 0x7f, 0xffffffff, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x2) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, r3, 0x4}, 0x38) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x7, 0x9, '\t\x00A\x00\x00\x00\x00'}]}}}], 0x20}, 0x20002800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x1a, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180a00100000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x1b, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x5a}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00\x00@\x00'/16], 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000a00010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0xae}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc0c0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfc, 0x0, 0x0, 0x9, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000280)}, 0x4904, 0x5, 0xffffffff, 0x6, 0x0, 0x1, 0xffff, 0x0, 0x1}, 0x0, 0xfffffffffffe0002, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x200, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x4) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xed, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x7f, 0xd}, 0x10000, 0x4, 0xfffffffc, 0x7, 0x1}, 0x0, 0xd5c, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000240)={r8, r5}) sendmsg$kcm(r7, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r7) 1m20.650682319s ago: executing program 1 (id=3791): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x18, 0x1, 0x1, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 1m20.312793926s ago: executing program 0 (id=3794): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0xf401112d02372275, 0x8000000000004, 0x0, 0x1, 0x1ff, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000200000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000021c000000000000000000000000000000de000000000000389385374241e01794acfdffffffffffffff708c2383546848ed9edad109eeeaeb6a79257bf9160adea77eeedccb6707f09f28375ba85ee1cbf7e482ddf3c5f7f07375e65f38e5d7079c2d9e95041999c4a43240c9f8458d02bddbee7ee97bc610f1edd07aa53f7e8d304333ebe0aa772a79066cb3a1c7001ab47225"], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x40003, 0x18}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400000000000001a, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0xc6, &(0x7f0000000440)=[{}, {}], 0x38, 0xfffffffffffffdf1, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x2e, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r2 = socket$kcm(0xa, 0x3, 0x3a) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000740)={0x7}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000100000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0300000062583762e2237f00000000000300000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000900)=@o_path={&(0x7f00000008c0)='./file0\x00', 0x0, 0x2000, r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000800000000000000000000659e6c78efd38966e082b7dd73ccdacd9fe9458325b469bc72c2d8ddfed89cf8322164f082dba843a71dd3230467bf29b7251c2c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1010}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m20.289648228s ago: executing program 3 (id=3795): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1526, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x3ff, 0x0, 0x3, 0x101, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000440)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6}}) 1m19.963965374s ago: executing program 1 (id=3796): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1m19.840960164s ago: executing program 0 (id=3798): socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d020000faffffff001800000000000000840000000700000062"], 0x38}, 0x41) syz_open_procfs$namespace(r0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001f", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000000400)="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", 0x0}, 0x50) ioctl$PERF_EVENT_IOC_ID(r4, 0x4008240b, &(0x7f00000013c0)) socketpair(0x18, 0x5, 0x5, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007"], 0x0}, 0x94) 1m19.695554136s ago: executing program 1 (id=3799): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x650b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x2402, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7235f1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a49bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x1010, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14d05, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x8080, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[], 0x20) 1m19.689635256s ago: executing program 3 (id=3800): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1811000000116112382ca1173100"/28, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff000000007110a000000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='cpuset.sched_relax_domain_level\x00') r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="669a9b8581d23c41530000000b00000001000000fa27f2e3f5fdb8ec41604d39b29b85f40594860390d3a2e0d348a5bac5216161f10cd2ebcaa09b01713795cdd508c69847ec724e32", @ANYRES32=r9, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="00000000000000000500"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b0000000000000000000000000080"], 0x48) write$cgroup_int(r8, &(0x7f0000000080), 0x12) 1m19.554209457s ago: executing program 0 (id=3802): r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)={r1, r1}) 1m19.15305944s ago: executing program 0 (id=3804): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair(0x18, 0x1, 0x1, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 1m19.099788004s ago: executing program 1 (id=3805): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000780)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x1}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000140)="dcfe752db9b6d37d20509c943ce73eb5bffe459abe0a9eeb910885357480f1b809e1796321c1e1f4009752860ca4f3a3be3be0882234175292757d1ac28a09", 0x3f}, {&(0x7f0000000180)="85f365395c6934ef4be0dbfb6495b06eb4e42c8e5882c7c92524e9ed1726997bb290a1e27dc2c841b977696a9c1a2ad1b3d2e38d12f65a2e85c85cd3b89ff2ee420a8dfbca8a93", 0x47}, {&(0x7f00000003c0)="ee2c889ca170c0e76f83d38bedfd43099fbda43aa31cb7c737b0af4163d0bd3ab7cd426ecbaa380869ee7f484660a58ff4f2dd34a3e34bc7101e0b2fa465c249e784adbbb7167591e210d806106918404294192597ef54d4e278a25d9d771399dd8a6210c12d6be5091fdd4f0f69179cb5735e7dd1ae39311e83758a0de47b2e31e51337397b50d0f156e8a6bc79c95fa0df68c4000bbf9667e67f8c8047a98329ddf6fee94f5cdef07d52aa81f86b6fe757c1c36543c10c1cbd6c217fca03bc2b47d94240cc150a29e1023313b0360d667a4c2cc398ae7add9964ba99d5530724bd9963700a2e625d8aad43", 0xec}, {&(0x7f00000004c0)="467f7045ac30b75968052789c06ceaad7ca56f3d50c899757bb8ae0210061b67afc1361f28c0624b989d2712f5a3b2d132f504bfe88db5766d3928608133ee90ac4c53760608f3669dd05bc6327e472090ea7df2ad1434e2bca3384afa09bafd3e39a2348352b3d3ef83ccfc300504aacc874c677a53073c5b20593dcf1b85db66d8b9404e771aecb6e7b0185e14f5a0b939376f4ba7d4d607", 0x99}, {&(0x7f0000000200)="e12a44233df8cbf9f4373460998739f15418255876dedd62b015d384142123c9c4cf71a65ce335452cd78a7abea4", 0x2e}, {&(0x7f00000006c0)="f15afc27c82d4465254b1fbe6d3a88681d93c6a9d5ee87b541b5f9cec1fc5f2384af", 0x22}, {&(0x7f00000005c0)="a42f0b2b09336c847c85f5c31f0ac8871676a244ea6e4f243e7faddbcdafa5ea731304e7113f7c9c1c791b35e9047007af080c984d8ddab4141737ff52fc42ab26cbcf9675467727f5a9d9bec8d6bb1f0c2a596340461750b7ea28c2ed66fa16e86da1d8bcc64a2ae3522060040f7c63a21ce49b563e6fb76ec3dede5ea7ec6bc23ed5f3139b43735757ea2d480d4a8a2b870b960ace730bcf9aa09fd8c092331b280bf8b02255a566f85fbfba8495ab166c132ef29ce6257fafd246ec8d0bc1a586b00aacc542aa5f3f02be31669a0af802f99f6aa8668cc480673be20a83e746460659437083dd8164eb8b08f7b19a27ab1614", 0xfffffffffffffdc5}, {&(0x7f00000006c0)}], 0x8, 0x0, 0x0, 0x4008014}, 0x44000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r3}, 0x10) r4 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000b611076000000000007000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 1m19.056465338s ago: executing program 3 (id=3806): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) sendmsg$sock(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x1) 1m19.022361901s ago: executing program 1 (id=3807): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2000000, 0x3, 0x3, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f00000027c0)=""/4057, 0xfd9}, {&(0x7f00000017c0)=""/4060, 0xfdc}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000500)=""/28, 0x1c}, {&(0x7f0000000080)=""/187, 0xbb}], 0x7}, 0x0) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x29, 0x0, 0x0, 0x41000, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000300)=@ll={0x11, 0x1b, r3, 0x1, 0x3}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000037c0)="aba3c6476296d885414bf681ce4ff3867a0d2a96bff4fba81665f8d62a049ce82edcc9c7113ac04c494c64d897456c830e01eeb6baa7fb2c6deeb7dc49ea3910f857cb483b992ef3ebffae99b16e3cb2f8962d817c110be62d83096e587565e72002217de046920883668bfcac87a287c034afccb393e2939e0cd100f0abae97b3157629f8e8491e5598dbfaa2c3ee1027b57eecfddc1510490bb4c073db3022bdbf5fc143d751895a033742e5be67642860596c5c2ce9bbc77da95929b313f29dc621cdf9ef9eec49e074c06311374a4a0e809a12568b6b688bfae9b47153f3d1565ad7c9ca632b1f22831cfb5c40e9eb5e031280c6f23ab2ade184a5489036f00ccc32fa2231caa5bfb998a3a6970a2cd8a98ac7f746c1a670ebad716f3e53c73ea6a53c5d24aee24bfd31714ada887e55a3756d039986962c806e01833db0ae81acdbb617ece2db0eecd8f93347e1eb29a31dc91daade031ef2b9270070607b33034371bd1449771fa95827f5d285ea4ff2af3f8eacb626bbd6f6c12735237a2d1a45d4a092033bc8a7cbb76670b2893ce03b49697486d69700b8965e6ca891e0ba1f5df5469d6dbdf8fcba56cd8c5c839bf7d756761981762eb0e12ce59c590ca10417091a5df983e5a8d31b975e666c3b55e75a59aa244fb1c4d81de79d4bcebd381ed4e81c5f106a31b210a5500d7809b49fa13c1e4e695913ceffb0c3e1b7ef5e7839261108bc438a2f5fe75195a6979caa3cc710dbc189eb2e1bb38d792e47117446fb6e4915cffcbb290616e12e7eec7f7c54cc874dd04f1d00097756764f6bdfbadf532d4407014640049b9b600280191dceb46bd640055ab6c7f385b17106b4a1a3eb29f99fc0081b86eb6ea5cac3376d652bae6ff5d45dc4de0061b41704e9ffdbf6038a946d3c2eab442469e3d5edcfccfff2f2a5f1b5f177680a54841cd5775d60868431b126d210653fbe61373169dc7420772b5171203eed8e7d017c3e695efa800c73db3784b3a5d009d95498f99db869ca84d65382b24a73dc96343d3079af42004a5488c72e0e53cabbba1434e5322714d1de0ce233630f6c3a4d8cf02b972286ac3fd23563d8243b234c8b61f5ee8fb2156d3e42518518b673908b482911f05082edfc6666fe9cfac95968ffb263fa44fe846d0e1cd76d3b0648b7e3a873ee0b6acbac5eeaf5d55a88cf31d1f491000ec8ad49d677f5a86893fda34ae77474256ee4acf2c0f3cb2f3c39fdfa63495c14a71130466e4d29144a07215c1b4776aca1671e384c5c56042a84088385712283f995f179de59c5d14499ecd9b2a80edecb9f25fdd26392ae724e3a7f56607e783d58b196338c994302d2f445b35393c9cf534643a5293d802c400aeb2084b5560335026da72ed3eb4fadf42afcd88111963c3cc3353b875417df9eb2b74f4742b8e0b2f570c0ee0dea19af5bd153ef20108c34d96e8fe7aa6411a30309ac0e50368d6bb7d2bde5c53f3a55a5bfee71745ae988d5a0b8f1530b5aebe5f24d61a2145b0be303b2cd5932e82e501b11746575b095135e295076f0a5e9f301f7dd481f38cb5c21cbadc5b8010958e3fd4d4498f70c30280c9b3f043d396a5ac236fe109dff607f3a211241b17ff869ad5f2b10623a365d4f7ca700ca847528a39547fcbe6728afa2d2a56f0a3ee7d6b3b62a853fd5f6157abac7515eb7bb8e1d7e4ee42555ecf0581503b426f0dd6a7f5a1e3946743881a1316306393f597162c3889e2d17244406dd5485163fe6e1230f49c43f63aeb1cc97b6c03c7dc129eecb27034b2db42c3f900c70ec57fb123dd478f4deb3c25aaf7e50441b828bcff2ca1b7181ac73c6fc0de826a37b01fd8ab8812c6e121f5da3c6be1ad734f25e29b9f64aae6b3a2014948888498b6495354eabf69c223af1567c8813471c1483422645438193c8766d968bc47c95148a237d8987f16e2f354507d0114363fe4673b063b1d63a5eb540c20ed09085627b4b12b8eb0c03665e1b35eb6ca9b0315b63f25eb07e71570ecb8b82efb7ad2ce916af0013a91c511e85fd5b74a1dc3379d7c17ed7ce154cebbde24dc5f4a89e2f0243ec32901716dfbb87523cb1215327c6940230698de285abb57c6b27965ba1e80f64efbc6564819a0b08d88d99c55804a708dfb5b94207779ddc50ad162f6a37cd96c628480017beee035aaa6cad5c91b512d1a575e64ef3f28022396136df63bc9a6eb7c5519d037d3929318e9b86b2e1bcb72fdbb94d308e166c0f0230cbe03b4f328771a076a869ab6826fb42b4dc78078ba89192fae06466a1c3a2ee67726336d1785b02575e18fb9c677f9fc19874b317f3a941ec1a0a460b67e922ecb8e70a4c39acda16a794ce69bb7578b0dced2714f7f006182b7567d39bfacc43cfc8670f4592cf805f427b27d9abaf23c65ece38de063d1dcb4ab55d7dfabf31c71b5a75e4ff3e5986fce68bfe5e03616601548a32f0975101cec803bcaa8a0186f2a5656a9feb320153b647ef9dbeff372f0b2357e51507543f7b1217746f780e2e2c48b4abcebdc23fee3a0768a44de886b1bc1b1438582cc1a3294a88d72db6afee5845def7888057f8ba6292d298a2ec5ac886dc09587a580250691870bf95fca5fb1bdd8d85e5e64f52e9d02b1f96073e9a603b9de007b4d998bf210e8088556ce53f6bec427830a982244f72e0328dd4b87eeb21ff65463f9e18697c2a7a1aa021291207e4b3d8251e3f5a484ca6ae32b8b874cdefab2f1c18f41f0baefe87e3c33731e15c95b489aff0b07d0e69150ce9a20d093d17ea06f8bdee35d3a050e6c0a70d3b83249b5cf9c17b4032e12acc31af42b57e1c95cd761161da4e741fed618d984fb386ec3b71b3ee05eef3e5a224d6c2aeb6bd84436ef41b86d5af3743b43fa8039a04afb41cee4bee473a8c05fa5e01968b9f0f04e3e3a698a791d5b841d432f3f4e07efe554b9daf9dc1b8e058e62864a33efdc22050be34bba707dc172dea5da46483308fe92f7075669edb5bb45ee50523c137fd68193b63ed2dcd66e360525ccf0a0e84046d7d9f359a26125b25badf34f853e2e45a2ed59ccdfc8c7dcf88257c9f70712cb4f02f0b36d1d0fde3603773c944342070252887f5e1ba2a58eb76585697421437d3e72606138c55ca2bc2c1fb554c52de17ef72a0e68444a465675512876e775dafcd485467da6ae8fa568e6ba7c3e3e468f91aec7706dd8a595c12eaff88ec8911b63c9b33e45193b07b28eec0d66b7f31d5b75bf4e8b6a5430df839ac1c19a43f4d347d7021bb7dc6cee5b90d3216ad7db5629502e9fa9c5a1d88869a0241e708fea8e55fea326b83f5c3a881bbffd69e3690671e4af7d15a65f6f444b2bd0ebe6beab32a33fd43f1b1e4df95480459a87fa392e69006831ba74411fc3f660d6723e99fe9e97b1cb97f1e7234590cdb9a344e24f36cf053ae3a372db3b675b7f3d0c2f79583688728037d7fefd98a9d73852cb131ecad8b69451ec31c2e054c90bc2fc59041f6c839f22a32ef576422b75c3d93eb52f8410ca3f26a7e799bc4be4a7d4659647066a3caae95b09fd8f48729e7e97591ec71ccae2fb38ae71d2b300fa84da52f7aab7a048c2f03f3a7f737103e205f6a1532f0452fb19db086e88e9beac34496f5bfe25af7fe316a0a4f78e09d1a3e172ff601eb6a41b3ceae57e05fe02fc6b22caf1b76b356fcab641b367d1d9646ec82811f0ae2fe1935a904c4921b338bf40da68718ea396339ce44e36da22d686adc00def56198fb8394f2a0e20ba98d44929d0ebab748f4e0e6feb4f8f9a2e1bd1b6f1099fd1dc77ff6bc795ced2e7cd99454f6ec37fa4d0374a9729ad89e0fc36dc62b8c86ae0fd808fa12da23080ce64b93908c0755c0844840b07deafd2c74a2492408fc39b7f4c4e1c1edf664a54778b221419c464c62d4c99a5b1779d2d734f88c20691e07dd53c8249360b9b973744da8407874e8aa574354b7048908cf886621d35b2471172b7bdf5e1651acb43441f5b14184feef8e9ed8003cd148893b5b27386d7e6da9c7ba1cc03505f4a9ff2a4d8f56120497b21651fb4b5735a43c860c2d61b2dee83575d27219517a978033fc47f8a2d585b5dbda7ced0f1b429950b3805196557ddd0d9117eb124f23e8a2cfc3af6eca123111a802770e9387e1edbb9740514b36c7eefd5ddd598d13299f64d3417fd8c65595f20ac30b7974abefbaece17bac0b1232145c4e02d10c065f770f6b1bf71332b07ab66d0a981269663ad49d03952691af649a1cd3e7a7905bc8427a3092c3d05e161012ead0969a26ed586e4ffcc119c79a5d53adfc3b5e5dfc099f58f7917bc74e514492a667fede92c70394a2eef7e700847d95cbfe98c1584c054b7cd53ae2d81cf102a3a4f541e4e71cbffe99b44de955479536b8efdf26d5cd1e1e459d4fe404aaaa97e11acbd97c43e0f922c3e225f949f086b04fb68a985d65a686e06d86109278bb90ca71792bf995535c6e4477c44031a611027caaab7f830060cc56ee2f3229297f1ae98e3a04633c796a127088313ec0c037fc646fed3dfdaf52fd6c1bf32446109448a946d25bb582cb1a270e3d4fff861b3307a52645b47a4ff5a0b68ab66dae0ce454d9a8679f8b06d293865ffa4f2bb07821f11c92e37b2546a85e3cfe910216a1f5c65f42af897f4abb033f8fc465eb91132453bc53716a8b6272fb62706a018ae983b8af31008c8da171595078f1fa8e6a9a1dc319eb2ea765ea82aa0a6d47bdca5485bc3f40b7fbcfcf8197491c571682812d6822d3634fa801cf1a6c6bb17b008ff3d5fb720dc2e244be631d0c2ec30b51f02b8b5166179a2a8351c00e167189e6bdce7cd101bfcc9c613f2df0d1bf23bab0f785e2fa4645b39688bbe26c29b4172aec2cc81ae917233527d329aa6779e54c09faef8fbb0ebcdf67e2fd46432ac621cc263325246f856c6ebbc6439190a1e9a7e16a5da596151d599199d7cfb3593b7bc29288e10d8bc9dad95551dca70447737ad09daed50b94f38230186c10624368c8ab6a22a486b7ca11bba17b7537453809051f72557e0eb9046f54a67df4a000c765a47ee8b075cd6e77c9799a559eb0c263b006430f7cf263e2583462089db2e9ab9b934182be69529ac90fff45851780109fcd0be2b9512de443446ff0d12a2a3b9afeacfbaecc55cbc8ad85a0e8ea6677395b1326d764ca1ceac18b0fe5931a8338679c18c04f4f58d06ebd8f3139a4b7b3dadcbd9e05e32231b6a73f7aaf913a2fe49c8c49cc41aac292fe82354831ca17ffeec1cecc08edf583e4bcc5462bbed1b5b457ac651832b4d1dc872bc85206a1ab3401fd28fe8638bcbd89373c034faed56ad747c46a9415817a32dd3cdc8ee9771040b5f35af43fdf16ac6884ece4e20e37074955b3b92d7cdbfea041171aa8d63e98aafddaa6044bc14792fabad41f478092ce0e401fa35c4ba339557b175b44357366e27b7b5c1e5243bd3e3cc935448ca309cb1d135a79267f9a812d0ef143f17e80506b693cbfd55f8735a1005a5ad04b717eb718755668c3ac249b95c7fc71a85e1f365756b2303e4f1aeaf204dbcd6c764f56c5aa545ca8d2ff7f482a9e521ec2cbbc97159ac3424c707a5bb283a95d54e8223b39b338d5a89c82f48ad8e56ba6b537f226c222f25731bb3f8df944ac25ecd837b101d4d5e8519792d66ce038a96c742ea33eb79955a89954c66d4796402b19d0465b776d80bc1ffe95f489006002a7d7beca99a51e0a04f777009a4567881c045bb8c463b5", 0x1000}, {&(0x7f0000000540)="9ff1ca166e2c52f9fc5742fdcac6753c3f185bab0666c41e3794ecabef7365187ab65c9eec5fa717ee56b6871ffce803f868cfff4d4038cc5704239ab6370ed9780b4f21968bfc35806bdc6ae7632c983196caa849920c0de4b1f61b97903bc072afd9df0475ee0bbef34b09c374893f14b0ade675cc9600d0f107cf", 0x7c}], 0x2, &(0x7f00000047c0)=[{0x1010, 0x10e, 0x3, "0d5cf95abcaa1adc6c201087146586a615df495acc811a29be6562af82cd657fa9a409ffd3d81df337d49338fb81ff9fac630bddbea9f49ba01f1b11ef08c2f93c10ba6902d4d0f97284a187f9c5449d61cde8d3fa5f4d2ea22be69b244d4a86ed9bf11c11f74ee23180d2cca1ad6969bc4dcfee50d41cf665c169117076118740758aa9e12146325448767c865e06cad8df6ec51ccc16e7731a59d405ecfcdbf51d23e8f2c214ede58ea36257f4bc98698993c3fb8ad17a09a884f2a83477ac6eb08b1fa31bf1e7af12997649452ab25b697cabff7dd56e702e74a623381058a6f9881652655a07f242a7ed449491680a97855f3e8be4834a2313c9f047f21f2334c50d2adbb3df85ebf4167cee8c28208cf77b88ca9c5eceeba161f37ea2457c74677ffbccdb74f909d7e0669b43bbe86c512d9a689f1964df32b36f53d7b2d0ebb225c7b0add0690d966a67b5b21755e5e2b9e84bff6e4b91476c4490dadf61a419594e5512d1d70080cfbd5f87febec2448d9f068127c89d27880493d42c8cafa501a99061153a12e655eaa727125b155ddc4073f7b2128df2e3f1b50244827235165f7192832f095a84edd5335852629ee007f1580876e5eea5092eb287320ea89dc8f302d1154e100d0eac903070d165ee931fbbe3b1c680c5c8434182f5583342203cbcedca1b35db6a4270a54551e8fc7c6ae01163902f07945b83e81e91b7814742834d5349715401bd9ef742beebfc1c0453be2fa6818013b26ef7058a745aa821fc32287634336d0162533b980cf8babb3e8b4ed90d4cce725a3706f12fc6b7d97d4fc74a54ff496f23c8ba9fd9c4a363a9f5bbb36c709c16afc0734f409e6303276b8f5c195cd2cb37efbfabfee6da687ed0373aaf029c23df30a3c8c11865bcf9b8fc5cd623090432808f978c63aa9e2b02355523d65daca16422167f60b0116d6a37b414eba8365363116a462f75ad9f35af16a57fd2385c20f4447fb0d856d48a8849b28f5373986fd401fcf872e5e968927f6080832033d0a5fb7b4610d951102c28430723ce0e1a61631e500f3724300723ef3ac8671e65c36939dbbf9058c59f07f386fb51f4ec71b155b30c18bd8cf5d83b198879690da7cedd8e180eec03d1c81ccac53d64c961813673d87d8f6d619d1d586c7d5a094dc4af5f5e15c331cef5c652e160da64ce8c506d519b5dc773da1445463c8f47fd7fad04a057432ee0b0c9e85e293ed04c6acbc9690061f55630be0cda7410b464272afab3b6dd78da0e1a169ee0dec79cf4f55c8005d65e982e0f4576e1b6036b42bd5414576e940fccc08a8b10c4f74a05cf67abb07fb9fb7e20597c8215b4072bc49484887e77352fe563df59361be339d11eb6597d9c28b0d1b723279f241e7902a588d3fb247a79d44b28ab328fe603d7bcba088c649e1e0b34bd2613908d96797dc2a2ba533a62a8dd10fbc070c8614a40cc1899cfab8eadfcb4add826fb194f1da60ee9d2db06e54ac519a9dade0cbd71add4f19dc9518ee50e07bf5a2294c457b0956a59889679879add229f5a35c12bca3e2627c1fdfc5aad6548f8f6860d98b0d5e8b110e42e1603e533d105e87bca09f31672d56130dc9acc21435ac1c473ea66338a6c8a642b0e3cc84c4c711fe4b6f2422b51e85be988f917e5b9cbbaac36fe549da9ed2d59b59aa970a3450661b7bd4d2a487b3d5da03ad137468aa3336ad31b0e1514daf224b472d45f06129efc0358b5b1e5328286bf89dae3a55137dbb01279f8fed3dabb56a72ebcaaddad43b4d630799d4f32f8c91055a5656388cd2772c318b20ab36a108925fbd3c6ef2a61d86a69dfe27a156d1cb4b448112297a1a222185e1d00704c1cac27f812c10390767c523c86696af9ea4fd55a53cd4bffe51ec60c59b2b31c2221bd40e5d48ed4c5727d78d141eeb842e609941180bc2304c62fb484f8aca151b9aa4b391ab06d62de894cfeb78f6cf2dba0e37693d9f5f6e73bf22cf61aff9682c591359df079d3942789e3d1a968451511fcd17dfa79231021173a3c4a635de6710a390c4893c5c878bd32749544e1a6ef504aa7b8fbec2dda12639b86df0b1da211540c33ccc9723fd421b4673568d7fb8a00c555d97c33c4ccfbd062658626cfd901d23cb10eaaa8084349bb7259137079fef105b249e5fd3a28db43bcc05a5a74cd0e384de06e41390c873680c49150bf674b77a9d80d994f43c1d44c88ffed8667c87b143dcbd2e91540270f713b262a9e9a95feb4f0f52687ae149d88d052ac160dd5d763833cd14016d8c7acafb837bda7764827ffd42556e13dae290b4753d5de9855f2af54dcb138a684c74dd3f969e0289a403ee46f96c3d03946d1e75d552468cb93c039cad73afdda59b81789e8e5325bd35c2aa1117daecc08a04bd2279bbc20a1e50e1e72e8a1925b536c7fa2e9e23045d5aca7d33659c915e78f6b1b539acf6ec28f0aeffe68a82366df67843e73675635fda4ff2ff12f82b5491b6fb6b79705cd1c1fb683c9794a40f28a8637d0914fb898d661f8e365e2fc5977dab6af52dc91613a97c91614f307e5fda838e1535cf6821b2b303ba9552497635d644ed05e8af2cbd1ca805e266ca43fbd42798e8e36c9a5c4d196cf3e2de603d8e14f6b2f2e8e45597f7724f22d36b534e435489a7c364685ab2662eca7827e26e8094fb391dfb6a06b4e5963de5359756c7f3b770b0d71dd2185c331ef45e5ba6c709f17927a6ad800bcba891b2b3b2aa0234de959cc937c8b561ffb16f9fc5d76b9f7cd50d5fbe20036f1b211345c52e4bec0e6d09992161f89f34c059fa59a5356440fce21aa5e63a24ca4b5cb05fff54991b7aab4bb0009fdff2ae9f7140475b846fb7ebfe075a898374593b11a996930daa826e5565c00e6275fbc4b2b96cecb9559c775cb4bf73cc40cd24da31e93b19b80b6a3c4d61ea821329619390adc04abc59ccaa4d09366a38150af9728b33dca042356ed9c342f0784f545a611faf48839363f0dee7f43f0e3afa7e4f4dd9498512c68b6209d3b387f4ca204c46c3115b6dcb542cebb2bebf33c66eac99e91e25c4ce1237875b7d7595164ba22f180bd0649f423b20531f7fe571ae3804f6a25900db80219ec9d458bdcc84249007887d0262a0da9555203cfb34db7a4d4bfe1f7a2762bdd20ae60fcfa650a3aeb39b1703aac4bcbbca3514020ff0886c2ee9682f43db86e2f9de91d8c12202a67c0dc52f0748bf6fee356b84173dff936d08ba2261fd05d2475a1d89165d9b65589d1bfb644583ffe93427bcb3cee1578ff106b066f4901a4c152ac9b3e69f7b962205d0fc192c23fc7cc8711fd9e787e435ae0c340cad4c1c3e858ca6c1e4edf4a439820420c7166ad7a487680cbdee28b4340d10da005d1e526ec3c27829ba32f7129b266007f37b12f40654a4b3ca6c08d0c39f8e173096580108aa0c44e176ff06c4f18b3edf9d3de43fe9022fc9b7f0ff4cfeeb9f449d46f25e45af2c5d0bb99531e52128291119073c291fd277e491304066db0b9d0b73eaa5131749fad247273d75817962b79123e4f54da76ba26b0bc7dac8a6d507fd4408606b975f6620529fd5f16b82bea260549c83dc14eb4aa351e83f0164d1ede6db13ed156b32e9ddc782102d0941527b30ceeb8bd741670a159495a77c8f1df481b71d6416cbd0edf8db1cdaca3f1660877a13d5e414b19ca12cbc29cbf3ef1b57e26021330c43ed8a0a3b6726cf9087b0ae505877ebaf2697d779e0d588e0d3793a2169aa977e50bb59c58984296f1f83ae046164d3faf28cd763d1f2858e4c5599e552740518629d7ddc874d9ace6d1bf22c8778ce27313c33db4e71c0158d489a4a21cf023b94633dddd393739b81fccc94ecf59680cc6bcd573afbdca91dc15c656695994ffefba493b6ce5bcaa7b113cfa13319080be54fbd18c4e02d264a20976ccf7772cfab0a15f8f9e487e2b5b698609df1bf312e100780356707502cd8c113e3ad685d0602c2d456950ed92ba68e3a61594263f53a3ff227ff41121181728a3f62586ab4ea514171a1932004723f799300340031d451ffd498d0ef21b98cba51f1d9d0a3e9dc2c07f16f633295e2039e3bc6765f87001dae70ed19ae1e39b5b114f7aa9add6b69ca09b09d87382b88f99bae3eb7aff9dfd5995438d36a3d8ff796d9dbfe960397ce6f5dff6c3f716d36b9a32496aa1b28a38c105b13edd70a8c2cf7a9356cfaf1b949749cf54558284a834638a53d4e3af1e5d26f5464f65f2ffcb92be2cbd54aa61ed0af6276102fd2ae6a139e89bbc44d166cc351bd68a128221fcd0d707e8ca5f2d46d0f4c506124b066bfce96995a8640e6d63864e2f56c5796f1265f4820915e6e43794cab390874dda8c3d10e5fefda7fb3fc32f0890ca8708fe986a3a2a9c92326075f38de2caa7e20457d8126597ef5ab9060198eefc352c3d6233fe4be7709258bb59591959c953bc8e2fb40fdf5e83a771fab4d3678199df86fa4195ef0fc1de8899a0107281f1d4f2084d7f8e80e3244a4ac4254ca899709d48ac41eebf9dba2e7401194b9337af8babfcf9bad8ab5e1cc60b4797aa73d2ec21141e84413d0f964465ee63b538f80bf5dd07a9a1cedd716bef2cfc8d3f1927ac6c2545105660d58c65b231aff35f356add7d0345b363957c89434eb0107817b01095f1b8378c57e44e17f4f535bf0e8cee05cbb701cf7597e1f735054d9edac6a2cce21c2d3a2cd51e89bfd23f2be7d9a33fd4a6c3f9feeb340c24873d94d5787dcabaa7230c7bbe4339214b465cf96af6882d6ff6d56aecbf855af7a292a5b668b1ad161bb5228c0b7809ef480e3ddb3654bc5d725fe4cc9793efdf9ab4e9bb751e5fccf13e1054a0c9688ec1ec82861cc1890031d9f5b13d9736f92c4079071f6898c1802b4842e4f4298dabb6b5bc45f6cefdb2b853f9192137e99d764d4d6c7c0fb10bd4bc3cffef03ff0f6b43edfbfb2d55db1ef332a0763edd5fe6cec1927da3b37a415f2afa89e6e079ba18c4a9c6bb899d8d04ae8cdf20cf6edcc06fe6c372e33b775bac4ff4de80fa7b19c93b4856f669766ac78c10e66f898b8fbda7839c15865625f81c892c998fa173bd75c12a0911738991c71d5451916ce83c84052dde9dea5a00e85ef3c6c0253091bd4e3087dc3ee305d0c55a1d1b1e64e23456b6743feb9a71fe0b8cc5f48bfc3b5fccbf1a79a10452e3d0f17801ae03c0e54c3ba095072a975c1fe1ca6bd8c5ceb972c65a0bb56e18e56a51708c5a56bcb0b853bc61a6cc8393083f18fe84198b6db757f37a862ce130e02a55cb0eeab3082d6660556d11ac1273ea8aa52ca6025c4bdb92597dce711067709cde96668483eb0bee3463b8944212f82fb252ee1b4021fe86d7c48c234f473280501602c40598865843cb0105c8d772587efa88bc68a19c1d41583d66f3e79f5153e69c2de8bf8a9306ffbacfb5efc61f6794816cc550246af2f8c1142419176bb3b74ddfe3bbd18169e700ef44f9cc47b1c6d6c6b9874ae0413267e343360f043ed7d54126ae0668133322311dc5bb90dd29aa53e7000eb843b5827b683310d964ce519f0842e8ec55a57622dba3a230a4e888a6ffb9f2ff9a94f25ea481a61e5e40504299741ae9678673b15106b598cd85c44d45de274992cc928b08eeffe1aba43b813d1acd72a99d1337593acf736409e92108c48bd9c0393aa9400252853f8ee71b20bc18ccd069d26e3b78f53289611c83450cec3cc72914f62c790b25702b590e83d9e27fb12007"}, {0xd0, 0x116, 0x9, "d495381197c41b26ffc110cecc47f5397852a7f1fe953c55f7e6aebd96d49829151565b2fa315a45f3cd2506355613ea68039fac5223bc9e0bf99026cc7bf7a69e446e0e6e958cce64c83b247136bd892c6a86579ddeb6d821b7097f58a0118a7da46fdf7dfbaf420435441c6de751d68415950e69ad9f0594cda07ad78bc661324bfa60de373e3f2ff4339c8d240cac2d978fe9f594dabd974767438fd10d90cafbf6284a8c4476ac24d1b63168f9a3fc5267342c3d919694b3"}], 0x10e0}, 0x4) recvmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_clone(0xa0000500, 0x0, 0xffffffffffffff81, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 1m18.959848736s ago: executing program 0 (id=3808): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 1m18.863898314s ago: executing program 3 (id=3809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1526, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x3ff, 0x0, 0x3, 0x101, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000440)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6}}) 1m18.41822727s ago: executing program 32 (id=3809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1526, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x3ff, 0x0, 0x3, 0x101, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000440)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x6}}) 1m18.398121781s ago: executing program 0 (id=3811): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000440)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004485c) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1}, 0x4000081) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x240000c0) 1m18.097450325s ago: executing program 33 (id=3811): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000440)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004485c) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0x1}], 0x1}, 0x4000081) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x240000c0) 1m18.075919007s ago: executing program 1 (id=3812): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)={r1, r1}) 1m18.075388768s ago: executing program 34 (id=3812): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)={r1, r1}) 20.602423529s ago: executing program 5 (id=3967): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = gettid() r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x400c004) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x894b, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x114038, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x40}, r1, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x20}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000280)={&(0x7f0000000200)=@nfc_llcp, 0x80, &(0x7f0000000980)=[{&(0x7f0000000180)}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000840)=""/109, 0x6d}, {&(0x7f0000000780)=""/152, 0x98}, {&(0x7f0000000640)=""/52, 0x34}, {&(0x7f00000006c0)=""/183, 0xb7}, {&(0x7f0000000580)=""/148, 0x94}, {&(0x7f0000003100)=""/4104, 0x1008}, {&(0x7f0000000500)=""/111, 0x87}], 0x9}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0a0a0e050811"}) 20.3516452s ago: executing program 6 (id=3968): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000680)={&(0x7f00000002c0), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/85, 0x55}, {&(0x7f00000003c0)=""/236, 0xec}], 0x2, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}, 0x2102) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000740)={0x4, 0x80, 0x8, 0x57, 0x8, 0x5, 0x0, 0xfffffe0000000000, 0x8710d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x81, 0x4, @perf_bp={&(0x7f0000000700), 0xd}, 0x1041bd, 0x1, 0x6, 0x4, 0x7, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2}, r2, 0xf, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000006909000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 19.859455559s ago: executing program 5 (id=3971): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4d, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911096000000000095007e0000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup, 0x12, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000640)="efe233f4a4b650605d15a8d289051cb7d1b7c338895094d5851c6fe7af509777f26b47d3b9c1b0676796976113089c4e8b761c0c73cb00fd1b94e4fffffff3f1c4a7683c66605c1cc64aba27678ac70e00"/96, &(0x7f0000000780)=""/202}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x77, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x1388d, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000010000000f7ffffffa9641c7f55167e90ae085c0000", @ANYRES32=0x0, @ANYBLOB="ac141411ac1414bb0000000020000000000000000000000007000000440d09000008ea6e1900000000000000"], 0x40}, 0x20002880) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000180)={'veth1_macvtap\x00'}) 19.248015849s ago: executing program 6 (id=3972): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00'}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071123b000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5b471ae2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='timer_start\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="77844923fbde9d724bbda199f4d6", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000380)='wbt_stat\x00', r4, 0x0, 0xffff}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000085000000080000009500000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000540)="5becbc0e0d7c00000000f11d1b00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.030201247s ago: executing program 5 (id=3974): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140)="c44be3ea2234ee9683a3c73b8686cbf87cde9c4088495787ab9da2ae6e3f7ef261bc34662481147a7d6fdabd9a12ed3841edcbc307b113df42cb0af456ace555a4a2b72c7b30184ca3ecc9b10609d41b5fe05d22a82061c2c035bdd11f552ca92a99d2927f57ebbe957e4636fd793fd9a76d535b78197f58a8e38f983e32b435581057f512", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b242, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0xed, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) mkdir(0x0, 0x0) r7 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000100100000100cb"], 0x10}, 0xfc00) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r10 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}, {&(0x7f0000000180)="23480d95ed94c4265b88f5532b5a63b5a84615cc674c206880d2eade17b1b60edf2ac4126ba663cce2046c70b60f7f5cfd0c621f483e40757769dbdf76ebcf74e4400bc1d6a8", 0xffe0}], 0x3a}, 0x80) 19.023833857s ago: executing program 4 (id=3975): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x2e) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0x4) (async) close(0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000100000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f0000000100), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='percpu_alloc_percpu\x00', r3}, 0x10) 18.947938383s ago: executing program 2 (id=3976): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair(0x18, 0x1, 0x1, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 18.632896709s ago: executing program 4 (id=3977): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffe1, &(0x7f00000000c0)=[{&(0x7f0000000040)="e03f03003d000b08d25a80d60f7494f90224fc605800024009000400050082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x8004) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82042, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'macsec0\x00', @random}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9101a04000a740100067402000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="cc9f4d42d0e005000000bb03d0b5", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90224fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 18.631660679s ago: executing program 6 (id=3985): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 18.561733644s ago: executing program 5 (id=3978): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)={r1, r1}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80600, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r10, 0x4) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r9, 0x4) 18.434873665s ago: executing program 2 (id=3979): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) r1 = gettid() r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)="fc", 0x1}], 0x1}, 0x400c004) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x894b, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x114038, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x40}, r1, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x20}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000280)={&(0x7f0000000200)=@nfc_llcp, 0x80, &(0x7f0000000980)=[{&(0x7f0000000180)}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000840)=""/109, 0x6d}, {&(0x7f0000000780)=""/152, 0x98}, {&(0x7f0000000640)=""/52, 0x34}, {&(0x7f00000006c0)=""/183, 0xb7}, {&(0x7f0000000580)=""/148, 0x94}, {&(0x7f0000003100)=""/4104, 0x1008}, {&(0x7f0000000500)=""/111, 0x87}], 0x9}, 0x40) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0a0a0e050811"}) 18.289802367s ago: executing program 6 (id=3980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3, 0x20}, 0x18) 18.107611711s ago: executing program 4 (id=3981): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff0000, 0x9, 0x0, 0x3ff, 0x0, 0x9}, 0xffffffffffffffff, 0x0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000020000000000000000000000180200002020702500000000002020207b0af8ff00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 17.99972453s ago: executing program 6 (id=3982): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000680)={&(0x7f00000002c0), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/85, 0x55}, {&(0x7f00000003c0)=""/236, 0xec}], 0x2, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}, 0x2102) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) perf_event_open(&(0x7f0000000740)={0x4, 0x80, 0x8, 0x57, 0x8, 0x5, 0x0, 0xfffffe0000000000, 0x8710d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x81, 0x4, @perf_bp={&(0x7f0000000700), 0xd}, 0x1041bd, 0x1, 0x6, 0x4, 0x7, 0x0, 0x2, 0x0, 0x5, 0x0, 0x2}, r2, 0xf, 0xffffffffffffffff, 0x2) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf000000000000ff7f000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000006909000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 17.99910218s ago: executing program 5 (id=3983): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4d, 0x0, 0x2}, {0x2d}, {0x40, 0x40}, {0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911096000000000095007e0000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup, 0x12, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000640)="efe233f4a4b650605d15a8d289051cb7d1b7c338895094d5851c6fe7af509777f26b47d3b9c1b0676796976113089c4e8b761c0c73cb00fd1b94e4fffffff3f1c4a7683c66605c1cc64aba27678ac70e00"/96, &(0x7f0000000780)=""/202}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x77, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x1388d, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000010000000f7ffffffa9641c7f55167e90ae085c0000", @ANYRES32=0x0, @ANYBLOB="ac141411ac1414bb0000000020000000000000000000000007000000440d09000008ea6e1900000000000000"], 0x40}, 0x20002880) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000180)={'veth1_macvtap\x00'}) 17.987036151s ago: executing program 2 (id=3984): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000340), 0x2, 0x0) close(r1) 17.838031213s ago: executing program 2 (id=3986): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x3, 0x200}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4", 0x1}], 0x1}, 0x20000810) 17.783968798s ago: executing program 4 (id=3987): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000009c0)={&(0x7f0000000440)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2004485c) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x2}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000580)="122e2291", 0x4}], 0x1}, 0x240000c0) 17.501922011s ago: executing program 2 (id=3988): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socketpair(0x18, 0x1, 0x1, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) 17.331157944s ago: executing program 4 (id=3989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (fail_nth: 4) 17.26138106s ago: executing program 5 (id=3990): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f91224fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x3}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000bd95"], 0x48) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f0000000040), 0xcf) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16.857387803s ago: executing program 2 (id=3991): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffe1, &(0x7f00000000c0)=[{&(0x7f0000000040)="e03f03003d000b08d25a80d60f7494f90224fc605800024009000400050082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x8004) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82042, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'macsec0\x00', @random}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9101a04000a740100067402000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="cc9f4d42d0e005000000bb03d0b5", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90224fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 16.856814083s ago: executing program 4 (id=3992): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x1, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8}, 0x48) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[], 0xfe33) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10049014) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101043, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 16.851478273s ago: executing program 6 (id=3999): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140)="c44be3ea2234ee9683a3c73b8686cbf87cde9c4088495787ab9da2ae6e3f7ef261bc34662481147a7d6fdabd9a12ed3841edcbc307b113df42cb0af456ace555a4a2b72c7b30184ca3ecc9b10609d41b5fe05d22a82061c2c035bdd11f552ca92a99d2927f57ebbe957e4636fd793fd9a76d535b78197f58a8e38f983e32b435581057f512", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b242, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0xed, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) mkdir(0x0, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000100100000100cb"], 0x10}, 0xfc00) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r10 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}, {&(0x7f0000000180)="23480d95ed94c4265b88f5532b5a63b5a84615cc674c206880d2eade17b1b60edf2ac4126ba663cce2046c70b60f7f5cfd0c621f483e40757769dbdf76ebcf74e4400bc1d6a8", 0xffe0}], 0x3a}, 0x80) 1.247468099s ago: executing program 35 (id=3990): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f91224fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x3}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000010000bd95"], 0x48) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x23, &(0x7f0000000040), 0xcf) r9 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 639.621518ms ago: executing program 36 (id=3999): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140)="c44be3ea2234ee9683a3c73b8686cbf87cde9c4088495787ab9da2ae6e3f7ef261bc34662481147a7d6fdabd9a12ed3841edcbc307b113df42cb0af456ace555a4a2b72c7b30184ca3ecc9b10609d41b5fe05d22a82061c2c035bdd11f552ca92a99d2927f57ebbe957e4636fd793fd9a76d535b78197f58a8e38f983e32b435581057f512", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b242, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0xed, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r5, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) mkdir(0x0, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000000000000100100000100cb"], 0x10}, 0xfc00) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r10 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}, {&(0x7f0000000180)="23480d95ed94c4265b88f5532b5a63b5a84615cc674c206880d2eade17b1b60edf2ac4126ba663cce2046c70b60f7f5cfd0c621f483e40757769dbdf76ebcf74e4400bc1d6a8", 0xffe0}], 0x3a}, 0x80) 353.871051ms ago: executing program 37 (id=3991): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffffe1, &(0x7f00000000c0)=[{&(0x7f0000000040)="e03f03003d000b08d25a80d60f7494f90224fc605800024009000400050082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x8004) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82042, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'macsec0\x00', @random}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfd20, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9101a04000a740100067402000000000000800c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="cc9f4d42d0e005000000bb03d0b5", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90224fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 38 (id=3992): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000040000"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x1, 0x0, r0, 0x1, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8}, 0x48) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[], 0xfe33) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10049014) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101043, 0x0) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 [ 817.969833][T15428] ? proc_fault_inject_write+0x340/0x340 [ 817.975503][T15428] ? fsnotify_perm+0x271/0x5e0 [ 817.980294][T15428] ? proc_fault_inject_write+0x340/0x340 [ 817.985945][T15428] vfs_read+0x27e/0x920 [ 817.990124][T15428] ? kernel_read+0x1e0/0x1e0 [ 817.994746][T15428] ? __fget_files+0x28/0x4d0 [ 817.999385][T15428] ? __fget_files+0x44a/0x4d0 [ 818.004091][T15428] ? __fdget_pos+0x2a3/0x330 [ 818.008710][T15428] ? ksys_read+0x75/0x250 [ 818.013073][T15428] ksys_read+0x147/0x250 [ 818.017369][T15428] ? vfs_write+0x940/0x940 [ 818.021837][T15428] ? lockdep_hardirqs_on+0x98/0x150 [ 818.027073][T15428] do_syscall_64+0x55/0xb0 [ 818.031536][T15428] ? clear_bhb_loop+0x40/0x90 [ 818.036248][T15428] ? clear_bhb_loop+0x40/0x90 [ 818.041089][T15428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.047030][T15428] RIP: 0033:0x7f9b0ff8d57c [ 818.051474][T15428] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 818.071110][T15428] RSP: 002b:00007f9b10ed7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 818.079555][T15428] RAX: ffffffffffffffda RBX: 00007f9b101b5fa0 RCX: 00007f9b0ff8d57c [ 818.087566][T15428] RDX: 000000000000000f RSI: 00007f9b10ed70a0 RDI: 0000000000000006 [ 818.095573][T15428] RBP: 00007f9b10ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 818.103570][T15428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.111565][T15428] R13: 0000000000000000 R14: 00007f9b101b5fa0 R15: 00007ffe9810cf58 [ 818.119582][T15428] [ 818.149815][T15432] FAULT_INJECTION: forcing a failure. [ 818.149815][T15432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.195242][T15432] CPU: 1 PID: 15432 Comm: syz.0.3504 Not tainted 6.6.101-syzkaller #0 [ 818.203520][T15432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 818.213909][T15432] Call Trace: [ 818.217263][T15432] [ 818.220263][T15432] dump_stack_lvl+0x16c/0x230 [ 818.225048][T15432] ? show_regs_print_info+0x20/0x20 [ 818.230370][T15432] ? load_image+0x3b0/0x3b0 [ 818.234983][T15432] ? __lock_acquire+0x7c80/0x7c80 [ 818.240122][T15432] should_fail_ex+0x39d/0x4d0 [ 818.244902][T15432] _copy_from_user+0x2f/0xe0 [ 818.249579][T15432] __copy_msghdr+0x3bb/0x580 [ 818.254265][T15432] ___sys_sendmsg+0x1a6/0x290 [ 818.259056][T15432] ? __sys_sendmsg+0x270/0x270 [ 818.263928][T15432] ? __lock_acquire+0x7c80/0x7c80 [ 818.269072][T15432] __se_sys_sendmsg+0x1a5/0x270 [ 818.273992][T15432] ? __x64_sys_sendmsg+0x80/0x80 [ 818.279054][T15432] ? lockdep_hardirqs_on+0x98/0x150 [ 818.284339][T15432] do_syscall_64+0x55/0xb0 [ 818.288795][T15432] ? clear_bhb_loop+0x40/0x90 [ 818.293523][T15432] ? clear_bhb_loop+0x40/0x90 [ 818.298275][T15432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.304219][T15432] RIP: 0033:0x7f36ce58eb69 [ 818.308673][T15432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.328323][T15432] RSP: 002b:00007f36cf46d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.336817][T15432] RAX: ffffffffffffffda RBX: 00007f36ce7b5fa0 RCX: 00007f36ce58eb69 [ 818.344841][T15432] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 818.352855][T15432] RBP: 00007f36cf46d090 R08: 0000000000000000 R09: 0000000000000000 [ 818.360864][T15432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.368876][T15432] R13: 0000000000000000 R14: 00007f36ce7b5fa0 R15: 00007ffe38727548 [ 818.377057][T15432] [ 818.829933][T15451] FAULT_INJECTION: forcing a failure. [ 818.829933][T15451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.869517][T15451] CPU: 1 PID: 15451 Comm: syz.0.3513 Not tainted 6.6.101-syzkaller #0 [ 818.877794][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 818.887914][T15451] Call Trace: [ 818.891238][T15451] [ 818.894208][T15451] dump_stack_lvl+0x16c/0x230 [ 818.899036][T15451] ? show_regs_print_info+0x20/0x20 [ 818.904352][T15451] ? load_image+0x3b0/0x3b0 [ 818.909022][T15451] ? __might_fault+0xaa/0x120 [ 818.913976][T15451] ? __lock_acquire+0x7c80/0x7c80 [ 818.919064][T15451] should_fail_ex+0x39d/0x4d0 [ 818.923807][T15451] _copy_to_user+0x2f/0xa0 [ 818.928280][T15451] bpf_prog_test_run_syscall+0x330/0x490 [ 818.933986][T15451] ? sock_gen_cookie+0x60/0x60 [ 818.938838][T15451] ? sock_gen_cookie+0x60/0x60 [ 818.943681][T15451] bpf_prog_test_run+0x321/0x390 [ 818.948683][T15451] __sys_bpf+0x440/0x800 [ 818.952979][T15451] ? bpf_link_show_fdinfo+0x350/0x350 [ 818.958421][T15451] ? lock_chain_count+0x20/0x20 [ 818.963336][T15451] __x64_sys_bpf+0x7c/0x90 [ 818.967893][T15451] do_syscall_64+0x55/0xb0 [ 818.972366][T15451] ? clear_bhb_loop+0x40/0x90 [ 818.977086][T15451] ? clear_bhb_loop+0x40/0x90 [ 818.981804][T15451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.987769][T15451] RIP: 0033:0x7f36ce58eb69 [ 818.992233][T15451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.011898][T15451] RSP: 002b:00007f36cf46d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 819.020373][T15451] RAX: ffffffffffffffda RBX: 00007f36ce7b5fa0 RCX: 00007f36ce58eb69 [ 819.028398][T15451] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 819.036429][T15451] RBP: 00007f36cf46d090 R08: 0000000000000000 R09: 0000000000000000 [ 819.044460][T15451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.052489][T15451] R13: 0000000000000000 R14: 00007f36ce7b5fa0 R15: 00007ffe38727548 [ 819.060539][T15451] [ 819.207794][T15455] netlink: 'syz.3.3514': attribute type 10 has an invalid length. [ 819.437881][T15461] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.3518'. [ 819.659646][T15472] netlink: 'syz.2.3523': attribute type 39 has an invalid length. [ 820.334306][T15488] netlink: 'syz.2.3529': attribute type 10 has an invalid length. [ 820.376433][T15488] bond0: (slave bond_slave_0): Releasing backup interface [ 820.975938][T15502] netlink: 'syz.0.3536': attribute type 39 has an invalid length. [ 821.078774][T15505] netlink: 'syz.3.3538': attribute type 39 has an invalid length. [ 821.406041][T15489] delete_channel: no stack [ 822.182030][T15531] netlink: 'syz.1.3547': attribute type 39 has an invalid length. [ 822.399970][T15536] wg2: left promiscuous mode [ 822.408579][T15536] wg2: left allmulticast mode [ 822.468471][T15538] wg2: left promiscuous mode [ 822.476361][T15538] wg2: left allmulticast mode [ 822.513050][T15536] wg2: entered promiscuous mode [ 822.523224][T15536] wg2: entered allmulticast mode [ 822.537744][T15538] wg2: entered promiscuous mode [ 822.563282][T15538] wg2: entered allmulticast mode [ 822.742923][T15550] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3554'. [ 823.087577][T15561] netlink: 'syz.1.3559': attribute type 39 has an invalid length. [ 823.321112][T15569] wg2: left promiscuous mode [ 823.325934][T15569] wg2: left allmulticast mode [ 823.363109][T15569] wg2: entered promiscuous mode [ 823.370790][T15569] wg2: entered allmulticast mode [ 823.654746][T15581] wg2: left promiscuous mode [ 823.659729][T15581] wg2: left allmulticast mode [ 823.687364][T15581] wg2: entered promiscuous mode [ 823.692321][T15581] wg2: entered allmulticast mode [ 823.854724][T15586] wg2: left promiscuous mode [ 823.866247][T15586] wg2: left allmulticast mode [ 823.941134][T15586] wg2: entered promiscuous mode [ 823.957157][T15586] wg2: entered allmulticast mode [ 824.099485][T15593] netlink: 'syz.0.3571': attribute type 39 has an invalid length. [ 824.575362][T15602] FAULT_INJECTION: forcing a failure. [ 824.575362][T15602] name failslab, interval 1, probability 0, space 0, times 0 [ 824.601501][T15602] CPU: 0 PID: 15602 Comm: syz.2.3573 Not tainted 6.6.101-syzkaller #0 [ 824.609749][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 824.619844][T15602] Call Trace: [ 824.623179][T15602] [ 824.626137][T15602] dump_stack_lvl+0x16c/0x230 [ 824.630868][T15602] ? show_regs_print_info+0x20/0x20 [ 824.636102][T15602] ? load_image+0x3b0/0x3b0 [ 824.640647][T15602] ? __might_sleep+0xe0/0xe0 [ 824.645260][T15602] ? __lock_acquire+0x7c80/0x7c80 [ 824.650402][T15602] should_fail_ex+0x39d/0x4d0 [ 824.655115][T15602] should_failslab+0x9/0x20 [ 824.659646][T15602] slab_pre_alloc_hook+0x59/0x310 [ 824.664700][T15602] ? tomoyo_encode+0x28b/0x540 [ 824.669522][T15602] ? tomoyo_encode+0x28b/0x540 [ 824.674422][T15602] __kmem_cache_alloc_node+0x53/0x260 [ 824.679940][T15602] ? tomoyo_encode+0x28b/0x540 [ 824.684754][T15602] __kmalloc+0xa4/0x240 [ 824.688942][T15602] tomoyo_encode+0x28b/0x540 [ 824.693586][T15602] tomoyo_realpath_from_path+0x592/0x5d0 [ 824.699269][T15602] tomoyo_path_number_perm+0x1ea/0x590 [ 824.704857][T15602] ? tomoyo_path_number_perm+0x1ba/0x590 [ 824.710537][T15602] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 824.716113][T15602] ? ksys_write+0x1c1/0x250 [ 824.720671][T15602] ? __fget_files+0x28/0x4d0 [ 824.725304][T15602] security_file_ioctl+0x70/0xa0 [ 824.730277][T15602] __se_sys_ioctl+0x48/0x170 [ 824.734907][T15602] do_syscall_64+0x55/0xb0 [ 824.739349][T15602] ? clear_bhb_loop+0x40/0x90 [ 824.744042][T15602] ? clear_bhb_loop+0x40/0x90 [ 824.748740][T15602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.754754][T15602] RIP: 0033:0x7fe12178eb69 [ 824.759188][T15602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.778820][T15602] RSP: 002b:00007fe122549038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 824.787257][T15602] RAX: ffffffffffffffda RBX: 00007fe1219b5fa0 RCX: 00007fe12178eb69 [ 824.795351][T15602] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 824.803365][T15602] RBP: 00007fe122549090 R08: 0000000000000000 R09: 0000000000000000 [ 824.811350][T15602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.819340][T15602] R13: 0000000000000000 R14: 00007fe1219b5fa0 R15: 00007ffe5c1dfc18 [ 824.827353][T15602] [ 824.874353][T15604] wg2: left promiscuous mode [ 824.879137][T15604] wg2: left allmulticast mode [ 824.884519][T15602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 824.918288][T15606] wg2: entered promiscuous mode [ 824.929049][T15606] wg2: entered allmulticast mode [ 825.501062][T15622] netlink: 'syz.1.3582': attribute type 6 has an invalid length. [ 825.519162][T15622] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3582'. [ 825.650953][T15628] netlink: 'syz.0.3584': attribute type 39 has an invalid length. [ 825.677472][T15625] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3583'. [ 826.055148][T15637] wg2: left promiscuous mode [ 826.073790][T15637] wg2: left allmulticast mode [ 826.120282][T15632] wg2: entered promiscuous mode [ 826.143775][T15632] wg2: entered allmulticast mode [ 826.187503][T15639] wg2: left promiscuous mode [ 826.192688][T15639] wg2: left allmulticast mode [ 826.239402][T15644] wg2: entered promiscuous mode [ 826.258301][T15644] wg2: entered allmulticast mode [ 826.785058][T15669] FAULT_INJECTION: forcing a failure. [ 826.785058][T15669] name failslab, interval 1, probability 0, space 0, times 0 [ 826.798981][T15669] CPU: 0 PID: 15669 Comm: syz.0.3599 Not tainted 6.6.101-syzkaller #0 [ 826.807241][T15669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 826.817331][T15669] Call Trace: [ 826.820623][T15669] [ 826.823564][T15669] dump_stack_lvl+0x16c/0x230 [ 826.828264][T15669] ? show_regs_print_info+0x20/0x20 [ 826.833532][T15669] ? load_image+0x3b0/0x3b0 [ 826.838122][T15669] ? __lock_acquire+0x7c80/0x7c80 [ 826.843225][T15669] should_fail_ex+0x39d/0x4d0 [ 826.847946][T15669] should_failslab+0x9/0x20 [ 826.852587][T15669] slab_pre_alloc_hook+0x59/0x310 [ 826.853153][T15670] netlink: 'syz.1.3597': attribute type 39 has an invalid length. [ 826.857660][T15669] ? bpf_test_init+0xc0/0x150 [ 826.857699][T15669] ? bpf_test_init+0xc0/0x150 [ 826.857728][T15669] __kmem_cache_alloc_node+0x53/0x260 [ 826.857764][T15669] ? bpf_test_init+0xc0/0x150 [ 826.857792][T15669] __kmalloc+0xa4/0x240 [ 826.857826][T15669] bpf_test_init+0xc0/0x150 [ 826.857863][T15669] bpf_prog_test_run_xdp+0x382/0xfa0 [ 826.857915][T15669] ? dev_put+0x80/0x80 [ 826.857961][T15669] ? dev_put+0x80/0x80 [ 826.857992][T15669] bpf_prog_test_run+0x321/0x390 [ 826.858019][T15669] __sys_bpf+0x440/0x800 [ 826.858043][T15669] ? bpf_link_show_fdinfo+0x350/0x350 [ 826.858084][T15669] ? lock_chain_count+0x20/0x20 [ 826.927728][T15669] __x64_sys_bpf+0x7c/0x90 [ 826.932174][T15669] do_syscall_64+0x55/0xb0 [ 826.936613][T15669] ? clear_bhb_loop+0x40/0x90 [ 826.941310][T15669] ? clear_bhb_loop+0x40/0x90 [ 826.946007][T15669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 826.951936][T15669] RIP: 0033:0x7f36ce58eb69 [ 826.956377][T15669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.976117][T15669] RSP: 002b:00007f36cf46d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 826.984584][T15669] RAX: ffffffffffffffda RBX: 00007f36ce7b5fa0 RCX: 00007f36ce58eb69 [ 826.992691][T15669] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 827.000700][T15669] RBP: 00007f36cf46d090 R08: 0000000000000000 R09: 0000000000000000 [ 827.008694][T15669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.016684][T15669] R13: 0000000000000000 R14: 00007f36ce7b5fa0 R15: 00007ffe38727548 [ 827.024697][T15669] [ 827.624137][T15680] wg2: left promiscuous mode [ 827.636384][T15680] wg2: left allmulticast mode [ 827.689691][T15684] wg2: entered promiscuous mode [ 827.712468][T15684] wg2: entered allmulticast mode [ 827.726055][T15685] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3603'. [ 827.823220][T15689] netlink: 'syz.1.3606': attribute type 10 has an invalid length. [ 828.013146][T15695] netlink: 14478 bytes leftover after parsing attributes in process `syz.3.3610'. [ 828.118788][T15699] netlink: 'syz.2.3611': attribute type 39 has an invalid length. [ 828.348347][T15703] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3613'. [ 828.525212][T15711] wg2: left promiscuous mode [ 828.529912][T15711] wg2: left allmulticast mode [ 828.571586][T15711] wg2: entered promiscuous mode [ 828.584431][T15711] wg2: entered allmulticast mode [ 829.102606][T15714] netlink: 'syz.2.3616': attribute type 153 has an invalid length. [ 829.111566][T15714] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3616'. [ 829.390734][T15726] netlink: 'syz.1.3621': attribute type 10 has an invalid length. [ 829.401771][T15728] FAULT_INJECTION: forcing a failure. [ 829.401771][T15728] name failslab, interval 1, probability 0, space 0, times 0 [ 829.464078][T15728] CPU: 0 PID: 15728 Comm: syz.3.3622 Not tainted 6.6.101-syzkaller #0 [ 829.472336][T15728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 829.482784][T15728] Call Trace: [ 829.486111][T15728] [ 829.489088][T15728] dump_stack_lvl+0x16c/0x230 [ 829.493904][T15728] ? show_regs_print_info+0x20/0x20 [ 829.499204][T15728] ? load_image+0x3b0/0x3b0 [ 829.503768][T15728] ? __might_sleep+0xe0/0xe0 [ 829.508407][T15728] ? __lock_acquire+0x7c80/0x7c80 [ 829.513475][T15728] ? mark_lock+0x94/0x320 [ 829.517860][T15728] should_fail_ex+0x39d/0x4d0 [ 829.522609][T15728] should_failslab+0x9/0x20 [ 829.527265][T15728] slab_pre_alloc_hook+0x59/0x310 [ 829.532349][T15728] ? __get_vm_area_node+0x125/0x370 [ 829.537606][T15728] __kmem_cache_alloc_node+0x53/0x260 [ 829.543045][T15728] ? __get_vm_area_node+0x125/0x370 [ 829.548305][T15728] kmalloc_node_trace+0x26/0xe0 [ 829.553320][T15728] __get_vm_area_node+0x125/0x370 [ 829.558410][T15728] __vmalloc_node_range+0x36e/0x1320 [ 829.563777][T15728] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 829.569349][T15728] ? mark_lock+0x94/0x320 [ 829.573708][T15728] ? __lock_acquire+0x1334/0x7c80 [ 829.578795][T15728] ? verify_lock_unused+0x140/0x140 [ 829.584034][T15728] ? free_vm_area+0x50/0x50 [ 829.588660][T15728] ? end_current_label_crit_section+0x170/0x170 [ 829.594949][T15728] ? perf_trace_preemptirq_template+0xa4/0x340 [ 829.601174][T15728] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 829.606743][T15728] __vmalloc+0x7a/0x90 [ 829.610854][T15728] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 829.616451][T15728] bpf_prog_alloc_no_stats+0x47/0x440 [ 829.621876][T15728] ? bpf_prog_alloc+0x2b/0x1b0 [ 829.626795][T15728] bpf_prog_alloc+0x3d/0x1b0 [ 829.631442][T15728] bpf_prog_load+0x6b8/0x16d0 [ 829.636187][T15728] ? map_freeze+0x420/0x420 [ 829.640774][T15728] ? __might_fault+0xaa/0x120 [ 829.645511][T15728] ? __lock_acquire+0x7c80/0x7c80 [ 829.650582][T15728] ? file_end_write+0x159/0x250 [ 829.655495][T15728] ? __might_fault+0xaa/0x120 [ 829.660220][T15728] ? __might_fault+0xc6/0x120 [ 829.665043][T15728] ? __might_fault+0xaa/0x120 [ 829.669850][T15728] ? bpf_lsm_bpf+0x9/0x10 [ 829.674223][T15728] ? security_bpf+0x7e/0xa0 [ 829.678771][T15728] __sys_bpf+0x55a/0x800 [ 829.683043][T15728] ? bpf_link_show_fdinfo+0x350/0x350 [ 829.688474][T15728] ? lock_chain_count+0x20/0x20 [ 829.693389][T15728] __x64_sys_bpf+0x7c/0x90 [ 829.697847][T15728] do_syscall_64+0x55/0xb0 [ 829.702392][T15728] ? clear_bhb_loop+0x40/0x90 [ 829.707203][T15728] ? clear_bhb_loop+0x40/0x90 [ 829.711931][T15728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 829.717909][T15728] RIP: 0033:0x7f9b0ff8eb69 [ 829.722548][T15728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.741176][T15738] netlink: 'syz.1.3624': attribute type 39 has an invalid length. [ 829.742649][T15728] RSP: 002b:00007f9b10ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 829.742679][T15728] RAX: ffffffffffffffda RBX: 00007f9b101b5fa0 RCX: 00007f9b0ff8eb69 [ 829.742696][T15728] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 829.742711][T15728] RBP: 00007f9b10ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 829.742726][T15728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.742740][T15728] R13: 0000000000000000 R14: 00007f9b101b5fa0 R15: 00007ffe9810cf58 [ 829.742772][T15728] [ 829.781896][T15728] syz.3.3622: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 829.848831][T15728] CPU: 0 PID: 15728 Comm: syz.3.3622 Not tainted 6.6.101-syzkaller #0 [ 829.857100][T15728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 829.867214][T15728] Call Trace: [ 829.870541][T15728] [ 829.873519][T15728] dump_stack_lvl+0x16c/0x230 [ 829.878252][T15728] ? show_regs_print_info+0x20/0x20 [ 829.883508][T15728] ? load_image+0x3b0/0x3b0 [ 829.888086][T15728] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 829.894566][T15728] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 829.901132][T15728] warn_alloc+0x210/0x300 [ 829.905533][T15728] ? __get_vm_area_node+0x125/0x370 [ 829.910834][T15728] ? zone_watermark_ok_safe+0x230/0x230 [ 829.916487][T15728] ? rcu_is_watching+0x15/0xb0 [ 829.921369][T15728] ? __get_vm_area_node+0x356/0x370 [ 829.926873][T15728] __vmalloc_node_range+0x393/0x1320 [ 829.932262][T15728] ? mark_lock+0x94/0x320 [ 829.936683][T15728] ? __lock_acquire+0x1334/0x7c80 [ 829.941798][T15728] ? verify_lock_unused+0x140/0x140 [ 829.947125][T15728] ? free_vm_area+0x50/0x50 [ 829.951712][T15728] ? end_current_label_crit_section+0x170/0x170 [ 829.958036][T15728] ? perf_trace_preemptirq_template+0xa4/0x340 [ 829.964306][T15728] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 829.969942][T15728] __vmalloc+0x7a/0x90 [ 829.974093][T15728] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 829.979716][T15728] bpf_prog_alloc_no_stats+0x47/0x440 [ 829.985264][T15728] ? bpf_prog_alloc+0x2b/0x1b0 [ 829.990130][T15728] bpf_prog_alloc+0x3d/0x1b0 [ 829.994821][T15728] bpf_prog_load+0x6b8/0x16d0 [ 829.999609][T15728] ? map_freeze+0x420/0x420 [ 830.004214][T15728] ? __might_fault+0xaa/0x120 [ 830.008964][T15728] ? __lock_acquire+0x7c80/0x7c80 [ 830.014043][T15728] ? file_end_write+0x159/0x250 [ 830.018956][T15728] ? __might_fault+0xaa/0x120 [ 830.023676][T15728] ? __might_fault+0xc6/0x120 [ 830.028399][T15728] ? __might_fault+0xaa/0x120 [ 830.033162][T15728] ? bpf_lsm_bpf+0x9/0x10 [ 830.037541][T15728] ? security_bpf+0x7e/0xa0 [ 830.042102][T15728] __sys_bpf+0x55a/0x800 [ 830.046421][T15728] ? bpf_link_show_fdinfo+0x350/0x350 [ 830.051998][T15728] ? lock_chain_count+0x20/0x20 [ 830.056935][T15728] __x64_sys_bpf+0x7c/0x90 [ 830.061413][T15728] do_syscall_64+0x55/0xb0 [ 830.065882][T15728] ? clear_bhb_loop+0x40/0x90 [ 830.070593][T15728] ? clear_bhb_loop+0x40/0x90 [ 830.075402][T15728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 830.081360][T15728] RIP: 0033:0x7f9b0ff8eb69 [ 830.085819][T15728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.105471][T15728] RSP: 002b:00007f9b10ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 830.113960][T15728] RAX: ffffffffffffffda RBX: 00007f9b101b5fa0 RCX: 00007f9b0ff8eb69 [ 830.122157][T15728] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 830.130168][T15728] RBP: 00007f9b10ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 830.138175][T15728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.146269][T15728] R13: 0000000000000000 R14: 00007f9b101b5fa0 R15: 00007ffe9810cf58 [ 830.154325][T15728] [ 830.360632][T15728] Mem-Info: [ 830.387964][T15728] active_anon:6114 inactive_anon:0 isolated_anon:0 [ 830.387964][T15728] active_file:17698 inactive_file:40032 isolated_file:0 [ 830.387964][T15728] unevictable:768 dirty:546 writeback:14 [ 830.387964][T15728] slab_reclaimable:10697 slab_unreclaimable:94815 [ 830.387964][T15728] mapped:24914 shmem:1361 pagetables:488 [ 830.387964][T15728] sec_pagetables:0 bounce:0 [ 830.387964][T15728] kernel_misc_reclaimable:0 [ 830.387964][T15728] free:1347663 free_pcp:5432 free_cma:0 [ 830.456334][T15745] wg2: left promiscuous mode [ 830.461555][T15745] wg2: left allmulticast mode [ 830.494201][T15746] wg2: entered promiscuous mode [ 830.499167][T15746] wg2: entered allmulticast mode [ 830.513754][T15728] Node 0 active_anon:24428kB inactive_anon:0kB active_file:70792kB inactive_file:159928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99808kB dirty:2188kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11444kB pagetables:2048kB sec_pagetables:0kB all_unreclaimable? no [ 830.550019][T15728] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 830.580725][T15728] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 830.614624][T15728] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 830.620499][T15728] Node 0 DMA32 free:1471360kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:24380kB inactive_anon:0kB active_file:70792kB inactive_file:158592kB unevictable:1536kB writepending:2188kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:10940kB local_pcp:7352kB free_cma:0kB [ 830.659854][T15728] lowmem_reserve[]: 0 0 1 1 1 [ 830.667784][T15728] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 830.743513][T15728] lowmem_reserve[]: 0 0 0 0 0 [ 830.748342][T15728] Node 1 Normal free:3903932kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12352kB local_pcp:8928kB free_cma:0kB [ 830.812135][T15728] lowmem_reserve[]: 0 0 0 0 0 [ 830.822200][T15728] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 830.843554][T15728] Node 0 DMA32: 918*4kB (UM) 1541*8kB (UM) 960*16kB (UME) 818*32kB (UME) 267*64kB (UME) 88*128kB (UME) 70*256kB (UM) 17*512kB (UM) 9*1024kB (UM) 3*2048kB (UM) 328*4096kB (UM) = 1471360kB [ 830.869379][T15728] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 830.881197][T15728] Node 1 Normal: 233*4kB (U) 49*8kB (UE) 39*16kB (UE) 195*32kB (UE) 59*64kB (UME) 8*128kB (UME) 5*256kB (UE) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3903932kB [ 830.913029][T15728] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 830.937672][T15728] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 830.958759][T15728] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 830.992585][T15728] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 831.022192][T15728] 59091 total pagecache pages [ 831.038028][T15728] 0 pages in swap cache [ 831.048319][T15728] Free swap = 124996kB [ 831.052582][T15728] Total swap = 124996kB [ 831.074054][T15728] 2097051 pages RAM [ 831.093765][T15728] 0 pages HighMem/MovableOnly [ 831.103622][T15728] 416137 pages reserved [ 831.116071][T15728] 0 pages cma reserved [ 831.319014][T15758] netlink: 'syz.0.3632': attribute type 10 has an invalid length. [ 831.786942][T15769] FAULT_INJECTION: forcing a failure. [ 831.786942][T15769] name failslab, interval 1, probability 0, space 0, times 0 [ 831.819413][T15769] CPU: 1 PID: 15769 Comm: syz.0.3636 Not tainted 6.6.101-syzkaller #0 [ 831.827891][T15769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 831.838135][T15769] Call Trace: [ 831.841470][T15769] [ 831.844485][T15769] dump_stack_lvl+0x16c/0x230 [ 831.849221][T15769] ? show_regs_print_info+0x20/0x20 [ 831.854554][T15769] ? load_image+0x3b0/0x3b0 [ 831.859209][T15769] ? __lock_acquire+0x7c80/0x7c80 [ 831.864395][T15769] should_fail_ex+0x39d/0x4d0 [ 831.869144][T15769] should_failslab+0x9/0x20 [ 831.873697][T15769] slab_pre_alloc_hook+0x59/0x310 [ 831.878783][T15769] ? sock_write_iter+0x2bb/0x3f0 [ 831.883774][T15769] ? vfs_write+0x43b/0x940 [ 831.888238][T15769] ? ksys_write+0x147/0x250 [ 831.892901][T15769] kmem_cache_alloc_node+0x60/0x330 [ 831.898156][T15769] ? alloc_vmap_area+0x1c4/0x1c70 [ 831.903253][T15769] alloc_vmap_area+0x1c4/0x1c70 [ 831.908308][T15769] ? vm_map_ram+0xcb0/0xcb0 [ 831.913138][T15769] ? rcu_is_watching+0x15/0xb0 [ 831.918140][T15769] __get_vm_area_node+0x162/0x370 [ 831.923332][T15769] __vmalloc_node_range+0x36e/0x1320 [ 831.928760][T15769] ? netlink_sendmsg+0x5f3/0xbe0 [ 831.933767][T15769] ? netlink_insert+0x106a/0x1370 [ 831.938906][T15769] ? netlink_insert+0x2b3/0x1370 [ 831.943942][T15769] ? netlink_data_ready+0x10/0x10 [ 831.949068][T15769] ? free_vm_area+0x50/0x50 [ 831.953667][T15769] ? netlink_sendmsg+0x5f3/0xbe0 [ 831.958653][T15769] vmalloc+0x79/0x90 [ 831.962620][T15769] ? netlink_sendmsg+0x5f3/0xbe0 [ 831.967612][T15769] netlink_sendmsg+0x5f3/0xbe0 [ 831.972454][T15769] ? netlink_getsockopt+0x580/0x580 [ 831.977714][T15769] ? aa_sock_msg_perm+0x94/0x150 [ 831.982719][T15769] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 831.988048][T15769] ? security_socket_sendmsg+0x80/0xa0 [ 831.993576][T15769] sock_write_iter+0x2bb/0x3f0 [ 831.998407][T15769] ? sock_read_iter+0x3b0/0x3b0 [ 832.003345][T15769] ? common_file_perm+0x198/0x1f0 [ 832.008473][T15769] vfs_write+0x43b/0x940 [ 832.012792][T15769] ? file_end_write+0x250/0x250 [ 832.017706][T15769] ? __fget_files+0x44a/0x4d0 [ 832.022460][T15769] ? __fdget_pos+0x1d8/0x330 [ 832.027094][T15769] ? ksys_write+0x75/0x250 [ 832.031615][T15769] ksys_write+0x147/0x250 [ 832.036044][T15769] ? __ia32_sys_read+0x90/0x90 [ 832.040905][T15769] ? lockdep_hardirqs_on+0x98/0x150 [ 832.046230][T15769] do_syscall_64+0x55/0xb0 [ 832.050740][T15769] ? clear_bhb_loop+0x40/0x90 [ 832.055743][T15769] ? clear_bhb_loop+0x40/0x90 [ 832.060567][T15769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 832.066538][T15769] RIP: 0033:0x7f36ce58eb69 [ 832.071043][T15769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 832.090726][T15769] RSP: 002b:00007f36cf46d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 832.099209][T15769] RAX: ffffffffffffffda RBX: 00007f36ce7b5fa0 RCX: 00007f36ce58eb69 [ 832.107253][T15769] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004 [ 832.115281][T15769] RBP: 00007f36cf46d090 R08: 0000000000000000 R09: 0000000000000000 [ 832.123300][T15769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.131498][T15769] R13: 0000000000000000 R14: 00007f36ce7b5fa0 R15: 00007ffe38727548 [ 832.139606][T15769] [ 832.371283][T15774] netlink: 'syz.1.3637': attribute type 39 has an invalid length. [ 832.798826][T15783] wg2: left promiscuous mode [ 832.813907][T15783] wg2: left allmulticast mode [ 832.854463][T15783] wg2: entered promiscuous mode [ 832.873617][T15783] wg2: entered allmulticast mode [ 832.899508][T15786] netlink: 'syz.1.3649': attribute type 39 has an invalid length. [ 833.078254][T15787] wg2: left promiscuous mode [ 833.087750][T15787] wg2: left allmulticast mode [ 833.147985][T15787] wg2: entered promiscuous mode [ 833.153012][T15787] wg2: entered allmulticast mode [ 833.208311][T15795] FAULT_INJECTION: forcing a failure. [ 833.208311][T15795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.222212][T15795] CPU: 0 PID: 15795 Comm: syz.1.3644 Not tainted 6.6.101-syzkaller #0 [ 833.230429][T15795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 833.240535][T15795] Call Trace: [ 833.243909][T15795] [ 833.246874][T15795] dump_stack_lvl+0x16c/0x230 [ 833.251623][T15795] ? show_regs_print_info+0x20/0x20 [ 833.256887][T15795] ? load_image+0x3b0/0x3b0 [ 833.261444][T15795] ? __might_fault+0xaa/0x120 [ 833.266163][T15795] ? __lock_acquire+0x7c80/0x7c80 [ 833.271237][T15795] should_fail_ex+0x39d/0x4d0 [ 833.275977][T15795] _copy_to_iter+0x1c8/0x10d0 [ 833.280710][T15795] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 833.286663][T15795] ? lockdep_hardirqs_on+0x98/0x150 [ 833.291921][T15795] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 833.297871][T15795] ? _raw_spin_unlock+0x40/0x40 [ 833.302801][T15795] ? iov_iter_init+0x1e0/0x1e0 [ 833.307630][T15795] ? __virt_addr_valid+0x18c/0x540 [ 833.312817][T15795] ? __virt_addr_valid+0x469/0x540 [ 833.317983][T15795] ? __phys_addr_symbol+0x2f/0x70 [ 833.323075][T15795] __skb_datagram_iter+0xdb/0x780 [ 833.328141][T15795] ? skb_copy_datagram_iter+0x200/0x200 [ 833.333713][T15795] skb_copy_datagram_iter+0xb1/0x200 [ 833.339026][T15795] raw_recvmsg+0x1db/0x7e0 [ 833.343473][T15795] ? raw_sendmsg+0x1950/0x1950 [ 833.348274][T15795] ? aa_sk_perm+0x7fc/0x930 [ 833.352798][T15795] ? sock_rps_record_flow+0x19/0x400 [ 833.358106][T15795] inet_recvmsg+0x130/0x1e0 [ 833.362626][T15795] ? __might_fault+0xaa/0x120 [ 833.367322][T15795] ? inet_splice_eof+0x2e0/0x2e0 [ 833.372289][T15795] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 833.377626][T15795] ? security_socket_recvmsg+0x89/0xb0 [ 833.383106][T15795] ? inet_splice_eof+0x2e0/0x2e0 [ 833.388071][T15795] ____sys_recvmsg+0x29e/0x5b0 [ 833.392885][T15795] ? __sys_recvmsg_sock+0x50/0x50 [ 833.397953][T15795] ? import_iovec+0x73/0xa0 [ 833.402503][T15795] ___sys_recvmsg+0x1b6/0x510 [ 833.407221][T15795] ? __sys_recvmsg+0x270/0x270 [ 833.412017][T15795] ? ksys_write+0x1c1/0x250 [ 833.416606][T15795] ? __fget_files+0x44a/0x4d0 [ 833.421404][T15795] __x64_sys_recvmsg+0x1f2/0x2c0 [ 833.426402][T15795] ? ___sys_recvmsg+0x510/0x510 [ 833.431301][T15795] ? lockdep_hardirqs_on+0x98/0x150 [ 833.436556][T15795] do_syscall_64+0x55/0xb0 [ 833.441078][T15795] ? clear_bhb_loop+0x40/0x90 [ 833.445772][T15795] ? clear_bhb_loop+0x40/0x90 [ 833.450467][T15795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 833.456390][T15795] RIP: 0033:0x7f8cf998eb69 [ 833.460933][T15795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.480602][T15795] RSP: 002b:00007f8cfa899038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 833.489045][T15795] RAX: ffffffffffffffda RBX: 00007f8cf9bb5fa0 RCX: 00007f8cf998eb69 [ 833.497123][T15795] RDX: 0000000040010040 RSI: 0000200000000440 RDI: 0000000000000003 [ 833.505120][T15795] RBP: 00007f8cfa899090 R08: 0000000000000000 R09: 0000000000000000 [ 833.513113][T15795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.521105][T15795] R13: 0000000000000000 R14: 00007f8cf9bb5fa0 R15: 00007fffea3bd0a8 [ 833.529134][T15795] [ 833.819659][T15801] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3645'. [ 834.390873][T15811] netlink: 'syz.2.3648': attribute type 33 has an invalid length. [ 834.468823][T15811] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3648'. [ 834.483020][T15806] netlink: 'syz.3.3646': attribute type 153 has an invalid length. [ 834.523907][T15806] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3646'. [ 834.885424][T15819] FAULT_INJECTION: forcing a failure. [ 834.885424][T15819] name failslab, interval 1, probability 0, space 0, times 0 [ 834.913673][T15819] CPU: 1 PID: 15819 Comm: syz.1.3652 Not tainted 6.6.101-syzkaller #0 [ 834.921912][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 834.932011][T15819] Call Trace: [ 834.935330][T15819] [ 834.938300][T15819] dump_stack_lvl+0x16c/0x230 [ 834.943029][T15819] ? show_regs_print_info+0x20/0x20 [ 834.948268][T15819] ? load_image+0x3b0/0x3b0 [ 834.952825][T15819] ? __might_sleep+0xe0/0xe0 [ 834.957628][T15819] ? __lock_acquire+0x7c80/0x7c80 [ 834.962691][T15819] ? perf_trace_lock+0xf7/0x380 [ 834.967608][T15819] should_fail_ex+0x39d/0x4d0 [ 834.972508][T15819] should_failslab+0x9/0x20 [ 834.977079][T15819] slab_pre_alloc_hook+0x59/0x310 [ 834.982165][T15819] ? __get_vm_area_node+0x125/0x370 [ 834.987416][T15819] __kmem_cache_alloc_node+0x53/0x260 [ 834.992854][T15819] ? __get_vm_area_node+0x125/0x370 [ 834.998102][T15819] kmalloc_node_trace+0x26/0xe0 [ 835.003013][T15819] __get_vm_area_node+0x125/0x370 [ 835.008096][T15819] __vmalloc_node_range+0x36e/0x1320 [ 835.013430][T15819] ? netlink_sendmsg+0x5f3/0xbe0 [ 835.018413][T15819] ? netlink_insert+0x106a/0x1370 [ 835.023494][T15819] ? netlink_insert+0x2b3/0x1370 [ 835.028479][T15819] ? netlink_data_ready+0x10/0x10 [ 835.033558][T15819] ? free_vm_area+0x50/0x50 [ 835.038128][T15819] ? netlink_sendmsg+0x5f3/0xbe0 [ 835.043108][T15819] vmalloc+0x79/0x90 [ 835.047047][T15819] ? netlink_sendmsg+0x5f3/0xbe0 [ 835.052116][T15819] netlink_sendmsg+0x5f3/0xbe0 [ 835.056938][T15819] ? netlink_getsockopt+0x580/0x580 [ 835.062185][T15819] ? aa_sock_msg_perm+0x94/0x150 [ 835.067221][T15819] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 835.072554][T15819] ? security_socket_sendmsg+0x80/0xa0 [ 835.078063][T15819] ? netlink_getsockopt+0x580/0x580 [ 835.083307][T15819] ____sys_sendmsg+0x5bf/0x950 [ 835.088304][T15819] ? __asan_memset+0x22/0x40 [ 835.092969][T15819] ? __sys_sendmsg_sock+0x30/0x30 [ 835.098039][T15819] ? __import_iovec+0x5f2/0x860 [ 835.102953][T15819] ? import_iovec+0x73/0xa0 [ 835.107514][T15819] ___sys_sendmsg+0x220/0x290 [ 835.112299][T15819] ? __sys_sendmsg+0x270/0x270 [ 835.117157][T15819] ? __lock_acquire+0x7c80/0x7c80 [ 835.122257][T15819] __se_sys_sendmsg+0x1a5/0x270 [ 835.127166][T15819] ? __x64_sys_sendmsg+0x80/0x80 [ 835.132179][T15819] ? lockdep_hardirqs_on+0x98/0x150 [ 835.137437][T15819] do_syscall_64+0x55/0xb0 [ 835.141891][T15819] ? clear_bhb_loop+0x40/0x90 [ 835.146608][T15819] ? clear_bhb_loop+0x40/0x90 [ 835.151324][T15819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.157394][T15819] RIP: 0033:0x7f8cf998eb69 [ 835.161851][T15819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.181775][T15819] RSP: 002b:00007f8cfa899038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.190235][T15819] RAX: ffffffffffffffda RBX: 00007f8cf9bb5fa0 RCX: 00007f8cf998eb69 [ 835.198249][T15819] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 835.206260][T15819] RBP: 00007f8cfa899090 R08: 0000000000000000 R09: 0000000000000000 [ 835.214276][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.222376][T15819] R13: 0000000000000000 R14: 00007f8cf9bb5fa0 R15: 00007fffea3bd0a8 [ 835.230417][T15819] [ 835.279947][T15823] netlink: 'syz.2.3653': attribute type 39 has an invalid length. [ 835.571394][T15825] netlink: 'syz.3.3654': attribute type 39 has an invalid length. [ 836.351250][T15842] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3658'. [ 836.501343][T15844] wg2: left promiscuous mode [ 836.553554][T15844] wg2: left allmulticast mode [ 836.661850][T15846] wg2: entered promiscuous mode [ 836.679272][T15846] wg2: entered allmulticast mode [ 837.341921][T15855] netlink: 'syz.1.3663': attribute type 10 has an invalid length. [ 837.358967][T15857] FAULT_INJECTION: forcing a failure. [ 837.358967][T15857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.393816][T15857] CPU: 1 PID: 15857 Comm: syz.2.3664 Not tainted 6.6.101-syzkaller #0 [ 837.402087][T15857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 837.412307][T15857] Call Trace: [ 837.415655][T15857] [ 837.418651][T15857] dump_stack_lvl+0x16c/0x230 [ 837.423504][T15857] ? show_regs_print_info+0x20/0x20 [ 837.428782][T15857] ? load_image+0x3b0/0x3b0 [ 837.433401][T15857] ? __lock_acquire+0x7c80/0x7c80 [ 837.438576][T15857] should_fail_ex+0x39d/0x4d0 [ 837.443432][T15857] _copy_from_user+0x2f/0xe0 [ 837.448182][T15857] __copy_msghdr+0x3bb/0x580 [ 837.452853][T15857] ___sys_sendmsg+0x1a6/0x290 [ 837.457621][T15857] ? __sys_sendmsg+0x270/0x270 [ 837.462510][T15857] ? __lock_acquire+0x7c80/0x7c80 [ 837.467657][T15857] __se_sys_sendmsg+0x1a5/0x270 [ 837.472622][T15857] ? __x64_sys_sendmsg+0x80/0x80 [ 837.477671][T15857] ? lockdep_hardirqs_on+0x98/0x150 [ 837.482943][T15857] do_syscall_64+0x55/0xb0 [ 837.487476][T15857] ? clear_bhb_loop+0x40/0x90 [ 837.492230][T15857] ? clear_bhb_loop+0x40/0x90 [ 837.496968][T15857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 837.502919][T15857] RIP: 0033:0x7fe12178eb69 [ 837.507388][T15857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.527140][T15857] RSP: 002b:00007fe122549038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.535626][T15857] RAX: ffffffffffffffda RBX: 00007fe1219b5fa0 RCX: 00007fe12178eb69 [ 837.543631][T15857] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 837.551636][T15857] RBP: 00007fe122549090 R08: 0000000000000000 R09: 0000000000000000 [ 837.559739][T15857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.567738][T15857] R13: 0000000000000000 R14: 00007fe1219b5fa0 R15: 00007ffe5c1dfc18 [ 837.576293][T15857] [ 837.916389][T15867] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3667'. [ 838.245647][T15876] wg2: left promiscuous mode [ 838.250432][T15876] wg2: left allmulticast mode [ 838.279743][T15879] wg2: entered promiscuous mode [ 838.298319][T15879] wg2: entered allmulticast mode [ 838.712369][T15894] netlink: 'syz.1.3675': attribute type 10 has an invalid length. [ 839.016701][T15898] netlink: 'syz.1.3677': attribute type 39 has an invalid length. [ 839.467512][T15902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3678'. [ 839.549274][T15906] netlink: 'syz.0.3679': attribute type 39 has an invalid length. [ 839.582235][T15909] FAULT_INJECTION: forcing a failure. [ 839.582235][T15909] name failslab, interval 1, probability 0, space 0, times 0 [ 839.595336][T15909] CPU: 1 PID: 15909 Comm: syz.1.3680 Not tainted 6.6.101-syzkaller #0 [ 839.603551][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 839.613772][T15909] Call Trace: [ 839.617092][T15909] [ 839.620059][T15909] dump_stack_lvl+0x16c/0x230 [ 839.624797][T15909] ? show_regs_print_info+0x20/0x20 [ 839.630047][T15909] ? load_image+0x3b0/0x3b0 [ 839.634612][T15909] ? __might_sleep+0xe0/0xe0 [ 839.639258][T15909] ? __lock_acquire+0x7c80/0x7c80 [ 839.644343][T15909] should_fail_ex+0x39d/0x4d0 [ 839.649697][T15909] should_failslab+0x9/0x20 [ 839.654266][T15909] slab_pre_alloc_hook+0x59/0x310 [ 839.659351][T15909] ? vfs_write+0x586/0x940 [ 839.663839][T15909] kmem_cache_alloc+0x5a/0x2e0 [ 839.668946][T15909] ? getname_flags+0xbb/0x500 [ 839.673694][T15909] getname_flags+0xbb/0x500 [ 839.678355][T15909] do_sys_openat2+0xcb/0x1c0 [ 839.682993][T15909] ? do_sys_open+0xe0/0xe0 [ 839.687805][T15909] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 839.693929][T15909] ? lock_chain_count+0x20/0x20 [ 839.698825][T15909] __x64_sys_openat+0x139/0x160 [ 839.703729][T15909] do_syscall_64+0x55/0xb0 [ 839.708193][T15909] ? clear_bhb_loop+0x40/0x90 [ 839.712951][T15909] ? clear_bhb_loop+0x40/0x90 [ 839.717681][T15909] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 839.723636][T15909] RIP: 0033:0x7f8cf998eb69 [ 839.728111][T15909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.747828][T15909] RSP: 002b:00007f8cfa878038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 839.756612][T15909] RAX: ffffffffffffffda RBX: 00007f8cf9bb6080 RCX: 00007f8cf998eb69 [ 839.764667][T15909] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 839.772721][T15909] RBP: 00007f8cfa878090 R08: 0000000000000000 R09: 0000000000000000 [ 839.780765][T15909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.788858][T15909] R13: 0000000000000000 R14: 00007f8cf9bb6080 R15: 00007fffea3bd0a8 [ 839.796986][T15909] [ 840.133076][T15916] wg2: left promiscuous mode [ 840.137888][T15916] wg2: left allmulticast mode [ 840.237157][T15916] wg2: entered promiscuous mode [ 840.243092][T15916] wg2: entered allmulticast mode [ 840.448267][T15926] netlink: 'syz.1.3687': attribute type 39 has an invalid length. [ 840.556857][T15928] wg2: left promiscuous mode [ 840.566693][T15928] wg2: left allmulticast mode [ 840.710373][T15931] wg2: entered promiscuous mode [ 840.719227][T15931] wg2: entered allmulticast mode [ 841.137643][T15945] wg2: left promiscuous mode [ 841.142374][T15945] wg2: left allmulticast mode [ 841.234566][T15945] wg2: entered promiscuous mode [ 841.239547][T15945] wg2: entered allmulticast mode [ 841.316480][T15948] netlink: 'syz.2.3692': attribute type 3 has an invalid length. [ 841.327202][T15948] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3692'. [ 841.682000][T15955] wg2: left promiscuous mode [ 841.703666][T15955] wg2: left allmulticast mode [ 841.784063][T15958] wg2: entered promiscuous mode [ 841.796916][T15958] wg2: entered allmulticast mode [ 841.851395][T15960] wg2: left promiscuous mode [ 841.866825][T15960] wg2: left allmulticast mode [ 841.917636][T15960] wg2: entered promiscuous mode [ 841.922626][T15960] wg2: entered allmulticast mode [ 841.987686][T15962] netlink: 'syz.2.3700': attribute type 39 has an invalid length. [ 842.567741][T15969] delete_channel: no stack [ 842.617564][T15977] FAULT_INJECTION: forcing a failure. [ 842.617564][T15977] name failslab, interval 1, probability 0, space 0, times 0 [ 842.641040][T15977] CPU: 1 PID: 15977 Comm: syz.3.3704 Not tainted 6.6.101-syzkaller #0 [ 842.649303][T15977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 842.659431][T15977] Call Trace: [ 842.662762][T15977] [ 842.666000][T15977] dump_stack_lvl+0x16c/0x230 [ 842.670843][T15977] ? show_regs_print_info+0x20/0x20 [ 842.676110][T15977] ? load_image+0x3b0/0x3b0 [ 842.680693][T15977] ? __might_sleep+0xe0/0xe0 [ 842.685357][T15977] ? __lock_acquire+0x7c80/0x7c80 [ 842.690463][T15977] should_fail_ex+0x39d/0x4d0 [ 842.695217][T15977] should_failslab+0x9/0x20 [ 842.699786][T15977] slab_pre_alloc_hook+0x59/0x310 [ 842.704886][T15977] ? __lock_acquire+0x7c80/0x7c80 [ 842.709979][T15977] kmem_cache_alloc_node+0x60/0x330 [ 842.715248][T15977] ? __alloc_skb+0x108/0x2c0 [ 842.719916][T15977] __alloc_skb+0x108/0x2c0 [ 842.724408][T15977] netlink_sendmsg+0x65b/0xbe0 [ 842.729256][T15977] ? netlink_getsockopt+0x580/0x580 [ 842.734536][T15977] ? aa_sock_msg_perm+0x94/0x150 [ 842.739725][T15977] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 842.745083][T15977] ? security_socket_sendmsg+0x80/0xa0 [ 842.750595][T15977] ? netlink_getsockopt+0x580/0x580 [ 842.756137][T15977] ____sys_sendmsg+0x5bf/0x950 [ 842.760959][T15977] ? __asan_memset+0x22/0x40 [ 842.765587][T15977] ? __sys_sendmsg_sock+0x30/0x30 [ 842.770815][T15977] ? __import_iovec+0x5f2/0x860 [ 842.775732][T15977] ? import_iovec+0x73/0xa0 [ 842.780361][T15977] ___sys_sendmsg+0x220/0x290 [ 842.785371][T15977] ? __sys_sendmsg+0x270/0x270 [ 842.790217][T15977] ? __lock_acquire+0x7c80/0x7c80 [ 842.795349][T15977] __se_sys_sendmsg+0x1a5/0x270 [ 842.800277][T15977] ? __x64_sys_sendmsg+0x80/0x80 [ 842.805292][T15977] ? lockdep_hardirqs_on+0x98/0x150 [ 842.810536][T15977] do_syscall_64+0x55/0xb0 [ 842.814982][T15977] ? clear_bhb_loop+0x40/0x90 [ 842.819679][T15977] ? clear_bhb_loop+0x40/0x90 [ 842.824387][T15977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 842.830319][T15977] RIP: 0033:0x7f9b0ff8eb69 [ 842.834765][T15977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.854409][T15977] RSP: 002b:00007f9b10ed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 842.862863][T15977] RAX: ffffffffffffffda RBX: 00007f9b101b5fa0 RCX: 00007f9b0ff8eb69 [ 842.870862][T15977] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 842.878883][T15977] RBP: 00007f9b10ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 842.886924][T15977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 842.894924][T15977] R13: 0000000000000000 R14: 00007f9b101b5fa0 R15: 00007ffe9810cf58 [ 842.902957][T15977] [ 842.939957][T15976] netlink: 'syz.2.3705': attribute type 39 has an invalid length. [ 843.144827][T15982] wg2: left promiscuous mode [ 843.149772][T15982] wg2: left allmulticast mode [ 843.234246][T15982] wg2: entered promiscuous mode [ 843.250228][T15982] wg2: entered allmulticast mode [ 843.534416][T15992] wg2: left promiscuous mode [ 843.539135][T15992] wg2: left allmulticast mode [ 843.663304][T15993] wg2: entered promiscuous mode [ 843.691650][T15993] wg2: entered allmulticast mode [ 843.784711][T15990] netlink: 'syz.0.3709': attribute type 153 has an invalid length. [ 843.798674][T15990] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3709'. [ 844.186861][T16005] wg2: left promiscuous mode [ 844.191918][T16005] wg2: left allmulticast mode [ 844.256597][T16007] wg2: entered promiscuous mode [ 844.273921][T16007] wg2: entered allmulticast mode [ 844.978117][T16020] netlink: 'syz.0.3717': attribute type 39 has an invalid length. [ 845.052218][T16026] wg2: left promiscuous mode [ 845.071606][T16026] wg2: left allmulticast mode [ 845.121021][T16027] wg2: left promiscuous mode [ 845.126496][T16027] wg2: left allmulticast mode [ 845.157863][T16026] wg2: entered promiscuous mode [ 845.174387][T16026] wg2: entered allmulticast mode [ 845.295498][T16027] wg2: entered promiscuous mode [ 845.300492][T16027] wg2: entered allmulticast mode [ 845.618550][T16039] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3726'. [ 845.651966][T16043] netlink: 'syz.3.3723': attribute type 153 has an invalid length. [ 845.693044][T16043] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3723'. [ 846.523234][T16057] FAULT_INJECTION: forcing a failure. [ 846.523234][T16057] name failslab, interval 1, probability 0, space 0, times 0 [ 846.542539][T16057] CPU: 0 PID: 16057 Comm: syz.0.3731 Not tainted 6.6.101-syzkaller #0 [ 846.550785][T16057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 846.560997][T16057] Call Trace: [ 846.564328][T16057] [ 846.567400][T16057] dump_stack_lvl+0x16c/0x230 [ 846.572143][T16057] ? show_regs_print_info+0x20/0x20 [ 846.577425][T16057] ? load_image+0x3b0/0x3b0 [ 846.582005][T16057] ? __might_sleep+0xe0/0xe0 [ 846.586650][T16057] ? __lock_acquire+0x7c80/0x7c80 [ 846.591824][T16057] should_fail_ex+0x39d/0x4d0 [ 846.596636][T16057] should_failslab+0x9/0x20 [ 846.601276][T16057] slab_pre_alloc_hook+0x59/0x310 [ 846.606442][T16057] ? __lock_acquire+0x7c80/0x7c80 [ 846.611776][T16057] kmem_cache_alloc_node+0x60/0x330 [ 846.617040][T16057] ? __alloc_skb+0x108/0x2c0 [ 846.621702][T16057] __alloc_skb+0x108/0x2c0 [ 846.626173][T16057] netlink_sendmsg+0x65b/0xbe0 [ 846.631090][T16057] ? netlink_getsockopt+0x580/0x580 [ 846.636484][T16057] ? aa_sock_msg_perm+0x94/0x150 [ 846.641570][T16057] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 846.647621][T16057] ? security_socket_sendmsg+0x80/0xa0 [ 846.653135][T16057] ? netlink_getsockopt+0x580/0x580 [ 846.658389][T16057] ____sys_sendmsg+0x5bf/0x950 [ 846.663223][T16057] ? __asan_memset+0x22/0x40 [ 846.667871][T16057] ? __sys_sendmsg_sock+0x30/0x30 [ 846.672956][T16057] ? __import_iovec+0x5f2/0x860 [ 846.677881][T16057] ? import_iovec+0x73/0xa0 [ 846.682461][T16057] ___sys_sendmsg+0x220/0x290 [ 846.687192][T16057] ? __sys_sendmsg+0x270/0x270 [ 846.692031][T16057] ? __lock_acquire+0x7c80/0x7c80 [ 846.697128][T16057] __se_sys_sendmsg+0x1a5/0x270 [ 846.702041][T16057] ? __x64_sys_sendmsg+0x80/0x80 [ 846.707062][T16057] ? lockdep_hardirqs_on+0x98/0x150 [ 846.712333][T16057] do_syscall_64+0x55/0xb0 [ 846.716791][T16057] ? clear_bhb_loop+0x40/0x90 [ 846.721499][T16057] ? clear_bhb_loop+0x40/0x90 [ 846.726216][T16057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.732261][T16057] RIP: 0033:0x7f36ce58eb69 [ 846.736742][T16057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.756840][T16057] RSP: 002b:00007f36cf46d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.765301][T16057] RAX: ffffffffffffffda RBX: 00007f36ce7b5fa0 RCX: 00007f36ce58eb69 [ 846.773403][T16057] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 846.781422][T16057] RBP: 00007f36cf46d090 R08: 0000000000000000 R09: 0000000000000000 [ 846.789429][T16057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.797420][T16057] R13: 0000000000000000 R14: 00007f36ce7b5fa0 R15: 00007ffe38727548 [ 846.805429][T16057] [ 846.834512][T16061] wg2: left promiscuous mode [ 846.839200][T16061] wg2: left allmulticast mode [ 846.899134][T16062] wg2: entered promiscuous mode [ 846.911698][T16062] wg2: entered allmulticast mode [ 847.177357][T16069] wg2: left promiscuous mode [ 847.182194][T16069] wg2: left allmulticast mode [ 847.251570][T16074] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3736'. [ 847.280003][T16072] wg2: entered promiscuous mode [ 847.292422][T16072] wg2: entered allmulticast mode [ 847.442095][T16077] netlink: 'syz.1.3735': attribute type 153 has an invalid length. [ 847.487224][T16077] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3735'. [ 848.057651][T16083] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3739'. [ 848.073945][T16083] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3739'. [ 848.092094][T16085] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3739'. [ 848.231772][T16089] FAULT_INJECTION: forcing a failure. [ 848.231772][T16089] name failslab, interval 1, probability 0, space 0, times 0 [ 848.253904][T16089] CPU: 0 PID: 16089 Comm: syz.0.3741 Not tainted 6.6.101-syzkaller #0 [ 848.262256][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 848.272715][T16089] Call Trace: [ 848.276041][T16089] [ 848.279016][T16089] dump_stack_lvl+0x16c/0x230 [ 848.283808][T16089] ? show_regs_print_info+0x20/0x20 [ 848.289066][T16089] ? load_image+0x3b0/0x3b0 [ 848.293697][T16089] ? __might_sleep+0xe0/0xe0 [ 848.298439][T16089] ? __lock_acquire+0x7c80/0x7c80 [ 848.303569][T16089] should_fail_ex+0x39d/0x4d0 [ 848.308306][T16089] should_failslab+0x9/0x20 [ 848.312873][T16089] slab_pre_alloc_hook+0x59/0x310 [ 848.317939][T16089] ? tomoyo_encode+0x28b/0x540 [ 848.322752][T16089] ? tomoyo_encode+0x28b/0x540 [ 848.327553][T16089] __kmem_cache_alloc_node+0x53/0x260 [ 848.332961][T16089] ? tomoyo_encode+0x28b/0x540 [ 848.337850][T16089] __kmalloc+0xa4/0x240 [ 848.342128][T16089] tomoyo_encode+0x28b/0x540 [ 848.346769][T16089] tomoyo_realpath_from_path+0x592/0x5d0 [ 848.352445][T16089] tomoyo_path_number_perm+0x1ea/0x590 [ 848.357937][T16089] ? tomoyo_path_number_perm+0x1ba/0x590 [ 848.363599][T16089] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 848.369092][T16089] ? ksys_write+0x1c1/0x250 [ 848.373674][T16089] ? __fget_files+0x28/0x4d0 [ 848.378302][T16089] security_file_ioctl+0x70/0xa0 [ 848.383302][T16089] __se_sys_ioctl+0x48/0x170 [ 848.387923][T16089] do_syscall_64+0x55/0xb0 [ 848.392363][T16089] ? clear_bhb_loop+0x40/0x90 [ 848.397059][T16089] ? clear_bhb_loop+0x40/0x90 [ 848.401781][T16089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.407743][T16089] RIP: 0033:0x7f36ce58eb69 [ 848.412182][T16089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.432000][T16089] RSP: 002b:00007f36cf46d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 848.440444][T16089] RAX: ffffffffffffffda RBX: 00007f36ce7b5fa0 RCX: 00007f36ce58eb69 [ 848.448562][T16089] RDX: 0000200000000080 RSI: 00000000000089fc RDI: 0000000000000004 [ 848.456565][T16089] RBP: 00007f36cf46d090 R08: 0000000000000000 R09: 0000000000000000 [ 848.464658][T16089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.472654][T16089] R13: 0000000000000000 R14: 00007f36ce7b5fa0 R15: 00007ffe38727548 [ 848.480665][T16089] [ 848.498066][T16089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 848.513869][T16094] syz.2.3742[16094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.514023][T16094] syz.2.3742[16094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 849.000555][T16106] netlink: 'syz.0.3746': attribute type 153 has an invalid length. [ 849.056025][T16106] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3746'. [ 849.736276][T16118] netlink: 'syz.0.3751': attribute type 153 has an invalid length. [ 849.744933][T16118] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3751'. [ 849.795156][T16125] wg2: left promiscuous mode [ 849.799890][T16125] wg2: left allmulticast mode [ 849.851362][T16125] wg2: entered promiscuous mode [ 849.873743][T16125] wg2: entered allmulticast mode [ 850.113404][T16129] wg2: left promiscuous mode [ 850.118694][T16129] wg2: left allmulticast mode [ 850.202473][T16129] wg2: entered promiscuous mode [ 850.215737][T16129] wg2: entered allmulticast mode [ 850.418626][T16135] netlink: 'syz.3.3756': attribute type 10 has an invalid length. [ 850.700390][T16139] FAULT_INJECTION: forcing a failure. [ 850.700390][T16139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 850.721613][T16139] CPU: 1 PID: 16139 Comm: syz.3.3758 Not tainted 6.6.101-syzkaller #0 [ 850.729859][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 850.739951][T16139] Call Trace: [ 850.743273][T16139] [ 850.746260][T16139] dump_stack_lvl+0x16c/0x230 [ 850.751114][T16139] ? show_regs_print_info+0x20/0x20 [ 850.756378][T16139] ? load_image+0x3b0/0x3b0 [ 850.761060][T16139] ? __lock_acquire+0x7c80/0x7c80 [ 850.766152][T16139] ? snprintf+0xdb/0x120 [ 850.770453][T16139] should_fail_ex+0x39d/0x4d0 [ 850.775189][T16139] _copy_to_user+0x2f/0xa0 [ 850.779685][T16139] simple_read_from_buffer+0xe7/0x150 [ 850.785132][T16139] proc_fail_nth_read+0x1e3/0x250 [ 850.790216][T16139] ? proc_fault_inject_write+0x340/0x340 [ 850.795921][T16139] ? fsnotify_perm+0x271/0x5e0 [ 850.800769][T16139] ? proc_fault_inject_write+0x340/0x340 [ 850.806465][T16139] vfs_read+0x27e/0x920 [ 850.810685][T16139] ? kernel_read+0x1e0/0x1e0 [ 850.815384][T16139] ? __fget_files+0x28/0x4d0 [ 850.820030][T16139] ? __fget_files+0x44a/0x4d0 [ 850.824783][T16139] ? __fdget_pos+0x2a3/0x330 [ 850.829441][T16139] ? ksys_read+0x75/0x250 [ 850.833832][T16139] ksys_read+0x147/0x250 [ 850.838138][T16139] ? vfs_write+0x940/0x940 [ 850.842707][T16139] ? lockdep_hardirqs_on+0x98/0x150 [ 850.848001][T16139] do_syscall_64+0x55/0xb0 [ 850.852480][T16139] ? clear_bhb_loop+0x40/0x90 [ 850.857210][T16139] ? clear_bhb_loop+0x40/0x90 [ 850.862290][T16139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.868246][T16139] RIP: 0033:0x7f9b0ff8d57c [ 850.872721][T16139] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 850.892392][T16139] RSP: 002b:00007f9b10ed7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 850.900867][T16139] RAX: ffffffffffffffda RBX: 00007f9b101b5fa0 RCX: 00007f9b0ff8d57c [ 850.908904][T16139] RDX: 000000000000000f RSI: 00007f9b10ed70a0 RDI: 0000000000000005 [ 850.916934][T16139] RBP: 00007f9b10ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 850.924965][T16139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 850.932985][T16139] R13: 0000000000000000 R14: 00007f9b101b5fa0 R15: 00007ffe9810cf58 [ 850.941117][T16139] [ 851.017378][T16143] netlink: 'syz.1.3759': attribute type 153 has an invalid length. [ 851.030632][T16143] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3759'. [ 851.389802][T16157] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3769'. [ 851.658706][T16163] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3765'. [ 851.777692][T16165] netlink: 'syz.3.3766': attribute type 10 has an invalid length. [ 852.483478][T16178] netlink: 'syz.0.3772': attribute type 153 has an invalid length. [ 852.494058][T16178] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3772'. [ 852.552042][T16187] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3774'. [ 852.820698][T16195] netlink: 'syz.1.3777': attribute type 2 has an invalid length. [ 852.836915][T16195] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3777'. [ 853.291469][T16207] FAULT_INJECTION: forcing a failure. [ 853.291469][T16207] name failslab, interval 1, probability 0, space 0, times 0 [ 853.323577][T16207] CPU: 1 PID: 16207 Comm: syz.1.3781 Not tainted 6.6.101-syzkaller #0 [ 853.331942][T16207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 853.342040][T16207] Call Trace: [ 853.345387][T16207] [ 853.348360][T16207] dump_stack_lvl+0x16c/0x230 [ 853.353080][T16207] ? show_regs_print_info+0x20/0x20 [ 853.358331][T16207] ? load_image+0x3b0/0x3b0 [ 853.362874][T16207] ? __lock_acquire+0x7c80/0x7c80 [ 853.367932][T16207] should_fail_ex+0x39d/0x4d0 [ 853.372638][T16207] should_failslab+0x9/0x20 [ 853.377184][T16207] slab_pre_alloc_hook+0x59/0x310 [ 853.382254][T16207] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 853.388899][T16207] ? bpf_test_init+0xc0/0x150 [ 853.393664][T16207] ? bpf_test_init+0xc0/0x150 [ 853.398415][T16207] __kmem_cache_alloc_node+0x53/0x260 [ 853.403919][T16207] ? bpf_test_init+0xc0/0x150 [ 853.408628][T16207] __kmalloc+0xa4/0x240 [ 853.412832][T16207] bpf_test_init+0xc0/0x150 [ 853.417400][T16207] bpf_prog_test_run_xdp+0x382/0xfa0 [ 853.422938][T16207] ? dev_put+0x80/0x80 [ 853.427228][T16207] ? dev_put+0x80/0x80 [ 853.431342][T16207] bpf_prog_test_run+0x321/0x390 [ 853.436321][T16207] __sys_bpf+0x440/0x800 [ 853.440600][T16207] ? bpf_link_show_fdinfo+0x350/0x350 [ 853.446129][T16207] ? lock_chain_count+0x20/0x20 [ 853.451032][T16207] __x64_sys_bpf+0x7c/0x90 [ 853.455594][T16207] do_syscall_64+0x55/0xb0 [ 853.460069][T16207] ? clear_bhb_loop+0x40/0x90 [ 853.464770][T16207] ? clear_bhb_loop+0x40/0x90 [ 853.469470][T16207] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 853.475391][T16207] RIP: 0033:0x7f8cf998eb69 [ 853.479824][T16207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.499468][T16207] RSP: 002b:00007f8cfa899038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 853.507906][T16207] RAX: ffffffffffffffda RBX: 00007f8cf9bb5fa0 RCX: 00007f8cf998eb69 [ 853.515897][T16207] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 853.523888][T16207] RBP: 00007f8cfa899090 R08: 0000000000000000 R09: 0000000000000000 [ 853.531880][T16207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.539954][T16207] R13: 0000000000000000 R14: 00007f8cf9bb5fa0 R15: 00007fffea3bd0a8 [ 853.547961][T16207] [ 853.890463][T16218] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3786'. [ 853.926003][T16220] FAULT_INJECTION: forcing a failure. [ 853.926003][T16220] name failslab, interval 1, probability 0, space 0, times 0 [ 853.945610][T16220] CPU: 0 PID: 16220 Comm: syz.2.3787 Not tainted 6.6.101-syzkaller #0 [ 853.953857][T16220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 853.963952][T16220] Call Trace: [ 853.967287][T16220] [ 853.970270][T16220] dump_stack_lvl+0x16c/0x230 [ 853.975009][T16220] ? show_regs_print_info+0x20/0x20 [ 853.980366][T16220] ? load_image+0x3b0/0x3b0 [ 853.984939][T16220] ? __might_sleep+0xe0/0xe0 [ 853.989588][T16220] ? __lock_acquire+0x7c80/0x7c80 [ 853.994658][T16220] ? mark_lock+0x94/0x320 [ 853.999039][T16220] should_fail_ex+0x39d/0x4d0 [ 854.003859][T16220] should_failslab+0x9/0x20 [ 854.008408][T16220] slab_pre_alloc_hook+0x59/0x310 [ 854.013491][T16220] ? __get_vm_area_node+0x125/0x370 [ 854.018746][T16220] __kmem_cache_alloc_node+0x53/0x260 [ 854.024180][T16220] ? __get_vm_area_node+0x125/0x370 [ 854.029439][T16220] kmalloc_node_trace+0x26/0xe0 [ 854.034348][T16220] __get_vm_area_node+0x125/0x370 [ 854.039427][T16220] __vmalloc_node_range+0x36e/0x1320 [ 854.044766][T16220] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 854.050363][T16220] ? mark_lock+0x94/0x320 [ 854.054741][T16220] ? __lock_acquire+0x1334/0x7c80 [ 854.059807][T16220] ? verify_lock_unused+0x140/0x140 [ 854.065055][T16220] ? free_vm_area+0x50/0x50 [ 854.069603][T16220] ? end_current_label_crit_section+0x170/0x170 [ 854.076052][T16220] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 854.081742][T16220] __vmalloc+0x7a/0x90 [ 854.085883][T16220] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 854.091482][T16220] bpf_prog_alloc_no_stats+0x47/0x440 [ 854.096904][T16220] ? bpf_prog_alloc+0x2b/0x1b0 [ 854.101710][T16220] bpf_prog_alloc+0x3d/0x1b0 [ 854.106353][T16220] bpf_prog_load+0x6b8/0x16d0 [ 854.111102][T16220] ? map_freeze+0x420/0x420 [ 854.115673][T16220] ? __might_fault+0xaa/0x120 [ 854.120397][T16220] ? __lock_acquire+0x7c80/0x7c80 [ 854.125467][T16220] ? file_end_write+0x159/0x250 [ 854.130401][T16220] ? __might_fault+0xaa/0x120 [ 854.135102][T16220] ? __might_fault+0xc6/0x120 [ 854.139821][T16220] ? __might_fault+0xaa/0x120 [ 854.144542][T16220] ? bpf_lsm_bpf+0x9/0x10 [ 854.148918][T16220] ? security_bpf+0x7e/0xa0 [ 854.153460][T16220] __sys_bpf+0x55a/0x800 [ 854.157753][T16220] ? bpf_link_show_fdinfo+0x350/0x350 [ 854.163189][T16220] ? lock_chain_count+0x20/0x20 [ 854.168093][T16220] __x64_sys_bpf+0x7c/0x90 [ 854.172678][T16220] do_syscall_64+0x55/0xb0 [ 854.177149][T16220] ? clear_bhb_loop+0x40/0x90 [ 854.181866][T16220] ? clear_bhb_loop+0x40/0x90 [ 854.186585][T16220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 854.192592][T16220] RIP: 0033:0x7fe12178eb69 [ 854.197064][T16220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.217073][T16220] RSP: 002b:00007fe122549038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 854.225631][T16220] RAX: ffffffffffffffda RBX: 00007fe1219b5fa0 RCX: 00007fe12178eb69 [ 854.233658][T16220] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 854.241696][T16220] RBP: 00007fe122549090 R08: 0000000000000000 R09: 0000000000000000 [ 854.249743][T16220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.257757][T16220] R13: 0000000000000001 R14: 00007fe1219b5fa0 R15: 00007ffe5c1dfc18 [ 854.265796][T16220] [ 854.299516][T16220] warn_alloc: 2 callbacks suppressed [ 854.299534][T16220] syz.2.3787: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 854.321559][T16220] CPU: 0 PID: 16220 Comm: syz.2.3787 Not tainted 6.6.101-syzkaller #0 [ 854.329758][T16220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 854.339861][T16220] Call Trace: [ 854.343184][T16220] [ 854.346159][T16220] dump_stack_lvl+0x16c/0x230 [ 854.350897][T16220] ? show_regs_print_info+0x20/0x20 [ 854.356256][T16220] ? load_image+0x3b0/0x3b0 [ 854.360872][T16220] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 854.367343][T16220] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 854.373928][T16220] warn_alloc+0x210/0x300 [ 854.378319][T16220] ? __get_vm_area_node+0x125/0x370 [ 854.383577][T16220] ? zone_watermark_ok_safe+0x230/0x230 [ 854.389193][T16220] ? rcu_is_watching+0x15/0xb0 [ 854.394024][T16220] ? __get_vm_area_node+0x356/0x370 [ 854.399297][T16220] __vmalloc_node_range+0x393/0x1320 [ 854.404650][T16220] ? mark_lock+0x94/0x320 [ 854.409124][T16220] ? __lock_acquire+0x1334/0x7c80 [ 854.414280][T16220] ? verify_lock_unused+0x140/0x140 [ 854.419555][T16220] ? free_vm_area+0x50/0x50 [ 854.424120][T16220] ? end_current_label_crit_section+0x170/0x170 [ 854.430431][T16220] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 854.436028][T16220] __vmalloc+0x7a/0x90 [ 854.440242][T16220] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 854.445841][T16220] bpf_prog_alloc_no_stats+0x47/0x440 [ 854.451266][T16220] ? bpf_prog_alloc+0x2b/0x1b0 [ 854.456101][T16220] bpf_prog_alloc+0x3d/0x1b0 [ 854.460761][T16220] bpf_prog_load+0x6b8/0x16d0 [ 854.465593][T16220] ? map_freeze+0x420/0x420 [ 854.470183][T16220] ? __might_fault+0xaa/0x120 [ 854.474890][T16220] ? __lock_acquire+0x7c80/0x7c80 [ 854.479948][T16220] ? file_end_write+0x159/0x250 [ 854.484827][T16220] ? __might_fault+0xaa/0x120 [ 854.489525][T16220] ? __might_fault+0xc6/0x120 [ 854.494218][T16220] ? __might_fault+0xaa/0x120 [ 854.498916][T16220] ? bpf_lsm_bpf+0x9/0x10 [ 854.503273][T16220] ? security_bpf+0x7e/0xa0 [ 854.507810][T16220] __sys_bpf+0x55a/0x800 [ 854.512181][T16220] ? bpf_link_show_fdinfo+0x350/0x350 [ 854.517696][T16220] ? lock_chain_count+0x20/0x20 [ 854.522577][T16220] __x64_sys_bpf+0x7c/0x90 [ 854.527019][T16220] do_syscall_64+0x55/0xb0 [ 854.531461][T16220] ? clear_bhb_loop+0x40/0x90 [ 854.536160][T16220] ? clear_bhb_loop+0x40/0x90 [ 854.540862][T16220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 854.546804][T16220] RIP: 0033:0x7fe12178eb69 [ 854.551255][T16220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 854.570985][T16220] RSP: 002b:00007fe122549038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 854.579450][T16220] RAX: ffffffffffffffda RBX: 00007fe1219b5fa0 RCX: 00007fe12178eb69 [ 854.587448][T16220] RDX: 0000000000000094 RSI: 0000200000000540 RDI: 0000000000000005 [ 854.595440][T16220] RBP: 00007fe122549090 R08: 0000000000000000 R09: 0000000000000000 [ 854.603436][T16220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.611437][T16220] R13: 0000000000000001 R14: 00007fe1219b5fa0 R15: 00007ffe5c1dfc18 [ 854.619471][T16220] [ 854.683927][T16220] Mem-Info: [ 854.696777][T16220] active_anon:6151 inactive_anon:0 isolated_anon:0 [ 854.696777][T16220] active_file:17698 inactive_file:40040 isolated_file:0 [ 854.696777][T16220] unevictable:768 dirty:276 writeback:0 [ 854.696777][T16220] slab_reclaimable:10752 slab_unreclaimable:95743 [ 854.696777][T16220] mapped:25942 shmem:1361 pagetables:516 [ 854.696777][T16220] sec_pagetables:0 bounce:0 [ 854.696777][T16220] kernel_misc_reclaimable:0 [ 854.696777][T16220] free:1344634 free_pcp:7963 free_cma:0 [ 854.755871][T16220] Node 0 active_anon:24604kB inactive_anon:0kB active_file:70792kB inactive_file:159960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103768kB dirty:1100kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11604kB pagetables:2064kB sec_pagetables:0kB all_unreclaimable? no [ 854.805971][T16220] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 854.843694][T16220] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 854.904125][T16220] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 854.910072][T16220] Node 0 DMA32 free:1458988kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:24756kB inactive_anon:0kB active_file:70792kB inactive_file:158624kB unevictable:1536kB writepending:1100kB present:3129332kB managed:2589600kB mlocked:0kB bounce:0kB free_pcp:19292kB local_pcp:17048kB free_cma:0kB [ 854.980039][T16220] lowmem_reserve[]: 0 0 1 1 1 [ 854.993575][T16220] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1336kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 855.071198][T16220] lowmem_reserve[]: 0 0 0 0 0 [ 855.090022][T16220] Node 1 Normal free:3904188kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12096kB local_pcp:3424kB free_cma:0kB [ 855.163164][T16220] lowmem_reserve[]: 0 0 0 0 0 [ 855.185398][T16220] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 855.253612][T16220] Node 0 DMA32: 603*4kB (ME) 913*8kB (UME) 1134*16kB (UME) 981*32kB (UME) 279*64kB (UME) 46*128kB (UME) 32*256kB (UM) 17*512kB (UM) 9*1024kB (UM) 3*2048kB (UM) 328*4096kB (UM) = 1458740kB [ 855.294664][T16220] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 855.323743][T16220] Node 1 Normal: 233*4kB (U) 49*8kB (UE) 39*16kB (UE) 199*32kB (UE) 59*64kB (UME) 9*128kB (UME) 5*256kB (UE) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3904188kB [ 855.362183][T16220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 855.383916][T16220] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 855.404728][T16220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 855.425028][T16220] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 855.447623][T16220] 59101 total pagecache pages [ 855.452383][T16220] 0 pages in swap cache [ 855.463497][T16220] Free swap = 124996kB [ 855.474658][T16220] Total swap = 124996kB [ 855.478929][T16220] 2097051 pages RAM [ 855.482776][T16220] 0 pages HighMem/MovableOnly [ 855.499821][T16220] 416137 pages reserved [ 855.505186][T16220] 0 pages cma reserved [ 855.737385][T16252] FAULT_INJECTION: forcing a failure. [ 855.737385][T16252] name failslab, interval 1, probability 0, space 0, times 0 [ 855.778311][T16252] CPU: 1 PID: 16252 Comm: syz.2.3793 Not tainted 6.6.101-syzkaller #0 [ 855.786570][T16252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 855.796672][T16252] Call Trace: [ 855.800002][T16252] [ 855.802981][T16252] dump_stack_lvl+0x16c/0x230 [ 855.807710][T16252] ? show_regs_print_info+0x20/0x20 [ 855.812971][T16252] ? load_image+0x3b0/0x3b0 [ 855.817518][T16252] ? __lock_acquire+0x7c80/0x7c80 [ 855.822595][T16252] should_fail_ex+0x39d/0x4d0 [ 855.827331][T16252] should_failslab+0x9/0x20 [ 855.831876][T16252] slab_pre_alloc_hook+0x59/0x310 [ 855.836940][T16252] ? bpf_test_init+0xc0/0x150 [ 855.841654][T16252] ? bpf_test_init+0xc0/0x150 [ 855.846392][T16252] __kmem_cache_alloc_node+0x53/0x260 [ 855.851819][T16252] ? bpf_test_init+0xc0/0x150 [ 855.856540][T16252] __kmalloc+0xa4/0x240 [ 855.860740][T16252] bpf_test_init+0xc0/0x150 [ 855.865277][T16252] bpf_prog_test_run_xdp+0x382/0xfa0 [ 855.870626][T16252] ? dev_put+0x80/0x80 [ 855.874732][T16252] ? dev_put+0x80/0x80 [ 855.878831][T16252] bpf_prog_test_run+0x321/0x390 [ 855.883790][T16252] __sys_bpf+0x440/0x800 [ 855.888064][T16252] ? bpf_link_show_fdinfo+0x350/0x350 [ 855.893478][T16252] ? lock_chain_count+0x20/0x20 [ 855.898378][T16252] __x64_sys_bpf+0x7c/0x90 [ 855.902817][T16252] do_syscall_64+0x55/0xb0 [ 855.907276][T16252] ? clear_bhb_loop+0x40/0x90 [ 855.912001][T16252] ? clear_bhb_loop+0x40/0x90 [ 855.916830][T16252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 855.922768][T16252] RIP: 0033:0x7fe12178eb69 [ 855.927210][T16252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.946850][T16252] RSP: 002b:00007fe122549038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 855.955293][T16252] RAX: ffffffffffffffda RBX: 00007fe1219b5fa0 RCX: 00007fe12178eb69 [ 855.963309][T16252] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 855.971307][T16252] RBP: 00007fe122549090 R08: 0000000000000000 R09: 0000000000000000 [ 855.979317][T16252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.987327][T16252] R13: 0000000000000000 R14: 00007fe1219b5fa0 R15: 00007ffe5c1dfc18 [ 855.995336][T16252] [ 856.075110][T16257] wg2: left promiscuous mode [ 856.082293][T16257] wg2: left allmulticast mode [ 856.238165][T16257] wg2: entered promiscuous mode [ 856.243356][T16257] wg2: entered allmulticast mode [ 857.207586][ T5872] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.390817][ T5872] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.578443][ T5872] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.674073][ T5872] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.849978][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 858.860804][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 858.879356][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 858.903686][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 858.920126][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 858.939807][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 858.948300][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 858.967805][T16322] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 858.977157][T16322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 858.986497][T16322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 858.995241][T16322] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 859.002714][T16322] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 859.110486][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 859.121253][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 859.134382][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 859.153575][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 859.164350][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 859.174905][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 860.142472][T16314] chnl_net:caif_netlink_parms(): no params data found [ 860.365566][T16318] chnl_net:caif_netlink_parms(): no params data found [ 860.533374][T16350] netlink: 'syz.2.3820': attribute type 153 has an invalid length. [ 860.544619][T16350] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3820'. [ 860.983849][T16314] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.001452][T16314] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.013613][T16322] Bluetooth: hci0: command tx timeout [ 861.023758][T16314] bridge_slave_0: entered allmulticast mode [ 861.030839][T16314] bridge_slave_0: entered promiscuous mode [ 861.075164][T16314] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.082368][T16314] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.095905][T16322] Bluetooth: hci1: command tx timeout [ 861.114956][T16314] bridge_slave_1: entered allmulticast mode [ 861.132238][T16314] bridge_slave_1: entered promiscuous mode [ 861.151081][ T5872] hsr_slave_0: left promiscuous mode [ 861.157918][ T5872] hsr_slave_1: left promiscuous mode [ 861.164821][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.172355][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.181563][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.189167][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.198930][ T5872] team0: left allmulticast mode [ 861.204339][ T5872] team_slave_1: left allmulticast mode [ 861.210328][ T5872] team0: left promiscuous mode [ 861.215374][ T5872] C: left promiscuous mode [ 861.219967][ T5872] team_slave_1: left promiscuous mode [ 861.228986][ T5872] bridge0: port 3(team0) entered disabled state [ 861.238702][ T5872] bridge_slave_1: left allmulticast mode [ 861.244628][ T5872] bridge_slave_1: left promiscuous mode [ 861.251206][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.261738][ T5872] bridge_slave_0: left allmulticast mode [ 861.263814][T16322] Bluetooth: hci3: command tx timeout [ 861.267849][ T5872] bridge_slave_0: left promiscuous mode [ 861.278989][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.302427][ T5872] veth1_macvtap: left promiscuous mode [ 861.310371][ T5872] veth0_macvtap: left promiscuous mode [ 861.770155][ T5872] team0 (unregistering): Port device team_slave_1 removed [ 861.829613][ T5872] team0 (unregistering): Port device C removed [ 862.615006][T16318] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.622358][T16318] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.631053][T16318] bridge_slave_0: entered allmulticast mode [ 862.648680][T16318] bridge_slave_0: entered promiscuous mode [ 862.674643][T16314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.685801][T16324] chnl_net:caif_netlink_parms(): no params data found [ 862.707826][T16318] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.726085][T16318] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.737573][T16318] bridge_slave_1: entered allmulticast mode [ 862.760709][T16318] bridge_slave_1: entered promiscuous mode [ 862.804098][T16314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.859046][T16318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.976531][T16318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.987340][T16374] netlink: 'syz.2.3823': attribute type 10 has an invalid length. [ 863.094328][T16322] Bluetooth: hci0: command tx timeout [ 863.100545][T16314] team0: Port device team_slave_0 added [ 863.177002][T16314] team0: Port device team_slave_1 added [ 863.184542][T16322] Bluetooth: hci1: command tx timeout [ 863.235797][T16318] team0: Port device team_slave_0 added [ 863.308625][T16324] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.328573][T16324] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.342858][T16324] bridge_slave_0: entered allmulticast mode [ 863.343782][T16322] Bluetooth: hci3: command tx timeout [ 863.364582][T16324] bridge_slave_0: entered promiscuous mode [ 863.495178][T16318] team0: Port device team_slave_1 added [ 863.535814][T16324] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.548181][T16324] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.556144][T16324] bridge_slave_1: entered allmulticast mode [ 863.571969][T16324] bridge_slave_1: entered promiscuous mode [ 863.610025][T16314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.619858][T16314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.655269][T16314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.696078][T16314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.703085][T16314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.730319][T16314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.872417][T16318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.880171][T16318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.908723][T16318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.932007][T16397] netlink: 'syz.2.3826': attribute type 153 has an invalid length. [ 863.946306][T16318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.953360][T16318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.017178][T16397] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3826'. [ 864.033515][T16318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.078499][T16324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.149909][T16324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.203219][T16314] hsr_slave_0: entered promiscuous mode [ 864.214560][T16314] hsr_slave_1: entered promiscuous mode [ 864.283121][T16324] team0: Port device team_slave_0 added [ 864.298756][T16318] hsr_slave_0: entered promiscuous mode [ 864.306998][T16318] hsr_slave_1: entered promiscuous mode [ 864.321538][T16318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 864.329503][T16318] Cannot create hsr debugfs directory [ 864.341072][T16324] team0: Port device team_slave_1 added [ 864.542857][T16324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.557271][T16324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.610892][T16324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.626001][T16400] netlink: 'syz.2.3827': attribute type 153 has an invalid length. [ 864.639212][T16400] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3827'. [ 864.753080][T16324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.761387][T16324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.813893][T16324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.112586][T16324] hsr_slave_0: entered promiscuous mode [ 865.138528][T16324] hsr_slave_1: entered promiscuous mode [ 865.151170][T16324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 865.161011][T16324] Cannot create hsr debugfs directory [ 865.173596][T16322] Bluetooth: hci0: command tx timeout [ 865.256986][T16322] Bluetooth: hci1: command tx timeout [ 865.414682][T16322] Bluetooth: hci3: command tx timeout [ 865.626161][ T5872] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.747502][ T5872] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.789983][T16314] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 865.809940][T16314] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 865.831177][T16314] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 865.858359][ T5872] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.884978][T16314] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 865.950492][ T5872] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.046692][T16318] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 866.062117][T16318] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 866.083552][T16318] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 866.108269][T16318] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 866.349930][T16324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 866.429817][ T5872] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.455686][T16324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 866.511386][ T5872] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.534938][T16324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 866.555361][T16324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 866.641899][ T5872] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.747626][ T5872] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.781798][T16314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.895302][T16314] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.952223][T13199] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.959507][T13199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.003084][T13199] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.010415][T13199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.083765][T16318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.142639][T16324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.253921][T16322] Bluetooth: hci0: command tx timeout [ 867.266416][T16318] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.289075][T13203] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.296582][T13203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.342864][T16322] Bluetooth: hci1: command tx timeout [ 867.411921][T16324] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.460553][T13199] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.467949][T13199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.480111][T13199] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.487501][T13199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.497107][T16322] Bluetooth: hci3: command tx timeout [ 867.609612][T13209] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.617182][T13209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.899072][T16324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 868.066736][T16314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.734043][T16318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.959733][T16324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.185909][T16314] veth0_vlan: entered promiscuous mode [ 869.231617][T16314] veth1_vlan: entered promiscuous mode [ 869.456747][ T5872] hsr_slave_0: left promiscuous mode [ 869.472075][ T5872] hsr_slave_1: left promiscuous mode [ 869.482620][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.491592][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.516487][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.524310][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.545114][ T5872] bridge0: port 3(batadv0) entered disabled state [ 869.565612][ T5872] bridge_slave_1: left allmulticast mode [ 869.571387][ T5872] bridge_slave_1: left promiscuous mode [ 869.591770][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.602274][ T5872] bridge_slave_0: left allmulticast mode [ 869.616974][ T5872] bridge_slave_0: left promiscuous mode [ 869.622967][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.649474][ T5872] hsr_slave_0: left promiscuous mode [ 869.661377][ T5872] hsr_slave_1: left promiscuous mode [ 869.670652][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.687623][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.696503][ T5872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.711554][ T5872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.720308][ T5872] bridge0: port 3(batadv0) entered disabled state [ 869.745689][ T5872] bridge_slave_1: left allmulticast mode [ 869.751428][ T5872] bridge_slave_1: left promiscuous mode [ 869.757892][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.769058][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.829020][ T5872] veth0_macvtap: left promiscuous mode [ 869.844599][ T5872] veth1_macvtap: left allmulticast mode [ 869.850523][ T5872] veth1_macvtap: left promiscuous mode [ 869.865296][ T5872] veth0_macvtap: left promiscuous mode [ 870.541421][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.549584][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.597893][ T5872] team0 (unregistering): Port device team_slave_1 removed [ 870.652824][ T5872] team0 (unregistering): Port device C removed [ 871.639205][ T5872] team0 (unregistering): Port device team_slave_1 removed [ 871.696227][ T5872] team0 (unregistering): Port device team_slave_0 removed [ 872.332126][T16314] veth0_macvtap: entered promiscuous mode [ 872.396704][T16314] veth1_macvtap: entered promiscuous mode [ 872.523316][T16318] veth0_vlan: entered promiscuous mode [ 872.548042][T16314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.566553][T16314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.586730][T16314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.599324][T16324] veth0_vlan: entered promiscuous mode [ 872.619497][T16314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.642823][T16314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.658296][T16314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.671164][T16314] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.680847][T16314] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.690243][T16314] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.700354][T16314] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.777449][T16324] veth1_vlan: entered promiscuous mode [ 872.792516][T16318] veth1_vlan: entered promiscuous mode [ 872.948548][T16324] veth0_macvtap: entered promiscuous mode [ 872.987462][T16318] veth0_macvtap: entered promiscuous mode [ 873.024463][T16324] veth1_macvtap: entered promiscuous mode [ 873.034586][T13209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.042476][T13209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.103785][T16318] veth1_macvtap: entered promiscuous mode [ 873.125978][T13203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.139787][T13203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.155290][T16324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.166905][T16324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.179487][T16324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.190508][T16324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.208330][T16324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.220393][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.237904][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.248244][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.260589][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.271951][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 873.283201][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.295519][T16318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.330201][T16324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.352838][T16324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.363324][T16324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.379909][T16324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.416541][T16324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.428471][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.441384][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.451869][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.462782][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.472949][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 873.483968][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 873.498359][T16318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.527024][T16324] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.573934][T16324] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.582757][T16324] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.628670][T16324] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.653030][T16318] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.670389][T16318] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.679389][T16318] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.695730][T16318] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.753990][T16526] wg2: entered promiscuous mode [ 873.758934][T16526] wg2: entered allmulticast mode [ 873.992339][T13200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.016569][T13200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.091463][T13204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.108481][T13204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.237346][T13202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.288203][T13202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.365467][T13209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 874.373372][T13209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.051337][T16558] netlink: 207496 bytes leftover after parsing attributes in process `syz.6.3835'. [ 875.484490][T16574] FAULT_INJECTION: forcing a failure. [ 875.484490][T16574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.563580][T16574] CPU: 0 PID: 16574 Comm: syz.6.3840 Not tainted 6.6.101-syzkaller #0 [ 875.571834][T16574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 875.581935][T16574] Call Trace: [ 875.585252][T16574] [ 875.588215][T16574] dump_stack_lvl+0x16c/0x230 [ 875.592933][T16574] ? show_regs_print_info+0x20/0x20 [ 875.598156][T16574] ? load_image+0x3b0/0x3b0 [ 875.602691][T16574] ? __lock_acquire+0x7c80/0x7c80 [ 875.607749][T16574] ? snprintf+0xdb/0x120 [ 875.612016][T16574] should_fail_ex+0x39d/0x4d0 [ 875.616726][T16574] _copy_to_user+0x2f/0xa0 [ 875.621159][T16574] simple_read_from_buffer+0xe7/0x150 [ 875.626565][T16574] proc_fail_nth_read+0x1e3/0x250 [ 875.631620][T16574] ? proc_fault_inject_write+0x340/0x340 [ 875.637276][T16574] ? fsnotify_perm+0x271/0x5e0 [ 875.642064][T16574] ? proc_fault_inject_write+0x340/0x340 [ 875.647731][T16574] vfs_read+0x27e/0x920 [ 875.651921][T16574] ? kernel_read+0x1e0/0x1e0 [ 875.656532][T16574] ? __fget_files+0x28/0x4d0 [ 875.661151][T16574] ? __fget_files+0x44a/0x4d0 [ 875.665860][T16574] ? __fdget_pos+0x2a3/0x330 [ 875.670469][T16574] ? ksys_read+0x75/0x250 [ 875.674829][T16574] ksys_read+0x147/0x250 [ 875.679099][T16574] ? vfs_write+0x940/0x940 [ 875.683542][T16574] ? lockdep_hardirqs_on+0x98/0x150 [ 875.688769][T16574] do_syscall_64+0x55/0xb0 [ 875.693204][T16574] ? clear_bhb_loop+0x40/0x90 [ 875.697985][T16574] ? clear_bhb_loop+0x40/0x90 [ 875.702678][T16574] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 875.708607][T16574] RIP: 0033:0x7fdc1318d57c [ 875.713044][T16574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 875.732687][T16574] RSP: 002b:00007fdc140ea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 875.741130][T16574] RAX: ffffffffffffffda RBX: 00007fdc133b5fa0 RCX: 00007fdc1318d57c [ 875.749116][T16574] RDX: 000000000000000f RSI: 00007fdc140ea0a0 RDI: 0000000000000004 [ 875.757194][T16574] RBP: 00007fdc140ea090 R08: 0000000000000000 R09: 0000000000000000 [ 875.765188][T16574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.773186][T16574] R13: 0000000000000000 R14: 00007fdc133b5fa0 R15: 00007ffe990033b8 [ 875.781195][T16574] [ 876.984080][T16589] netlink: 'syz.6.3845': attribute type 153 has an invalid length. [ 877.032480][T16589] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3845'. [ 877.414681][T16605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 877.752984][T16617] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3852'. [ 877.805822][T16619] netlink: 'syz.4.3853': attribute type 39 has an invalid length. [ 878.195392][T16634] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3863'. [ 892.460921][T16322] Bluetooth: hci3: ACL packet too small [ 892.717307][T16688] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3870'. [ 892.873909][T16694] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3871'. [ 893.682643][T16710] wg2: entered promiscuous mode [ 893.752618][T16710] wg2: entered allmulticast mode [ 894.381888][T16719] wg2: left promiscuous mode [ 894.398173][T16719] wg2: left allmulticast mode [ 894.576552][T16729] wg2: entered promiscuous mode [ 894.589485][T16729] wg2: entered allmulticast mode [ 895.107576][T16741] netlink: 'syz.4.3879': attribute type 153 has an invalid length. [ 895.290520][T16741] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3879'. [ 895.379062][T16747] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3881'. [ 895.610299][T16751] wg2: entered promiscuous mode [ 895.626652][T16751] wg2: entered allmulticast mode [ 895.773314][T16763] netlink: 'syz.5.3885': attribute type 39 has an invalid length. [ 897.377089][T16796] wg2: left promiscuous mode [ 897.393935][T16796] wg2: left allmulticast mode [ 897.606029][T16798] wg2: entered promiscuous mode [ 897.613664][T16798] wg2: entered allmulticast mode [ 897.901377][T16803] netlink: 'syz.4.3892': attribute type 153 has an invalid length. [ 897.913707][T16803] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3892'. [ 898.276024][T16820] wg2: left promiscuous mode [ 898.306212][T16820] wg2: left allmulticast mode [ 898.375111][T16823] wg2: entered promiscuous mode [ 898.396151][T16823] wg2: entered allmulticast mode [ 898.806280][T16831] wg2: left promiscuous mode [ 898.823659][T16831] wg2: left allmulticast mode [ 898.859873][T16832] wg2: entered promiscuous mode [ 898.886930][T16832] wg2: entered allmulticast mode [ 899.177315][T16837] netlink: 'syz.4.3898': attribute type 39 has an invalid length. [ 899.767188][T16843] netlink: 'syz.6.3899': attribute type 10 has an invalid length. [ 899.791014][T16843] bond0: (slave bond_slave_0): Releasing backup interface [ 900.063717][T16849] netlink: 'syz.5.3910': attribute type 39 has an invalid length. [ 900.783555][T16860] netlink: 'syz.2.3904': attribute type 153 has an invalid length. [ 900.791695][T16860] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3904'. [ 901.148798][T16871] wg2: left promiscuous mode [ 901.196539][T16871] wg2: left allmulticast mode [ 901.281776][T16876] wg2: entered promiscuous mode [ 901.350835][T16876] wg2: entered allmulticast mode [ 901.626892][T16883] wg2: left promiscuous mode [ 901.631616][T16883] wg2: left allmulticast mode [ 901.673289][T16885] wg2: entered promiscuous mode [ 901.759335][T16885] wg2: entered allmulticast mode [ 902.686719][T16904] netlink: 'syz.6.3914': attribute type 2 has an invalid length. [ 902.720584][T16901] netlink: 'syz.2.3913': attribute type 10 has an invalid length. [ 902.756353][T16906] .6\bY4: renamed from lo (while UP) [ 903.163894][T16919] wg2: left promiscuous mode [ 903.179592][T16919] wg2: left allmulticast mode [ 903.221227][T16924] wg2: entered promiscuous mode [ 903.229835][T16924] wg2: entered allmulticast mode [ 903.761952][T16943] wg2: left promiscuous mode [ 903.783541][T16943] wg2: left allmulticast mode [ 903.810035][T16945] Q6\bY4: renamed from lo (while UP) [ 903.832125][T16945] FAULT_INJECTION: forcing a failure. [ 903.832125][T16945] name failslab, interval 1, probability 0, space 0, times 0 [ 903.873616][T16945] CPU: 0 PID: 16945 Comm: syz.6.3925 Not tainted 6.6.101-syzkaller #0 [ 903.881865][T16945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 903.891970][T16945] Call Trace: [ 903.895285][T16945] [ 903.898258][T16945] dump_stack_lvl+0x16c/0x230 [ 903.902990][T16945] ? show_regs_print_info+0x20/0x20 [ 903.908241][T16945] ? load_image+0x3b0/0x3b0 [ 903.912818][T16945] ? __lock_acquire+0x7c80/0x7c80 [ 903.917891][T16945] should_fail_ex+0x39d/0x4d0 [ 903.922618][T16945] should_failslab+0x9/0x20 [ 903.927146][T16945] slab_pre_alloc_hook+0x59/0x310 [ 903.932314][T16945] ? device_rename+0xb3/0x1e0 [ 903.937040][T16945] ? device_rename+0xb3/0x1e0 [ 903.941742][T16945] __kmem_cache_alloc_node+0x53/0x260 [ 903.947148][T16945] ? device_rename+0xb3/0x1e0 [ 903.951851][T16945] __kmalloc_node_track_caller+0xa2/0x230 [ 903.957609][T16945] kstrdup+0x3b/0x80 [ 903.961528][T16945] device_rename+0xb3/0x1e0 [ 903.966087][T16945] dev_change_name+0x2ee/0x8a0 [ 903.970920][T16945] ? dev_alloc_name+0x1c0/0x1c0 [ 903.975893][T16945] ? __mutex_lock+0x95d/0xcc0 [ 903.980604][T16945] ? __mutex_lock+0x4e8/0xcc0 [ 903.985313][T16945] dev_ifsioc+0x8c7/0xe20 [ 903.989662][T16945] ? dev_ioctl+0x1170/0x1170 [ 903.994265][T16945] ? bpf_lsm_capable+0x9/0x10 [ 903.998973][T16945] ? security_capable+0x89/0xb0 [ 904.003863][T16945] dev_ioctl+0x705/0x1170 [ 904.008304][T16945] sock_do_ioctl+0x226/0x2f0 [ 904.012922][T16945] ? sock_show_fdinfo+0xb0/0xb0 [ 904.017827][T16945] sock_ioctl+0x623/0x7a0 [ 904.022292][T16945] ? sock_poll+0x3d0/0x3d0 [ 904.026761][T16945] ? bpf_lsm_file_ioctl+0x9/0x10 [ 904.031743][T16945] ? security_file_ioctl+0x80/0xa0 [ 904.036898][T16945] ? sock_poll+0x3d0/0x3d0 [ 904.041345][T16945] __se_sys_ioctl+0xfd/0x170 [ 904.045964][T16945] do_syscall_64+0x55/0xb0 [ 904.050412][T16945] ? clear_bhb_loop+0x40/0x90 [ 904.055548][T16945] ? clear_bhb_loop+0x40/0x90 [ 904.060243][T16945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.066162][T16945] RIP: 0033:0x7fdc1318eb69 [ 904.070596][T16945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.090331][T16945] RSP: 002b:00007fdc140ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 904.098770][T16945] RAX: ffffffffffffffda RBX: 00007fdc133b5fa0 RCX: 00007fdc1318eb69 [ 904.106848][T16945] RDX: 0000200000000cc0 RSI: 0000000000008923 RDI: 0000000000000004 [ 904.114852][T16945] RBP: 00007fdc140ea090 R08: 0000000000000000 R09: 0000000000000000 [ 904.122837][T16945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.130828][T16945] R13: 0000000000000000 R14: 00007fdc133b5fa0 R15: 00007ffe990033b8 [ 904.138837][T16945] [ 904.256111][T16947] wg2: entered promiscuous mode [ 904.261163][T16947] wg2: entered allmulticast mode [ 904.749775][T16959] netlink: 'syz.4.3929': attribute type 10 has an invalid length. [ 904.810556][T16959] bond0: (slave bond_slave_0): Releasing backup interface [ 904.905037][T16960] sctp: [Deprecated]: syz.6.3927 (pid 16960) Use of struct sctp_assoc_value in delayed_ack socket option. [ 904.905037][T16960] Use struct sctp_sack_info instead [ 905.795708][T16992] netlink: 'syz.2.3936': attribute type 29 has an invalid length. [ 905.870448][T16992] netlink: 'syz.2.3936': attribute type 29 has an invalid length. [ 905.899837][T16993] netlink: 'syz.2.3936': attribute type 29 has an invalid length. [ 906.119371][T16992] syzkaller0: entered promiscuous mode [ 906.144175][T16992] syzkaller0: entered allmulticast mode [ 906.494591][T17006] wg2: left promiscuous mode [ 906.561282][T17006] wg2: left allmulticast mode [ 906.918186][T17008] wg2: entered promiscuous mode [ 906.953576][T17008] wg2: entered allmulticast mode [ 907.050754][T17050] FAULT_INJECTION: forcing a failure. [ 907.050754][T17050] name failslab, interval 1, probability 0, space 0, times 0 [ 907.148520][T17050] CPU: 1 PID: 17050 Comm: syz.5.3939 Not tainted 6.6.101-syzkaller #0 [ 907.156787][T17050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 907.166911][T17050] Call Trace: [ 907.170239][T17050] [ 907.173231][T17050] dump_stack_lvl+0x16c/0x230 [ 907.177979][T17050] ? show_regs_print_info+0x20/0x20 [ 907.183260][T17050] ? load_image+0x3b0/0x3b0 [ 907.187856][T17050] ? __might_sleep+0xe0/0xe0 [ 907.192513][T17050] ? __lock_acquire+0x7c80/0x7c80 [ 907.197613][T17050] should_fail_ex+0x39d/0x4d0 [ 907.202375][T17050] should_failslab+0x9/0x20 [ 907.206946][T17050] slab_pre_alloc_hook+0x59/0x310 [ 907.212056][T17050] kmem_cache_alloc+0x5a/0x2e0 [ 907.216891][T17050] ? sk_prot_alloc+0x57/0x210 [ 907.221640][T17050] sk_prot_alloc+0x57/0x210 [ 907.226216][T17050] ? sk_alloc+0x24/0x360 [ 907.230566][T17050] sk_alloc+0x3a/0x360 [ 907.234715][T17050] unix_create1+0xb0/0x790 [ 907.239223][T17050] unix_create+0x154/0x1f0 [ 907.243715][T17050] __sock_create+0x4a6/0x940 [ 907.248404][T17050] __sys_socketpair+0x1c1/0x550 [ 907.253349][T17050] __x64_sys_socketpair+0x9b/0xb0 [ 907.258450][T17050] do_syscall_64+0x55/0xb0 [ 907.262922][T17050] ? clear_bhb_loop+0x40/0x90 [ 907.267651][T17050] ? clear_bhb_loop+0x40/0x90 [ 907.272405][T17050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 907.278376][T17050] RIP: 0033:0x7f67c4b8eb69 [ 907.282856][T17050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.302797][T17050] RSP: 002b:00007f67c5a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 907.311400][T17050] RAX: ffffffffffffffda RBX: 00007f67c4db5fa0 RCX: 00007f67c4b8eb69 [ 907.319444][T17050] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 907.327485][T17050] RBP: 00007f67c5a07090 R08: 0000000000000000 R09: 0000000000000000 [ 907.335518][T17050] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 907.343555][T17050] R13: 0000000000000000 R14: 00007f67c4db5fa0 R15: 00007fff50d4d3c8 [ 907.351620][T17050] [ 907.786193][T17056] netlink: 'syz.6.3940': attribute type 153 has an invalid length. [ 907.851547][T17056] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.3940'. [ 911.247931][T17063] netlink: 'syz.4.3943': attribute type 10 has an invalid length. [ 911.411885][T17067] FAULT_INJECTION: forcing a failure. [ 911.411885][T17067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.434563][T17067] CPU: 0 PID: 17067 Comm: syz.2.3945 Not tainted 6.6.101-syzkaller #0 [ 911.442808][T17067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 911.452911][T17067] Call Trace: [ 911.456235][T17067] [ 911.459206][T17067] dump_stack_lvl+0x16c/0x230 [ 911.463944][T17067] ? show_regs_print_info+0x20/0x20 [ 911.469198][T17067] ? load_image+0x3b0/0x3b0 [ 911.473764][T17067] ? __lock_acquire+0x7c80/0x7c80 [ 911.478848][T17067] should_fail_ex+0x39d/0x4d0 [ 911.483589][T17067] _copy_from_user+0x2f/0xe0 [ 911.488235][T17067] __copy_msghdr+0x3bb/0x580 [ 911.492892][T17067] ___sys_sendmsg+0x1a6/0x290 [ 911.497626][T17067] ? __sys_sendmsg+0x270/0x270 [ 911.502466][T17067] ? __lock_acquire+0x7c80/0x7c80 [ 911.507566][T17067] __se_sys_sendmsg+0x1a5/0x270 [ 911.512473][T17067] ? __x64_sys_sendmsg+0x80/0x80 [ 911.517485][T17067] ? lockdep_hardirqs_on+0x98/0x150 [ 911.522740][T17067] do_syscall_64+0x55/0xb0 [ 911.527201][T17067] ? clear_bhb_loop+0x40/0x90 [ 911.531925][T17067] ? clear_bhb_loop+0x40/0x90 [ 911.536656][T17067] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.542584][T17067] RIP: 0033:0x7fe12178eb69 [ 911.547036][T17067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.566682][T17067] RSP: 002b:00007fe122549038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 911.575137][T17067] RAX: ffffffffffffffda RBX: 00007fe1219b5fa0 RCX: 00007fe12178eb69 [ 911.583136][T17067] RDX: 00000000240000c0 RSI: 00002000000003c0 RDI: 0000000000000003 [ 911.591126][T17067] RBP: 00007fe122549090 R08: 0000000000000000 R09: 0000000000000000 [ 911.599118][T17067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.607111][T17067] R13: 0000000000000000 R14: 00007fe1219b5fa0 R15: 00007ffe5c1dfc18 [ 911.615118][T17067] [ 912.040361][T17086] wg2: left promiscuous mode [ 912.063572][T17086] wg2: left allmulticast mode [ 912.105671][T17086] wg2: entered promiscuous mode [ 912.110610][T17086] wg2: entered allmulticast mode [ 912.140985][T17083] netlink: 'syz.2.3948': attribute type 39 has an invalid length. [ 912.879377][T17105] netlink: 'syz.6.3952': attribute type 1 has an invalid length. [ 912.921185][T17105] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.3952'. [ 913.015084][T17105] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3952'. [ 913.094149][T17111] netlink: 'syz.4.3954': attribute type 10 has an invalid length. [ 913.227404][T17112] netlink: 105120 bytes leftover after parsing attributes in process `syz.6.3952'. [ 913.254954][T17114] netlink: 'syz.2.3953': attribute type 153 has an invalid length. [ 913.262983][T17114] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3953'. [ 913.298420][T17112] netlink: 'syz.6.3952': attribute type 2 has an invalid length. [ 913.505790][T17105] netlink: 'syz.6.3952': attribute type 9 has an invalid length. [ 913.524348][T17105] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.3952'. [ 913.777970][T17120] wg2: left promiscuous mode [ 913.782867][T17120] wg2: left allmulticast mode [ 913.857316][T17122] FAULT_INJECTION: forcing a failure. [ 913.857316][T17122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 913.894382][T17120] wg2: entered promiscuous mode [ 913.917369][T17122] CPU: 1 PID: 17122 Comm: syz.5.3956 Not tainted 6.6.101-syzkaller #0 [ 913.925669][T17122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 913.935816][T17122] Call Trace: [ 913.939178][T17122] [ 913.941696][T17120] wg2: entered allmulticast mode [ 913.942330][T17122] dump_stack_lvl+0x16c/0x230 [ 913.952160][T17122] ? show_regs_print_info+0x20/0x20 [ 913.957496][T17122] ? load_image+0x3b0/0x3b0 [ 913.962405][T17122] ? __lock_acquire+0x7c80/0x7c80 [ 913.964701][T17124] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3957'. [ 913.967500][T17122] ? snprintf+0xdb/0x120 [ 913.980817][T17122] should_fail_ex+0x39d/0x4d0 [ 913.985602][T17122] _copy_to_user+0x2f/0xa0 [ 913.990097][T17122] simple_read_from_buffer+0xe7/0x150 [ 913.995555][T17122] proc_fail_nth_read+0x1e3/0x250 [ 914.000656][T17122] ? proc_fault_inject_write+0x340/0x340 [ 914.006603][T17122] ? fsnotify_perm+0x271/0x5e0 [ 914.011442][T17122] ? proc_fault_inject_write+0x340/0x340 [ 914.017143][T17122] vfs_read+0x27e/0x920 [ 914.021421][T17122] ? kernel_read+0x1e0/0x1e0 [ 914.026091][T17122] ? __fget_files+0x28/0x4d0 [ 914.030769][T17122] ? __fget_files+0x44a/0x4d0 [ 914.035545][T17122] ? __fdget_pos+0x2a3/0x330 [ 914.040194][T17122] ? ksys_read+0x75/0x250 [ 914.044771][T17122] ksys_read+0x147/0x250 [ 914.049120][T17122] ? vfs_write+0x940/0x940 [ 914.053631][T17122] ? lockdep_hardirqs_on+0x98/0x150 [ 914.058970][T17122] do_syscall_64+0x55/0xb0 [ 914.063468][T17122] ? clear_bhb_loop+0x40/0x90 [ 914.068209][T17122] ? clear_bhb_loop+0x40/0x90 [ 914.072948][T17122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 914.078904][T17122] RIP: 0033:0x7f67c4b8d57c [ 914.083380][T17122] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 914.103049][T17122] RSP: 002b:00007f67c5a07030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 914.111539][T17122] RAX: ffffffffffffffda RBX: 00007f67c4db5fa0 RCX: 00007f67c4b8d57c [ 914.119573][T17122] RDX: 000000000000000f RSI: 00007f67c5a070a0 RDI: 0000000000000007 [ 914.127615][T17122] RBP: 00007f67c5a07090 R08: 0000000000000000 R09: 0000000000000000 [ 914.135656][T17122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.143685][T17122] R13: 0000000000000000 R14: 00007f67c4db5fa0 R15: 00007fff50d4d3c8 [ 914.151782][T17122] [ 914.700424][T17137] wg2: left promiscuous mode [ 914.707043][T17137] wg2: left allmulticast mode [ 914.815470][T17137] wg2: entered promiscuous mode [ 914.821203][T17137] wg2: entered allmulticast mode [ 914.889555][T17144] netlink: 'syz.2.3961': attribute type 39 has an invalid length. [ 915.126309][T17149] netlink: 'syz.5.3963': attribute type 10 has an invalid length. [ 915.176237][T17149] bond0: (slave bond_slave_0): Releasing backup interface [ 915.733057][T17168] netlink: 'syz.5.3967': attribute type 21 has an invalid length. [ 915.782672][T17168] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3967'. [ 915.830575][T17168] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3967'. [ 916.015519][T17174] wg2: left promiscuous mode [ 916.023727][T17174] wg2: left allmulticast mode [ 916.124587][T17174] wg2: entered promiscuous mode [ 916.147915][T17174] wg2: entered allmulticast mode [ 916.871261][T17192] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3973'. [ 917.157335][T17201] validate_nla: 2 callbacks suppressed [ 917.157354][T17201] netlink: 'syz.5.3974': attribute type 39 has an invalid length. [ 917.247809][T17202] netlink: 'syz.4.3975': attribute type 10 has an invalid length. [ 917.271951][T17202] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3975'. [ 917.290908][T17204] netlink: 'syz.2.3976': attribute type 10 has an invalid length. [ 917.507799][T17214] netlink: 'syz.4.3977': attribute type 1 has an invalid length. [ 917.516978][T17212] wg2: left promiscuous mode [ 917.521666][T17212] wg2: left allmulticast mode [ 917.579298][T17212] wg2: entered promiscuous mode [ 917.594138][T17212] wg2: entered allmulticast mode [ 917.730414][T17214] netlink: 'syz.4.3977': attribute type 2 has an invalid length. [ 917.775306][T17223] netlink: 'syz.2.3979': attribute type 21 has an invalid length. [ 917.783306][T17223] netlink: 'syz.2.3979': attribute type 5 has an invalid length. [ 917.835721][T17214] netlink: 'syz.4.3977': attribute type 9 has an invalid length. [ 917.853630][T17223] netlink: 'syz.2.3979': attribute type 6 has an invalid length. [ 918.421060][T17237] wg2: left promiscuous mode [ 918.434317][T17237] wg2: left allmulticast mode [ 918.515422][T17240] wg2: entered promiscuous mode [ 918.538987][T17240] wg2: entered allmulticast mode [ 918.900422][T17247] netlink: 'syz.2.3988': attribute type 10 has an invalid length. [ 919.102229][T17252] __nla_validate_parse: 6 callbacks suppressed [ 919.102247][T17252] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3990'. [ 919.281396][T17262] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3991'. [ 919.316864][T17263] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3990'. [ 919.329158][T17262] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3991'. [ 919.895118][T17271] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3991'. [ 919.967086][T17275] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3991'. [ 931.998091][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.004695][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.256336][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 939.295907][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 939.306295][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 939.317490][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 939.333561][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 939.344381][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 939.821415][T16322] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 939.832056][T16322] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 939.841533][T16322] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 939.852886][T16322] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 939.886602][T16322] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 939.904347][T16322] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 940.174082][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 940.192324][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 940.201639][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 940.211836][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 940.225901][ T5837] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 940.234841][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 940.481602][T16322] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 940.496003][T16322] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 940.506017][T16322] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 940.527858][T16322] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 940.538050][T16322] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 940.546393][T16322] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 941.424125][ T5837] Bluetooth: hci4: command tx timeout [ 941.974407][ T5837] Bluetooth: hci5: command tx timeout [ 942.304264][ T5837] Bluetooth: hci6: command tx timeout [ 942.624048][ T5837] Bluetooth: hci7: command tx timeout [ 943.513755][ T5837] Bluetooth: hci4: command tx timeout [ 944.073710][ T5837] Bluetooth: hci5: command tx timeout [ 944.373998][ T5837] Bluetooth: hci6: command tx timeout [ 944.693934][ T5837] Bluetooth: hci7: command tx timeout [ 945.583530][ T5837] Bluetooth: hci4: command tx timeout [ 946.133714][ T5837] Bluetooth: hci5: command tx timeout [ 946.464914][ T5837] Bluetooth: hci6: command tx timeout [ 946.783899][ T5837] Bluetooth: hci7: command tx timeout [ 947.654250][ T5837] Bluetooth: hci4: command tx timeout [ 948.214209][ T5837] Bluetooth: hci5: command tx timeout [ 948.543629][ T5837] Bluetooth: hci6: command tx timeout [ 948.854016][ T5837] Bluetooth: hci7: command tx timeout [ 985.263886][T16319] Bluetooth: hci0: command 0x0406 tx timeout [ 985.270331][T16319] Bluetooth: hci1: command 0x0406 tx timeout [ 985.305046][T16319] Bluetooth: hci3: command 0x0406 tx timeout [ 993.442063][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.448726][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.814495][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 999.828464][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 999.838124][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 999.847982][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 999.857510][ T5842] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 999.865811][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1000.754634][T17305] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1000.771686][T17305] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1000.786234][T17305] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1000.799293][T17305] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1000.814583][T17305] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1000.822900][T17305] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1001.000588][T17308] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1001.014336][T17308] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1001.023319][T17308] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1001.036073][T17308] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1001.054071][T17308] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1001.063504][T17308] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1001.268485][T17311] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1001.285485][T17311] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1001.295780][T17311] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1001.307656][T17311] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1001.320537][T17311] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1001.328874][T17311] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1025.013400][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1025.020453][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17257 [ 1025.028369][ C1] rcu: (detected by 1, t=10502 jiffies, g=89697, q=2121 ncpus=2) [ 1025.036203][ C1] task:syz.4.3992 state:R running task stack:26632 pid:17257 ppid:16324 flags:0x0000400e [ 1025.047981][ C1] Call Trace: [ 1025.051296][ C1] [ 1025.054175][ C1] sched_show_task+0x481/0x5a0 [ 1025.059017][ C1] ? __ia32_sys_sched_rr_get_interval_time32+0x110/0x110 [ 1025.066104][ C1] ? wq_watchdog_touch+0xef/0x170 [ 1025.071274][ C1] print_other_cpu_stall+0xfa7/0x1340 [ 1025.076685][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 1025.082164][ C1] ? print_cpu_stall+0x5a0/0x5a0 [ 1025.087165][ C1] ? __bpf_trace_rcu_utilization+0xa2/0xe0 [ 1025.093051][ C1] ? perf_trace_rcu_stall_warning+0x2d0/0x2d0 [ 1025.099234][ C1] rcu_sched_clock_irq+0x87c/0x1220 [ 1025.104511][ C1] ? rcu_gp_set_torture_wait+0x10/0x10 [ 1025.110029][ C1] ? acct_account_cputime+0xd4/0x210 [ 1025.115383][ C1] update_process_times+0x147/0x1b0 [ 1025.120646][ C1] tick_sched_timer+0x3a2/0x580 [ 1025.125554][ C1] __hrtimer_run_queues+0x4df/0xc40 [ 1025.130797][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 1025.136397][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1025.141533][ C1] ? read_tsc+0x9/0x20 [ 1025.145653][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 1025.150688][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1025.156618][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 1025.162287][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1025.168323][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x96/0x120 [ 1025.174998][ C1] Code: 41 54 53 48 8b 54 24 20 65 4c 8b 05 34 1f 7e 7e 45 31 c9 eb 08 49 ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d 22 1f 7e 7e <41> 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 00 00 75 d9 41 83 b8 1c [ 1025.194660][ C1] RSP: 0018:ffffc900001f0470 EFLAGS: 00000216 [ 1025.200773][ C1] RAX: 0000000000000020 RBX: 000000eea7d3d8a2 RCX: 0000000000000005 [ 1025.208789][ C1] RDX: ffffffff81889a9d RSI: ffffffff8cd797a0 RDI: 0000000000000004 [ 1025.216783][ C1] RBP: 0000000000000004 R08: ffff8880582cbc00 R09: 000000000000000e [ 1025.224790][ C1] R10: 000000000000000e R11: 0000000000000105 R12: ffff88801ca693d0 [ 1025.232785][ C1] R13: f800000000000000 R14: 00000000000003c0 R15: 0000000000048fc4 [ 1025.241005][ C1] ? check_buffer+0x24d/0x950 [ 1025.245766][ C1] check_buffer+0x24d/0x950 [ 1025.250352][ C1] __rb_reserve_next+0x511/0xd50 [ 1025.255380][ C1] ring_buffer_lock_reserve+0xae1/0xed0 [ 1025.260976][ C1] ? mark_lock+0x94/0x320 [ 1025.265362][ C1] trace_event_buffer_lock_reserve+0x1d0/0x6e0 [ 1025.271673][ C1] trace_event_buffer_reserve+0x29b/0x3c0 [ 1025.277456][ C1] ? trace_event_ignore_this_pid+0x130/0x130 [ 1025.283587][ C1] trace_event_raw_event_bpf_trace_printk+0x101/0x210 [ 1025.290387][ C1] ? __probestub_bpf_trace_printk+0x10/0x10 [ 1025.296374][ C1] ? __asan_memcpy+0x40/0x70 [ 1025.301041][ C1] trace_bpf_trace_printk+0x142/0x1a0 [ 1025.306458][ C1] bpf_trace_printk+0x11f/0x190 [ 1025.311360][ C1] ? bpf_probe_write_user+0xe0/0xe0 [ 1025.316643][ C1] ? trace_call_bpf+0xc3/0x690 [ 1025.321469][ C1] ? trace_call_bpf+0x5ba/0x690 [ 1025.326367][ C1] ? verify_lock_unused+0x140/0x140 [ 1025.331624][ C1] bpf_prog_9e1c00255e17e72e+0x38/0x3a [ 1025.337119][ C1] bpf_trace_run1+0x1c9/0x3b0 [ 1025.341834][ C1] ? bpf_trace_run1+0xd6/0x3b0 [ 1025.346711][ C1] ? bpf_put_raw_tracepoint+0x60/0x60 [ 1025.352118][ C1] ? __bpf_trace_rcu_utilization+0x95/0xe0 [ 1025.357975][ C1] __bpf_trace_rcu_utilization+0xa2/0xe0 [ 1025.363728][ C1] ? perf_trace_rcu_stall_warning+0x2d0/0x2d0 [ 1025.369837][ C1] ? trace_event_raw_event_lock+0x230/0x230 [ 1025.375788][ C1] trace_rcu_utilization+0x179/0x1a0 [ 1025.381107][ C1] rcu_core+0x12d/0x1720 [ 1025.385400][ C1] ? try_to_wake_up+0x2d2/0x10b0 [ 1025.390376][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1025.395430][ C1] ? __rwlock_init+0x150/0x150 [ 1025.400262][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 1025.405497][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1025.410724][ C1] ? sched_clock+0x3f/0x60 [ 1025.415177][ C1] ? mark_lock+0x94/0x320 [ 1025.419553][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1025.425588][ C1] ? lock_chain_count+0x20/0x20 [ 1025.430461][ C1] ? try_to_wake_up+0x6f8/0x10b0 [ 1025.435469][ C1] handle_softirqs+0x280/0x820 [ 1025.440292][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1025.445096][ C1] ? do_softirq+0x180/0x180 [ 1025.449627][ C1] ? irq_work_single+0x199/0x230 [ 1025.454598][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1025.459920][ C1] __irq_exit_rcu+0xc7/0x190 [ 1025.464553][ C1] ? irq_exit_rcu+0x20/0x20 [ 1025.469124][ C1] ? rcu_is_watching+0x15/0xb0 [ 1025.473948][ C1] irq_exit_rcu+0x9/0x20 [ 1025.478212][ C1] sysvec_irq_work+0xa1/0xc0 [ 1025.482832][ C1] [ 1025.485786][ C1] [ 1025.488739][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 1025.493714][ C1] RIP: 0010:rcu_read_unlock_special+0x88/0x4c0 [ 1025.499904][ C1] Code: f1 f1 f1 00 f2 f2 f2 4a 89 04 2b 66 42 c7 44 2b 09 f3 f3 42 c6 44 2b 0b f3 65 44 8b 35 a9 4e 93 7e 41 f7 c6 00 00 f0 00 74 45 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 66 42 c7 44 2b [ 1025.519537][ C1] RSP: 0018:ffffc90003877c00 EFLAGS: 00000206 [ 1025.525636][ C1] RAX: c214ef79de630300 RBX: 1ffff9200070ef88 RCX: c214ef79de630300 [ 1025.533627][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6780 [ 1025.541632][ C1] RBP: ffffc90003877cf0 R08: ffffffff90da3537 R09: 1ffffffff21b46a6 [ 1025.549641][ C1] R10: dffffc0000000000 R11: fffffbfff21b46a7 R12: 0000000000000000 [ 1025.557634][ C1] R13: dffffc0000000000 R14: 0000000000000246 R15: ffffffff8cd354d8 [ 1025.565689][ C1] ? do_raw_spin_lock+0x121/0x2c0 [ 1025.570746][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1025.575715][ C1] ? __rwlock_init+0x150/0x150 [ 1025.580508][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1025.585922][ C1] __rcu_read_unlock+0x7c/0xd0 [ 1025.590737][ C1] rcu_read_unlock+0x85/0xa0 [ 1025.595351][ C1] ? dput+0x3b/0x1e0 [ 1025.599272][ C1] dput+0xe6/0x1e0 [ 1025.603024][ C1] __fput+0x5e5/0x970 [ 1025.607068][ C1] task_work_run+0x1ce/0x250 [ 1025.611696][ C1] ? task_work_cancel+0x240/0x240 [ 1025.616766][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1025.622268][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 1025.627584][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 1025.633166][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1025.638653][ C1] do_syscall_64+0x61/0xb0 [ 1025.643090][ C1] ? clear_bhb_loop+0x40/0x90 [ 1025.647791][ C1] ? clear_bhb_loop+0x40/0x90 [ 1025.652513][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1025.658439][ C1] RIP: 0033:0x7f80aeb8eb69 [ 1025.662881][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1025.682514][ C1] RSP: 002b:00007ffebb28b5b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1025.690956][ C1] RAX: 0000000000000000 RBX: 00007f80aedb7ba0 RCX: 00007f80aeb8eb69 [ 1025.698956][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1025.706948][ C1] RBP: 00007f80aedb7ba0 R08: 0000000000000194 R09: 00000016bb28b8af [ 1025.714957][ C1] R10: 00000000003ffc48 R11: 0000000000000246 R12: 00000000000e09bc [ 1025.722961][ C1] R13: 00007ffebb28b6b0 R14: ffffffffffffffff R15: 00007ffebb28b6d0 [ 1025.731010][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)