last executing test programs: 11.011390342s ago: executing program 2 (id=2314): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_netprio_ifpriomap(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0xb4, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x5f) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) close(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r6, 0x400454cd, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x90}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f0300000000dc798a45ffca1b1f0000008024c00e72f7b06552f24d058882bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb55320b3ac5fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 9.252434501s ago: executing program 2 (id=2321): socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x68}, 0x0) 8.928098695s ago: executing program 0 (id=2334): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_netprio_ifpriomap(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0xb4, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4e}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x5f) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) close(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x90}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f0300000000dc798a45ffca1b1f0000008024c00e72f7b06552f24d058882bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb55320b3ac5fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 8.567683478s ago: executing program 2 (id=2326): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x9, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x200}]}]}}, &(0x7f0000000140)=""/237, 0x52, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r4, 0x0) perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 7.642957018s ago: executing program 0 (id=2329): perf_event_open(&(0x7f00000019c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000400}, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d000000000000542ea271106142c7a3adf3f20f04b518edc98cf2d97089b9e93f7c70cbd8fa591efd6898fea05b0c53e5aaac6a3846b621cc2970aa259776ad43671dd3042cafe67eead651713b280ae9a44c2730cae2f409fdfd6131"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x27, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x33) r1 = socket$kcm(0x25, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40002020) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90324fc600b0002400a0000", 0x1b}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 7.035990835s ago: executing program 4 (id=2332): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_netprio_ifpriomap(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0xb4, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x5f) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) close(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r6, 0x400454cd, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x90}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f0300000000dc798a45ffca1b1f0000008024c00e72f7b06552f24d058882bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb55320b3ac5fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 6.491696861s ago: executing program 2 (id=2333): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r3 = socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0x44c04, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0xc8, 0x0, 0x5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8c4) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6971100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) setsockopt$sock_attach_bpf(r3, 0x10d, 0x10, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000021000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feffffff850000002d000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x801, 0x0, &(0x7f0000000100)) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x7, 0x0, 0x0, 0x9d6d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x10137f, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 6.489977761s ago: executing program 3 (id=2344): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x9, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x200}]}]}}, &(0x7f0000000140)=""/237, 0x52, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r4, 0x0) perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 6.128144104s ago: executing program 0 (id=2336): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x406) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x22) 5.961334906s ago: executing program 4 (id=2337): socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x68}, 0x0) 5.54280628s ago: executing program 4 (id=2338): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x50) socket$kcm(0xa, 0x3, 0x11) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040006000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.540933011s ago: executing program 3 (id=2339): r0 = socket$kcm(0x21, 0x5, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x61}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003600)={&(0x7f0000000000)=@phonet={0x23, 0x4, 0x3, 0x7f}, 0x80, 0x0, 0x0, &(0x7f00000024c0)=[{0x10, 0x10d, 0x8}], 0x10}, 0x800) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x4) 5.059385506s ago: executing program 0 (id=2340): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_netprio_ifpriomap(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0xb4, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x4e}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x5f) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) close(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x90}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f0300000000dc798a45ffca1b1f0000008024c00e72f7b06552f24d058882bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb55320b3ac5fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 5.034068686s ago: executing program 2 (id=2341): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3e, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x9a) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x10000, 0x80000000, 0x2, 0x0, r2, 0x9, '\x00', 0x0, r3, 0x2, 0x1, 0x5, 0x2}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 5.024861086s ago: executing program 3 (id=2342): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000700001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x5, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r6, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @loopback, 0x2}}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000004c0)="fd924496252b928e0d8a649ae7164f853397785c573551dcd1ac43b3b25fb17362f1c320c2febcbd09a0753774e103347003b49552051552942b91b5", 0x3c}, {&(0x7f0000000540)="63545bb27a849fb211553bdb1c9f851c88d5249a461ade504b4b1f966f3d48ec21da104e234f6b71a83b3347bbfa90fec62f436f38d29c0c6bca8d57a6f1edee932262db85d7241f9a6839bad2ba417c2d1bfa3a872cb2e0f2edd77e3943c8a6a5f64438412da92d1ebf92c43150752a9136a6bd4b578965444a197b67acec8b3f4267bae98a2c215633235409", 0x8d}, {&(0x7f0000000600)="93fea3082e9c5f4314b9c443684a1ec5b92a81a2f9fef8321ae7bbcf58872acdf93e9e7bab7b366d5892f0b6f6a392c3664c9c980b196f06bdf7943c9eb253267ab337bc563dd5bbdca8c37f250dd6174a757d28cfe9284a09c5c161c84a", 0x5e}, {&(0x7f00000007c0)="b15d86af457ab0ce07895d00a640fcbd258a40204abe09b8dec84f52ca90b486c4631640b47f6836c5f12150be896177683278817ed8a15f12c0e4faca1be6356fe154693ddaab9ae0d1bf1b5e6ccf3edd9fd1d59017d8def1a6fc2330635fd2e21b30a8af55df4ecb174c17b48c7cae57", 0x71}, {&(0x7f0000000880)="69a90200cb8c337026eaccff6e59c42795227f9b39be5716090679e4fc507b4cf695abc01e2b73a29aed2813efb68291df5f268608d168f85586530ef5280440977913019d051628a1fd48f04cfc4dad8a7ec0cb838b78921af874dce0396e4fad5a2943df1e61a2190caa57d95d41deb72fd0fbe17d996d55a963fa10bce81906cd48557cb0cf523bc3e17807c93b2d", 0x90}, {&(0x7f0000000940)="78fa03e4816ca640bbb7cfd745765198c6692dea3ae0df39ba5bdb7398ead145077235d5021d3bd5da59f599437c945f68b3361b6fab1f1ba57296eabb43effd2f0b6375f5d0a087764e7a5cab57a53b324d5977a8d0", 0x56}, {&(0x7f0000000a00)="1395a182a412a1b95954b5c10a49a85a506eb10741920ac863f99a15be02333e7503be3b4fa8003542c2ab12ee27e6e74cfe015c21631b1cc58bfd7ce9fb7d", 0x3f}, {&(0x7f0000000a80)}], 0x8}, 0x80) (async) perf_event_open$cgroup(&(0x7f0000001200)={0x1, 0x80, 0x4, 0xc8, 0x6, 0x2, 0x0, 0x40f, 0x80000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x6, 0x1}, 0xa00, 0xfffffffffffffffe, 0x1ff, 0x7, 0x9f3a, 0x9, 0x400, 0x0, 0xfffff4a7, 0x0, 0xd56}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) (async) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x480, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000a112e61b1444057cc0db1eb4696b49d2dd198c16027d43f01881d9621262f8de7d6a43d898aad61f4ad9d3d7d78cc8328388568b28b97a7734da123a61ff8068a1b03ef626499edbbd214a387b244536c693217d0b99f2658d454319fcfd1633c6e4420f6ad5241b05bee7db1acb98f2af5919e22a85cf0eed9e84e6d270872e0e61927607a8c111af979fbf8d29a9f1887f90d8a497d2f97e77b993a24e1dc4a1ebbc987f817dde0f399bcdbacf71d47127c5f7430c1a38407fe8c6d2950d9c"], &(0x7f00000009c0)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000073013500000000009500000000000000fc87e45434febf37a84d5ecc15e825c298da66f558545cd4c7444c609d364b8a66b27a7e9841edd43b6e341e957227e7da0542a2c9f72f2d037fe2f2d5c4"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000680)={r10}) (async) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) 4.7220831s ago: executing program 4 (id=2343): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_netprio_ifpriomap(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0xb4, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x46}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x5f) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) close(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x90}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f0300000000dc798a45ffca1b1f0000008024c00e72f7b06552f24d058882bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb55320b3ac5fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 4.64528905s ago: executing program 1 (id=2345): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfc, 0xfd, 0x0, 0x0, 0x1001, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x2, 0xffffffffffffff81, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3, 0x7000}, {0x34, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) 4.539392741s ago: executing program 3 (id=2346): perf_event_open(&(0x7f00000019c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000400}, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d000000000000542ea271106142c7a3adf3f20f04b518edc98cf2d97089b9e93f7c70cbd8fa591efd6898fea05b0c53e5aaac6a3846b621cc2970aa259776ad43671dd3042cafe67eead651713b280ae9a44c2730cae2f409fdfd6131"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x27, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x33) r1 = socket$kcm(0x25, 0x5, 0x0) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40002020) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0500000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000800000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x10, 0x2, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003d000b08d25a80648c7494f90324fc600b0002400a0000", 0x1b}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93924fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000200), &(0x7f0000000240)=r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) 4.369785763s ago: executing program 0 (id=2347): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES16=r1], 0xfe33) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x84000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) recvmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r0, 0x0, 0x12, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00'}, 0x30) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) 4.269320424s ago: executing program 1 (id=2348): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_netprio_ifpriomap(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0xb4, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x5f) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) close(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$TUNSETLINK(r6, 0x400454cd, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x90}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f0300000000dc798a45ffca1b1f0000008024c00e72f7b06552f24d058882bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb55320b3ac5fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 3.867085779s ago: executing program 4 (id=2349): socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x68}, 0x0) 3.584799941s ago: executing program 2 (id=2350): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x4, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="66596d18800a00000100000061118c000000000085000000c30000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0f0001000080000000000000120000000000000052dcb99fe9d8d6d5fef8746d0a7530b6c389609636a6fe76a782aa24c9381fd6068b9e75ed0ce98a2e77303e5b0c9d9c12b723fcdbac45bc7a10be370082372ab7447c41075a40560826a5f3229b5664a99a598fe951dbe9c1414191c9e62910baf9d48ad854c021c9d008001ea6b8e053686de5d93f7ad6e6da1076860c4638696cb5b6417c20f0aac6a7d2fcff0b022d48ad819163ad62ac7fa9697aa7df80db27551af882b123cd49e1f99e385f90d0b9556e84aebec77d0551150f08489b0d8fdb181b609f06bc3b431803b50668cd3600000000000030da332ff89a778bf09ed9cea630a2dddb1eb15fc5aa03e2f0e693f5e91c4fce08047bbcc252cfc00e97c4f0ccd70a570337c956acce6f8b0d2510bee625ec0c2b22cda79769174e40924124931d4b999f940f3c269e85b2052b2a13da8b3111", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000000000}, 0x10c002, 0xac59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)='.\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x39c}, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x2805, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0xa}, 0x126a0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 3.583951461s ago: executing program 3 (id=2360): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x80}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002200)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYBLOB="2fade3912e9b55a31b3c9e7c4156febd6818aabad9833bac9074f2ac1520dee0bd197c981d781af4f6b387d6e4c3427141ce500ca431147e7a6f1d929a73d69c0310d57f7e4396b95fb5ca10dea709dd84f130be70ed6c232064f979359fee6c064b10314dae7aeef1e8acdccf0382e77a7dd778e04bf1"], 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15c31, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xc}, 0x100240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe7d7}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x1f, 0x0, 0x19) 3.496321082s ago: executing program 4 (id=2351): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x9, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x200}]}]}}, &(0x7f0000000140)=""/237, 0x52, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r4, 0x0) perf_event_open(0x0, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) 3.406516804s ago: executing program 1 (id=2352): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r0, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000b00)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003504d25a806f8c6394f90924fc600d001141040005004700000037153e370400018000f00600d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={r1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x23}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, r0, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000007000000080000000b"], 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000007000000080000000b"], 0x50) r9 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1100000000000000000000000100000008000000000000001400000000000000000000000200000004000000000000001400000000000000000000000700000000000000000000001c000000000000000000000008000000", @ANYRES32], 0x68}, 0x0) (async) sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1100000000000000000000000100000008000000000000001400000000000000000000000200000004000000000000001400000000000000000000000700000000000000000000001c000000000000000000000008000000", @ANYRES32], 0x68}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r8, &(0x7f0000000280), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1a, 0x0, 0x598, 0x4, 0x50004, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1a, 0x0, 0x598, 0x4, 0x50004, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000980)={r2, &(0x7f00000003c0)="e2d1418f5b030ea33ee2a270cc4894b811ce70976f0f22696237ab875aeb8e99015d83d243b6d2831377a2c56cc164a51351f4f2b654245fec152c4e234363597929c4cf5c20abaa7f0f9f998d033bf8235d251c9a2361f7f63cbd6100733547c55eb7be261cc28dd3cd11440748692f05cd6d98330d979064", &(0x7f0000000940)=""/17}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000980)={r2, &(0x7f00000003c0)="e2d1418f5b030ea33ee2a270cc4894b811ce70976f0f22696237ab875aeb8e99015d83d243b6d2831377a2c56cc164a51351f4f2b654245fec152c4e234363597929c4cf5c20abaa7f0f9f998d033bf8235d251c9a2361f7f63cbd6100733547c55eb7be261cc28dd3cd11440748692f05cd6d98330d979064", &(0x7f0000000940)=""/17}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff60, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000540)='syzkaller\x00', 0x9, 0x14, &(0x7f00000005c0)=""/20, 0x41000, 0x0, '\x00', r3, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x1, 0x7fffffff, 0x7ff}, 0x10, 0xffffffffffffffff, r6, 0x2, &(0x7f00000008c0)=[r7, r8, r10], &(0x7f0000000900)=[{0x5, 0x2, 0x2, 0x2}, {0x1, 0x2, 0x4, 0x5}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="10000000040000000000000000009e5caaa17e245bb9fc58", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000c40)='syz1\x00', 0x200002, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000680)="240000002c006b6c1d0000007ea60852c8fb97eb00000000000000004010000000000000", 0x24}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@cgroup=r12, r11, 0x22, 0x32, r0}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r14}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 3.235527946s ago: executing program 3 (id=2353): r0 = socket$kcm(0x21, 0x5, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x61}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003600)={&(0x7f0000000000)=@phonet={0x23, 0x4, 0x3, 0x7f}, 0x80, 0x0, 0x0, &(0x7f00000024c0)=[{0x10, 0x10d, 0x8}], 0x10}, 0x800) setsockopt$sock_attach_bpf(r0, 0x110, 0x5, 0x0, 0x4) 3.231292306s ago: executing program 0 (id=2354): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r1 = socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0x44c04, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0xc8, 0x0, 0x5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8c4) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6971100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) setsockopt$sock_attach_bpf(r1, 0x10d, 0x10, &(0x7f0000000040), 0x4) 2.738965791s ago: executing program 1 (id=2355): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000221000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 719.379792ms ago: executing program 1 (id=2356): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x22e, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x1, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1fb, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a000}], 0x1, 0x0, 0x4100}, 0x80d1) close(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000880)={0x2, 0x4e1d, @remote}, 0x10, 0x0, 0x0, 0x0, 0x28}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) socket$kcm(0x10, 0x2, 0x0) 0s ago: executing program 1 (id=2357): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNGETVNETBE(r1, 0x800454df, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) openat$cgroup_netprio_ifpriomap(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0xb4, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x5, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x51}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x5f) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) close(0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x90}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f0300000000dc798a45ffca1b1f0000008024c00e72f7b06552f24d058882bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb55320b3ac5fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) kernel console output (not intermixed with test programs): '. [ 414.073544][ T5583] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.419'. [ 414.505690][ T5595] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.423'. [ 414.575179][ T5595] net_ratelimit: 948 callbacks suppressed [ 414.575218][ T5595] netlink: zone id is out of range [ 414.600954][ T5595] netlink: zone id is out of range [ 414.618355][ T5595] netlink: zone id is out of range [ 414.625674][ T5595] netlink: zone id is out of range [ 414.649711][ T5595] netlink: zone id is out of range [ 414.656057][ T5595] netlink: zone id is out of range [ 414.661753][ T5595] netlink: zone id is out of range [ 414.678650][ T5595] netlink: zone id is out of range [ 414.698782][ T5595] netlink: zone id is out of range [ 414.707784][ T5595] netlink: zone id is out of range [ 415.253958][ T5609] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.427'. [ 415.744495][ T5606] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.436'. [ 416.662861][ T5629] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.442'. [ 416.879535][ T5641] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.435'. [ 417.541186][ T5654] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.443'. [ 418.695592][ T5675] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.452'. [ 418.752256][ T5679] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.451'. [ 418.814531][ T5683] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.453'. [ 419.842065][ T5697] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.459'. [ 420.961036][ T5719] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.468'. [ 421.339507][ T5727] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.470'. [ 421.377430][ T5730] netlink: 54695 bytes leftover after parsing attributes in process `syz.1.472'. [ 421.405376][ T5727] net_ratelimit: 1906 callbacks suppressed [ 421.405415][ T5727] netlink: zone id is out of range [ 421.439141][ T5727] netlink: zone id is out of range [ 421.449168][ T5727] netlink: zone id is out of range [ 421.463153][ T5727] netlink: zone id is out of range [ 421.497390][ T5727] netlink: zone id is out of range [ 421.515394][ T5727] netlink: zone id is out of range [ 421.574393][ T5727] netlink: zone id is out of range [ 421.662134][ T5727] netlink: zone id is out of range [ 421.682838][ T5727] netlink: zone id is out of range [ 421.733508][ T5727] netlink: zone id is out of range [ 422.495280][ T5749] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.478'. [ 422.931931][ T5757] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.491'. [ 423.500499][ T5768] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.485'. [ 424.178688][ T4324] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 425.103665][ T5803] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.498'. [ 425.249120][ T5806] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.500'. [ 426.262982][ T4324] Bluetooth: hci0: command 0x2016 tx timeout [ 426.913526][ T5859] syz.0.522 uses obsolete (PF_INET,SOCK_PACKET) [ 426.937045][ T5859] device veth0_to_hsr entered promiscuous mode [ 427.505050][ T5875] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.529'. [ 427.527674][ T5875] net_ratelimit: 1427 callbacks suppressed [ 427.527714][ T5875] netlink: zone id is out of range [ 427.600023][ T5875] netlink: zone id is out of range [ 427.619162][ T5875] netlink: zone id is out of range [ 427.672474][ T5875] netlink: zone id is out of range [ 427.694692][ T5875] netlink: zone id is out of range [ 427.701537][ T5875] netlink: zone id is out of range [ 427.763255][ T5875] netlink: zone id is out of range [ 427.769674][ T5875] netlink: zone id is out of range [ 427.869670][ T5877] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.531'. [ 427.889356][ T5875] netlink: zone id is out of range [ 427.903091][ T5875] netlink: zone id is out of range [ 429.200265][ T4324] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 429.208380][ T4324] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 429.218017][ T4324] CPU: 0 PID: 4324 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 429.225600][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 429.235700][ T4324] Workqueue: hci0 hci_rx_work [ 429.240434][ T4324] Call Trace: [ 429.243754][ T4324] [ 429.246739][ T4324] dump_stack_lvl+0x188/0x24e [ 429.251512][ T4324] ? show_regs_print_info+0x12/0x12 [ 429.256781][ T4324] ? load_image+0x400/0x400 [ 429.261343][ T4324] sysfs_create_dir_ns+0x26a/0x290 [ 429.266502][ T4324] ? sysfs_warn_dup+0xa0/0xa0 [ 429.271222][ T4324] ? do_raw_spin_unlock+0x11d/0x230 [ 429.276458][ T4324] kobject_add_internal+0x61c/0xcc0 [ 429.281711][ T4324] kobject_add+0x160/0x230 [ 429.286256][ T4324] ? kobject_init+0x1d0/0x1d0 [ 429.291001][ T4324] ? klist_children_get+0x50/0x50 [ 429.296164][ T4324] ? get_device_parent+0x121/0x3f0 [ 429.301306][ T4324] device_add+0x483/0xfb0 [ 429.305667][ T4324] ? kmem_cache_free+0xf7/0x290 [ 429.310584][ T4324] hci_conn_add_sysfs+0xd1/0x1e0 [ 429.315565][ T4324] le_conn_complete_evt+0x1062/0x1670 [ 429.321007][ T4324] ? le_conn_complete_evt+0xe9/0x1670 [ 429.326428][ T4324] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 429.332795][ T4324] ? bt_info+0x180/0x180 [ 429.337078][ T4324] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 429.342764][ T4324] ? skb_pull_data+0xf7/0x200 [ 429.347572][ T4324] hci_le_enh_conn_complete_evt+0x185/0x460 [ 429.353616][ T4324] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 429.360193][ T4324] ? hci_remote_host_features_evt+0x270/0x270 [ 429.366298][ T4324] hci_event_packet+0x7b9/0x1280 [ 429.371349][ T4324] ? bis_list+0x280/0x280 [ 429.375727][ T4324] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 429.381658][ T4324] ? kcov_remote_start+0x4c7/0x7e0 [ 429.386802][ T4324] ? netdev_warn+0x3e/0x16c [ 429.391356][ T4324] ? hci_send_to_monitor+0x9c/0x4a0 [ 429.396600][ T4324] hci_rx_work+0x3eb/0xd40 [ 429.401158][ T4324] ? _raw_spin_unlock+0x40/0x40 [ 429.406077][ T4324] ? process_one_work+0x7b0/0x1160 [ 429.411327][ T4324] process_one_work+0x8a2/0x1160 [ 429.416322][ T4324] ? worker_detach_from_pool+0x240/0x240 [ 429.421991][ T4324] ? _raw_spin_lock_irq+0x86/0xf0 [ 429.427190][ T4324] ? _raw_spin_lock_irq+0xb7/0xf0 [ 429.432279][ T4324] ? _raw_spin_lock_irqsave+0x100/0x100 [ 429.437874][ T4324] ? kthread_data+0x4b/0xc0 [ 429.442444][ T4324] worker_thread+0xaa2/0x1270 [ 429.447214][ T4324] kthread+0x29d/0x330 [ 429.451316][ T4324] ? worker_clr_flags+0x1a0/0x1a0 [ 429.456373][ T4324] ? kthread_blkcg+0xd0/0xd0 [ 429.461133][ T4324] ret_from_fork+0x1f/0x30 [ 429.465598][ T4324] [ 429.486712][ T4324] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 429.500862][ T4324] Bluetooth: hci0: failed to register connection device [ 429.840033][ T5919] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.546'. [ 430.238298][ T5929] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.549'. [ 431.257095][ T5951] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.560'. [ 431.543263][ T4324] Bluetooth: hci0: command 0x2016 tx timeout [ 431.941222][ T5974] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.565'. [ 433.435949][ T6007] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.590'. [ 434.050343][ T6023] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.583'. [ 434.074062][ T6023] net_ratelimit: 1429 callbacks suppressed [ 434.074105][ T6023] netlink: zone id is out of range [ 434.123925][ T6023] netlink: zone id is out of range [ 434.132110][ T6023] netlink: zone id is out of range [ 434.158003][ T6023] netlink: zone id is out of range [ 434.180263][ T6023] netlink: zone id is out of range [ 434.254053][ T6023] netlink: zone id is out of range [ 434.260089][ T6023] netlink: zone id is out of range [ 434.320201][ T6023] netlink: zone id is out of range [ 434.374232][ T6023] netlink: zone id is out of range [ 434.380256][ T6023] netlink: zone id is out of range [ 435.469272][ T6048] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.598'. [ 436.217971][ T6069] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.605'. [ 436.875699][ T6096] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.612'. [ 438.881947][ T6128] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.625'. [ 439.053038][ T6138] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.628'. [ 439.172030][ T6128] net_ratelimit: 1429 callbacks suppressed [ 439.172076][ T6128] netlink: del zone limit has 4 unknown bytes [ 440.109637][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.116155][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.700319][ T6165] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.644'. [ 440.705388][ T6171] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.645'. [ 440.747988][ T6171] netlink: zone id is out of range [ 440.793782][ T6171] netlink: zone id is out of range [ 440.803695][ T6171] netlink: zone id is out of range [ 440.810209][ T6171] netlink: zone id is out of range [ 440.866236][ T6171] netlink: zone id is out of range [ 440.887859][ T6171] netlink: zone id is out of range [ 440.933223][ T6171] netlink: zone id is out of range [ 440.977642][ T6171] netlink: zone id is out of range [ 441.014525][ T6171] netlink: zone id is out of range [ 442.669588][ T4324] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 442.677459][ T4324] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 442.687466][ T4324] CPU: 0 PID: 4324 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 442.695322][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.706013][ T4324] Workqueue: hci0 hci_rx_work [ 442.711120][ T4324] Call Trace: [ 442.714812][ T4324] [ 442.717958][ T4324] dump_stack_lvl+0x188/0x24e [ 442.722737][ T4324] ? show_regs_print_info+0x12/0x12 [ 442.728035][ T4324] ? load_image+0x400/0x400 [ 442.732603][ T4324] sysfs_create_dir_ns+0x26a/0x290 [ 442.737759][ T4324] ? sysfs_warn_dup+0xa0/0xa0 [ 442.742478][ T4324] ? do_raw_spin_unlock+0x11d/0x230 [ 442.747808][ T4324] kobject_add_internal+0x61c/0xcc0 [ 442.753081][ T4324] kobject_add+0x160/0x230 [ 442.757551][ T4324] ? kobject_init+0x1d0/0x1d0 [ 442.762710][ T4324] ? klist_children_get+0x50/0x50 [ 442.767776][ T4324] ? get_device_parent+0x121/0x3f0 [ 442.772924][ T4324] device_add+0x483/0xfb0 [ 442.777370][ T4324] ? kmem_cache_free+0xf7/0x290 [ 442.782262][ T4324] hci_conn_add_sysfs+0xd1/0x1e0 [ 442.787242][ T4324] le_conn_complete_evt+0x1062/0x1670 [ 442.792656][ T4324] ? le_conn_complete_evt+0xe9/0x1670 [ 442.798171][ T4324] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 442.804446][ T4324] ? bt_info+0x180/0x180 [ 442.808817][ T4324] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 442.814492][ T4324] ? skb_pull_data+0xf7/0x200 [ 442.819386][ T4324] hci_le_enh_conn_complete_evt+0x185/0x460 [ 442.825336][ T4324] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 442.831877][ T4324] ? hci_remote_host_features_evt+0x270/0x270 [ 442.837993][ T4324] hci_event_packet+0x7b9/0x1280 [ 442.842984][ T4324] ? bis_list+0x280/0x280 [ 442.847363][ T4324] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 442.853347][ T4324] ? kcov_remote_start+0x4c7/0x7e0 [ 442.858557][ T4324] ? netdev_warn+0x3e/0x16c [ 442.863381][ T4324] ? hci_send_to_monitor+0x9c/0x4a0 [ 442.868640][ T4324] hci_rx_work+0x3eb/0xd40 [ 442.873194][ T4324] ? _raw_spin_unlock+0x40/0x40 [ 442.878115][ T4324] ? process_one_work+0x7b0/0x1160 [ 442.883263][ T4324] process_one_work+0x8a2/0x1160 [ 442.888253][ T4324] ? worker_detach_from_pool+0x240/0x240 [ 442.894006][ T4324] ? _raw_spin_lock_irq+0x86/0xf0 [ 442.899163][ T4324] ? _raw_spin_lock_irq+0xb7/0xf0 [ 442.904237][ T4324] ? _raw_spin_lock_irqsave+0x100/0x100 [ 442.909816][ T4324] ? kthread_data+0x4b/0xc0 [ 442.914390][ T4324] worker_thread+0xaa2/0x1270 [ 442.919181][ T4324] kthread+0x29d/0x330 [ 442.923294][ T4324] ? worker_clr_flags+0x1a0/0x1a0 [ 442.928457][ T4324] ? kthread_blkcg+0xd0/0xd0 [ 442.933100][ T4324] ret_from_fork+0x1f/0x30 [ 442.937605][ T4324] [ 442.955271][ T4324] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 442.968702][ T4324] Bluetooth: hci0: failed to register connection device [ 443.049083][ T6207] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.660'. [ 443.967496][ T6221] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.666'. [ 444.564738][ T6246] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.676'. [ 444.983046][ T4324] Bluetooth: hci0: command 0x2016 tx timeout [ 445.776507][ T6270] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.686'. [ 445.814587][ T6270] net_ratelimit: 951 callbacks suppressed [ 445.814625][ T6270] netlink: zone id is out of range [ 445.883506][ T6270] netlink: zone id is out of range [ 445.913486][ T6270] netlink: zone id is out of range [ 445.951209][ T6270] netlink: zone id is out of range [ 445.983330][ T6270] netlink: zone id is out of range [ 445.991643][ T6270] netlink: zone id is out of range [ 446.022740][ T6270] netlink: zone id is out of range [ 446.069318][ T6270] netlink: zone id is out of range [ 446.106444][ T6270] netlink: zone id is out of range [ 446.126526][ T6284] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.691'. [ 446.165924][ T6270] netlink: zone id is out of range [ 447.156375][ T6304] netlink: 'syz.3.698': attribute type 10 has an invalid length. [ 447.213604][ T6304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.251362][ T6304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.318919][ T6304] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 447.752069][ T6318] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.703'. [ 448.038556][ T6323] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.706'. [ 449.746607][ T6358] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.721'. [ 450.106771][ T6367] bridge0: port 3(batadv0) entered blocking state [ 450.153129][ T6367] bridge0: port 3(batadv0) entered disabled state [ 450.177304][ T6367] device batadv0 entered promiscuous mode [ 450.188016][ T6367] bridge0: port 3(batadv0) entered blocking state [ 450.195705][ T6367] bridge0: port 3(batadv0) entered forwarding state [ 450.683237][ T4339] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 450.692814][ T4339] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 451.805655][ T6405] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.737'. [ 453.486191][ T6456] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.755'. [ 455.157337][ T6491] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.771'. [ 457.092276][ T6542] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.788'. [ 458.495407][ T6583] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.804'. [ 460.158287][ T6618] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.819'. [ 461.850732][ T6662] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.836'. [ 463.340882][ T6704] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.852'. [ 464.235436][ T4324] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 464.244229][ T4324] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 464.253952][ T4324] CPU: 0 PID: 4324 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 464.261633][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 464.271834][ T4324] Workqueue: hci2 hci_rx_work [ 464.276565][ T4324] Call Trace: [ 464.279881][ T4324] [ 464.282935][ T4324] dump_stack_lvl+0x188/0x24e [ 464.287680][ T4324] ? show_regs_print_info+0x12/0x12 [ 464.292945][ T4324] ? load_image+0x400/0x400 [ 464.297519][ T4324] sysfs_create_dir_ns+0x26a/0x290 [ 464.302688][ T4324] ? sysfs_warn_dup+0xa0/0xa0 [ 464.307418][ T4324] ? do_raw_spin_unlock+0x11d/0x230 [ 464.312676][ T4324] kobject_add_internal+0x61c/0xcc0 [ 464.317947][ T4324] kobject_add+0x160/0x230 [ 464.322406][ T4324] ? kobject_init+0x1d0/0x1d0 [ 464.327110][ T4324] ? klist_children_get+0x50/0x50 [ 464.332148][ T4324] ? get_device_parent+0x121/0x3f0 [ 464.337285][ T4324] device_add+0x483/0xfb0 [ 464.341633][ T4324] ? kmem_cache_free+0xf7/0x290 [ 464.346601][ T4324] hci_conn_add_sysfs+0xd1/0x1e0 [ 464.351568][ T4324] le_conn_complete_evt+0x1062/0x1670 [ 464.356961][ T4324] ? le_conn_complete_evt+0xe9/0x1670 [ 464.362350][ T4324] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 464.368606][ T4324] ? bt_info+0x180/0x180 [ 464.372881][ T4324] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 464.378534][ T4324] ? skb_pull_data+0xf7/0x200 [ 464.383225][ T4324] hci_le_enh_conn_complete_evt+0x185/0x460 [ 464.389140][ T4324] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 464.395570][ T4324] ? hci_remote_host_features_evt+0x270/0x270 [ 464.401669][ T4324] hci_event_packet+0x7b9/0x1280 [ 464.406641][ T4324] ? bis_list+0x280/0x280 [ 464.411166][ T4324] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 464.417079][ T4324] ? kcov_remote_start+0x4c7/0x7e0 [ 464.422209][ T4324] ? netdev_warn+0x3e/0x16c [ 464.426736][ T4324] ? hci_send_to_monitor+0x9c/0x4a0 [ 464.431955][ T4324] hci_rx_work+0x3eb/0xd40 [ 464.436411][ T4324] ? _raw_spin_unlock+0x40/0x40 [ 464.441301][ T4324] ? process_one_work+0x7b0/0x1160 [ 464.446470][ T4324] process_one_work+0x8a2/0x1160 [ 464.451447][ T4324] ? worker_detach_from_pool+0x240/0x240 [ 464.457091][ T4324] ? _raw_spin_lock_irq+0x86/0xf0 [ 464.462148][ T4324] ? _raw_spin_lock_irq+0xb7/0xf0 [ 464.467190][ T4324] ? _raw_spin_lock_irqsave+0x100/0x100 [ 464.472768][ T4324] ? kthread_data+0x4b/0xc0 [ 464.477302][ T4324] worker_thread+0xaa2/0x1270 [ 464.482047][ T4324] kthread+0x29d/0x330 [ 464.486125][ T4324] ? worker_clr_flags+0x1a0/0x1a0 [ 464.491169][ T4324] ? kthread_blkcg+0xd0/0xd0 [ 464.495820][ T4324] ret_from_fork+0x1f/0x30 [ 464.500356][ T4324] [ 464.505845][ T4324] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 464.518987][ T4324] Bluetooth: hci2: failed to register connection device [ 464.772548][ T6738] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.869'. [ 465.699101][ T4324] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 465.707041][ T4324] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 465.721675][ T4324] CPU: 0 PID: 4324 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 465.729294][ T4324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 465.739371][ T4324] Workqueue: hci0 hci_rx_work [ 465.744076][ T4324] Call Trace: [ 465.747366][ T4324] [ 465.750411][ T4324] dump_stack_lvl+0x188/0x24e [ 465.755119][ T4324] ? show_regs_print_info+0x12/0x12 [ 465.760338][ T4324] ? load_image+0x400/0x400 [ 465.764875][ T4324] sysfs_create_dir_ns+0x26a/0x290 [ 465.770102][ T4324] ? sysfs_warn_dup+0xa0/0xa0 [ 465.774804][ T4324] ? do_raw_spin_unlock+0x11d/0x230 [ 465.780022][ T4324] kobject_add_internal+0x61c/0xcc0 [ 465.785243][ T4324] kobject_add+0x160/0x230 [ 465.789677][ T4324] ? kobject_init+0x1d0/0x1d0 [ 465.794376][ T4324] ? klist_children_get+0x50/0x50 [ 465.799415][ T4324] ? get_device_parent+0x121/0x3f0 [ 465.804544][ T4324] device_add+0x483/0xfb0 [ 465.808897][ T4324] ? kmem_cache_free+0xf7/0x290 [ 465.813773][ T4324] hci_conn_add_sysfs+0xd1/0x1e0 [ 465.818735][ T4324] le_conn_complete_evt+0x1062/0x1670 [ 465.824130][ T4324] ? le_conn_complete_evt+0xe9/0x1670 [ 465.829525][ T4324] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 465.835901][ T4324] ? bt_info+0x180/0x180 [ 465.840168][ T4324] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 465.845823][ T4324] ? skb_pull_data+0xf7/0x200 [ 465.850523][ T4324] hci_le_enh_conn_complete_evt+0x185/0x460 [ 465.856436][ T4324] ? hci_le_remote_conn_param_req_evt+0xce0/0xce0 [ 465.862875][ T4324] ? hci_remote_host_features_evt+0x270/0x270 [ 465.868969][ T4324] hci_event_packet+0x7b9/0x1280 [ 465.873939][ T4324] ? bis_list+0x280/0x280 [ 465.878284][ T4324] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 465.884212][ T4324] ? kcov_remote_start+0x4c7/0x7e0 [ 465.889341][ T4324] ? netdev_warn+0x3e/0x16c [ 465.893860][ T4324] ? hci_send_to_monitor+0x9c/0x4a0 [ 465.899076][ T4324] hci_rx_work+0x3eb/0xd40 [ 465.903508][ T4324] ? _raw_spin_unlock+0x40/0x40 [ 465.908552][ T4324] ? process_one_work+0x7b0/0x1160 [ 465.913678][ T4324] process_one_work+0x8a2/0x1160 [ 465.918649][ T4324] ? worker_detach_from_pool+0x240/0x240 [ 465.924385][ T4324] ? _raw_spin_lock_irq+0x86/0xf0 [ 465.929447][ T4324] ? _raw_spin_lock_irq+0xb7/0xf0 [ 465.934504][ T4324] ? _raw_spin_lock_irqsave+0x100/0x100 [ 465.940079][ T4324] ? kthread_data+0x4b/0xc0 [ 465.944614][ T4324] worker_thread+0xaa2/0x1270 [ 465.949359][ T4324] kthread+0x29d/0x330 [ 465.953452][ T4324] ? worker_clr_flags+0x1a0/0x1a0 [ 465.958493][ T4324] ? kthread_blkcg+0xd0/0xd0 [ 465.963097][ T4324] ret_from_fork+0x1f/0x30 [ 465.967545][ T4324] [ 465.974493][ T4324] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 465.987823][ T4324] Bluetooth: hci0: failed to register connection device [ 466.100743][ T6775] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.884'. [ 466.584029][ T4324] Bluetooth: hci2: command 0x2016 tx timeout [ 467.556474][ T6810] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.899'. [ 467.783457][ T4326] Bluetooth: hci3: command 0x0406 tx timeout [ 467.785908][ T4324] Bluetooth: hci4: command 0x0406 tx timeout [ 467.789515][ T4318] Bluetooth: hci1: command 0x0406 tx timeout [ 467.929140][ T6820] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.902'. [ 468.025709][ T4324] Bluetooth: hci0: command 0x2016 tx timeout [ 468.663490][ T4324] Bluetooth: hci2: command 0x0406 tx timeout [ 469.064617][ T6852] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.915'. [ 469.975896][ T6874] netlink: 17023 bytes leftover after parsing attributes in process `syz.4.922'. [ 470.133087][ T4318] Bluetooth: hci0: command 0x0406 tx timeout [ 470.522153][ T6894] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.930'. [ 470.780587][ T6896] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.941'. [ 472.013622][ T6923] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.938'. [ 472.700137][ T6941] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.945'. [ 472.943743][ T6940] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.947'. [ 473.348893][ T6951] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.960'. [ 474.795419][ T6977] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.959'. [ 474.984737][ T6985] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.963'. [ 475.708581][ T6998] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.967'. [ 476.567439][ T7013] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.981'. [ 478.461299][ T7042] netlink: 17023 bytes leftover after parsing attributes in process `syz.0.978'. [ 479.255934][ T7060] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.984'. [ 479.799764][ T7069] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.987'. [ 481.386854][ T7104] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.999'. [ 483.102210][ T7128] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.1005'. [ 483.826499][ T7143] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1011'. [ 484.113953][ T7147] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1013'. [ 485.894731][ T7186] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1026'. [ 488.306958][ T7227] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1045'. [ 488.510783][ T7231] netlink: 64799 bytes leftover after parsing attributes in process `syz.2.1046'. [ 491.132086][ T7286] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1061'. [ 491.398340][ T7288] netlink: 64799 bytes leftover after parsing attributes in process `syz.1.1063'. [ 492.192917][ T7301] netlink: 64799 bytes leftover after parsing attributes in process `syz.1.1079'. [ 495.488535][ T7367] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1092'. [ 495.503898][ T7367] net_ratelimit: 950 callbacks suppressed [ 495.503934][ T7367] netlink: zone id is out of range [ 495.543462][ T7367] netlink: zone id is out of range [ 495.550098][ T7367] netlink: zone id is out of range [ 495.561532][ T7367] netlink: zone id is out of range [ 495.570000][ T7367] netlink: zone id is out of range [ 495.582784][ T7367] netlink: zone id is out of range [ 495.589083][ T7367] netlink: zone id is out of range [ 495.601555][ T7367] netlink: zone id is out of range [ 495.608353][ T7367] netlink: zone id is out of range [ 495.615126][ T7367] netlink: zone id is out of range [ 499.405639][ T7429] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1108'. [ 499.924576][ T7439] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.1111'. [ 500.744512][ T7469] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1121'. [ 501.545395][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.551761][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.726855][ T7489] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.1129'. [ 502.427245][ T7510] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1135'. [ 503.842531][ T7530] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.1143'. [ 506.275389][ T7587] netlink: 24959 bytes leftover after parsing attributes in process `syz.2.1161'. [ 509.323092][ T7645] netlink: 54695 bytes leftover after parsing attributes in process `syz.1.1180'. [ 509.879029][ T7654] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.1185'. [ 510.330420][ T7663] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1189'. [ 510.899270][ T7674] netlink: 64799 bytes leftover after parsing attributes in process `syz.1.1193'. [ 511.011809][ T7678] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.1195'. [ 512.315079][ T7705] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1204'. [ 513.221891][ T7721] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.1210'. [ 513.623320][ T7725] netlink: 64799 bytes leftover after parsing attributes in process `syz.4.1213'. [ 515.137893][ T7766] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1220'. [ 516.366484][ T7779] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.1225'. [ 516.553931][ T7784] netlink: 17023 bytes leftover after parsing attributes in process `syz.4.1228'. [ 517.434896][ T7798] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.1233'. [ 517.771267][ T7807] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1236'. [ 518.167445][ T7821] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.1240'. [ 520.642650][ T7855] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1252'. [ 521.084183][ T7867] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.1256'. [ 523.358251][ T7907] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1268'. [ 524.445067][ T7921] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.1272'. [ 525.876286][ T7954] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1283'. [ 526.398269][ T7968] netlink: 54695 bytes leftover after parsing attributes in process `syz.1.1287'. [ 527.687952][ T7997] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1298'. [ 527.760407][ T8003] FAULT_INJECTION: forcing a failure. [ 527.760407][ T8003] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 527.959691][ T8003] CPU: 0 PID: 8003 Comm: syz.3.1300 Not tainted syzkaller #0 [ 527.967256][ T8003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.977368][ T8003] Call Trace: [ 527.980671][ T8003] [ 527.983623][ T8003] dump_stack_lvl+0x188/0x24e [ 527.988371][ T8003] ? show_regs_print_info+0x12/0x12 [ 527.993657][ T8003] ? load_image+0x400/0x400 [ 527.998240][ T8003] ? __lock_acquire+0x7d10/0x7d10 [ 528.003302][ T8003] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 528.009319][ T8003] should_fail_ex+0x399/0x4d0 [ 528.014030][ T8003] _copy_from_user+0x2c/0x170 [ 528.018739][ T8003] ___sys_sendmsg+0x1c3/0x360 [ 528.023454][ T8003] ? __sys_sendmsg+0x290/0x290 [ 528.028288][ T8003] ? __lock_acquire+0x7d10/0x7d10 [ 528.033378][ T8003] __se_sys_sendmsg+0x1bb/0x2a0 [ 528.038451][ T8003] ? __x64_sys_sendmsg+0x80/0x80 [ 528.043439][ T8003] ? lockdep_hardirqs_on+0x94/0x140 [ 528.048662][ T8003] do_syscall_64+0x4c/0xa0 [ 528.053125][ T8003] ? clear_bhb_loop+0x60/0xb0 [ 528.057825][ T8003] ? clear_bhb_loop+0x60/0xb0 [ 528.062529][ T8003] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 528.068443][ T8003] RIP: 0033:0x7f021c39cdd9 [ 528.072969][ T8003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.092708][ T8003] RSP: 002b:00007f021d1a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.101151][ T8003] RAX: ffffffffffffffda RBX: 00007f021c615fa0 RCX: 00007f021c39cdd9 [ 528.109145][ T8003] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 528.117154][ T8003] RBP: 00007f021d1a4090 R08: 0000000000000000 R09: 0000000000000000 [ 528.125176][ T8003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.133218][ T8003] R13: 00007f021c616038 R14: 00007f021c615fa0 R15: 00007ffddc587a78 [ 528.141237][ T8003] [ 528.768635][ T8013] netlink: 54695 bytes leftover after parsing attributes in process `syz.1.1304'. [ 529.573948][ T8033] netlink: 'syz.0.1311': attribute type 21 has an invalid length. [ 529.610899][ T8033] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1311'. [ 530.127248][ T8041] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1314'. [ 530.201414][ T8045] FAULT_INJECTION: forcing a failure. [ 530.201414][ T8045] name failslab, interval 1, probability 0, space 0, times 1 [ 530.225998][ T8045] CPU: 0 PID: 8045 Comm: syz.0.1315 Not tainted syzkaller #0 [ 530.233463][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.243559][ T8045] Call Trace: [ 530.246865][ T8045] [ 530.249833][ T8045] dump_stack_lvl+0x188/0x24e [ 530.254661][ T8045] ? show_regs_print_info+0x12/0x12 [ 530.259912][ T8045] ? load_image+0x400/0x400 [ 530.264442][ T8045] ? __might_sleep+0xd0/0xd0 [ 530.269054][ T8045] ? __lock_acquire+0x7d10/0x7d10 [ 530.274115][ T8045] should_fail_ex+0x399/0x4d0 [ 530.278805][ T8045] should_failslab+0x5/0x20 [ 530.283447][ T8045] slab_pre_alloc_hook+0x59/0x310 [ 530.288513][ T8045] ? tomoyo_encode+0x27e/0x540 [ 530.293488][ T8045] __kmem_cache_alloc_node+0x4f/0x260 [ 530.298879][ T8045] ? tomoyo_encode+0x27e/0x540 [ 530.303661][ T8045] __kmalloc+0xa0/0x240 [ 530.307837][ T8045] tomoyo_encode+0x27e/0x540 [ 530.312451][ T8045] tomoyo_realpath_from_path+0x58e/0x5d0 [ 530.318110][ T8045] ? tomoyo_path_number_perm+0x205/0x650 [ 530.323761][ T8045] tomoyo_path_number_perm+0x22f/0x650 [ 530.329239][ T8045] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 530.334801][ T8045] ? ktime_get+0x7b/0x270 [ 530.339144][ T8045] ? ktime_get+0x7b/0x270 [ 530.343488][ T8045] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 530.349792][ T8045] ? __fget_files+0x28/0x4b0 [ 530.354440][ T8045] ? __fget_files+0x28/0x4b0 [ 530.359080][ T8045] security_file_ioctl+0x6c/0xa0 [ 530.364051][ T8045] __se_sys_ioctl+0x48/0x170 [ 530.368666][ T8045] do_syscall_64+0x4c/0xa0 [ 530.373104][ T8045] ? clear_bhb_loop+0x60/0xb0 [ 530.377799][ T8045] ? clear_bhb_loop+0x60/0xb0 [ 530.382491][ T8045] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.388421][ T8045] RIP: 0033:0x7fc6a239cdd9 [ 530.392874][ T8045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.412527][ T8045] RSP: 002b:00007fc6a3342028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.420977][ T8045] RAX: ffffffffffffffda RBX: 00007fc6a2615fa0 RCX: 00007fc6a239cdd9 [ 530.428966][ T8045] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000011 [ 530.436952][ T8045] RBP: 00007fc6a3342090 R08: 0000000000000000 R09: 0000000000000000 [ 530.444939][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.452922][ T8045] R13: 00007fc6a2616038 R14: 00007fc6a2615fa0 R15: 00007ffd4e6a3cc8 [ 530.460921][ T8045] [ 530.523541][ T8045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.036265][ T8078] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.1325'. [ 532.487406][ T8084] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1327'. [ 534.508604][ T8120] netlink: 24959 bytes leftover after parsing attributes in process `syz.2.1340'. [ 537.994222][ T8185] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1359'. [ 540.451653][ T8227] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1372'. [ 542.340694][ T8258] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.1383'. [ 542.911188][ T8267] netlink: 7527 bytes leftover after parsing attributes in process `syz.4.1386'. [ 543.335950][ T8270] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1388'. [ 547.030361][ T8307] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.1397'. [ 548.240648][ T8335] netlink: 'syz.1.1404': attribute type 2 has an invalid length. [ 548.313765][ T8318] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1403'. [ 548.360193][ T8335] device 0 entered promiscuous mode [ 548.862434][ T8349] FAULT_INJECTION: forcing a failure. [ 548.862434][ T8349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.890138][ T8349] CPU: 0 PID: 8349 Comm: syz.4.1408 Not tainted syzkaller #0 [ 548.897604][ T8349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 548.907692][ T8349] Call Trace: [ 548.910987][ T8349] [ 548.913964][ T8349] dump_stack_lvl+0x188/0x24e [ 548.919107][ T8349] ? show_regs_print_info+0x12/0x12 [ 548.924332][ T8349] ? load_image+0x400/0x400 [ 548.928859][ T8349] ? __lock_acquire+0x7d10/0x7d10 [ 548.933951][ T8349] ? perf_trace_lock_acquire+0x100/0x3e0 [ 548.939602][ T8349] should_fail_ex+0x399/0x4d0 [ 548.944297][ T8349] _copy_from_user+0x2c/0x170 [ 548.948995][ T8349] kstrtouint_from_user+0xda/0x170 [ 548.954131][ T8349] ? kstrtol_from_user+0x190/0x190 [ 548.959280][ T8349] proc_fail_nth_write+0x8b/0x200 [ 548.964325][ T8349] ? proc_fail_nth_read+0x220/0x220 [ 548.969539][ T8349] ? common_file_perm+0x171/0x1c0 [ 548.974582][ T8349] ? proc_fail_nth_read+0x220/0x220 [ 548.979804][ T8349] vfs_write+0x2e6/0xa30 [ 548.984096][ T8349] ? file_end_write+0x250/0x250 [ 548.988970][ T8349] ? __fget_files+0x28/0x4b0 [ 548.993575][ T8349] ? __fget_files+0x28/0x4b0 [ 548.998182][ T8349] ? __fget_files+0x43d/0x4b0 [ 549.002906][ T8349] ? __fdget_pos+0x2ae/0x360 [ 549.007509][ T8349] ? ksys_write+0x71/0x250 [ 549.011947][ T8349] ksys_write+0x14c/0x250 [ 549.016300][ T8349] ? __ia32_sys_read+0x80/0x80 [ 549.021114][ T8349] ? lockdep_hardirqs_on+0x94/0x140 [ 549.026332][ T8349] do_syscall_64+0x4c/0xa0 [ 549.030763][ T8349] ? clear_bhb_loop+0x60/0xb0 [ 549.035715][ T8349] ? clear_bhb_loop+0x60/0xb0 [ 549.040412][ T8349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.046321][ T8349] RIP: 0033:0x7f32f055d60e [ 549.050754][ T8349] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 549.070371][ T8349] RSP: 002b:00007f32ee7d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 549.078805][ T8349] RAX: ffffffffffffffda RBX: 00007f32ee7d56c0 RCX: 00007f32f055d60e [ 549.086791][ T8349] RDX: 0000000000000001 RSI: 00007f32ee7d50a0 RDI: 0000000000000005 [ 549.094777][ T8349] RBP: 00007f32ee7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 549.102761][ T8349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.110748][ T8349] R13: 00007f32f0816128 R14: 00007f32f0816090 R15: 00007ffdacde3578 [ 549.118861][ T8349] [ 551.938712][ T8355] netlink: 'syz.1.1411': attribute type 1 has an invalid length. [ 551.954039][ T8355] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1411'. [ 552.380076][ T8379] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1419'. [ 552.380291][ T8377] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1418'. [ 553.396863][ T8400] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1427'. [ 553.615043][ T8402] netlink: 7527 bytes leftover after parsing attributes in process `syz.4.1426'. [ 554.940424][ T8409] netlink: 'syz.2.1429': attribute type 1 has an invalid length. [ 554.992995][ T8409] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1429'. [ 555.773070][ T8431] netlink: 'syz.2.1434': attribute type 4 has an invalid length. [ 555.814158][ T8431] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1434'. [ 558.940067][ T8437] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1436'. [ 558.951047][ T8446] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1440'. [ 559.166826][ T8464] netlink: 'syz.1.1443': attribute type 6 has an invalid length. [ 559.225336][ T8464] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1443'. [ 559.254722][ T8470] netlink: 'syz.4.1445': attribute type 1 has an invalid length. [ 559.308416][ T8470] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1445'. [ 559.775021][ T8485] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1447'. [ 559.870119][ T8485] net_ratelimit: 948 callbacks suppressed [ 559.870137][ T8485] openvswitch: netlink: Message has 6 unknown bytes. [ 560.379145][ T8476] syz.2.1447 (8476) used greatest stack depth: 15768 bytes left [ 560.614381][ T8497] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1453'. [ 560.680690][ T8500] netlink: 'syz.0.1456': attribute type 16 has an invalid length. [ 560.694204][ T8500] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1456'. [ 560.987117][ T8502] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1455'. [ 561.015958][ T8502] netlink: zone id is out of range [ 561.049317][ T8502] netlink: zone id is out of range [ 561.168348][ T8502] netlink: zone id is out of range [ 561.191990][ T8502] netlink: zone id is out of range [ 561.348705][ T8502] netlink: zone id is out of range [ 561.454586][ T8502] netlink: zone id is out of range [ 561.537268][ T8515] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1459'. [ 561.562500][ T8502] netlink: zone id is out of range [ 561.618045][ T8502] netlink: zone id is out of range [ 561.635887][ T8502] netlink: zone id is out of range [ 561.722954][ T8507] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1457'. [ 562.986174][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.992583][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.159062][ T8549] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1469'. [ 565.585350][ T8564] FAULT_INJECTION: forcing a failure. [ 565.585350][ T8564] name failslab, interval 1, probability 0, space 0, times 0 [ 565.743069][ T8564] CPU: 0 PID: 8564 Comm: syz.3.1470 Not tainted syzkaller #0 [ 565.750530][ T8564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 565.760713][ T8564] Call Trace: [ 565.764018][ T8564] [ 565.766969][ T8564] dump_stack_lvl+0x188/0x24e [ 565.771784][ T8564] ? show_regs_print_info+0x12/0x12 [ 565.777206][ T8564] ? load_image+0x400/0x400 [ 565.781742][ T8564] ? __might_sleep+0xd0/0xd0 [ 565.786348][ T8564] ? __lock_acquire+0x7d10/0x7d10 [ 565.791396][ T8564] should_fail_ex+0x399/0x4d0 [ 565.796091][ T8564] should_failslab+0x5/0x20 [ 565.800606][ T8564] slab_pre_alloc_hook+0x59/0x310 [ 565.805654][ T8564] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 565.811403][ T8564] __kmem_cache_alloc_node+0x4f/0x260 [ 565.816796][ T8564] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 565.822532][ T8564] __kmalloc+0xa0/0x240 [ 565.826710][ T8564] tomoyo_realpath_from_path+0xdf/0x5d0 [ 565.832312][ T8564] ? tomoyo_path_number_perm+0x205/0x650 [ 565.837998][ T8564] tomoyo_path_number_perm+0x22f/0x650 [ 565.843578][ T8564] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 565.849078][ T8564] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 565.855085][ T8564] ? rcu_read_unlock_special+0xf9/0x510 [ 565.860669][ T8564] ? __fget_files+0x28/0x4b0 [ 565.865287][ T8564] ? __fget_files+0x28/0x4b0 [ 565.869906][ T8564] security_file_ioctl+0x6c/0xa0 [ 565.874869][ T8564] __se_sys_ioctl+0x48/0x170 [ 565.879480][ T8564] do_syscall_64+0x4c/0xa0 [ 565.883916][ T8564] ? clear_bhb_loop+0x60/0xb0 [ 565.888614][ T8564] ? clear_bhb_loop+0x60/0xb0 [ 565.893333][ T8564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 565.899245][ T8564] RIP: 0033:0x7f021c39cdd9 [ 565.903675][ T8564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.923303][ T8564] RSP: 002b:00007f021d1a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.931758][ T8564] RAX: ffffffffffffffda RBX: 00007f021c615fa0 RCX: 00007f021c39cdd9 [ 565.939839][ T8564] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000008 [ 565.947913][ T8564] RBP: 00007f021d1a4090 R08: 0000000000000000 R09: 0000000000000000 [ 565.955918][ T8564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.963940][ T8564] R13: 00007f021c616038 R14: 00007f021c615fa0 R15: 00007ffddc587a78 [ 565.971970][ T8564] [ 566.153210][ T8564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 566.508613][ T8579] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1474'. [ 566.850121][ T8584] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.1476'. [ 567.191054][ T8591] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1480'. [ 567.334560][ T8600] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1479'. [ 567.493156][ T8600] net_ratelimit: 157 callbacks suppressed [ 567.493172][ T8600] openvswitch: netlink: Message has 6 unknown bytes. [ 568.631516][ T8622] bridge0: port 3(ip6gretap0) entered blocking state [ 568.677871][ T8622] bridge0: port 3(ip6gretap0) entered disabled state [ 568.704346][ T8622] device ip6gretap0 entered promiscuous mode [ 568.721688][ T8622] bridge0: port 3(ip6gretap0) entered blocking state [ 568.728577][ T8622] bridge0: port 3(ip6gretap0) entered forwarding state [ 568.762128][ T8625] netlink: 'syz.3.1490': attribute type 3 has an invalid length. [ 568.780116][ T8625] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1490'. [ 569.215142][ T8637] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.1493'. [ 569.863472][ T8646] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1496'. [ 569.956913][ T8645] netlink: 'syz.2.1498': attribute type 3 has an invalid length. [ 570.017054][ T8645] netlink: 'syz.2.1498': attribute type 1 has an invalid length. [ 570.165715][ T8645] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.1498'. [ 570.651171][ T8659] netlink: 'syz.1.1502': attribute type 1 has an invalid length. [ 571.111698][ T8669] FAULT_INJECTION: forcing a failure. [ 571.111698][ T8669] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 571.224894][ T8669] CPU: 1 PID: 8669 Comm: syz.1.1507 Not tainted syzkaller #0 [ 571.232387][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 571.242569][ T8669] Call Trace: [ 571.245906][ T8669] [ 571.248876][ T8669] dump_stack_lvl+0x188/0x24e [ 571.253672][ T8669] ? show_regs_print_info+0x12/0x12 [ 571.258908][ T8669] ? load_image+0x400/0x400 [ 571.263451][ T8669] ? __lock_acquire+0x7d10/0x7d10 [ 571.268521][ T8669] ? lockdep_hardirqs_on+0x94/0x140 [ 571.273764][ T8669] should_fail_ex+0x399/0x4d0 [ 571.278487][ T8669] prepare_alloc_pages+0x1e2/0x5f0 [ 571.283653][ T8669] __alloc_pages+0x130/0x4f0 [ 571.288280][ T8669] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 571.294456][ T8669] ? zone_statistics+0x170/0x170 [ 571.299427][ T8669] ? lock_acquire+0x225/0x4a0 [ 571.304131][ T8669] __kmalloc_large_node+0x8c/0x1e0 [ 571.309258][ T8669] ? iovec_from_user+0x83/0x360 [ 571.314244][ T8669] __kmalloc+0x110/0x240 [ 571.318510][ T8669] iovec_from_user+0x83/0x360 [ 571.323379][ T8669] __import_iovec+0x6d/0x500 [ 571.327978][ T8669] ? __might_fault+0xc2/0x120 [ 571.332671][ T8669] import_iovec+0x6f/0xa0 [ 571.337014][ T8669] ___sys_sendmsg+0x252/0x360 [ 571.341722][ T8669] ? __sys_sendmsg+0x290/0x290 [ 571.346517][ T8669] ? ktime_get_real_ts64+0x440/0x440 [ 571.351834][ T8669] __se_sys_sendmsg+0x1bb/0x2a0 [ 571.356708][ T8669] ? __x64_sys_sendmsg+0x80/0x80 [ 571.361695][ T8669] ? syscall_enter_from_user_mode+0x2a/0x80 [ 571.367606][ T8669] do_syscall_64+0x4c/0xa0 [ 571.372044][ T8669] ? clear_bhb_loop+0x60/0xb0 [ 571.376809][ T8669] ? clear_bhb_loop+0x60/0xb0 [ 571.381502][ T8669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 571.387756][ T8669] RIP: 0033:0x7fd96299cdd9 [ 571.392185][ T8669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.411802][ T8669] RSP: 002b:00007fd960bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.420267][ T8669] RAX: ffffffffffffffda RBX: 00007fd962c15fa0 RCX: 00007fd96299cdd9 [ 571.428254][ T8669] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 0000000000000003 [ 571.436237][ T8669] RBP: 00007fd960bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 571.444231][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.452247][ T8669] R13: 00007fd962c16038 R14: 00007fd962c15fa0 R15: 00007ffcf69f2ca8 [ 571.460256][ T8669] [ 571.750207][ T8681] netlink: 54695 bytes leftover after parsing attributes in process `syz.2.1509'. [ 572.037111][ T8686] FAULT_INJECTION: forcing a failure. [ 572.037111][ T8686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.120750][ T8686] CPU: 1 PID: 8686 Comm: syz.3.1511 Not tainted syzkaller #0 [ 572.128223][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 572.138331][ T8686] Call Trace: [ 572.141656][ T8686] [ 572.144623][ T8686] dump_stack_lvl+0x188/0x24e [ 572.149466][ T8686] ? show_regs_print_info+0x12/0x12 [ 572.154820][ T8686] ? load_image+0x400/0x400 [ 572.159351][ T8686] ? __lock_acquire+0x7d10/0x7d10 [ 572.164416][ T8686] should_fail_ex+0x399/0x4d0 [ 572.169138][ T8686] _copy_from_user+0x2c/0x170 [ 572.173876][ T8686] kstrtouint_from_user+0xda/0x170 [ 572.179026][ T8686] ? kstrtol_from_user+0x190/0x190 [ 572.184373][ T8686] proc_fail_nth_write+0x8b/0x200 [ 572.189418][ T8686] ? proc_fail_nth_read+0x220/0x220 [ 572.194641][ T8686] ? common_file_perm+0x171/0x1c0 [ 572.199724][ T8686] ? proc_fail_nth_read+0x220/0x220 [ 572.204947][ T8686] vfs_write+0x2e6/0xa30 [ 572.209256][ T8686] ? file_end_write+0x250/0x250 [ 572.214129][ T8686] ? __fget_files+0x28/0x4b0 [ 572.218742][ T8686] ? __fget_files+0x28/0x4b0 [ 572.223357][ T8686] ? __fget_files+0x43d/0x4b0 [ 572.228153][ T8686] ? __fdget_pos+0x2ae/0x360 [ 572.232768][ T8686] ? ksys_write+0x71/0x250 [ 572.237212][ T8686] ksys_write+0x14c/0x250 [ 572.241571][ T8686] ? __ia32_sys_read+0x80/0x80 [ 572.246360][ T8686] ? lockdep_hardirqs_on+0x94/0x140 [ 572.251608][ T8686] do_syscall_64+0x4c/0xa0 [ 572.256046][ T8686] ? clear_bhb_loop+0x60/0xb0 [ 572.260759][ T8686] ? clear_bhb_loop+0x60/0xb0 [ 572.265483][ T8686] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.271480][ T8686] RIP: 0033:0x7f021c35d60e [ 572.275910][ T8686] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 572.295790][ T8686] RSP: 002b:00007f021d182fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 572.304313][ T8686] RAX: ffffffffffffffda RBX: 00007f021d1836c0 RCX: 00007f021c35d60e [ 572.312336][ T8686] RDX: 0000000000000001 RSI: 00007f021d1830a0 RDI: 0000000000000003 [ 572.320343][ T8686] RBP: 00007f021d183090 R08: 0000000000000000 R09: 0000000000000000 [ 572.328349][ T8686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.336343][ T8686] R13: 00007f021c616128 R14: 00007f021c616090 R15: 00007ffddc587a78 [ 572.344347][ T8686] [ 572.535912][ T8692] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1513'. [ 572.755662][ T8691] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1512'. [ 574.334919][ T8717] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1520'. [ 574.472275][ T8717] openvswitch: netlink: Message has 6 unknown bytes. [ 574.779884][ T8726] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1523'. [ 574.859724][ T8726] netlink: zone id is out of range [ 574.976986][ T8726] netlink: del zone limit has 4 unknown bytes [ 575.147783][ T8725] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.1522'. [ 575.806160][ T8740] FAULT_INJECTION: forcing a failure. [ 575.806160][ T8740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.902983][ T8740] CPU: 0 PID: 8740 Comm: syz.0.1528 Not tainted syzkaller #0 [ 575.910680][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.920851][ T8740] Call Trace: [ 575.924173][ T8740] [ 575.927138][ T8740] dump_stack_lvl+0x188/0x24e [ 575.931867][ T8740] ? show_regs_print_info+0x12/0x12 [ 575.937116][ T8740] ? load_image+0x400/0x400 [ 575.941746][ T8740] ? __lock_acquire+0x7d10/0x7d10 [ 575.946832][ T8740] should_fail_ex+0x399/0x4d0 [ 575.951549][ T8740] _copy_from_user+0x2c/0x170 [ 575.956276][ T8740] __sys_bpf+0x2ea/0x780 [ 575.960560][ T8740] ? bpf_link_show_fdinfo+0x380/0x380 [ 575.966000][ T8740] ? lock_chain_count+0x20/0x20 [ 575.970942][ T8740] __x64_sys_bpf+0x78/0x90 [ 575.975404][ T8740] do_syscall_64+0x4c/0xa0 [ 575.979865][ T8740] ? clear_bhb_loop+0x60/0xb0 [ 575.984594][ T8740] ? clear_bhb_loop+0x60/0xb0 [ 575.989325][ T8740] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.995262][ T8740] RIP: 0033:0x7fc6a239cdd9 [ 575.999716][ T8740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.019369][ T8740] RSP: 002b:00007fc6a3342028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 576.027844][ T8740] RAX: ffffffffffffffda RBX: 00007fc6a2615fa0 RCX: 00007fc6a239cdd9 [ 576.035860][ T8740] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 000000000000000f [ 576.043967][ T8740] RBP: 00007fc6a3342090 R08: 0000000000000000 R09: 0000000000000000 [ 576.051994][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.060021][ T8740] R13: 00007fc6a2616038 R14: 00007fc6a2615fa0 R15: 00007ffd4e6a3cc8 [ 576.068054][ T8740] [ 576.077804][ T8738] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1527'. [ 576.931129][ T8762] netlink: 'syz.2.1535': attribute type 3 has an invalid length. [ 576.941655][ T8762] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1535'. [ 577.316494][ T8769] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.1538'. [ 577.587279][ T8780] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1541'. [ 578.208363][ T8797] netlink: 'syz.0.1548': attribute type 3 has an invalid length. [ 578.298148][ T8797] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1548'. [ 579.151133][ T8811] netlink: 'syz.0.1552': attribute type 3 has an invalid length. [ 579.175695][ T8811] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.1552'. [ 579.513271][ T8819] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.1555'. [ 579.808608][ T8825] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1557'. [ 579.908492][ T8829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 579.933157][ T8829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.968907][ T8829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.008350][ T8829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.299875][ T8840] netlink: 'syz.3.1561': attribute type 10 has an invalid length. [ 580.397944][ T8840] team0: Port device macvlan0 added [ 581.477768][ T8865] netlink: 54695 bytes leftover after parsing attributes in process `syz.1.1570'. [ 581.720158][ T8869] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1571'. [ 582.099139][ T8876] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.1575'. [ 582.121910][ T8876] netlink: zone id is out of range [ 582.190369][ T8876] netlink: get zone limit has 8 unknown bytes [ 582.405485][ T8881] netlink: 'syz.3.1576': attribute type 3 has an invalid length. [ 582.498691][ T8881] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1576'. [ 582.569522][ T8888] device pim6reg1 entered promiscuous mode [ 583.782272][ T8898] netlink: 'syz.1.1579': attribute type 16 has an invalid length. [ 583.827800][ T8898] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1579'. [ 583.880047][ T8899] netlink: 'syz.1.1579': attribute type 10 has an invalid length. [ 584.051152][ T8899] team0: Port device macvlan0 added [ 584.601451][ T8914] netlink: 54695 bytes leftover after parsing attributes in process `syz.1.1584'. [ 585.500740][ T8938] Illegal XDP return value 4294967262 on prog (id 486) dev N/A, expect packet loss! [ 585.575464][ T8941] netlink: 'syz.1.1593': attribute type 12 has an invalid length. [ 585.797977][ T8941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1593'. [ 586.152213][ T8951] FAULT_INJECTION: forcing a failure. [ 586.152213][ T8951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.223339][ T8951] CPU: 0 PID: 8951 Comm: syz.1.1595 Not tainted syzkaller #0 [ 586.230936][ T8951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.241040][ T8951] Call Trace: [ 586.244345][ T8951] [ 586.247305][ T8951] dump_stack_lvl+0x188/0x24e [ 586.252024][ T8951] ? show_regs_print_info+0x12/0x12 [ 586.257264][ T8951] ? load_image+0x400/0x400 [ 586.261802][ T8951] ? __lock_acquire+0x7d10/0x7d10 [ 586.266865][ T8951] should_fail_ex+0x399/0x4d0 [ 586.271578][ T8951] _copy_from_user+0x2c/0x170 [ 586.276286][ T8951] __sys_bpf+0x2ea/0x780 [ 586.280562][ T8951] ? bpf_link_show_fdinfo+0x380/0x380 [ 586.286074][ T8951] ? lock_chain_count+0x20/0x20 [ 586.291026][ T8951] __x64_sys_bpf+0x78/0x90 [ 586.295498][ T8951] do_syscall_64+0x4c/0xa0 [ 586.299950][ T8951] ? clear_bhb_loop+0x60/0xb0 [ 586.304670][ T8951] ? clear_bhb_loop+0x60/0xb0 [ 586.309410][ T8951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.315333][ T8951] RIP: 0033:0x7fd96299cdd9 [ 586.319774][ T8951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.339660][ T8951] RSP: 002b:00007fd960bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.348105][ T8951] RAX: ffffffffffffffda RBX: 00007fd962c15fa0 RCX: 00007fd96299cdd9 [ 586.356122][ T8951] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000015 [ 586.364155][ T8951] RBP: 00007fd960bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 586.372156][ T8951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.380146][ T8951] R13: 00007fd962c16038 R14: 00007fd962c15fa0 R15: 00007ffcf69f2ca8 [ 586.388168][ T8951] [ 586.953467][ T8957] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.1599'. [ 587.212008][ T8965] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1601'. [ 588.756516][ T8993] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.777974][ T8993] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.210729][ T9008] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1615'. [ 596.101109][ T9092] netlink: 'syz.1.1639': attribute type 10 has an invalid length. [ 596.149654][ T9092] team0: Device geneve1 is up. Set it down before adding it as a team port [ 596.397414][ T9104] FAULT_INJECTION: forcing a failure. [ 596.397414][ T9104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.472108][ T9104] CPU: 1 PID: 9104 Comm: syz.0.1644 Not tainted syzkaller #0 [ 596.479603][ T9104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.489710][ T9104] Call Trace: [ 596.493030][ T9104] [ 596.495998][ T9104] dump_stack_lvl+0x188/0x24e [ 596.500730][ T9104] ? show_regs_print_info+0x12/0x12 [ 596.505984][ T9104] ? load_image+0x400/0x400 [ 596.510553][ T9104] ? __lock_acquire+0x7d10/0x7d10 [ 596.515627][ T9104] should_fail_ex+0x399/0x4d0 [ 596.520326][ T9104] _copy_from_user+0x2c/0x170 [ 596.525022][ T9104] iovec_from_user+0x143/0x360 [ 596.529802][ T9104] __import_iovec+0x6d/0x500 [ 596.534412][ T9104] ? __might_fault+0xc2/0x120 [ 596.539108][ T9104] import_iovec+0x6f/0xa0 [ 596.543455][ T9104] ___sys_sendmsg+0x252/0x360 [ 596.548153][ T9104] ? __sys_sendmsg+0x290/0x290 [ 596.552951][ T9104] ? __lock_acquire+0x7d10/0x7d10 [ 596.558013][ T9104] __se_sys_sendmsg+0x1bb/0x2a0 [ 596.562883][ T9104] ? __x64_sys_sendmsg+0x80/0x80 [ 596.567851][ T9104] ? lockdep_hardirqs_on+0x94/0x140 [ 596.573064][ T9104] do_syscall_64+0x4c/0xa0 [ 596.577496][ T9104] ? clear_bhb_loop+0x60/0xb0 [ 596.582192][ T9104] ? clear_bhb_loop+0x60/0xb0 [ 596.586882][ T9104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 596.592887][ T9104] RIP: 0033:0x7fc6a239cdd9 [ 596.597317][ T9104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.617108][ T9104] RSP: 002b:00007fc6a3342028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.625622][ T9104] RAX: ffffffffffffffda RBX: 00007fc6a2615fa0 RCX: 00007fc6a239cdd9 [ 596.633604][ T9104] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 596.641587][ T9104] RBP: 00007fc6a3342090 R08: 0000000000000000 R09: 0000000000000000 [ 596.649566][ T9104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.657550][ T9104] R13: 00007fc6a2616038 R14: 00007fc6a2615fa0 R15: 00007ffd4e6a3cc8 [ 596.665549][ T9104] [ 597.079438][ T9119] netlink: 'syz.1.1648': attribute type 3 has an invalid length. [ 597.088747][ T9119] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1648'. [ 601.636857][ T9191] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1672'. [ 601.825766][ T9188] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1672'. [ 601.843464][ T9188] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 603.917722][ T9232] FAULT_INJECTION: forcing a failure. [ 603.917722][ T9232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.962249][ T9232] CPU: 0 PID: 9232 Comm: syz.1.1688 Not tainted syzkaller #0 [ 603.969728][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 603.979919][ T9232] Call Trace: [ 603.983255][ T9232] [ 603.986210][ T9232] dump_stack_lvl+0x188/0x24e [ 603.990895][ T9232] ? show_regs_print_info+0x12/0x12 [ 603.996124][ T9232] ? load_image+0x400/0x400 [ 604.000691][ T9232] ? __lock_acquire+0x7d10/0x7d10 [ 604.005766][ T9232] ? lockdep_hardirqs_on+0x94/0x140 [ 604.011017][ T9232] should_fail_ex+0x399/0x4d0 [ 604.015748][ T9232] strncpy_from_user+0x32/0x350 [ 604.020656][ T9232] bpf_prog_load+0x1f3/0x1560 [ 604.025411][ T9232] ? map_freeze+0x390/0x390 [ 604.029963][ T9232] ? __might_fault+0xa6/0x120 [ 604.034679][ T9232] ? __might_fault+0xa6/0x120 [ 604.039445][ T9232] ? __might_fault+0xc2/0x120 [ 604.044210][ T9232] ? __might_fault+0xa6/0x120 [ 604.048912][ T9232] ? bpf_lsm_bpf+0x5/0x10 [ 604.053348][ T9232] ? security_bpf+0x7a/0xa0 [ 604.057874][ T9232] __sys_bpf+0x5b8/0x780 [ 604.062131][ T9232] ? bpf_link_show_fdinfo+0x380/0x380 [ 604.067520][ T9232] ? lock_chain_count+0x20/0x20 [ 604.072399][ T9232] __x64_sys_bpf+0x78/0x90 [ 604.076828][ T9232] do_syscall_64+0x4c/0xa0 [ 604.081287][ T9232] ? clear_bhb_loop+0x60/0xb0 [ 604.086022][ T9232] ? clear_bhb_loop+0x60/0xb0 [ 604.090709][ T9232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 604.096618][ T9232] RIP: 0033:0x7fd96299cdd9 [ 604.101030][ T9232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.120647][ T9232] RSP: 002b:00007fd960bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 604.129081][ T9232] RAX: ffffffffffffffda RBX: 00007fd962c15fa0 RCX: 00007fd96299cdd9 [ 604.137054][ T9232] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 604.145057][ T9232] RBP: 00007fd960bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 604.153051][ T9232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.161067][ T9232] R13: 00007fd962c16038 R14: 00007fd962c15fa0 R15: 00007ffcf69f2ca8 [ 604.169076][ T9232] [ 604.625282][ T9245] netlink: 'syz.3.1694': attribute type 2 has an invalid length. [ 604.722949][ T9249] netlink: 'syz.4.1692': attribute type 3 has an invalid length. [ 604.730781][ T9249] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1692'. [ 605.001763][ T9254] FAULT_INJECTION: forcing a failure. [ 605.001763][ T9254] name failslab, interval 1, probability 0, space 0, times 0 [ 605.047833][ T9254] CPU: 1 PID: 9254 Comm: syz.2.1695 Not tainted syzkaller #0 [ 605.055283][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 605.065366][ T9254] Call Trace: [ 605.068667][ T9254] [ 605.071614][ T9254] dump_stack_lvl+0x188/0x24e [ 605.076340][ T9254] ? sctp_sendmsg+0x15b0/0x2940 [ 605.081216][ T9254] ? ___sys_sendmsg+0x2a2/0x360 [ 605.086082][ T9254] ? show_regs_print_info+0x12/0x12 [ 605.091317][ T9254] ? load_image+0x400/0x400 [ 605.095837][ T9254] should_fail_ex+0x399/0x4d0 [ 605.100521][ T9254] should_failslab+0x5/0x20 [ 605.105025][ T9254] slab_pre_alloc_hook+0x59/0x310 [ 605.110279][ T9254] ? sctp_add_bind_addr+0x89/0x350 [ 605.115454][ T9254] __kmem_cache_alloc_node+0x4f/0x260 [ 605.120848][ T9254] ? sctp_add_bind_addr+0x89/0x350 [ 605.125990][ T9254] kmalloc_trace+0x26/0xe0 [ 605.130489][ T9254] sctp_add_bind_addr+0x89/0x350 [ 605.135532][ T9254] sctp_copy_local_addr_list+0x311/0x4e0 [ 605.141247][ T9254] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 605.146985][ T9254] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 605.153171][ T9254] ? sctp_v6_is_any+0x60/0x70 [ 605.157895][ T9254] ? sctp_copy_one_addr+0x93/0x660 [ 605.163020][ T9254] sctp_bind_addr_copy+0xaf/0x3c0 [ 605.168359][ T9254] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 605.174699][ T9254] sctp_connect_new_asoc+0x2f5/0x6a0 [ 605.179991][ T9254] ? __sctp_connect+0xd80/0xd80 [ 605.184839][ T9254] ? __local_bh_enable_ip+0x136/0x1c0 [ 605.190315][ T9254] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 605.195869][ T9254] ? security_sctp_bind_connect+0x85/0xb0 [ 605.201594][ T9254] sctp_sendmsg+0x15b0/0x2940 [ 605.206393][ T9254] ? aa_sk_perm+0x771/0x950 [ 605.210996][ T9254] ? sctp_getsockopt+0x8a0/0x8a0 [ 605.215946][ T9254] ? __might_fault+0xa6/0x120 [ 605.220737][ T9254] ? aa_af_perm+0x340/0x340 [ 605.225248][ T9254] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 605.231691][ T9254] ? inet_sendmsg+0xe5/0x2f0 [ 605.236302][ T9254] ? inet_send_prepare+0x260/0x260 [ 605.241406][ T9254] ____sys_sendmsg+0x5be/0x970 [ 605.246360][ T9254] ? __sys_sendmsg_sock+0x30/0x30 [ 605.251475][ T9254] ? __import_iovec+0x315/0x500 [ 605.256405][ T9254] ? import_iovec+0x6f/0xa0 [ 605.260937][ T9254] ___sys_sendmsg+0x2a2/0x360 [ 605.265654][ T9254] ? __sys_sendmsg+0x290/0x290 [ 605.270475][ T9254] ? __lock_acquire+0x7d10/0x7d10 [ 605.275547][ T9254] __se_sys_sendmsg+0x1bb/0x2a0 [ 605.280420][ T9254] ? ct_nmi_exit+0x145/0x1c0 [ 605.285037][ T9254] ? __x64_sys_sendmsg+0x80/0x80 [ 605.290106][ T9254] ? lockdep_hardirqs_on+0x94/0x140 [ 605.295332][ T9254] do_syscall_64+0x4c/0xa0 [ 605.299779][ T9254] ? clear_bhb_loop+0x60/0xb0 [ 605.304657][ T9254] ? clear_bhb_loop+0x60/0xb0 [ 605.309352][ T9254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 605.315324][ T9254] RIP: 0033:0x7feee1d9cdd9 [ 605.319853][ T9254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.339511][ T9254] RSP: 002b:00007feee2c30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.347945][ T9254] RAX: ffffffffffffffda RBX: 00007feee2015fa0 RCX: 00007feee1d9cdd9 [ 605.355953][ T9254] RDX: 0000000000040040 RSI: 00002000000003c0 RDI: 0000000000000003 [ 605.363949][ T9254] RBP: 00007feee2c30090 R08: 0000000000000000 R09: 0000000000000000 [ 605.372003][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 605.379988][ T9254] R13: 00007feee2016038 R14: 00007feee2015fa0 R15: 00007ffec8382638 [ 605.388074][ T9254] [ 606.082009][ T9277] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1702'. [ 607.315763][ T9292] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.1708'. [ 608.136468][ T9310] netlink: 'syz.1.1711': attribute type 29 has an invalid length. [ 608.152886][ T9310] netlink: 'syz.1.1711': attribute type 29 has an invalid length. [ 609.205046][ T9337] netlink: 'syz.1.1722': attribute type 2 has an invalid length. [ 609.472712][ T9341] netlink: 54695 bytes leftover after parsing attributes in process `syz.3.1723'. [ 609.820199][ T9349] sctp: [Deprecated]: syz.1.1725 (pid 9349) Use of struct sctp_assoc_value in delayed_ack socket option. [ 609.820199][ T9349] Use struct sctp_sack_info instead [ 611.379309][ T9384] netlink: 54695 bytes leftover after parsing attributes in process `syz.0.1737'. [ 611.564746][ T9390] netlink: 'syz.3.1738': attribute type 5 has an invalid length. [ 611.627387][ T9390] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1738'. [ 612.737377][ T9421] FAULT_INJECTION: forcing a failure. [ 612.737377][ T9421] name failslab, interval 1, probability 0, space 0, times 0 [ 612.837534][ T9421] CPU: 1 PID: 9421 Comm: syz.3.1748 Not tainted syzkaller #0 [ 612.845059][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.855146][ T9421] Call Trace: [ 612.858454][ T9421] [ 612.861407][ T9421] dump_stack_lvl+0x188/0x24e [ 612.866139][ T9421] ? show_regs_print_info+0x12/0x12 [ 612.871391][ T9421] ? load_image+0x400/0x400 [ 612.875949][ T9421] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 612.882073][ T9421] should_fail_ex+0x399/0x4d0 [ 612.886800][ T9421] should_failslab+0x5/0x20 [ 612.891340][ T9421] slab_pre_alloc_hook+0x59/0x310 [ 612.896416][ T9421] kmem_cache_alloc+0x56/0x2f0 [ 612.901217][ T9421] ? __build_skb+0x2a/0x3c0 [ 612.905773][ T9421] __build_skb+0x2a/0x3c0 [ 612.910146][ T9421] build_skb+0x1e/0x230 [ 612.914383][ T9421] bpf_prog_test_run_skb+0x37e/0x12a0 [ 612.919964][ T9421] ? __fget_files+0x28/0x4b0 [ 612.923465][ T9423] netlink: 54695 bytes leftover after parsing attributes in process `syz.4.1750'. [ 612.924579][ T9421] ? __fget_files+0x43d/0x4b0 [ 612.924627][ T9421] ? cpu_online+0xa0/0xa0 [ 612.924654][ T9421] bpf_prog_test_run+0x31e/0x390 [ 612.924686][ T9421] __sys_bpf+0x62b/0x780 [ 612.924716][ T9421] ? bpf_link_show_fdinfo+0x380/0x380 [ 612.924763][ T9421] ? lock_chain_count+0x20/0x20 [ 612.924801][ T9421] __x64_sys_bpf+0x78/0x90 [ 612.924829][ T9421] do_syscall_64+0x4c/0xa0 [ 612.924856][ T9421] ? clear_bhb_loop+0x60/0xb0 [ 612.924880][ T9421] ? clear_bhb_loop+0x60/0xb0 [ 612.924907][ T9421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 612.924930][ T9421] RIP: 0033:0x7f021c39cdd9 [ 612.924950][ T9421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.924968][ T9421] RSP: 002b:00007f021d1a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 612.924992][ T9421] RAX: ffffffffffffffda RBX: 00007f021c615fa0 RCX: 00007f021c39cdd9 [ 612.925007][ T9421] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 000000000000000a [ 612.925020][ T9421] RBP: 00007f021d1a4090 R08: 0000000000000000 R09: 0000000000000000 [ 612.925034][ T9421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.925047][ T9421] R13: 00007f021c616038 R14: 00007f021c615fa0 R15: 00007ffddc587a78 [ 612.925079][ T9421] [ 614.457451][ T9449] netlink: 'syz.2.1754': attribute type 5 has an invalid length. [ 614.494736][ T9449] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1754'. [ 616.432369][ T9481] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1762'. [ 617.102704][ T9503] netlink: 'syz.1.1770': attribute type 2 has an invalid length. [ 617.783465][ T9515] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1784'. [ 618.009815][ T9524] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1776'. [ 618.024271][ T9524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1776'. [ 618.910177][ T9539] sctp: [Deprecated]: syz.2.1781 (pid 9539) Use of struct sctp_assoc_value in delayed_ack socket option. [ 618.910177][ T9539] Use struct sctp_sack_info instead [ 619.082458][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1782'. [ 620.154878][ T9560] tun0: tun_chr_ioctl cmd 1074025681 [ 622.183820][ T9608] FAULT_INJECTION: forcing a failure. [ 622.183820][ T9608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.278982][ T9608] CPU: 1 PID: 9608 Comm: syz.0.1801 Not tainted syzkaller #0 [ 622.286470][ T9608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 622.296564][ T9608] Call Trace: [ 622.299863][ T9608] [ 622.302808][ T9608] dump_stack_lvl+0x188/0x24e [ 622.307516][ T9608] ? show_regs_print_info+0x12/0x12 [ 622.312731][ T9608] ? load_image+0x400/0x400 [ 622.317257][ T9608] ? __lock_acquire+0x7d10/0x7d10 [ 622.322305][ T9608] should_fail_ex+0x399/0x4d0 [ 622.327005][ T9608] _copy_from_user+0x2c/0x170 [ 622.331720][ T9608] iovec_from_user+0x143/0x360 [ 622.336505][ T9608] __import_iovec+0x6d/0x500 [ 622.341104][ T9608] ? __might_fault+0xc2/0x120 [ 622.345802][ T9608] import_iovec+0x6f/0xa0 [ 622.350148][ T9608] ___sys_sendmsg+0x252/0x360 [ 622.354854][ T9608] ? __sys_sendmsg+0x290/0x290 [ 622.359658][ T9608] ? __lock_acquire+0x7d10/0x7d10 [ 622.364721][ T9608] __se_sys_sendmsg+0x1bb/0x2a0 [ 622.369597][ T9608] ? __x64_sys_sendmsg+0x80/0x80 [ 622.374571][ T9608] ? lockdep_hardirqs_on+0x94/0x140 [ 622.379795][ T9608] do_syscall_64+0x4c/0xa0 [ 622.384248][ T9608] ? clear_bhb_loop+0x60/0xb0 [ 622.388938][ T9608] ? clear_bhb_loop+0x60/0xb0 [ 622.393635][ T9608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 622.399631][ T9608] RIP: 0033:0x7fc6a239cdd9 [ 622.404065][ T9608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.423682][ T9608] RSP: 002b:00007fc6a3321028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.432373][ T9608] RAX: ffffffffffffffda RBX: 00007fc6a2616090 RCX: 00007fc6a239cdd9 [ 622.440359][ T9608] RDX: 00000000240448c4 RSI: 0000200000000500 RDI: 0000000000000004 [ 622.448381][ T9608] RBP: 00007fc6a3321090 R08: 0000000000000000 R09: 0000000000000000 [ 622.456485][ T9608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.464475][ T9608] R13: 00007fc6a2616128 R14: 00007fc6a2616090 R15: 00007ffd4e6a3cc8 [ 622.472479][ T9608] [ 622.982282][ T9621] FAULT_INJECTION: forcing a failure. [ 622.982282][ T9621] name failslab, interval 1, probability 0, space 0, times 0 [ 623.013310][ T9621] CPU: 1 PID: 9621 Comm: syz.2.1808 Not tainted syzkaller #0 [ 623.020774][ T9621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 623.030869][ T9621] Call Trace: [ 623.034187][ T9621] [ 623.037148][ T9621] dump_stack_lvl+0x188/0x24e [ 623.041876][ T9621] ? show_regs_print_info+0x12/0x12 [ 623.047121][ T9621] ? load_image+0x400/0x400 [ 623.051672][ T9621] ? __might_sleep+0xd0/0xd0 [ 623.056312][ T9621] ? __lock_acquire+0x7d10/0x7d10 [ 623.061375][ T9621] should_fail_ex+0x399/0x4d0 [ 623.066159][ T9621] should_failslab+0x5/0x20 [ 623.070675][ T9621] slab_pre_alloc_hook+0x59/0x310 [ 623.075731][ T9621] kmem_cache_alloc_node+0x5a/0x320 [ 623.080969][ T9621] ? perf_event_alloc+0x154/0x21b0 [ 623.086209][ T9621] perf_event_alloc+0x154/0x21b0 [ 623.091183][ T9621] ? _raw_spin_unlock+0x24/0x40 [ 623.096052][ T9621] ? alloc_fd+0x58f/0x630 [ 623.100400][ T9621] ? find_lively_task_by_vpid+0x19/0x290 [ 623.106051][ T9621] ? find_lively_task_by_vpid+0x19/0x290 [ 623.111700][ T9621] __se_sys_perf_event_open+0x6fd/0x1ec0 [ 623.117346][ T9621] ? __fget_files+0x43d/0x4b0 [ 623.122051][ T9621] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 623.127718][ T9621] ? lockdep_hardirqs_on+0x94/0x140 [ 623.132930][ T9621] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 623.138597][ T9621] do_syscall_64+0x4c/0xa0 [ 623.143045][ T9621] ? clear_bhb_loop+0x60/0xb0 [ 623.147765][ T9621] ? clear_bhb_loop+0x60/0xb0 [ 623.152737][ T9621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.158853][ T9621] RIP: 0033:0x7feee1d9cdd9 [ 623.163319][ T9621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.182954][ T9621] RSP: 002b:00007feee2c30028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 623.191576][ T9621] RAX: ffffffffffffffda RBX: 00007feee2015fa0 RCX: 00007feee1d9cdd9 [ 623.199561][ T9621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 623.207550][ T9621] RBP: 00007feee2c30090 R08: 0000000000000000 R09: 0000000000000000 [ 623.215536][ T9621] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 623.223535][ T9621] R13: 00007feee2016038 R14: 00007feee2015fa0 R15: 00007ffec8382638 [ 623.231550][ T9621] [ 624.438760][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.445224][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.470814][ T9662] netlink: 'syz.0.1822': attribute type 10 has an invalid length. [ 624.498146][ T9662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1822'. [ 624.559687][ T9662] batman_adv: batadv0: Adding interface: virt_wifi0 [ 624.586868][ T9662] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.615646][ T9662] batman_adv: batadv0: Interface activated: virt_wifi0 [ 624.830783][ T9674] FAULT_INJECTION: forcing a failure. [ 624.830783][ T9674] name failslab, interval 1, probability 0, space 0, times 0 [ 624.937091][ T9674] CPU: 1 PID: 9674 Comm: syz.2.1826 Not tainted syzkaller #0 [ 624.944552][ T9674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.954640][ T9674] Call Trace: [ 624.957947][ T9674] [ 624.960905][ T9674] dump_stack_lvl+0x188/0x24e [ 624.965719][ T9674] ? show_regs_print_info+0x12/0x12 [ 624.970963][ T9674] ? load_image+0x400/0x400 [ 624.975508][ T9674] ? __might_sleep+0xd0/0xd0 [ 624.980129][ T9674] ? __lock_acquire+0x7d10/0x7d10 [ 624.985197][ T9674] should_fail_ex+0x399/0x4d0 [ 624.989920][ T9674] should_failslab+0x5/0x20 [ 624.994451][ T9674] slab_pre_alloc_hook+0x59/0x310 [ 624.999600][ T9674] ? tomoyo_encode+0x27e/0x540 [ 625.004400][ T9674] __kmem_cache_alloc_node+0x4f/0x260 [ 625.009813][ T9674] ? tomoyo_encode+0x27e/0x540 [ 625.014612][ T9674] __kmalloc+0xa0/0x240 [ 625.018812][ T9674] tomoyo_encode+0x27e/0x540 [ 625.023444][ T9674] tomoyo_realpath_from_path+0x58e/0x5d0 [ 625.029123][ T9674] ? tomoyo_path_number_perm+0x205/0x650 [ 625.034790][ T9674] tomoyo_path_number_perm+0x22f/0x650 [ 625.040371][ T9674] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 625.045866][ T9674] ? ksys_write+0x1c0/0x250 [ 625.050407][ T9674] ? common_file_perm+0x171/0x1c0 [ 625.055509][ T9674] ? __fget_files+0x28/0x4b0 [ 625.060134][ T9674] ? __fget_files+0x28/0x4b0 [ 625.064781][ T9674] security_file_ioctl+0x6c/0xa0 [ 625.069758][ T9674] __se_sys_ioctl+0x48/0x170 [ 625.074397][ T9674] do_syscall_64+0x4c/0xa0 [ 625.078848][ T9674] ? clear_bhb_loop+0x60/0xb0 [ 625.083563][ T9674] ? clear_bhb_loop+0x60/0xb0 [ 625.088286][ T9674] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.094209][ T9674] RIP: 0033:0x7feee1d9cdd9 [ 625.098661][ T9674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.118321][ T9674] RSP: 002b:00007feee2c30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.126794][ T9674] RAX: ffffffffffffffda RBX: 00007feee2015fa0 RCX: 00007feee1d9cdd9 [ 625.134890][ T9674] RDX: 0000000000000000 RSI: 000000000000894b RDI: 0000000000000003 [ 625.142896][ T9674] RBP: 00007feee2c30090 R08: 0000000000000000 R09: 0000000000000000 [ 625.150956][ T9674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.158963][ T9674] R13: 00007feee2016038 R14: 00007feee2015fa0 R15: 00007ffec8382638 [ 625.167096][ T9674] [ 625.190025][ T9674] ERROR: Out of memory at tomoyo_realpath_from_path. [ 626.056821][ T9696] netlink: 'syz.1.1834': attribute type 2 has an invalid length. [ 626.257910][ T9699] delete_channel: no stack [ 626.296771][ T9696] device 1 entered promiscuous mode [ 626.648016][ T9711] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1837'. [ 626.913227][ T9723] netlink: 'syz.2.1842': attribute type 19 has an invalid length. [ 626.981564][ T9722] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1841'. [ 627.109933][ T9727] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1843'. [ 627.522715][ T9735] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1849'. [ 628.817999][ T9769] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1858'. [ 629.083247][ T9776] netlink: 'syz.3.1859': attribute type 3 has an invalid length. [ 629.156449][ T9776] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1859'. [ 629.726114][ T9791] netlink: 'syz.4.1865': attribute type 1 has an invalid length. [ 629.734387][ T9789] netlink: 'syz.0.1862': attribute type 2 has an invalid length. [ 629.742179][ T9789] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1862'. [ 629.784966][ T9791] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.1865'. [ 630.804657][ T9806] FAULT_INJECTION: forcing a failure. [ 630.804657][ T9806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.879258][ T9806] CPU: 0 PID: 9806 Comm: syz.0.1868 Not tainted syzkaller #0 [ 630.886724][ T9806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 630.896904][ T9806] Call Trace: [ 630.900221][ T9806] [ 630.903177][ T9806] dump_stack_lvl+0x188/0x24e [ 630.907900][ T9806] ? show_regs_print_info+0x12/0x12 [ 630.913148][ T9806] ? load_image+0x400/0x400 [ 630.917689][ T9806] ? __lock_acquire+0x7d10/0x7d10 [ 630.922758][ T9806] should_fail_ex+0x399/0x4d0 [ 630.927483][ T9806] _copy_from_user+0x2c/0x170 [ 630.932209][ T9806] __copy_msghdr+0x3b7/0x580 [ 630.936857][ T9806] ___sys_sendmsg+0x210/0x360 [ 630.941587][ T9806] ? __sys_sendmsg+0x290/0x290 [ 630.946426][ T9806] ? __lock_acquire+0x7d10/0x7d10 [ 630.951532][ T9806] __se_sys_sendmsg+0x1bb/0x2a0 [ 630.956443][ T9806] ? __x64_sys_sendmsg+0x80/0x80 [ 630.961440][ T9806] ? lockdep_hardirqs_on+0x94/0x140 [ 630.966776][ T9806] do_syscall_64+0x4c/0xa0 [ 630.971236][ T9806] ? clear_bhb_loop+0x60/0xb0 [ 630.975963][ T9806] ? clear_bhb_loop+0x60/0xb0 [ 630.980677][ T9806] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 630.986691][ T9806] RIP: 0033:0x7fc6a239cdd9 [ 630.991134][ T9806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.010780][ T9806] RSP: 002b:00007fc6a3321028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.019229][ T9806] RAX: ffffffffffffffda RBX: 00007fc6a2616090 RCX: 00007fc6a239cdd9 [ 631.027229][ T9806] RDX: 0000000000000012 RSI: 0000200000000400 RDI: 0000000000000009 [ 631.035224][ T9806] RBP: 00007fc6a3321090 R08: 0000000000000000 R09: 0000000000000000 [ 631.043384][ T9806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.051363][ T9806] R13: 00007fc6a2616128 R14: 00007fc6a2616090 R15: 00007ffd4e6a3cc8 [ 631.059357][ T9806] [ 631.857022][ T9824] tap0: tun_chr_ioctl cmd 2147767517 [ 632.659076][ T9835] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1878'. [ 635.842887][ T9873] netlink: 'syz.4.1885': attribute type 2 has an invalid length. [ 635.870966][ T9873] netlink: 'syz.4.1885': attribute type 8 has an invalid length. [ 635.972953][ T9873] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1885'. [ 637.094328][ T9889] tap0: tun_chr_ioctl cmd 2147767517 [ 637.601360][ T9910] FAULT_INJECTION: forcing a failure. [ 637.601360][ T9910] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 637.623035][ T9910] CPU: 0 PID: 9910 Comm: syz.1.1894 Not tainted syzkaller #0 [ 637.630592][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 637.640699][ T9910] Call Trace: [ 637.644021][ T9910] [ 637.646992][ T9910] dump_stack_lvl+0x188/0x24e [ 637.651731][ T9910] ? show_regs_print_info+0x12/0x12 [ 637.656989][ T9910] ? load_image+0x400/0x400 [ 637.661542][ T9910] ? __lock_acquire+0x7d10/0x7d10 [ 637.666715][ T9910] should_fail_ex+0x399/0x4d0 [ 637.671443][ T9910] prepare_alloc_pages+0x1e2/0x5f0 [ 637.676615][ T9910] __alloc_pages+0x130/0x4f0 [ 637.681266][ T9910] ? zone_statistics+0x170/0x170 [ 637.686357][ T9910] ? verify_lock_unused+0x140/0x140 [ 637.691618][ T9910] __folio_alloc+0xe/0x30 [ 637.696019][ T9910] vma_alloc_folio+0x4a3/0x900 [ 637.700847][ T9910] wp_page_copy+0x2bd/0x1680 [ 637.705493][ T9910] ? do_wp_page+0xaf4/0x1680 [ 637.710163][ T9910] ? fault_dirty_shared_page+0x3c0/0x3c0 [ 637.715953][ T9910] handle_mm_fault+0x1d19/0x3ee0 [ 637.720952][ T9910] ? mt_find+0x157/0x830 [ 637.725285][ T9910] ? numa_migrate_prep+0x250/0x250 [ 637.730420][ T9910] ? lock_chain_count+0x20/0x20 [ 637.735298][ T9910] ? lock_mm_and_find_vma+0xae/0x2f0 [ 637.740599][ T9910] do_user_addr_fault+0x51f/0xb10 [ 637.745677][ T9910] exc_page_fault+0x60/0x100 [ 637.750349][ T9910] asm_exc_page_fault+0x22/0x30 [ 637.755246][ T9910] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 637.761002][ T9910] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 637.780630][ T9910] RSP: 0018:ffffc9000342fa00 EFLAGS: 00050293 [ 637.786821][ T9910] RAX: 0000000000000000 RBX: 0000200000003048 RCX: 0000200000003048 [ 637.794897][ T9910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 637.802882][ T9910] RBP: 0000000000000000 R08: ffffffff8e1ff3ef R09: 1ffffffff1c3fe7d [ 637.810943][ T9910] R10: dffffc0000000000 R11: fffffbfff1c3fe7e R12: 0000000000000000 [ 637.819041][ T9910] R13: 000000000000006e R14: 0000200000002d40 R15: ffffc9000342fae0 [ 637.827060][ T9910] move_addr_to_user+0x177/0x1e0 [ 637.832034][ T9910] ____sys_recvmsg+0x331/0x5e0 [ 637.836829][ T9910] ? __sys_recvmsg_sock+0x40/0x40 [ 637.841973][ T9910] ? import_iovec+0x6f/0xa0 [ 637.846493][ T9910] ___sys_recvmsg+0x212/0x590 [ 637.851196][ T9910] ? __sys_recvmsg+0x290/0x290 [ 637.855986][ T9910] ? common_file_perm+0x171/0x1c0 [ 637.861030][ T9910] ? __fget_files+0x43d/0x4b0 [ 637.865737][ T9910] __x64_sys_recvmsg+0x205/0x2e0 [ 637.870699][ T9910] ? ___sys_recvmsg+0x590/0x590 [ 637.875584][ T9910] ? lockdep_hardirqs_on+0x94/0x140 [ 637.880803][ T9910] do_syscall_64+0x4c/0xa0 [ 637.885249][ T9910] ? clear_bhb_loop+0x60/0xb0 [ 637.890042][ T9910] ? clear_bhb_loop+0x60/0xb0 [ 637.894747][ T9910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.900671][ T9910] RIP: 0033:0x7fd96299cdd9 [ 637.905107][ T9910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.924867][ T9910] RSP: 002b:00007fd960bd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 637.933308][ T9910] RAX: ffffffffffffffda RBX: 00007fd962c16090 RCX: 00007fd96299cdd9 [ 637.941387][ T9910] RDX: 0000000000000000 RSI: 0000200000003040 RDI: 0000000000000009 [ 637.949389][ T9910] RBP: 00007fd960bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 637.957477][ T9910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.965466][ T9910] R13: 00007fd962c16128 R14: 00007fd962c16090 R15: 00007ffcf69f2ca8 [ 637.973469][ T9910] [ 638.904136][ T9939] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1904'. [ 640.645834][ T9964] netlink: 'syz.4.1911': attribute type 2 has an invalid length. [ 640.733313][ T9964] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1911'. [ 641.027917][ T9966] tap0: tun_chr_ioctl cmd 2147767517 [ 641.876369][ T9993] netlink: 'syz.1.1922': attribute type 21 has an invalid length. [ 642.372500][ T9986] netlink: 'syz.3.1919': attribute type 2 has an invalid length. [ 642.402937][ T9986] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1919'. [ 642.778217][ T9997] netlink: 'syz.3.1919': attribute type 10 has an invalid length. [ 642.876521][ T9997] device bridge_slave_1 left promiscuous mode [ 642.907921][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.952210][ T9997] team0: Port device bridge_slave_1 added [ 643.617764][T10032] FAULT_INJECTION: forcing a failure. [ 643.617764][T10032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.661460][T10032] CPU: 1 PID: 10032 Comm: syz.1.1930 Not tainted syzkaller #0 [ 643.669108][T10032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 643.679205][T10032] Call Trace: [ 643.682525][T10032] [ 643.685498][T10032] dump_stack_lvl+0x188/0x24e [ 643.690232][T10032] ? show_regs_print_info+0x12/0x12 [ 643.695482][T10032] ? load_image+0x400/0x400 [ 643.700037][T10032] ? __lock_acquire+0x7d10/0x7d10 [ 643.705174][T10032] ? snprintf+0xe5/0x140 [ 643.709546][T10032] should_fail_ex+0x399/0x4d0 [ 643.714449][T10032] _copy_to_user+0x2c/0x130 [ 643.719191][T10032] simple_read_from_buffer+0xe3/0x150 [ 643.724602][T10032] proc_fail_nth_read+0x1a6/0x220 [ 643.729678][T10032] ? proc_fault_inject_write+0x310/0x310 [ 643.735371][T10032] ? fsnotify_perm+0x248/0x550 [ 643.740186][T10032] ? proc_fault_inject_write+0x310/0x310 [ 643.745867][T10032] vfs_read+0x2de/0xa00 [ 643.750079][T10032] ? kernel_read+0x1e0/0x1e0 [ 643.754829][T10032] ? __fget_files+0x28/0x4b0 [ 643.759471][T10032] ? __fget_files+0x28/0x4b0 [ 643.764126][T10032] ? __fget_files+0x43d/0x4b0 [ 643.768867][T10032] ? __fdget_pos+0x2ae/0x360 [ 643.773519][T10032] ? ksys_read+0x71/0x250 [ 643.777914][T10032] ksys_read+0x14c/0x250 [ 643.782223][T10032] ? vfs_write+0xa30/0xa30 [ 643.786778][T10032] ? lockdep_hardirqs_on+0x94/0x140 [ 643.792032][T10032] do_syscall_64+0x4c/0xa0 [ 643.796492][T10032] ? clear_bhb_loop+0x60/0xb0 [ 643.801223][T10032] ? clear_bhb_loop+0x60/0xb0 [ 643.805955][T10032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.811900][T10032] RIP: 0033:0x7fd96295d60e [ 643.816363][T10032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 643.836104][T10032] RSP: 002b:00007fd960bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 643.844570][T10032] RAX: ffffffffffffffda RBX: 00007fd960bf66c0 RCX: 00007fd96295d60e [ 643.852591][T10032] RDX: 000000000000000f RSI: 00007fd960bf60a0 RDI: 0000000000000004 [ 643.860612][T10032] RBP: 00007fd960bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 643.868634][T10032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.876653][T10032] R13: 00007fd962c16038 R14: 00007fd962c15fa0 R15: 00007ffcf69f2ca8 [ 643.884689][T10032] [ 645.089109][T10064] FAULT_INJECTION: forcing a failure. [ 645.089109][T10064] name failslab, interval 1, probability 0, space 0, times 0 [ 645.173189][T10064] CPU: 1 PID: 10064 Comm: syz.1.1942 Not tainted syzkaller #0 [ 645.180743][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.190843][T10064] Call Trace: [ 645.194160][T10064] [ 645.197115][T10064] dump_stack_lvl+0x188/0x24e [ 645.201829][T10064] ? show_regs_print_info+0x12/0x12 [ 645.207054][T10064] ? load_image+0x400/0x400 [ 645.211577][T10064] ? __might_sleep+0xd0/0xd0 [ 645.216184][T10064] ? __lock_acquire+0x7d10/0x7d10 [ 645.221228][T10064] should_fail_ex+0x399/0x4d0 [ 645.225918][T10064] should_failslab+0x5/0x20 [ 645.230430][T10064] slab_pre_alloc_hook+0x59/0x310 [ 645.235489][T10064] ? __get_vm_area_node+0x122/0x330 [ 645.240726][T10064] __kmem_cache_alloc_node+0x4f/0x260 [ 645.246135][T10064] ? __get_vm_area_node+0x122/0x330 [ 645.251372][T10064] kmalloc_node_trace+0x22/0xe0 [ 645.256244][T10064] __get_vm_area_node+0x122/0x330 [ 645.261284][T10064] ? mod_objcg_state+0x50d/0x8a0 [ 645.266253][T10064] __vmalloc_node_range+0x357/0x13b0 [ 645.271553][T10064] ? copy_process+0x5fa/0x4030 [ 645.276351][T10064] ? free_vm_area+0x50/0x50 [ 645.280872][T10064] ? rcu_is_watching+0x11/0xa0 [ 645.285747][T10064] dup_task_struct+0x3d3/0x6b0 [ 645.290610][T10064] ? copy_process+0x5fa/0x4030 [ 645.295394][T10064] copy_process+0x5fa/0x4030 [ 645.299999][T10064] ? __lock_acquire+0x7d10/0x7d10 [ 645.305061][T10064] ? idle_dummy+0x10/0x10 [ 645.309416][T10064] kernel_clone+0x24b/0x900 [ 645.313930][T10064] ? ksys_write+0x1c0/0x250 [ 645.318469][T10064] ? create_io_thread+0x170/0x170 [ 645.323520][T10064] __x64_sys_clone+0x1a7/0x220 [ 645.328388][T10064] ? __fget_files+0x43d/0x4b0 [ 645.333179][T10064] ? __ia32_sys_vfork+0x140/0x140 [ 645.338320][T10064] ? lock_chain_count+0x20/0x20 [ 645.343200][T10064] ? lockdep_hardirqs_on+0x94/0x140 [ 645.348417][T10064] do_syscall_64+0x4c/0xa0 [ 645.353131][T10064] ? clear_bhb_loop+0x60/0xb0 [ 645.357860][T10064] ? clear_bhb_loop+0x60/0xb0 [ 645.362574][T10064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.368490][T10064] RIP: 0033:0x7fd96299cdd9 [ 645.372939][T10064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.392564][T10064] RSP: 002b:00007fd960bd4fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 645.400995][T10064] RAX: ffffffffffffffda RBX: 00007fd962c16090 RCX: 00007fd96299cdd9 [ 645.408982][T10064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 645.416983][T10064] RBP: 00007fd960bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 645.425057][T10064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.433047][T10064] R13: 00007fd962c16128 R14: 00007fd962c16090 R15: 00007ffcf69f2ca8 [ 645.441042][T10064] [ 645.988565][T10064] syz.1.1942: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 646.035840][T10064] CPU: 0 PID: 10064 Comm: syz.1.1942 Not tainted syzkaller #0 [ 646.043404][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 646.053491][T10064] Call Trace: [ 646.056796][T10064] [ 646.059752][T10064] dump_stack_lvl+0x188/0x24e [ 646.064488][T10064] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 646.070951][T10064] ? show_regs_print_info+0x12/0x12 [ 646.076189][T10064] ? load_image+0x400/0x400 [ 646.080748][T10064] ? __rcu_read_unlock+0x78/0xd0 [ 646.085729][T10064] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 646.092178][T10064] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 646.098712][T10064] warn_alloc+0x242/0x330 [ 646.103089][T10064] ? __get_vm_area_node+0x122/0x330 [ 646.108323][T10064] ? zone_watermark_ok_safe+0x270/0x270 [ 646.113906][T10064] ? rcu_is_watching+0x11/0xa0 [ 646.118709][T10064] ? __get_vm_area_node+0x318/0x330 [ 646.123937][T10064] ? mod_objcg_state+0x50d/0x8a0 [ 646.128917][T10064] __vmalloc_node_range+0x37c/0x13b0 [ 646.134263][T10064] ? free_vm_area+0x50/0x50 [ 646.138797][T10064] ? rcu_is_watching+0x11/0xa0 [ 646.143622][T10064] dup_task_struct+0x3d3/0x6b0 [ 646.148425][T10064] ? copy_process+0x5fa/0x4030 [ 646.153226][T10064] copy_process+0x5fa/0x4030 [ 646.157845][T10064] ? __lock_acquire+0x7d10/0x7d10 [ 646.162935][T10064] ? idle_dummy+0x10/0x10 [ 646.167304][T10064] kernel_clone+0x24b/0x900 [ 646.171842][T10064] ? ksys_write+0x1c0/0x250 [ 646.176384][T10064] ? create_io_thread+0x170/0x170 [ 646.181562][T10064] __x64_sys_clone+0x1a7/0x220 [ 646.186465][T10064] ? __fget_files+0x43d/0x4b0 [ 646.191189][T10064] ? __ia32_sys_vfork+0x140/0x140 [ 646.196266][T10064] ? lock_chain_count+0x20/0x20 [ 646.201164][T10064] ? lockdep_hardirqs_on+0x94/0x140 [ 646.206397][T10064] do_syscall_64+0x4c/0xa0 [ 646.210941][T10064] ? clear_bhb_loop+0x60/0xb0 [ 646.215657][T10064] ? clear_bhb_loop+0x60/0xb0 [ 646.220389][T10064] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.226317][T10064] RIP: 0033:0x7fd96299cdd9 [ 646.230763][T10064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.250421][T10064] RSP: 002b:00007fd960bd4fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 646.258960][T10064] RAX: ffffffffffffffda RBX: 00007fd962c16090 RCX: 00007fd96299cdd9 [ 646.266970][T10064] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 646.275016][T10064] RBP: 00007fd960bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 646.283018][T10064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.291018][T10064] R13: 00007fd962c16128 R14: 00007fd962c16090 R15: 00007ffcf69f2ca8 [ 646.299120][T10064] [ 646.773161][T10064] Mem-Info: [ 646.776363][T10064] active_anon:19184 inactive_anon:0 isolated_anon:0 [ 646.776363][T10064] active_file:15617 inactive_file:40076 isolated_file:0 [ 646.776363][T10064] unevictable:768 dirty:479 writeback:0 [ 646.776363][T10064] slab_reclaimable:20960 slab_unreclaimable:94764 [ 646.776363][T10064] mapped:39757 shmem:14875 pagetables:697 [ 646.776363][T10064] sec_pagetables:0 bounce:0 [ 646.776363][T10064] kernel_misc_reclaimable:0 [ 646.776363][T10064] free:1310293 free_pcp:10882 free_cma:0 [ 646.852926][T10064] Node 0 active_anon:77336kB inactive_anon:0kB active_file:62468kB inactive_file:160100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159028kB dirty:1916kB writeback:0kB shmem:58664kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10096kB pagetables:2688kB sec_pagetables:0kB all_unreclaimable? no [ 647.172912][T10064] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 647.330408][T10064] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 647.470233][T10064] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 647.502994][T10064] Node 0 DMA32 free:1326084kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:85932kB inactive_anon:0kB active_file:62668kB inactive_file:160100kB unevictable:1536kB writepending:2024kB present:3129332kB managed:2592964kB mlocked:0kB bounce:0kB free_pcp:19536kB local_pcp:13044kB free_cma:0kB [ 647.622903][T10064] lowmem_reserve[]: 0 0 1 1 1 [ 647.633194][T10064] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 647.781318][T10064] lowmem_reserve[]: 0 0 0 0 0 [ 647.811717][T10064] Node 1 Normal free:3898292kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:17372kB local_pcp:7488kB free_cma:0kB [ 647.983004][T10064] lowmem_reserve[]: 0 0 0 0 0 [ 648.013056][T10064] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 648.116705][T10064] Node 0 DMA32: 1140*4kB (U) 990*8kB (U) 567*16kB (UM) 493*32kB (UM) 236*64kB (UME) 37*128kB (UM) 15*256kB (UM) 10*512kB (UME) 4*1024kB (UE) 1*2048kB (U) 305*4096kB (UM) = 1321552kB [ 648.229473][T10064] Node 0 Normal: 0*4kB 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 648.319791][T10064] Node 1 Normal: 179*4kB (UME) 45*8kB (UME) 20*16kB (UE) 36*32kB (UME) 25*64kB (UME) 9*128kB (UME) 5*256kB (UME) 3*512kB (UME) 1*1024kB (U) 1*2048kB (E) 949*4096kB (M) = 3898292kB [ 648.401857][T10064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 648.459479][T10064] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 648.521875][T10064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 648.685867][T10064] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 648.757211][T10064] 77224 total pagecache pages [ 648.761976][T10064] 0 pages in swap cache [ 648.784068][T10064] Free swap = 124996kB [ 648.830738][T10064] Total swap = 124996kB [ 648.856241][T10064] 2097051 pages RAM [ 648.860135][T10064] 0 pages HighMem/MovableOnly [ 648.896167][T10064] 415209 pages reserved [ 648.925304][T10064] 0 pages cma reserved [ 649.512748][T10109] netlink: 'syz.0.1959': attribute type 11 has an invalid length. [ 649.710252][T10107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1961'. [ 649.852508][T10112] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1961'. [ 650.145099][T10112] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 651.449790][T10138] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1968'. [ 654.465522][T10164] netlink: 'syz.4.1976': attribute type 10 has an invalid length. [ 654.586444][T10164] team0: Cannot enslave team device to itself [ 654.695862][T10166] netlink: 'syz.2.1979': attribute type 10 has an invalid length. [ 654.721241][T10166] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1979'. [ 654.757384][T10166] batman_adv: batadv0: Adding interface: vlan1 [ 654.783984][T10166] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.870334][T10166] batman_adv: batadv0: Interface activated: vlan1 [ 655.535831][T10191] netlink: 'syz.4.1989': attribute type 10 has an invalid length. [ 655.602970][T10191] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1989'. [ 655.663590][T10191] device batadv_slave_1 entered promiscuous mode [ 656.362025][T10197] netlink: 'syz.0.1988': attribute type 10 has an invalid length. [ 656.375592][T10197] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1988'. [ 656.683645][T10205] netlink: 'syz.2.1991': attribute type 11 has an invalid length. [ 657.863160][T10227] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1997'. [ 658.561513][T10243] netlink: 'syz.3.2003': attribute type 11 has an invalid length. [ 658.578009][T10243] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2003'. [ 658.631179][T10244] netlink: 'syz.3.2003': attribute type 11 has an invalid length. [ 658.663069][T10244] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2003'. [ 658.699130][T10240] netlink: 'syz.1.2002': attribute type 46 has an invalid length. [ 658.713968][T10240] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2002'. [ 658.724135][T10242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.261628][T10272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2012'. [ 661.314566][T10296] netlink: 'syz.0.2019': attribute type 11 has an invalid length. [ 661.322503][T10296] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2019'. [ 661.773735][T10294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 662.106452][T10307] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2024'. [ 662.296134][T10307] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 662.687975][T10327] netlink: 'syz.1.2028': attribute type 10 has an invalid length. [ 662.696508][T10326] FAULT_INJECTION: forcing a failure. [ 662.696508][T10326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.761180][T10327] team0: Device veth1_macvtap failed to register rx_handler [ 662.813467][T10326] CPU: 1 PID: 10326 Comm: syz.4.2030 Not tainted syzkaller #0 [ 662.821023][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 662.831139][T10326] Call Trace: [ 662.834458][T10326] [ 662.837424][T10326] dump_stack_lvl+0x188/0x24e [ 662.842164][T10326] ? show_regs_print_info+0x12/0x12 [ 662.847411][T10326] ? load_image+0x400/0x400 [ 662.851966][T10326] ? __lock_acquire+0x7d10/0x7d10 [ 662.857044][T10326] should_fail_ex+0x399/0x4d0 [ 662.861769][T10326] _copy_from_user+0x2c/0x170 [ 662.866496][T10326] ___sys_sendmsg+0x1c3/0x360 [ 662.871237][T10326] ? __sys_sendmsg+0x290/0x290 [ 662.876060][T10326] ? __lock_acquire+0x7d10/0x7d10 [ 662.881158][T10326] __se_sys_sendmsg+0x1bb/0x2a0 [ 662.886058][T10326] ? __x64_sys_sendmsg+0x80/0x80 [ 662.891080][T10326] ? lockdep_hardirqs_on+0x94/0x140 [ 662.896320][T10326] do_syscall_64+0x4c/0xa0 [ 662.900773][T10326] ? clear_bhb_loop+0x60/0xb0 [ 662.905493][T10326] ? clear_bhb_loop+0x60/0xb0 [ 662.910219][T10326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.916141][T10326] RIP: 0033:0x7f32f059cdd9 [ 662.920572][T10326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.940210][T10326] RSP: 002b:00007f32ee7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.948643][T10326] RAX: ffffffffffffffda RBX: 00007f32f0815fa0 RCX: 00007f32f059cdd9 [ 662.956636][T10326] RDX: 0000000000000080 RSI: 0000200000002c00 RDI: 0000000000000003 [ 662.964629][T10326] RBP: 00007f32ee7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 662.972719][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.980729][T10326] R13: 00007f32f0816038 R14: 00007f32f0815fa0 R15: 00007ffdacde3578 [ 662.988729][T10326] [ 663.244748][T10333] netlink: 'syz.3.2031': attribute type 11 has an invalid length. [ 666.191805][T10373] netlink: 'syz.1.2043': attribute type 10 has an invalid length. [ 666.300331][T10373] team0: Port device geneve1 added [ 666.358107][T10379] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2045'. [ 666.494479][T10372] netlink: 'syz.1.2043': attribute type 4 has an invalid length. [ 666.530096][T10372] netlink: 'syz.1.2043': attribute type 3 has an invalid length. [ 666.626490][T10372] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.2043'. [ 667.180881][T10379] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 667.184460][T10386] netlink: 17023 bytes leftover after parsing attributes in process `syz.2.2047'. [ 667.205132][T10379] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 667.219216][T10379] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 667.588175][T10394] netlink: 'syz.2.2050': attribute type 21 has an invalid length. [ 667.671985][T10394] netlink: 'syz.2.2050': attribute type 6 has an invalid length. [ 667.713879][T10394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2050'. [ 668.429082][T10407] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2054'. [ 669.244906][T10423] netlink: 17023 bytes leftover after parsing attributes in process `syz.2.2060'. [ 670.169980][T10421] netlink: 'syz.0.2058': attribute type 10 has an invalid length. [ 670.276278][T10421] team0: Device xfrm0 is of different type [ 670.886147][T10453] netlink: 'syz.0.2071': attribute type 33 has an invalid length. [ 670.898298][T10453] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2071'. [ 670.976204][T10457] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.2073'. [ 670.996417][T10459] netlink: 'syz.3.2074': attribute type 10 has an invalid length. [ 671.144081][T10459] team0: Device veth1_macvtap failed to register rx_handler [ 671.966424][T10490] FAULT_INJECTION: forcing a failure. [ 671.966424][T10490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.980058][T10490] CPU: 0 PID: 10490 Comm: syz.3.2082 Not tainted syzkaller #0 [ 671.987574][T10490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 671.997676][T10490] Call Trace: [ 672.000994][T10490] [ 672.003965][T10490] dump_stack_lvl+0x188/0x24e [ 672.008698][T10490] ? show_regs_print_info+0x12/0x12 [ 672.013946][T10490] ? load_image+0x400/0x400 [ 672.018485][T10490] ? __lock_acquire+0x7d10/0x7d10 [ 672.023542][T10490] should_fail_ex+0x399/0x4d0 [ 672.028236][T10490] _copy_from_user+0x2c/0x170 [ 672.032934][T10490] ___sys_sendmsg+0x1c3/0x360 [ 672.037633][T10490] ? __sys_sendmsg+0x290/0x290 [ 672.042438][T10490] ? __lock_acquire+0x7d10/0x7d10 [ 672.047512][T10490] __se_sys_sendmsg+0x1bb/0x2a0 [ 672.052388][T10490] ? __x64_sys_sendmsg+0x80/0x80 [ 672.057355][T10490] ? lockdep_hardirqs_on+0x94/0x140 [ 672.062655][T10490] do_syscall_64+0x4c/0xa0 [ 672.067088][T10490] ? clear_bhb_loop+0x60/0xb0 [ 672.071776][T10490] ? clear_bhb_loop+0x60/0xb0 [ 672.076481][T10490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 672.082384][T10490] RIP: 0033:0x7f021c39cdd9 [ 672.086815][T10490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.106433][T10490] RSP: 002b:00007f021d1a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.114862][T10490] RAX: ffffffffffffffda RBX: 00007f021c615fa0 RCX: 00007f021c39cdd9 [ 672.122868][T10490] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 672.130853][T10490] RBP: 00007f021d1a4090 R08: 0000000000000000 R09: 0000000000000000 [ 672.138911][T10490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.146892][T10490] R13: 00007f021c616038 R14: 00007f021c615fa0 R15: 00007ffddc587a78 [ 672.154887][T10490] [ 672.647339][T10500] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.2086'. [ 673.014478][T10515] netlink: 'syz.4.2089': attribute type 10 has an invalid length. [ 673.062161][T10515] team0: Device veth1_macvtap failed to register rx_handler [ 674.724559][T10554] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.2102'. [ 675.471838][T10573] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.2109'. [ 676.559924][T10595] netlink: 'syz.0.2115': attribute type 25 has an invalid length. [ 676.637252][T10595] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 676.674080][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.972042][T10600] FAULT_INJECTION: forcing a failure. [ 676.972042][T10600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.016002][T10600] CPU: 1 PID: 10600 Comm: syz.1.2117 Not tainted syzkaller #0 [ 677.023570][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 677.033697][T10600] Call Trace: [ 677.037039][T10600] [ 677.040024][T10600] dump_stack_lvl+0x188/0x24e [ 677.044769][T10600] ? show_regs_print_info+0x12/0x12 [ 677.050022][T10600] ? load_image+0x400/0x400 [ 677.054580][T10600] ? __might_fault+0xa6/0x120 [ 677.059308][T10600] should_fail_ex+0x399/0x4d0 [ 677.064034][T10600] copyin+0x1b/0x120 [ 677.067967][T10600] _copy_from_iter+0x447/0x1130 [ 677.072882][T10600] ? copyout_mc+0x110/0x110 [ 677.077564][T10600] ? trace_call_bpf+0xbf/0x6b0 [ 677.082379][T10600] ? trace_call_bpf+0xbf/0x6b0 [ 677.087215][T10600] ? trace_call_bpf+0x5d6/0x6b0 [ 677.092112][T10600] ? dev_get_by_index+0x1e/0x2d0 [ 677.097088][T10600] ? dev_get_by_index+0x1e/0x2d0 [ 677.102075][T10600] packet_sendmsg+0x3099/0x4e60 [ 677.107000][T10600] ? aa_sk_perm+0x950/0x950 [ 677.111635][T10600] ? __might_sleep+0xd0/0xd0 [ 677.116265][T10600] ? trace_event_raw_event_lock+0x250/0x250 [ 677.122219][T10600] ? aa_sk_perm+0x81f/0x950 [ 677.126769][T10600] ? packet_getsockopt+0x9a0/0x9a0 [ 677.131933][T10600] ? aa_sock_msg_perm+0x94/0x150 [ 677.136902][T10600] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 677.142236][T10600] ? security_socket_sendmsg+0x7c/0xa0 [ 677.147820][T10600] ? packet_getsockopt+0x9a0/0x9a0 [ 677.152960][T10600] ____sys_sendmsg+0x5be/0x970 [ 677.157781][T10600] ? __sys_sendmsg_sock+0x30/0x30 [ 677.162838][T10600] ? __import_iovec+0x315/0x500 [ 677.167735][T10600] ? import_iovec+0x6f/0xa0 [ 677.172363][T10600] ___sys_sendmsg+0x2a2/0x360 [ 677.177097][T10600] ? __sys_sendmsg+0x290/0x290 [ 677.181962][T10600] ? __lock_acquire+0x7d10/0x7d10 [ 677.187084][T10600] __se_sys_sendmsg+0x1bb/0x2a0 [ 677.191979][T10600] ? __x64_sys_sendmsg+0x80/0x80 [ 677.196995][T10600] ? lockdep_hardirqs_on+0x94/0x140 [ 677.202231][T10600] do_syscall_64+0x4c/0xa0 [ 677.206681][T10600] ? clear_bhb_loop+0x60/0xb0 [ 677.211386][T10600] ? clear_bhb_loop+0x60/0xb0 [ 677.216282][T10600] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 677.222208][T10600] RIP: 0033:0x7fd96299cdd9 [ 677.226654][T10600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 677.246374][T10600] RSP: 002b:00007fd960bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 677.254820][T10600] RAX: ffffffffffffffda RBX: 00007fd962c15fa0 RCX: 00007fd96299cdd9 [ 677.262838][T10600] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 677.270838][T10600] RBP: 00007fd960bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 677.278831][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 677.286915][T10600] R13: 00007fd962c16038 R14: 00007fd962c15fa0 R15: 00007ffcf69f2ca8 [ 677.295062][T10600] [ 677.743876][T10604] netlink: 64799 bytes leftover after parsing attributes in process `syz.4.2118'. [ 678.570745][T10621] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2123'. [ 678.587910][T10621] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2123'. [ 679.151384][T10635] netlink: 'syz.2.2126': attribute type 5 has an invalid length. [ 680.096995][T10649] netlink: 64799 bytes leftover after parsing attributes in process `syz.0.2134'. [ 680.460955][T10663] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2136'. [ 680.501588][T10663] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2136'. [ 680.634726][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2135'. [ 680.794835][T10654] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2135'. [ 681.402971][T10683] netlink: 'syz.2.2145': attribute type 2 has an invalid length. [ 681.472984][T10683] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2145'. [ 681.628866][T10683] netlink: 'syz.2.2145': attribute type 29 has an invalid length. [ 681.667563][T10683] netlink: 'syz.2.2145': attribute type 29 has an invalid length. [ 681.929359][T10693] netlink: 64799 bytes leftover after parsing attributes in process `syz.1.2148'. [ 682.044773][T10697] device wg2 entered promiscuous mode [ 682.772569][T10713] delete_channel: no stack [ 682.899008][T10718] device syzkaller0 entered promiscuous mode [ 685.633438][T10748] netlink: 64799 bytes leftover after parsing attributes in process `syz.4.2161'. [ 685.872050][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.878455][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.141370][T10789] netlink: 64799 bytes leftover after parsing attributes in process `syz.4.2176'. [ 689.081188][T10826] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2188'. [ 690.256988][T10835] netlink: 64799 bytes leftover after parsing attributes in process `syz.4.2191'. [ 690.727038][T10848] netlink: 'syz.2.2195': attribute type 4 has an invalid length. [ 690.741418][T10848] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2195'. [ 690.880963][T10848] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 690.924152][T10857] netlink: 'syz.0.2198': attribute type 29 has an invalid length. [ 691.048772][T10857] netlink: 'syz.0.2198': attribute type 29 has an invalid length. [ 691.104034][T10859] netlink: 'syz.0.2198': attribute type 29 has an invalid length. [ 693.701979][T10877] netlink: 'syz.3.2202': attribute type 10 has an invalid length. [ 693.812918][T10877] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2202'. [ 693.923908][T10877] bridge0: port 2(team0) entered blocking state [ 693.943396][T10877] bridge0: port 2(team0) entered disabled state [ 693.970289][T10877] device team0 entered promiscuous mode [ 693.993182][T10877] device team_slave_0 entered promiscuous mode [ 694.053109][T10877] device team_slave_1 entered promiscuous mode [ 694.127798][T10877] device macvlan0 entered promiscuous mode [ 694.179018][T10877] device bridge_slave_1 entered promiscuous mode [ 694.971317][T10897] netlink: 'syz.1.2209': attribute type 2 has an invalid length. [ 695.020650][T10892] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2207'. [ 695.049937][T10897] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2209'. [ 695.263910][T10897] netlink: 'syz.1.2209': attribute type 29 has an invalid length. [ 695.952311][T10897] netlink: 'syz.1.2209': attribute type 29 has an invalid length. [ 695.976437][T10914] netlink: 'syz.2.2212': attribute type 29 has an invalid length. [ 695.987756][T10914] netlink: 'syz.2.2212': attribute type 29 has an invalid length. [ 696.007533][T10914] netlink: 'syz.2.2212': attribute type 29 has an invalid length. [ 697.900313][T10953] netlink: 'syz.0.2227': attribute type 2 has an invalid length. [ 697.928579][T10953] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2227'. [ 698.019576][T10953] netlink: 'syz.0.2227': attribute type 29 has an invalid length. [ 698.046015][T10953] netlink: 'syz.0.2227': attribute type 29 has an invalid length. [ 698.237292][T10961] netlink: 'syz.1.2228': attribute type 29 has an invalid length. [ 698.310322][T10961] netlink: 'syz.1.2228': attribute type 29 has an invalid length. [ 698.338016][T10963] netlink: 'syz.1.2228': attribute type 29 has an invalid length. [ 699.570132][T10985] sock: sock_set_timeout: `syz.1.2236' (pid 10985) tries to set negative timeout [ 700.487507][T11003] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2242'. [ 701.005121][T11014] netlink: 'syz.3.2246': attribute type 10 has an invalid length. [ 701.123325][T11014] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 701.758430][T11033] netlink: 'syz.3.2254': attribute type 3 has an invalid length. [ 701.799694][T11033] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2254'. [ 702.108356][T11048] FAULT_INJECTION: forcing a failure. [ 702.108356][T11048] name failslab, interval 1, probability 0, space 0, times 0 [ 702.143074][T11048] CPU: 1 PID: 11048 Comm: syz.3.2259 Not tainted syzkaller #0 [ 702.150624][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 702.160723][T11048] Call Trace: [ 702.164019][T11048] [ 702.166966][T11048] dump_stack_lvl+0x188/0x24e [ 702.171672][T11048] ? show_regs_print_info+0x12/0x12 [ 702.177067][T11048] ? load_image+0x400/0x400 [ 702.181597][T11048] should_fail_ex+0x399/0x4d0 [ 702.186326][T11048] should_failslab+0x5/0x20 [ 702.190850][T11048] slab_pre_alloc_hook+0x59/0x310 [ 702.195899][T11048] kmem_cache_alloc+0x56/0x2f0 [ 702.200672][T11048] ? skb_clone+0x1e7/0x370 [ 702.205117][T11048] skb_clone+0x1e7/0x370 [ 702.209472][T11048] bpf_clone_redirect+0x163/0x4a0 [ 702.214541][T11048] bpf_prog_208b094576c80b22+0x56/0x5b [ 702.220036][T11048] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 702.226039][T11048] ? lock_chain_count+0x20/0x20 [ 702.230932][T11048] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 702.237191][T11048] ? lockdep_hardirqs_on+0x94/0x140 [ 702.242409][T11048] ? ktime_get+0x7b/0x270 [ 702.246751][T11048] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 702.253007][T11048] ? ktime_get_real_ts64+0x440/0x440 [ 702.258457][T11048] ? read_lock_is_recursive+0x10/0x10 [ 702.263902][T11048] bpf_test_run+0x4c1/0x830 [ 702.268827][T11048] ? convert___skb_to_skb+0x580/0x580 [ 702.274245][T11048] ? eth_get_headlen+0x200/0x200 [ 702.279238][T11048] ? __build_skb+0x257/0x3c0 [ 702.283873][T11048] ? convert___skb_to_skb+0x3d/0x580 [ 702.289293][T11048] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 702.294796][T11048] ? cpu_online+0xa0/0xa0 [ 702.299254][T11048] bpf_prog_test_run+0x31e/0x390 [ 702.304246][T11048] __sys_bpf+0x62b/0x780 [ 702.308557][T11048] ? bpf_link_show_fdinfo+0x380/0x380 [ 702.313977][T11048] ? lock_chain_count+0x20/0x20 [ 702.318861][T11048] __x64_sys_bpf+0x78/0x90 [ 702.323408][T11048] do_syscall_64+0x4c/0xa0 [ 702.327993][T11048] ? clear_bhb_loop+0x60/0xb0 [ 702.332734][T11048] ? clear_bhb_loop+0x60/0xb0 [ 702.337467][T11048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 702.343408][T11048] RIP: 0033:0x7f021c39cdd9 [ 702.347881][T11048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.367867][T11048] RSP: 002b:00007f021d1a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 702.376394][T11048] RAX: ffffffffffffffda RBX: 00007f021c615fa0 RCX: 00007f021c39cdd9 [ 702.384392][T11048] RDX: 000000000000003d RSI: 0000200000000080 RDI: 000000000000000a [ 702.392474][T11048] RBP: 00007f021d1a4090 R08: 0000000000000000 R09: 0000000000000000 [ 702.400628][T11048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.408619][T11048] R13: 00007f021c616038 R14: 00007f021c615fa0 R15: 00007ffddc587a78 [ 702.416709][T11048] [ 702.727508][T11052] device syzkaller0 entered promiscuous mode [ 705.517129][T11076] netlink: 'syz.2.2265': attribute type 10 has an invalid length. [ 705.541337][T11076] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 706.051334][T11096] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 706.110210][T11096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.138527][T11099] netlink: 'syz.3.2273': attribute type 2 has an invalid length. [ 707.212999][T11122] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 707.648351][T11135] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2285'. [ 708.188741][T11144] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 708.297411][T11144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.015198][T11165] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 709.799895][T11184] netlink: 'syz.4.2302': attribute type 3 has an invalid length. [ 709.809259][T11184] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2302'. [ 710.429178][T11203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 710.487876][T11203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.612332][T11208] netlink: 'syz.0.2311': attribute type 29 has an invalid length. [ 710.629037][T11203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.700160][T11203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.303749][T11208] netlink: 'syz.0.2311': attribute type 29 has an invalid length. [ 711.330489][T11214] netlink: 'syz.0.2311': attribute type 29 has an invalid length. [ 712.904420][ T4343] wlan1: Trigger new scan to find an IBSS to join [ 713.387224][T11257] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 713.565769][T11257] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 713.697485][T11255] netlink: 'syz.3.2325': attribute type 13 has an invalid length. [ 713.745919][T11255] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2325'. [ 714.038292][T11255] syz_tun: refused to change device tx_queue_len [ 714.093073][T11255] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 714.150467][T11259] netlink: 'syz.3.2325': attribute type 10 has an invalid length. [ 714.227262][T11259] device netdevsim0 entered promiscuous mode [ 714.271190][T11259] team0: Port device netdevsim0 added [ 714.759233][T11266] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2326'. [ 714.766712][T11283] netlink: 'syz.0.2329': attribute type 3 has an invalid length. [ 714.816221][T11283] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2329'. [ 714.848883][T11284] device aaaaaaaaaaaaaaa entered promiscuous mode [ 715.895957][T11296] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2344'. [ 715.916165][T11296] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 718.060115][T11331] netlink: 'syz.3.2346': attribute type 3 has an invalid length. [ 718.097472][T11331] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2346'. [ 718.742492][T11349] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2352'. [ 718.804549][T11349] netlink: 'syz.1.2352': attribute type 1 has an invalid length. [ 746.033565][ T4361] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2676 jiffies s: 32853 root: 0x2/. [ 746.060199][ T4361] rcu: blocking rcu_node structures (internal RCU debug): [ 746.076604][ T4361] Sending NMI from CPU 0 to CPUs 1: [ 746.081983][ C1] NMI backtrace for cpu 1 [ 746.081996][ C1] CPU: 1 PID: 11356 Comm: syz.3.2353 Not tainted syzkaller #0 [ 746.082012][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 746.082021][ C1] RIP: 0010:mark_lock+0xe2/0x320 [ 746.082047][ C1] Code: 03 42 0f b6 04 28 84 c0 0f 85 06 02 00 00 83 3d 03 09 5b 15 00 74 36 45 31 ff 49 83 c7 50 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 <74> 08 4c 89 ff e8 34 89 6e 00 b8 01 00 00 00 45 85 27 74 50 48 83 [ 746.082060][ C1] RSP: 0018:ffffc900001e01e0 EFLAGS: 00000046 [ 746.082082][ C1] RAX: 1ffffffff2090422 RBX: ffff88802485bb80 RCX: ffffffff8164f804 [ 746.082094][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90af9240 [ 746.082104][ C1] RBP: 0000000000000009 R08: ffffffff90af9247 R09: 1ffffffff215f248 [ 746.082114][ C1] R10: dffffc0000000000 R11: fffffbfff215f249 R12: 0000000000000200 [ 746.082124][ C1] R13: dffffc0000000000 R14: ffff88802485c6b0 R15: ffffffff90482110 [ 746.082135][ C1] FS: 00007f021d1a46c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 746.082149][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 746.082160][ C1] CR2: 0000001b32623ffc CR3: 000000001eb3f000 CR4: 00000000003506e0 [ 746.082175][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 746.082185][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 746.082195][ C1] Call Trace: [ 746.082200][ C1] [ 746.082209][ C1] __lock_acquire+0xd7e/0x7d10 [ 746.082251][ C1] ? ktime_get+0x7b/0x270 [ 746.082272][ C1] ? verify_lock_unused+0x140/0x140 [ 746.082291][ C1] ? hrtimer_try_to_cancel+0x3b3/0x410 [ 746.082306][ C1] ? ktime_get+0x7b/0x270 [ 746.082322][ C1] ? mark_lock+0x94/0x320 [ 746.082342][ C1] ? __lock_acquire+0x12f4/0x7d10 [ 746.082364][ C1] lock_acquire+0x1bb/0x4a0 [ 746.082382][ C1] ? __virt_addr_valid+0x188/0x540 [ 746.082405][ C1] ? read_lock_is_recursive+0x10/0x10 [ 746.082424][ C1] ? verify_lock_unused+0x140/0x140 [ 746.082442][ C1] ? llist_add_batch+0x12b/0x180 [ 746.082459][ C1] ? find_next_clump8+0x1a0/0x1a0 [ 746.082475][ C1] ? __virt_addr_valid+0x188/0x540 [ 746.082493][ C1] __virt_addr_valid+0x1a5/0x540 [ 746.082511][ C1] ? __virt_addr_valid+0x188/0x540 [ 746.082531][ C1] kasan_addr_to_slab+0x9/0xc0 [ 746.082550][ C1] __kasan_record_aux_stack+0xf/0xc0 [ 746.082564][ C1] irq_work_queue_on+0x10f/0x260 [ 746.082587][ C1] rcu_read_unlock_special+0x3c9/0x510 [ 746.082606][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 746.082625][ C1] __rcu_read_unlock+0x78/0xd0 [ 746.082637][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 746.082657][ C1] trace_call_bpf+0x5bb/0x6b0 [ 746.082675][ C1] ? trace_call_bpf+0xbf/0x6b0 [ 746.082695][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 746.082716][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 746.082729][ C1] ? sched_clock_cpu+0x6e/0x260 [ 746.082748][ C1] perf_trace_run_bpf_submit+0x79/0x1c0 [ 746.082772][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 746.082793][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 746.082814][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 746.082835][ C1] ? __irq_exit_rcu+0x147/0x230 [ 746.082852][ C1] ? irq_exit_rcu+0x20/0x20 [ 746.082869][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 746.082888][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 746.082912][ C1] trace_hardirqs_on+0x24/0x40 [ 746.082931][ C1] asm_sysvec_irq_work+0x16/0x20 [ 746.082951][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 746.082968][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 746.082983][ C1] RSP: 0018:ffffc900001e0ac0 EFLAGS: 00000206 [ 746.082997][ C1] RAX: 68a87765fa6c0e00 RBX: 1ffff9200003c160 RCX: 68a87765fa6c0e00 [ 746.083009][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1120 RDI: ffffffff8adf1320 [ 746.083020][ C1] RBP: ffffc900001e0bb0 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 746.083030][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: 0000000000000246 [ 746.083040][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 746.083056][ C1] ? mac80211_hwsim_beacon_tx+0x61e/0xae0 [ 746.083084][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 746.083103][ C1] __rcu_read_unlock+0x78/0xd0 [ 746.083116][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 746.083138][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 746.083153][ C1] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 746.083175][ C1] mac80211_hwsim_beacon+0xb7/0x1b0 [ 746.083197][ C1] __hrtimer_run_queues+0x54a/0xd50 [ 746.083215][ C1] ? hw_scan_work+0xf50/0xf50 [ 746.083238][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 746.083253][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 746.083274][ C1] hrtimer_run_softirq+0x183/0x2a0 [ 746.083291][ C1] handle_softirqs+0x2a1/0x930 [ 746.083308][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 746.083324][ C1] ? do_softirq+0x210/0x210 [ 746.083339][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 746.083355][ C1] __irq_exit_rcu+0x13b/0x230 [ 746.083368][ C1] ? irq_exit_rcu+0x20/0x20 [ 746.083386][ C1] irq_exit_rcu+0x5/0x20 [ 746.083398][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 746.083415][ C1] [ 746.083419][ C1] [ 746.083424][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 746.083441][ C1] RIP: 0010:unwind_get_return_address+0x8/0x80 [ 746.083459][ C1] Code: 89 f7 49 89 f7 e8 88 68 9a 00 4c 89 f7 4c 89 fe e9 2d ff ff ff e8 b8 cc f4 08 0f 1f 84 00 00 00 00 00 41 57 41 56 53 48 89 fb <49> be 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 [ 746.083470][ C1] RSP: 0018:ffffc900036974e8 EFLAGS: 00000202 [ 746.083482][ C1] RAX: 0000000080000001 RBX: ffffc90003697508 RCX: 0000000080000001 [ 746.083492][ C1] RDX: ffffc90003697f00 RSI: 0000000000000000 RDI: ffffc90003697508 [ 746.083502][ C1] RBP: ffffc90003697590 R08: 0000000000000004 R09: 0000000000000010 [ 746.083512][ C1] R10: dffffc0000000000 R11: fffff520006d2ead R12: ffff88802485bb80 [ 746.083522][ C1] R13: 1ffff920006d2f24 R14: ffffffff817122e0 R15: ffffc90003697508 [ 746.083533][ C1] ? stack_trace_save+0xf0/0xf0 [ 746.083556][ C1] ? stack_trace_save+0xf0/0xf0 [ 746.083572][ C1] arch_stack_walk+0xf2/0x140 [ 746.083594][ C1] stack_trace_save+0xa6/0xf0 [ 746.083611][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 746.083632][ C1] kasan_save_stack+0x3a/0x60 [ 746.083649][ C1] ? kasan_save_stack+0x3a/0x60 [ 746.083667][ C1] ? __kasan_record_aux_stack+0xb2/0xc0 [ 746.083680][ C1] ? call_rcu+0x14f/0x990 [ 746.083698][ C1] ? __schedule+0x11d9/0x40e0 [ 746.083717][ C1] ? preempt_schedule_common+0x82/0xd0 [ 746.083735][ C1] ? preempt_schedule+0xbc/0xd0 [ 746.083752][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 746.083771][ C1] ? kmem_cache_alloc+0x1f1/0x2f0 [ 746.083786][ C1] ? __alloc_file+0x25/0x230 [ 746.083800][ C1] ? alloc_empty_file+0x90/0x180 [ 746.083813][ C1] ? alloc_file+0x5c/0x5f0 [ 746.083826][ C1] ? alloc_file_pseudo+0x180/0x200 [ 746.083839][ C1] ? sock_alloc_file+0xb3/0x240 [ 746.083857][ C1] ? __sys_socket+0x12a/0x190 [ 746.083874][ C1] ? __x64_sys_socket+0x76/0x80 [ 746.083892][ C1] ? do_syscall_64+0x4c/0xa0 [ 746.083910][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.083939][ C1] ? __phys_addr+0xb6/0x170 [ 746.083958][ C1] __kasan_record_aux_stack+0xb2/0xc0 [ 746.083971][ C1] ? put_task_struct_rcu_user+0x90/0x90 [ 746.083990][ C1] call_rcu+0x14f/0x990 [ 746.084010][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 746.084026][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 746.084042][ C1] ? _raw_spin_unlock+0x40/0x40 [ 746.084058][ C1] ? rcu_force_quiescent_state+0x230/0x230 [ 746.084085][ C1] ? put_task_stack+0x161/0x1f0 [ 746.084100][ C1] ? finish_task_switch+0x446/0x8f0 [ 746.084121][ C1] __schedule+0x11d9/0x40e0 [ 746.084141][ C1] ? ct_irq_exit_irqson+0x113/0x170 [ 746.084158][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 746.084181][ C1] ? __sched_text_start+0x8/0x8 [ 746.084199][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 746.084220][ C1] ? lock_chain_count+0x20/0x20 [ 746.084238][ C1] ? preempt_schedule+0xbc/0xd0 [ 746.084256][ C1] preempt_schedule_common+0x82/0xd0 [ 746.084275][ C1] preempt_schedule+0xbc/0xd0 [ 746.084293][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 746.084314][ C1] ? ___slab_alloc+0x20e/0x1240 [ 746.084330][ C1] preempt_schedule_thunk+0x16/0x18 [ 746.084352][ C1] kmem_cache_alloc+0x1f1/0x2f0 [ 746.084366][ C1] ? __alloc_file+0x25/0x230 [ 746.084382][ C1] __alloc_file+0x25/0x230 [ 746.084415][ C1] alloc_empty_file+0x90/0x180 [ 746.084429][ C1] alloc_file+0x5c/0x5f0 [ 746.084445][ C1] alloc_file_pseudo+0x180/0x200 [ 746.084461][ C1] ? alloc_empty_file_noaccount+0x80/0x80 [ 746.084477][ C1] ? _raw_spin_unlock+0x24/0x40 [ 746.084491][ C1] ? alloc_fd+0x58f/0x630 [ 746.084512][ C1] sock_alloc_file+0xb3/0x240 [ 746.084530][ C1] __sys_socket+0x12a/0x190 [ 746.084550][ C1] __x64_sys_socket+0x76/0x80 [ 746.084568][ C1] do_syscall_64+0x4c/0xa0 [ 746.084587][ C1] ? clear_bhb_loop+0x60/0xb0 [ 746.084603][ C1] ? clear_bhb_loop+0x60/0xb0 [ 746.084622][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.084639][ C1] RIP: 0033:0x7f021c39cdd9 [ 746.084652][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.084671][ C1] RSP: 002b:00007f021d1a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 746.084687][ C1] RAX: ffffffffffffffda RBX: 00007f021c615fa0 RCX: 00007f021c39cdd9 [ 746.084697][ C1] RDX: 0000000000000300 RSI: 0200000000000002 RDI: 0000000000000011 [ 746.084708][ C1] RBP: 00007f021c432d69 R08: 0000000000000000 R09: 0000000000000000 [ 746.084717][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.084726][ C1] R13: 00007f021c616038 R14: 00007f021c615fa0 R15: 00007ffddc587a78 [ 746.084742][ C1] [ 747.337311][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.343776][ T1277] ieee802154 phy1 wpan1: encryption failed: -22