last executing test programs: 7m36.675733575s ago: executing program 2 (id=3632): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) close(0xffffffffffffffff) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 7m36.210761903s ago: executing program 2 (id=3637): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000004000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x2000321, 0xe, 0x0, &(0x7f00000007c0)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7m35.938351318s ago: executing program 2 (id=3640): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) 7m35.775437655s ago: executing program 2 (id=3642): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0xfffffdef) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 7m32.3908264s ago: executing program 2 (id=3652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 7m32.178268546s ago: executing program 2 (id=3654): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 7m17.036995324s ago: executing program 32 (id=3654): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.477932562s ago: executing program 4 (id=5034): socket$kcm(0x10, 0x2, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x5f) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 10.295676572s ago: executing program 0 (id=5036): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000000000007fcc6c89d243240700000010"], 0x0, 0x53}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xa85, 0x9}, 0x202, 0x1, 0x0, 0x6, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x8000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) 10.265906417s ago: executing program 4 (id=5037): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x9, 0x0}, 0x8) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001a93"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) close(r4) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r8, r2, 0x4, r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 8.477183816s ago: executing program 0 (id=5038): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4fb5b6f85a83c771}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) write$cgroup_subtree(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800000000000000fc0000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef) 7.719174862s ago: executing program 4 (id=5041): perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0xff, 0x0, 0x40000007, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0x1}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500003000000079102800000000003e500000000000009500000000000000b6b65a9dbee4b08c613ce8461331f97c9611fbf7e972fa326671"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x120) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xe, 0x2, 0x3, 0x14, 0x0, 0x4, 0x8208, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x101900, 0x4, 0x8, 0x0, 0xfffffffffffffffa, 0x0, 0x6956, 0x0, 0x2, 0x0, 0x8c4}, 0x0, 0x10, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x33, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000039000511d25a80698c63940d0224fc602f6e35400c000200680ec00037153e370a000180256400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0xf9, &(0x7f0000000000), 0x143}, 0x48) 7.61253883s ago: executing program 0 (id=5043): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x9, 0x0}, 0x8) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r8, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r4) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r9, r2, 0x4, r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 6.426873578s ago: executing program 3 (id=5046): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8c4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e6"], 0xfdef) 6.200813315s ago: executing program 3 (id=5047): socket$kcm(0x10, 0x2, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x5f) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 5.80979779s ago: executing program 3 (id=5048): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000000000007fcc6c89d243240700000010"], 0x0, 0x53}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xa85, 0x9}, 0x202, 0x1, 0x0, 0x6, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x8000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) 3.455252624s ago: executing program 4 (id=5049): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x9, 0x0}, 0x8) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r7, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r4) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r8, r2, 0x4, r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 3.430683627s ago: executing program 3 (id=5050): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x9, 0x0}, 0x8) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001a93"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) close(r4) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r8, r2, 0x4, r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 3.410388651s ago: executing program 0 (id=5051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.043863942s ago: executing program 1 (id=5053): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="2b626c6b6979202df29f696d6974202b64657669636573202b626c6b696f20"], 0x2607ba746336fd4b) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0x10000000004c0, 0xffffffffffff8001}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r1, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)=@nl=@unspec, 0x80, 0x0}, 0x8400) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8902, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001400)=[{0x0}], 0x1, &(0x7f0000001480)=ANY=[], 0x150}, 0x1000) close(0xffffffffffffffff) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000001440)=ANY=[@ANYBLOB="84d48fb5bb622ced16be726601826c09e0f818d1694445a14c90ff5cc466a4eb7702ce293f461f3746dae497a2e92b6d48864337720a95f450544a006df8d0cbcb80e4c573fc064472b0e98aae488155d5276e3f356afab26e72cd45ad1f58bd5015dccb555ac05aeb720f23f515e843fce30be2c6bb7009ba04e6807f670cd5fc711144c5fba129d21b4f50219d1cd9ad8ff80962bf8b43c4c8012ea3a6fa5cd6d7808bc0fc883fedb991c63fe644fef2b95ff3576f35fe69d26653ba9374d2c1", @ANYRESDEC=r2], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000740)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0x403}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000580)="6af6383b19e788571f0f1478f2e626230898970264961f0b0115780d8ae3d7c43c64441f31ccbbf4dc46c88fc332cef5efa97474d2a995e55bd59882e91df098932efbd9a2397d7c59b21500f0f2096dbbc852e2fe7e4edc69429be58fcc6a1827016990d89d20b49de0d949ca99b49a3a82cdbb5171e4b752a2aae3784adc98e879865a143ea226bb228b8e6c305a68888bd421ca1e3b8f001459a63181c5c3eca5bb", &(0x7f00000001c0)=""/72, &(0x7f0000001180)="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", &(0x7f0000000680)="469309d8ec03542fb8bd8268fe1620329ce408607c1eb648c3b356dfaab31122474c0d8a2cefb756537961178a7ccf2e4fd4048f1374df47db1bd3f92aba6c6404c11c4fb32fbb9768770f3d6dd9d84929ea595f36e741deb8217861d7552650a0a95f9d261a1dddb6aaa091275aee9c874c9fe440cea831ce0a1294151139cc8606953a48f5deaafb17b9bf7b32ffa35320b4db344e0a2f4fc900ce73337de3", 0xa5}, 0x38) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={0x0, 0x5b, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4) 2.761910069s ago: executing program 1 (id=5054): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) r2 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x28, &(0x7f0000000000), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08906200060000021000aac141440e0", 0x0, 0x11, 0x6000ff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2.726745475s ago: executing program 3 (id=5055): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0x44c04, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0xc8, 0x0, 0x5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8c4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r6, r6, 0x2e, 0x10, 0x0, @void, @value=r6}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001e2607e15e6"], 0xfdef) 2.540931286s ago: executing program 1 (id=5056): socket$kcm(0x10, 0x2, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x14}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x5f) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 2.203417192s ago: executing program 1 (id=5057): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x240b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x3, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.965212392s ago: executing program 1 (id=5058): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000000000007fcc6c89d243240700000010"], 0x0, 0x53}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xa85, 0x9}, 0x202, 0x1, 0x0, 0x6, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x8000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) 370.240468ms ago: executing program 3 (id=5059): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x9, 0x0}, 0x8) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r8, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r4) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r9, r2, 0x4, r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 345.834442ms ago: executing program 1 (id=5060): perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0xff, 0x0, 0x40000007, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x2, 0x1}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500003000000079102800000000003e500000000000009500000000000000b6b65a9dbee4b08c613ce8461331f97c9611fbf7e972fa326671"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x120) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0xe, 0x2, 0x3, 0x14, 0x0, 0x4, 0x8208, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000002c0), 0x6}, 0x101900, 0x4, 0x8, 0x0, 0xfffffffffffffffa, 0x0, 0x6956, 0x0, 0x2, 0x0, 0x8c4}, 0x0, 0x10, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x33, &(0x7f00000005c0)=[{&(0x7f00000000c0)="2e00000039000511d25a80698c63940d0224fc602f6e35400c000200680ec00037153e370a000180256400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000032000000b70000000000082995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0xf9, &(0x7f0000000000), 0x143}, 0x48) 334.073274ms ago: executing program 4 (id=5061): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x8, 0x0}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x16, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf77}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x7}]}, &(0x7f0000000540)='syzkaller\x00', 0x972, 0xff, &(0x7f0000000580)=""/255, 0x41000, 0x44, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x1, 0x9, 0x1, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r0], &(0x7f0000000700)=[{0x5, 0x5c07, 0x5, 0xc}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x2, &(0x7f0000000040)=@raw=[@ldst={0x1, 0x2, 0x2, 0x9, 0x6, 0xfffffffffffffff4, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0x40, 0x0, 0x0, 0x40f00, 0x4b, '\x00', r2, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xd, 0x8000, 0x4}, 0x10, r4, r5, 0x3, &(0x7f0000000800)=[r0, r0], &(0x7f0000000840)=[{0x1, 0x5, 0xa, 0x9}, {0x5, 0x0, 0x8, 0x1}, {0x1, 0x3, 0x6, 0xc}], 0x10, 0x8}, 0x94) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000940)={r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0xf, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x8000}, [@jmp={0x5, 0x0, 0x7, 0x9, 0x0, 0xc, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x15}]}, &(0x7f0000000a00)='syzkaller\x00', 0x7f, 0x3d, &(0x7f0000000a40)=""/61, 0x21880, 0x272719f2dd7cd550, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000ac0)=[{0x0, 0x2, 0xa, 0xc}, {0x3, 0x1, 0xa, 0x4}, {0x3, 0x1, 0x2, 0x4}, {0x2, 0x1, 0x3, 0x6}, {0x0, 0x1, 0xb, 0x4}, {0x4, 0x2, 0x10, 0xb}], 0x10, 0x800}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000c40)={r5, r8}, 0xc) ioctl$TUNSETLINK(r0, 0x400454cd, 0x101) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000c80)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0xb, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x5}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0xfffffffd, 0xce, &(0x7f0000000d80)=""/206, 0x40f00, 0x42, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000e80)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000ec0)={0x5, 0xe, 0x4}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000f00)=[r8], &(0x7f0000000f40)=[{0x0, 0x5, 0x10, 0xa}, {0x0, 0x4, 0x9, 0x5}, {0x3, 0x1, 0x0, 0x7}, {0x0, 0x5, 0x3, 0xb}, {0x1, 0x1, 0x3, 0xa}], 0x10, 0xd}, 0x94) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001180)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0xd, 0x17, &(0x7f0000001080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3cb, 0x0, 0x0, 0x0, 0x271}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xf}, @alu={0x7, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffe0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xf0e}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001140)='GPL\x00', 0x84, 0x0, 0x0, 0x41000, 0x20, '\x00', r2, @fallback=0x6, r9, 0x8, &(0x7f00000011c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001200)={0x4, 0x0, 0x114, 0x20800000}, 0x10, r4, 0xffffffffffffffff, 0x6, &(0x7f0000001240)=[r0, r8, r0, r0, r8, r8, r8, r8, r1], &(0x7f0000001280)=[{0x1, 0x5, 0x6, 0x8}, {0x2, 0x3, 0x2}, {0x0, 0x4, 0x5, 0x1}, {0x2, 0x5, 0x9, 0xa}, {0x5, 0x4, 0x8, 0xb}, {0x0, 0x2, 0x1, 0x4}], 0x10, 0x5}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x400454d0, 0x18) sendmsg$kcm(r7, &(0x7f00000017c0)={&(0x7f0000001400)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x4}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001480)="f90d78f2589d9f139ae6149da3e9e5c77e7d0055bcbfc3ee6188b91b18a35bf6617ac3d2a38b97b6c4f9bbc6c9abe045d1cf3b81c3b0a25517f6de10302e2df46502e2ce1cf822e4c528325ab51cd5c91e636d3dc47c6ab3aa8db9948d3045058643bb1bcaffc0f40627544b73d9fa79a572784a917038eaa669bf13eb6cbfd1609a7f9a9cd0a0186f510a8e333704a80a81f02894cee40553", 0x99}], 0x1, &(0x7f0000001580)=[{0x68, 0x6, 0x0, "06d905ddbfc909d91f83d02ca86a3afe5e7d1288985b8a00645fdd5144dd75be374e4d76db503156145b2b65e1f536fa6d04b08708c968b9e79ed0b1f2c52e53e1149fb2c23c20892a675296b305d15b12783118"}, {0x98, 0x1, 0x4fd453f6, "596eaa07f3a5bec36c92ef104e0526849070c27768edbb63ea12bc6abe274bec6c07815d4f0f800103c514c1f268e5c1cfb5680796cdc3f05e389c70496aa695ec66823d01e0074ab7d38ec26115492227688420ba375807b9520802c5a85cd58314d49027bd61bddd43f0c5ead45368072e1d6b654462c0b8a8dc6c3524e8ae8a"}, {0x50, 0x107, 0x8, "300fde1e02b71f83abb4483fc1ab472fba6ad714430cb70381de3340114aec619804d4b811dbdbbf6c48f803b6f6c281906c4a5866a69e1a6e30075c46"}, {0xd8, 0x10e, 0x1, "4b2f94875ebdc2378ca4202103f1616dd3d9f52d9232364932716b7901c6f14b93a8489c69f08e6535f068744b2bacb74abef66ab05930913f9cfe269e505ed3940fb83033b33028fca30d457865ad2eeeb81e0279b35e974eff21070d52841140fb8c3cb8b93b6ff4b19405bfba432fcfe0c46bec7b2f18290ae1110765049233f274ad7901572fc5e6600128e4083c05270a9ffed785b9a8c5c18997bd5d3d2fed3383b4c237a0159351818b1762c2f4e7174689348ff4299f1cd87affa468e15ee4c6"}], 0x228}, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a40)={0x1b, 0x0, 0x0, 0x8001, 0x0, r8, 0x8, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x11, 0x17, &(0x7f0000001800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbe7a}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000018c0)='GPL\x00', 0x10001, 0xbc, &(0x7f0000001900)=""/188, 0x40f00, 0x41, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000019c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001a00)={0x4, 0x7, 0xffffff56, 0xfff}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001ac0)=[r8, r11, r8, r8], &(0x7f0000001b00)=[{0x1, 0x3, 0xc, 0xc}, {0x0, 0x2, 0x3, 0xc}, {0x0, 0x1, 0x4, 0x4}, {0x1, 0x1, 0xa, 0xa}, {0x4, 0x2, 0xd, 0x3}], 0x10, 0x7}, 0x94) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4228, '\x00', r2, r0, 0x5, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001f00)={{r8, 0xffffffffffffffff}, &(0x7f0000001e80), &(0x7f0000001ec0)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f80)={0x18, 0x11, &(0x7f0000001cc0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}, @alu={0x7, 0x6ebde0b8cb54f3b2, 0x7, 0x3, 0x4, 0x8, 0x8}], &(0x7f0000001d80)='syzkaller\x00', 0x37299f68, 0x3, &(0x7f0000001dc0)=""/3, 0x41000, 0x11, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000001e00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001e40)={0x4, 0xc, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001f40)=[r0, r8, r8, r14, 0xffffffffffffffff], 0x0, 0x10, 0xffffffcc}, 0x94) close(r12) sendmsg$unix(r7, &(0x7f0000002200)={&(0x7f0000002040)=@abs={0x0, 0x0, 0x3}, 0x6e, &(0x7f00000021c0)=[{&(0x7f00000020c0)="c0bdb09b430a9e8cabc4220ee63a58b219aaa1e51a0a6f1772fc2194bfb04e009f81b0dc5cfe2e8a50ab28dbbfecdbd658e259a8bfe1e8483816e6e782903d7cbc5f651928d454b7e7d15a5e6cf38f09e849c083eeaebb88194f1fce969ced", 0x5f}, {&(0x7f0000002140)}, {&(0x7f0000002180)="e7af9ea5335483f3f8ee23a2b4af0f7efe3848901abe50ce96dde7a2eef39f27171a5cd12914fa940d0aa431814c5f4ce8b2", 0x32}], 0x3, 0x0, 0x0, 0x240480c0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002400)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000002240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffff27, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x2, 0x8, 0xe, 0x401, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @ringbuf_query, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002340)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002380)={0x4, 0xa, 0x272d, 0x7}, 0x10, r3, 0x0, 0x0, &(0x7f00000023c0)=[r0, 0xffffffffffffffff, r0, r0, r0, r8, r0], 0x0, 0x10, 0xffff7fff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002740)={0x6, 0x5, &(0x7f00000024c0)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r11}, @call={0x85, 0x0, 0x0, 0x3b}, @jmp={0x5, 0x1, 0x3, 0x5, 0x0, 0xc, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x5, 0x3, 0x6, 0xffffffffffffffc0, 0x8}], &(0x7f0000002500)='GPL\x00', 0x1, 0x85, &(0x7f0000002540)=""/133, 0x40f00, 0x50, '\x00', r2, 0x25, r0, 0x8, &(0x7f0000002600)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002640)={0x0, 0x3, 0x200, 0xfffffc01}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002680)=[r13, r13, r14, r13], &(0x7f00000026c0)=[{0x3, 0x3, 0x9, 0x9}, {0x1, 0x3, 0xf, 0x1}, {0x0, 0x3, 0x4, 0x9}, {0x5, 0x1, 0x0, 0x8}, {0x5, 0x1, 0x2, 0x4}], 0x10, 0x761}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002940)={0x1b, 0x0, 0x0, 0x8, 0x0, r13, 0x5, '\x00', r2, 0xffffffffffffffff, 0x1, 0x4, 0x4}, 0x50) 304.477409ms ago: executing program 0 (id=5062): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[], 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x94) 606.299µs ago: executing program 4 (id=5063): perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, &(0x7f0000000480), 0x4) 0s ago: executing program 0 (id=5064): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x9, 0x0}, 0x8) r4 = socket$kcm(0x2b, 0x1, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300001a93"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close(r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) close(r4) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r8, r2, 0x4, r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) kernel console output (not intermixed with test programs): GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 609.096154][T15146] CPU: 1 PID: 15146 Comm: syz.0.3260 Not tainted syzkaller #0 [ 609.103871][T15146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 609.114042][T15146] Call Trace: [ 609.117409][T15146] [ 609.120429][T15146] dump_stack_lvl+0x18c/0x250 [ 609.125236][T15146] ? show_regs_print_info+0x20/0x20 [ 609.130563][T15146] ? load_image+0x420/0x420 [ 609.135186][T15146] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 609.141691][T15146] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 609.148307][T15146] warn_alloc+0x246/0x340 [ 609.152738][T15146] ? stack_trace_save+0xaa/0x100 [ 609.157788][T15146] ? zone_watermark_ok_safe+0x230/0x230 [ 609.163497][T15146] ? kasan_set_track+0x5f/0x70 [ 609.168370][T15146] ? kasan_set_track+0x4e/0x70 [ 609.173231][T15146] ? __kasan_kmalloc+0x8f/0xa0 [ 609.178069][T15146] ? xsk_init_queue+0xad/0x100 [ 609.182911][T15146] ? xsk_setsockopt+0x4e5/0x760 [ 609.187841][T15146] ? do_sock_setsockopt+0x175/0x1a0 [ 609.193135][T15146] ? __x64_sys_setsockopt+0x182/0x200 [ 609.198607][T15146] __vmalloc_node_range+0x126/0x1330 [ 609.204194][T15146] ? free_vm_area+0x50/0x50 [ 609.208873][T15146] vmalloc_user+0x74/0x80 [ 609.213306][T15146] ? xskq_create+0xbf/0x170 [ 609.217911][T15146] xskq_create+0xbf/0x170 [ 609.222350][T15146] xsk_init_queue+0xad/0x100 [ 609.227053][T15146] xsk_setsockopt+0x4e5/0x760 [ 609.231846][T15146] ? xsk_poll+0x680/0x680 [ 609.236280][T15146] ? __fget_files+0x28/0x4b0 [ 609.240968][T15146] ? __fget_files+0x28/0x4b0 [ 609.245656][T15146] ? aa_sock_opt_perm+0x74/0x100 [ 609.250693][T15146] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 609.256327][T15146] ? security_socket_setsockopt+0x7e/0xa0 [ 609.262147][T15146] ? xsk_poll+0x680/0x680 [ 609.266570][T15146] do_sock_setsockopt+0x175/0x1a0 [ 609.271682][T15146] ? __fdget+0x180/0x210 [ 609.276033][T15146] __x64_sys_setsockopt+0x182/0x200 [ 609.281346][T15146] do_syscall_64+0x55/0xa0 [ 609.285866][T15146] ? clear_bhb_loop+0x40/0x90 [ 609.290607][T15146] ? clear_bhb_loop+0x40/0x90 [ 609.295385][T15146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 609.301345][T15146] RIP: 0033:0x7f6050b9c819 [ 609.305847][T15146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.325685][T15146] RSP: 002b:00007f6051a6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 609.334217][T15146] RAX: ffffffffffffffda RBX: 00007f6050e15fa0 RCX: 00007f6050b9c819 [ 609.342289][T15146] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 609.350363][T15146] RBP: 00007f6050c32c91 R08: 0000000000000004 R09: 0000000000000000 [ 609.358448][T15146] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 609.366507][T15146] R13: 00007f6050e16038 R14: 00007f6050e15fa0 R15: 00007ffd597dc878 [ 609.374617][T15146] [ 609.402300][T15146] Mem-Info: [ 609.411326][T15146] active_anon:6361 inactive_anon:0 isolated_anon:0 [ 609.411326][T15146] active_file:17837 inactive_file:40143 isolated_file:0 [ 609.411326][T15146] unevictable:768 dirty:133 writeback:0 [ 609.411326][T15146] slab_reclaimable:10419 slab_unreclaimable:93728 [ 609.411326][T15146] mapped:24683 shmem:1361 pagetables:530 [ 609.411326][T15146] sec_pagetables:0 bounce:0 [ 609.411326][T15146] kernel_misc_reclaimable:0 [ 609.411326][T15146] free:1336772 free_pcp:12747 free_cma:0 [ 609.474225][T15146] Node 0 active_anon:25544kB inactive_anon:0kB active_file:71348kB inactive_file:160372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98732kB dirty:532kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10784kB pagetables:2120kB sec_pagetables:0kB all_unreclaimable? no [ 609.534188][T15146] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 609.566030][T15146] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 609.599993][T15146] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 609.605897][T15146] Node 0 DMA32 free:1437048kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25504kB inactive_anon:0kB active_file:71348kB inactive_file:159540kB unevictable:1536kB writepending:532kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:33968kB local_pcp:19688kB free_cma:0kB [ 609.651768][T15146] lowmem_reserve[]: 0 0 0 0 0 [ 609.657430][T15146] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 609.688928][T15146] lowmem_reserve[]: 0 0 0 0 0 [ 609.693777][T15146] Node 1 Normal free:3894680kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17116kB local_pcp:8028kB free_cma:0kB [ 609.736020][T15146] lowmem_reserve[]: 0 0 0 0 0 [ 609.746166][T15146] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 609.796953][T15146] Node 0 DMA32: 380*4kB (ME) 733*8kB (UME) 1030*16kB (UME) 1210*32kB (UME) 354*64kB (UME) 205*128kB (UME) 62*256kB (UM) 38*512kB (UME) 20*1024kB (UME) 8*2048kB (UM) 306*4096kB (UM) = 1437048kB [ 609.872230][T15146] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 609.932045][T15146] Node 1 Normal: 140*4kB (UE) 55*8kB (UE) 31*16kB (UE) 138*32kB (UE) 46*64kB (UME) 12*128kB (UM) 3*256kB (UE) 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3894680kB [ 610.026642][T15146] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 610.080666][T15146] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 610.133520][T15146] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 610.216670][T15146] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 610.276473][T15146] 59341 total pagecache pages [ 610.281290][T15146] 0 pages in swap cache [ 610.285513][T15146] Free swap = 124996kB [ 610.321591][T15146] Total swap = 124996kB [ 610.325853][T15146] 2097051 pages RAM [ 610.331292][T15146] 0 pages HighMem/MovableOnly [ 610.336045][T15146] 416927 pages reserved [ 610.341294][T15146] 0 pages cma reserved [ 612.560781][T15215] netlink: 'syz.3.3284': attribute type 4 has an invalid length. [ 612.605988][T15215] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3284'. [ 613.096170][T15218] netlink: 'syz.2.3285': attribute type 4 has an invalid length. [ 613.127055][T15218] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3285'. [ 613.950973][T15217] syz.2.3285 (15217) used greatest stack depth: 16488 bytes left [ 615.820373][T15225] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3287'. [ 615.830775][T15225] bridge_slave_1: default FDB implementation only supports local addresses [ 615.843955][T15237] netlink: 'syz.2.3293': attribute type 10 has an invalid length. [ 615.866582][T15237] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3293'. [ 618.767138][T15262] netlink: 'syz.3.3302': attribute type 12 has an invalid length. [ 618.775055][T15262] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3302'. [ 619.427039][T15280] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3308'. [ 619.444613][T15280] netlink: 'syz.0.3308': attribute type 2 has an invalid length. [ 619.799607][T15291] FAULT_INJECTION: forcing a failure. [ 619.799607][T15291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.836333][T15291] CPU: 1 PID: 15291 Comm: syz.0.3313 Not tainted syzkaller #0 [ 619.843888][T15291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 619.853983][T15291] Call Trace: [ 619.857299][T15291] [ 619.860263][T15291] dump_stack_lvl+0x18c/0x250 [ 619.865010][T15291] ? show_regs_print_info+0x20/0x20 [ 619.870258][T15291] ? load_image+0x420/0x420 [ 619.874831][T15291] ? __lock_acquire+0x7d40/0x7d40 [ 619.879885][T15291] ? __virt_addr_valid+0x18c/0x540 [ 619.885048][T15291] should_fail_ex+0x39d/0x4d0 [ 619.889765][T15291] _copy_from_user+0x2f/0xe0 [ 619.894387][T15291] bpf_vlog_reverse_ubuf+0x141/0x3c0 [ 619.899722][T15291] bpf_vlog_finalize+0x1c2/0x3f0 [ 619.904730][T15291] btf_new_fd+0x4ca/0x9f0 [ 619.909102][T15291] ? bpf_btf_show_fdinfo+0x80/0x80 [ 619.914262][T15291] ? capable+0x88/0xe0 [ 619.918365][T15291] __sys_bpf+0x670/0x890 [ 619.922657][T15291] ? bpf_link_show_fdinfo+0x390/0x390 [ 619.928071][T15291] ? lock_chain_count+0x20/0x20 [ 619.932959][T15291] __x64_sys_bpf+0x7c/0x90 [ 619.937402][T15291] do_syscall_64+0x55/0xa0 [ 619.941839][T15291] ? clear_bhb_loop+0x40/0x90 [ 619.946544][T15291] ? clear_bhb_loop+0x40/0x90 [ 619.951249][T15291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.957174][T15291] RIP: 0033:0x7f6050b9c819 [ 619.961627][T15291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.981276][T15291] RSP: 002b:00007f6051a6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 619.989722][T15291] RAX: ffffffffffffffda RBX: 00007f6050e15fa0 RCX: 00007f6050b9c819 [ 619.997722][T15291] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 620.005714][T15291] RBP: 00007f6051a6b090 R08: 0000000000000000 R09: 0000000000000000 [ 620.013706][T15291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 620.021699][T15291] R13: 00007f6050e16038 R14: 00007f6050e15fa0 R15: 00007ffd597dc878 [ 620.029711][T15291] [ 620.959663][T15312] netlink: 'syz.0.3320': attribute type 4 has an invalid length. [ 620.985154][T15312] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3320'. [ 624.011606][T15355] FAULT_INJECTION: forcing a failure. [ 624.011606][T15355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 624.034119][T15355] CPU: 1 PID: 15355 Comm: syz.2.3337 Not tainted syzkaller #0 [ 624.041684][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 624.051813][T15355] Call Trace: [ 624.055166][T15355] [ 624.058160][T15355] dump_stack_lvl+0x18c/0x250 [ 624.059544][T15358] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3338'. [ 624.062899][T15355] ? show_regs_print_info+0x20/0x20 [ 624.062941][T15355] ? load_image+0x420/0x420 [ 624.081726][T15355] ? __might_fault+0xaa/0x120 [ 624.086478][T15355] ? __lock_acquire+0x7d40/0x7d40 [ 624.086895][T15358] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3338'. [ 624.091588][T15355] should_fail_ex+0x39d/0x4d0 [ 624.091643][T15355] _copy_from_user+0x2f/0xe0 [ 624.109986][T15355] generic_map_update_batch+0x54b/0x810 [ 624.115668][T15355] ? rcu_read_unlock+0xa0/0xa0 [ 624.120519][T15355] ? __fdget+0x180/0x210 [ 624.124834][T15355] ? rcu_read_unlock+0xa0/0xa0 [ 624.129657][T15355] bpf_map_do_batch+0x3d7/0x610 [ 624.133721][T15360] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3338'. [ 624.134574][T15355] __sys_bpf+0x381/0x890 [ 624.134614][T15355] ? bpf_link_show_fdinfo+0x390/0x390 [ 624.153457][T15355] ? lock_chain_count+0x20/0x20 [ 624.158428][T15355] __x64_sys_bpf+0x7c/0x90 [ 624.162938][T15355] do_syscall_64+0x55/0xa0 [ 624.167414][T15355] ? clear_bhb_loop+0x40/0x90 [ 624.172155][T15355] ? clear_bhb_loop+0x40/0x90 [ 624.176912][T15355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.182909][T15355] RIP: 0033:0x7fc7dad9c819 [ 624.183238][T15358] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3338'. [ 624.187368][T15355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.187391][T15355] RSP: 002b:00007fc7dbca2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 624.187425][T15355] RAX: ffffffffffffffda RBX: 00007fc7db015fa0 RCX: 00007fc7dad9c819 [ 624.187444][T15355] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 624.187459][T15355] RBP: 00007fc7dbca2090 R08: 0000000000000000 R09: 0000000000000000 [ 624.187475][T15355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 624.187490][T15355] R13: 00007fc7db016038 R14: 00007fc7db015fa0 R15: 00007ffda5b8f868 [ 624.187543][T15355] [ 624.362894][T15362] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3340'. [ 624.375697][T15362] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3340'. [ 624.392263][T15362] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3340'. [ 624.405347][T15362] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3340'. [ 624.430439][T15364] netlink: 'syz.0.3341': attribute type 1 has an invalid length. [ 624.482333][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'. [ 624.695935][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.704609][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.404761][T15386] netlink: 'syz.0.3347': attribute type 3 has an invalid length. [ 625.412788][T15386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3347'. [ 627.207115][T15391] netlink: 'syz.3.3349': attribute type 39 has an invalid length. [ 627.238438][T15392] FAULT_INJECTION: forcing a failure. [ 627.238438][T15392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 627.266346][T15392] CPU: 0 PID: 15392 Comm: syz.0.3357 Not tainted syzkaller #0 [ 627.273901][T15392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 627.284030][T15392] Call Trace: [ 627.287425][T15392] [ 627.290405][T15392] dump_stack_lvl+0x18c/0x250 [ 627.295151][T15392] ? show_regs_print_info+0x20/0x20 [ 627.300420][T15392] ? load_image+0x420/0x420 [ 627.304983][T15392] ? __lock_acquire+0x7d40/0x7d40 [ 627.310066][T15392] should_fail_ex+0x39d/0x4d0 [ 627.314838][T15392] prepare_alloc_pages+0x1e2/0x5f0 [ 627.320002][T15392] __alloc_pages+0x134/0x460 [ 627.324653][T15392] ? zone_statistics+0x170/0x170 [ 627.329680][T15392] __folio_alloc+0x10/0x20 [ 627.334147][T15392] vma_alloc_folio+0x47a/0x8f0 [ 627.338962][T15392] ? mpol_shared_policy_lookup+0x14b/0x1e0 [ 627.344827][T15392] shmem_alloc_folio+0x1a9/0x2a0 [ 627.349822][T15392] ? folio_put+0xd0/0xd0 [ 627.354150][T15392] ? __vm_enough_memory+0x11b/0x370 [ 627.359407][T15392] ? shmem_inode_acct_block+0x35e/0x460 [ 627.365006][T15392] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 627.370803][T15392] ? put_swap_device+0x230/0x230 [ 627.375859][T15392] ? xas_load+0x12b/0x140 [ 627.380286][T15392] ? filemap_get_entry+0xce/0x3f0 [ 627.385349][T15392] ? filemap_get_entry+0xce/0x3f0 [ 627.390418][T15392] ? filemap_get_entry+0x379/0x3f0 [ 627.395694][T15392] ? page_cache_prev_miss+0x390/0x390 [ 627.401105][T15392] ? mark_lock+0x94/0x320 [ 627.405484][T15392] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 627.411504][T15392] ? lock_chain_count+0x20/0x20 [ 627.416397][T15392] shmem_get_folio_gfp+0xcde/0x2aa0 [ 627.421650][T15392] shmem_write_begin+0xf2/0x420 [ 627.426541][T15392] generic_perform_write+0x2fe/0x5c0 [ 627.431878][T15392] ? generic_file_direct_write+0x3e0/0x3e0 [ 627.437715][T15392] ? down_write+0x16e/0x200 [ 627.442279][T15392] ? file_update_time+0x98/0x1a0 [ 627.447275][T15392] shmem_file_write_iter+0xfb/0x120 [ 627.452520][T15392] vfs_write+0x46c/0x990 [ 627.456834][T15392] ? file_end_write+0x250/0x250 [ 627.461721][T15392] ? __fget_files+0x43d/0x4b0 [ 627.466450][T15392] ? __fdget_pos+0x2a3/0x330 [ 627.471089][T15392] ? ksys_write+0x75/0x260 [ 627.475537][T15392] ksys_write+0x150/0x260 [ 627.479907][T15392] ? __ia32_sys_read+0x90/0x90 [ 627.484715][T15392] ? lockdep_hardirqs_on+0x98/0x150 [ 627.489962][T15392] do_syscall_64+0x55/0xa0 [ 627.494426][T15392] ? clear_bhb_loop+0x40/0x90 [ 627.499154][T15392] ? clear_bhb_loop+0x40/0x90 [ 627.503889][T15392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 627.509834][T15392] RIP: 0033:0x7f6050b9c819 [ 627.514296][T15392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.533952][T15392] RSP: 002b:00007f6051a6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 627.542406][T15392] RAX: ffffffffffffffda RBX: 00007f6050e15fa0 RCX: 00007f6050b9c819 [ 627.550424][T15392] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000007 [ 627.558429][T15392] RBP: 00007f6051a6b090 R08: 0000000000000000 R09: 0000000000000000 [ 627.566435][T15392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 627.574437][T15392] R13: 00007f6050e16038 R14: 00007f6050e15fa0 R15: 00007ffd597dc878 [ 627.582487][T15392] [ 627.920318][T15403] tap0: tun_chr_ioctl cmd 35108 [ 629.290710][T15411] IPv6: pim6reg1: Disabled Multicast RS [ 629.404171][T15422] netlink: 'syz.0.3361': attribute type 51 has an invalid length. [ 629.624625][T15427] netlink: 'syz.2.3362': attribute type 25 has an invalid length. [ 629.646428][T15427] netlink: 'syz.2.3362': attribute type 28 has an invalid length. [ 630.615332][T15444] netlink: 'syz.3.3367': attribute type 28 has an invalid length. [ 630.646481][T15444] netlink: 'syz.3.3367': attribute type 29 has an invalid length. [ 630.655277][T15444] __nla_validate_parse: 4 callbacks suppressed [ 630.655320][T15444] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3367'. [ 630.695887][T15448] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3368'. [ 630.719304][T15448] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3368'. [ 630.747915][T15448] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3368'. [ 630.761224][T15448] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3368'. [ 631.102407][T15457] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3370'. [ 631.111626][T15457] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3370'. [ 631.197586][T15458] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3370'. [ 631.280756][T15462] netlink: 'syz.0.3371': attribute type 10 has an invalid length. [ 631.309239][T15462] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.318870][T15462] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.425417][T15461] netlink: 'syz.2.3372': attribute type 51 has an invalid length. [ 631.488392][T15457] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3370'. [ 631.635788][T15471] netlink: 'syz.3.3374': attribute type 21 has an invalid length. [ 631.654631][T15474] netlink: 'syz.2.3375': attribute type 21 has an invalid length. [ 631.662950][T15474] netlink: 'syz.2.3375': attribute type 20 has an invalid length. [ 631.987717][T15484] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3381'. [ 632.412032][T15490] netlink: 'syz.3.3386': attribute type 51 has an invalid length. [ 633.683953][T15505] syzkaller0: entered promiscuous mode [ 633.690246][T15505] syzkaller0: entered allmulticast mode [ 636.203497][T15537] validate_nla: 1 callbacks suppressed [ 636.203522][T15537] netlink: 'syz.1.3399': attribute type 4 has an invalid length. [ 636.248272][T15539] netlink: 'syz.2.3401': attribute type 21 has an invalid length. [ 636.271652][T15539] IPv6: NLM_F_CREATE should be specified when creating new route [ 636.395528][T15539] __nla_validate_parse: 6 callbacks suppressed [ 636.395592][T15539] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3401'. [ 637.485572][T15564] FAULT_INJECTION: forcing a failure. [ 637.485572][T15564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.559538][T15564] CPU: 0 PID: 15564 Comm: syz.2.3411 Not tainted syzkaller #0 [ 637.567106][T15564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 637.577231][T15564] Call Trace: [ 637.580595][T15564] [ 637.583595][T15564] dump_stack_lvl+0x18c/0x250 [ 637.588365][T15564] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.594620][T15564] ? show_regs_print_info+0x20/0x20 [ 637.599910][T15564] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 637.606200][T15564] should_fail_ex+0x39d/0x4d0 [ 637.610979][T15564] _copy_from_user+0x2f/0xe0 [ 637.615688][T15564] __sys_bpf+0x23e/0x890 [ 637.620037][T15564] ? bpf_link_show_fdinfo+0x390/0x390 [ 637.625556][T15564] ? lock_chain_count+0x20/0x20 [ 637.630492][T15564] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 637.636587][T15564] __x64_sys_bpf+0x7c/0x90 [ 637.641086][T15564] do_syscall_64+0x55/0xa0 [ 637.645574][T15564] ? clear_bhb_loop+0x40/0x90 [ 637.650332][T15564] ? clear_bhb_loop+0x40/0x90 [ 637.655099][T15564] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 637.661069][T15564] RIP: 0033:0x7fc7dad9c819 [ 637.665571][T15564] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.685271][T15564] RSP: 002b:00007fc7dbca2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 637.693781][T15564] RAX: ffffffffffffffda RBX: 00007fc7db015fa0 RCX: 00007fc7dad9c819 [ 637.701837][T15564] RDX: 0000000000000022 RSI: 0000200000000100 RDI: 000000000000000a [ 637.709898][T15564] RBP: 00007fc7dbca2090 R08: 0000000000000000 R09: 0000000000000000 [ 637.717949][T15564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.726002][T15564] R13: 00007fc7db016038 R14: 00007fc7db015fa0 R15: 00007ffda5b8f868 [ 637.734066][T15564] [ 637.810870][T15566] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.3412'. [ 638.305177][T15579] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3416'. [ 638.320946][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.338029][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.363732][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.426917][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.450585][T15579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.498962][T15579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.559243][T15579] batadv_slave_1: entered promiscuous mode [ 638.565785][T15586] netlink: 'syz.2.3418': attribute type 21 has an invalid length. [ 638.576564][T15586] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3418'. [ 638.903061][T15600] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3420'. [ 639.781940][T15613] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.3427'. [ 639.824615][T15613] netlink: 'syz.2.3427': attribute type 10 has an invalid length. [ 639.851417][T15613] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3427'. [ 640.124064][T15618] netlink: 'syz.0.3429': attribute type 1 has an invalid length. [ 640.143117][T15619] netlink: 'syz.3.3428': attribute type 1 has an invalid length. [ 640.250218][T15618] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.3429'. [ 640.286356][T15618] netlink: 'syz.0.3429': attribute type 1 has an invalid length. [ 641.650063][T15653] netlink: 'syz.2.3440': attribute type 4 has an invalid length. [ 641.706286][T15653] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3440'. [ 642.204923][T15676] FAULT_INJECTION: forcing a failure. [ 642.204923][T15676] name failslab, interval 1, probability 0, space 0, times 0 [ 642.226644][T15676] CPU: 0 PID: 15676 Comm: syz.1.3449 Not tainted syzkaller #0 [ 642.234179][T15676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 642.244288][T15676] Call Trace: [ 642.247609][T15676] [ 642.250580][T15676] dump_stack_lvl+0x18c/0x250 [ 642.255327][T15676] ? show_regs_print_info+0x20/0x20 [ 642.260586][T15676] ? load_image+0x420/0x420 [ 642.265150][T15676] ? __might_sleep+0xe0/0xe0 [ 642.269799][T15676] ? __lock_acquire+0x7d40/0x7d40 [ 642.274865][T15676] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 642.280299][T15676] should_fail_ex+0x39d/0x4d0 [ 642.285063][T15676] should_failslab+0x9/0x20 [ 642.289652][T15676] slab_pre_alloc_hook+0x59/0x310 [ 642.294734][T15676] kmem_cache_alloc_node+0x60/0x320 [ 642.299990][T15676] ? __alloc_skb+0x103/0x2c0 [ 642.304610][T15676] __alloc_skb+0x103/0x2c0 [ 642.309058][T15676] __ip6_append_data+0x2abc/0x3c50 [ 642.314232][T15676] ? inet6_sk+0xe0/0xe0 [ 642.318432][T15676] ? ip6_setup_cork+0xfe0/0xfe0 [ 642.323322][T15676] ip6_append_data+0x1b0/0x350 [ 642.328152][T15676] ? inet6_sk+0xe0/0xe0 [ 642.332350][T15676] ping_v6_sendmsg+0xe17/0x11f0 [ 642.337243][T15676] ? ping_v6_pre_connect+0x30/0x30 [ 642.342393][T15676] ? inet_sendmsg+0x14b/0x2f0 [ 642.347103][T15676] ? __local_bh_enable_ip+0x13a/0x1c0 [ 642.352523][T15676] ? lockdep_hardirqs_on+0x98/0x150 [ 642.357783][T15676] ? _local_bh_enable+0xa0/0xa0 [ 642.362669][T15676] ? do_raw_spin_unlock+0x121/0x230 [ 642.367947][T15676] ? inet_sendmsg+0x14b/0x2f0 [ 642.372679][T15676] ? inet_sendmsg+0x14b/0x2f0 [ 642.377396][T15676] ? inet_send_prepare+0x260/0x260 [ 642.382556][T15676] ____sys_sendmsg+0x5ba/0x960 [ 642.387359][T15676] ? __lock_acquire+0x7d40/0x7d40 [ 642.392422][T15676] ? __asan_memset+0x22/0x40 [ 642.397058][T15676] ? __sys_sendmsg_sock+0x30/0x30 [ 642.402113][T15676] ? __import_iovec+0x5f2/0x850 [ 642.407010][T15676] ? import_iovec+0x73/0xa0 [ 642.411566][T15676] ___sys_sendmsg+0x2a6/0x360 [ 642.416284][T15676] ? get_pid_task+0x20/0x1e0 [ 642.420927][T15676] ? __sys_sendmsg+0x2a0/0x2a0 [ 642.425739][T15676] ? __lock_acquire+0x7d40/0x7d40 [ 642.430820][T15676] __se_sys_sendmsg+0x1c2/0x2b0 [ 642.435708][T15676] ? __x64_sys_sendmsg+0x80/0x80 [ 642.440689][T15676] ? lockdep_hardirqs_on+0x98/0x150 [ 642.445932][T15676] do_syscall_64+0x55/0xa0 [ 642.450428][T15676] ? clear_bhb_loop+0x40/0x90 [ 642.455162][T15676] ? clear_bhb_loop+0x40/0x90 [ 642.459886][T15676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 642.465837][T15676] RIP: 0033:0x7f2090d9c819 [ 642.470283][T15676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.489941][T15676] RSP: 002b:00007f2091cfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.498401][T15676] RAX: ffffffffffffffda RBX: 00007f2091015fa0 RCX: 00007f2090d9c819 [ 642.506399][T15676] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 642.514422][T15676] RBP: 00007f2091cfb090 R08: 0000000000000000 R09: 0000000000000000 [ 642.522431][T15676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.530427][T15676] R13: 00007f2091016038 R14: 00007f2091015fa0 R15: 00007ffc3ac6a1c8 [ 642.538440][T15676] [ 644.612967][T15746] netlink: 'syz.2.3476': attribute type 4 has an invalid length. [ 644.643203][T15743] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.3475'. [ 644.791131][T15749] netlink: 'syz.3.3477': attribute type 10 has an invalid length. [ 644.863321][T15749] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 644.892126][T15749] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 644.900857][T15749] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 644.974622][T15755] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3480'. [ 645.218811][T15769] netlink: 'syz.0.3483': attribute type 29 has an invalid length. [ 645.228358][T15768] netlink: 'syz.0.3483': attribute type 29 has an invalid length. [ 645.407883][T15775] FAULT_INJECTION: forcing a failure. [ 645.407883][T15775] name failslab, interval 1, probability 0, space 0, times 0 [ 645.426330][T15775] CPU: 1 PID: 15775 Comm: syz.2.3485 Not tainted syzkaller #0 [ 645.433880][T15775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 645.443987][T15775] Call Trace: [ 645.447303][T15775] [ 645.450274][T15775] dump_stack_lvl+0x18c/0x250 [ 645.455018][T15775] ? show_regs_print_info+0x20/0x20 [ 645.460277][T15775] ? load_image+0x420/0x420 [ 645.464853][T15775] should_fail_ex+0x39d/0x4d0 [ 645.469600][T15775] should_failslab+0x9/0x20 [ 645.474160][T15775] slab_pre_alloc_hook+0x59/0x310 [ 645.479274][T15775] ? __build_skb_around+0x255/0x3d0 [ 645.484565][T15775] kmem_cache_alloc+0x5a/0x2d0 [ 645.489381][T15775] ? _sctp_make_chunk+0x14e/0x420 [ 645.494448][T15775] _sctp_make_chunk+0x14e/0x420 [ 645.499351][T15775] sctp_make_init+0x5f3/0xfc0 [ 645.504079][T15775] ? sctp_addto_chunk+0x230/0x230 [ 645.509139][T15775] ? kernel_text_address+0xa0/0xd0 [ 645.514336][T15775] ? __kernel_text_address+0xd/0x30 [ 645.519570][T15775] ? stack_trace_save+0x100/0x100 [ 645.524627][T15775] ? arch_stack_walk+0x160/0x190 [ 645.529601][T15775] sctp_sf_do_prm_asoc+0xd2/0x3e0 [ 645.534696][T15775] sctp_do_sm+0x23a/0x5a60 [ 645.539153][T15775] ? sctp_cname+0x110/0x110 [ 645.543698][T15775] ? __stack_depot_save+0x1f/0x630 [ 645.548870][T15775] ? kasan_set_track+0x4e/0x70 [ 645.553680][T15775] ? __kasan_kmalloc+0x8f/0xa0 [ 645.558493][T15775] ? sctp_stream_init_ext+0x57/0x170 [ 645.563816][T15775] ? sctp_sendmsg_to_asoc+0x1324/0x1830 [ 645.569407][T15775] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 645.575329][T15775] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 645.580396][T15775] ? do_syscall_64+0x55/0xa0 [ 645.585012][T15775] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.591161][T15775] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 645.597019][T15775] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 645.602522][T15775] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 645.607954][T15775] ? __asan_memcpy+0x40/0x70 [ 645.612592][T15775] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 645.618012][T15775] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 645.623869][T15775] ? __sctp_connect+0xd80/0xd80 [ 645.628768][T15775] ? __local_bh_enable_ip+0x13a/0x1c0 [ 645.634173][T15775] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 645.639749][T15775] ? security_sctp_bind_connect+0x89/0xb0 [ 645.645527][T15775] sctp_sendmsg+0x1b83/0x28c0 [ 645.650256][T15775] ? sctp_getsockopt+0xb60/0xb60 [ 645.655320][T15775] ? aa_sk_perm+0x83c/0x970 [ 645.659884][T15775] ? aa_af_perm+0x330/0x330 [ 645.664423][T15775] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 645.670877][T15775] ? sock_rps_record_flow+0x19/0x3f0 [ 645.676193][T15775] ? inet_sendmsg+0xe9/0x2f0 [ 645.680844][T15775] ? inet_send_prepare+0x260/0x260 [ 645.685989][T15775] ____sys_sendmsg+0x5ba/0x960 [ 645.690780][T15775] ? __lock_acquire+0x7d40/0x7d40 [ 645.695856][T15775] ? __asan_memset+0x22/0x40 [ 645.700474][T15775] ? __sys_sendmsg_sock+0x30/0x30 [ 645.705514][T15775] ? __import_iovec+0x5f2/0x850 [ 645.710395][T15775] ? import_iovec+0x73/0xa0 [ 645.714933][T15775] ___sys_sendmsg+0x2a6/0x360 [ 645.719637][T15775] ? get_pid_task+0x20/0x1e0 [ 645.724265][T15775] ? __sys_sendmsg+0x2a0/0x2a0 [ 645.729076][T15775] ? __lock_acquire+0x7d40/0x7d40 [ 645.734177][T15775] __se_sys_sendmsg+0x1c2/0x2b0 [ 645.739084][T15775] ? __x64_sys_sendmsg+0x80/0x80 [ 645.744078][T15775] ? lockdep_hardirqs_on+0x98/0x150 [ 645.749346][T15775] do_syscall_64+0x55/0xa0 [ 645.753797][T15775] ? clear_bhb_loop+0x40/0x90 [ 645.758530][T15775] ? clear_bhb_loop+0x40/0x90 [ 645.763259][T15775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.769202][T15775] RIP: 0033:0x7fc7dad9c819 [ 645.773669][T15775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.793347][T15775] RSP: 002b:00007fc7dbca2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.801791][T15775] RAX: ffffffffffffffda RBX: 00007fc7db015fa0 RCX: 00007fc7dad9c819 [ 645.809815][T15775] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 645.817829][T15775] RBP: 00007fc7dbca2090 R08: 0000000000000000 R09: 0000000000000000 [ 645.825830][T15775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 645.833829][T15775] R13: 00007fc7db016038 R14: 00007fc7db015fa0 R15: 00007ffda5b8f868 [ 645.841869][T15775] [ 646.237734][T15785] FAULT_INJECTION: forcing a failure. [ 646.237734][T15785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.311396][T15785] CPU: 1 PID: 15785 Comm: syz.0.3490 Not tainted syzkaller #0 [ 646.319035][T15785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 646.329145][T15785] Call Trace: [ 646.332470][T15785] [ 646.335440][T15785] dump_stack_lvl+0x18c/0x250 [ 646.340184][T15785] ? show_regs_print_info+0x20/0x20 [ 646.345482][T15785] ? load_image+0x420/0x420 [ 646.350041][T15785] ? __might_fault+0xaa/0x120 [ 646.354757][T15785] ? __lock_acquire+0x7d40/0x7d40 [ 646.359829][T15785] should_fail_ex+0x39d/0x4d0 [ 646.364584][T15785] _copy_from_user+0x2f/0xe0 [ 646.369225][T15785] bpf_prog_test_run_skb+0x266/0x12b0 [ 646.374636][T15785] ? __fget_files+0x28/0x4b0 [ 646.379276][T15785] ? __fget_files+0x28/0x4b0 [ 646.383953][T15785] ? __fget_files+0x43d/0x4b0 [ 646.388684][T15785] ? cpu_online+0x60/0x60 [ 646.393051][T15785] bpf_prog_test_run+0x321/0x390 [ 646.398028][T15785] __sys_bpf+0x49d/0x890 [ 646.402325][T15785] ? bpf_link_show_fdinfo+0x390/0x390 [ 646.407746][T15785] ? lock_chain_count+0x20/0x20 [ 646.412645][T15785] __x64_sys_bpf+0x7c/0x90 [ 646.417095][T15785] do_syscall_64+0x55/0xa0 [ 646.421557][T15785] ? clear_bhb_loop+0x40/0x90 [ 646.426269][T15785] ? clear_bhb_loop+0x40/0x90 [ 646.430986][T15785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.436909][T15785] RIP: 0033:0x7f6050b9c819 [ 646.441347][T15785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.461001][T15785] RSP: 002b:00007f6051a6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.469456][T15785] RAX: ffffffffffffffda RBX: 00007f6050e15fa0 RCX: 00007f6050b9c819 [ 646.477459][T15785] RDX: 0000000000000022 RSI: 0000200000000100 RDI: 000000000000000a [ 646.485469][T15785] RBP: 00007f6051a6b090 R08: 0000000000000000 R09: 0000000000000000 [ 646.493462][T15785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.501457][T15785] R13: 00007f6050e16038 R14: 00007f6050e15fa0 R15: 00007ffd597dc878 [ 646.509464][T15785] [ 646.615686][T15792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3492'. [ 646.644624][T15792] netlink: 'syz.3.3492': attribute type 12 has an invalid length. [ 646.662195][T15792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3492'. [ 646.855135][T15800] netlink: 'syz.3.3495': attribute type 10 has an invalid length. [ 646.873661][T15800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3495'. [ 646.894548][T15800] netlink: 'syz.3.3495': attribute type 10 has an invalid length. [ 646.902894][T15800] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3495'. [ 647.200099][T15807] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3498'. [ 647.279998][T15813] netlink: 'syz.0.3501': attribute type 10 has an invalid length. [ 647.299882][T15813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3501'. [ 647.606407][T15830] netlink: 'syz.3.3507': attribute type 10 has an invalid length. [ 647.639601][T15830] bond0: (slave netdevsim0): Releasing backup interface [ 647.651698][T15830] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 647.663314][T15830] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 647.710411][T15830] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 647.725207][T15830] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 647.734319][T15830] team0: Port device netdevsim0 added [ 647.868013][T15836] netlink: 'syz.1.3510': attribute type 1 has an invalid length. [ 647.876032][T15836] netlink: 'syz.1.3510': attribute type 4 has an invalid length. [ 647.893193][T15836] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3510'. [ 648.665922][T15850] netlink: 'syz.3.3514': attribute type 21 has an invalid length. [ 648.695832][T15850] IPv6: NLM_F_CREATE should be specified when creating new route [ 648.863203][T15850] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3514'. [ 649.425875][T15863] netlink: 'syz.1.3518': attribute type 9 has an invalid length. [ 649.446509][T15863] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3518'. [ 649.842923][T15872] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3523'. [ 649.853327][T15872] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.3523'. [ 651.425068][T15901] netlink: 'syz.0.3533': attribute type 21 has an invalid length. [ 651.456616][T15901] IPv6: NLM_F_CREATE should be specified when creating new route [ 651.614047][T15901] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3533'. [ 652.102622][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 7 [ 652.134840][T15918] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3541'. [ 652.457446][T15925] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3542'. [ 652.785860][T15935] netlink: 'syz.2.3546': attribute type 10 has an invalid length. [ 654.318007][T15952] netlink: 'syz.1.3552': attribute type 21 has an invalid length. [ 657.311062][T15993] netlink: 'syz.1.3560': attribute type 10 has an invalid length. [ 657.390108][T15988] netlink: 'syz.3.3561': attribute type 10 has an invalid length. [ 657.400413][T15988] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3561'. [ 657.820257][T15999] netlink: 'syz.2.3564': attribute type 4 has an invalid length. [ 657.837670][T15999] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3564'. [ 658.601024][T16012] syzkaller0: entered promiscuous mode [ 658.620637][T16012] syzkaller0: entered allmulticast mode [ 658.855434][T16021] netlink: 'syz.1.3572': attribute type 9 has an invalid length. [ 658.872091][T16021] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3572'. [ 659.165672][T16025] netlink: 'syz.1.3572': attribute type 10 has an invalid length. [ 659.278508][T16025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.309415][T16025] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 659.660397][T16028] netlink: 'syz.2.3574': attribute type 10 has an invalid length. [ 659.682174][T16028] team0: Port device netdevsim0 added [ 659.690300][T16032] netlink: 'syz.0.3576': attribute type 10 has an invalid length. [ 659.705935][T16032] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3576'. [ 660.300457][T16051] syzkaller0: entered promiscuous mode [ 660.315729][T16051] syzkaller0: entered allmulticast mode [ 661.234407][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 7 [ 661.272908][T16070] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3591'. [ 662.463991][T16101] FAULT_INJECTION: forcing a failure. [ 662.463991][T16101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.498612][T16101] CPU: 1 PID: 16101 Comm: syz.0.3602 Not tainted syzkaller #0 [ 662.506181][T16101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 662.516386][T16101] Call Trace: [ 662.519722][T16101] [ 662.522711][T16101] dump_stack_lvl+0x18c/0x250 [ 662.527474][T16101] ? show_regs_print_info+0x20/0x20 [ 662.532781][T16101] ? load_image+0x420/0x420 [ 662.537380][T16101] ? __lock_acquire+0x7d40/0x7d40 [ 662.542467][T16101] ? __virt_addr_valid+0x18c/0x540 [ 662.547675][T16101] should_fail_ex+0x39d/0x4d0 [ 662.552456][T16101] _copy_to_user+0x2f/0xa0 [ 662.556971][T16101] bpf_vlog_reverse_ubuf+0x2d0/0x3c0 [ 662.562370][T16101] bpf_vlog_finalize+0x1c2/0x3f0 [ 662.567413][T16101] btf_new_fd+0x4ca/0x9f0 [ 662.571853][T16101] ? bpf_btf_show_fdinfo+0x80/0x80 [ 662.577089][T16101] ? capable+0x88/0xe0 [ 662.581227][T16101] __sys_bpf+0x670/0x890 [ 662.585547][T16101] ? bpf_link_show_fdinfo+0x390/0x390 [ 662.591021][T16101] ? lock_chain_count+0x20/0x20 [ 662.595957][T16101] __x64_sys_bpf+0x7c/0x90 [ 662.600432][T16101] do_syscall_64+0x55/0xa0 [ 662.604900][T16101] ? clear_bhb_loop+0x40/0x90 [ 662.609631][T16101] ? clear_bhb_loop+0x40/0x90 [ 662.614361][T16101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.620316][T16101] RIP: 0033:0x7f6050b9c819 [ 662.624882][T16101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.644543][T16101] RSP: 002b:00007f6051a6b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 662.653103][T16101] RAX: ffffffffffffffda RBX: 00007f6050e15fa0 RCX: 00007f6050b9c819 [ 662.661494][T16101] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 662.669512][T16101] RBP: 00007f6051a6b090 R08: 0000000000000000 R09: 0000000000000000 [ 662.677535][T16101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 662.685550][T16101] R13: 00007f6050e16038 R14: 00007f6050e15fa0 R15: 00007ffd597dc878 [ 662.693651][T16101] [ 663.193212][T16113] netlink: 'syz.1.3606': attribute type 4 has an invalid length. [ 663.246895][T16113] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3606'. [ 663.806631][T16121] netlink: 'syz.0.3612': attribute type 21 has an invalid length. [ 664.459729][T16137] netlink: 'syz.1.3617': attribute type 9 has an invalid length. [ 664.493298][T16137] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3617'. [ 664.710676][T16138] netlink: 'syz.1.3617': attribute type 9 has an invalid length. [ 664.736320][T16138] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3617'. [ 664.870235][T16143] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3619'. [ 665.186081][T16152] netlink: 'syz.2.3622': attribute type 4 has an invalid length. [ 665.206536][T16152] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3622'. [ 666.305220][T16156] netlink: 'syz.0.3624': attribute type 4 has an invalid length. [ 666.316515][T16156] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3624'. [ 666.626649][T16162] netlink: 'syz.1.3626': attribute type 29 has an invalid length. [ 666.648124][T16162] netlink: 'syz.1.3626': attribute type 29 has an invalid length. [ 667.177960][T16174] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3631'. [ 672.263467][T16242] syzkaller0: entered promiscuous mode [ 672.396523][T16242] syzkaller0: entered allmulticast mode [ 684.949735][T14718] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 684.962794][T14718] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 685.003708][T14718] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 685.038361][T14718] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 685.046661][T14718] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 685.054536][T14718] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 685.881617][T11603] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.000509][T16300] chnl_net:caif_netlink_parms(): no params data found [ 686.118621][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.125010][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.188263][T11603] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.320277][T11603] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.771110][T16325] syzkaller0: entered promiscuous mode [ 686.803736][T16325] syzkaller0: entered allmulticast mode [ 686.914558][T16300] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.946428][T16300] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.953827][T16300] bridge_slave_0: entered allmulticast mode [ 686.981787][T16300] bridge_slave_0: entered promiscuous mode [ 687.009946][T16300] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.026614][T16300] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.033915][T16300] bridge_slave_1: entered allmulticast mode [ 687.067932][T16300] bridge_slave_1: entered promiscuous mode [ 687.142638][T11603] team0: Port device netdevsim0 removed [ 687.149167][ T5782] Bluetooth: hci4: command tx timeout [ 687.188638][T11603] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.641643][T14718] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 687.651300][T14718] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 687.673017][T14718] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 687.692338][T14718] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 687.704013][T14718] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 687.711695][T14718] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 689.227001][T14718] Bluetooth: hci4: command tx timeout [ 689.791052][T14718] Bluetooth: hci0: command tx timeout [ 690.344533][T16300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.377685][T16300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.520151][T16300] team0: Port device team_slave_0 added [ 690.560044][T16300] team0: Port device team_slave_1 added [ 690.615380][T11603] tipc: Left network mode [ 690.664275][T16300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.692065][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.719246][T16300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.732432][T16300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.739756][T16300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.786274][T16300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.186627][T16300] hsr_slave_0: entered promiscuous mode [ 691.207159][T16300] hsr_slave_1: entered promiscuous mode [ 691.307359][T14718] Bluetooth: hci4: command tx timeout [ 691.552287][T16334] chnl_net:caif_netlink_parms(): no params data found [ 691.810780][T16334] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.818150][T16334] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.825400][T16334] bridge_slave_0: entered allmulticast mode [ 691.834686][T16334] bridge_slave_0: entered promiscuous mode [ 691.864801][T16334] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.872211][T14718] Bluetooth: hci0: command tx timeout [ 691.878063][T16334] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.885301][T16334] bridge_slave_1: entered allmulticast mode [ 691.892705][T16334] bridge_slave_1: entered promiscuous mode [ 691.959636][T16334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.034862][T16334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.161059][T16334] team0: Port device team_slave_0 added [ 692.188628][T16334] team0: Port device team_slave_1 added [ 692.224193][T16334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.232348][T16334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.261737][T16334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.287318][T16334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.294315][T16334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.321308][T16334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.455734][T16300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 692.481557][T16334] hsr_slave_0: entered promiscuous mode [ 692.491573][T16334] hsr_slave_1: entered promiscuous mode [ 692.498555][T16334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.506653][T16334] Cannot create hsr debugfs directory [ 692.528437][T16300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 692.542008][T16300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 692.651300][T16300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 692.795962][T11603] hsr_slave_0: left promiscuous mode [ 692.802474][T11603] hsr_slave_1: left promiscuous mode [ 692.822881][T11603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 692.830769][T11603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.841369][T11603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.852522][T11603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.864739][T11603] batman_adv: batadv0: Removing interface: virt_wifi0 [ 692.880035][T11603] bridge_slave_1: left allmulticast mode [ 692.885750][T11603] bridge_slave_1: left promiscuous mode [ 692.895574][T11603] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.913971][T11603] bridge_slave_0: left allmulticast mode [ 692.924856][T11603] bridge_slave_0: left promiscuous mode [ 692.935737][T11603] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.975669][T11603] veth1_vlan: left promiscuous mode [ 692.982111][T11603] veth0_vlan: left promiscuous mode [ 693.395678][T14718] Bluetooth: hci4: command tx timeout [ 693.687229][T11603] team0 (unregistering): Port device team_slave_1 removed [ 693.744895][T11603] team0 (unregistering): Port device team_slave_0 removed [ 693.946604][T14718] Bluetooth: hci0: command tx timeout [ 694.423013][T16334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 694.439552][T16334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 694.453349][T16334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 694.464702][T16334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 694.485476][T16300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.528087][T16300] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.553538][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.560753][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.590767][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.598009][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.711409][T16334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.780062][T11603] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.804460][T16334] 8021q: adding VLAN 0 to HW filter on device team0 [ 694.860130][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.867352][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.881661][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.888900][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.917910][T11603] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.004013][T11603] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.085412][T11603] team0: Port device netdevsim0 removed [ 695.095928][T11603] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.147525][T16300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.315192][T16300] veth0_vlan: entered promiscuous mode [ 695.398520][T16300] veth1_vlan: entered promiscuous mode [ 695.429549][T16334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.619435][T16300] veth0_macvtap: entered promiscuous mode [ 695.640713][T16300] veth1_macvtap: entered promiscuous mode [ 695.776137][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.793400][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.803964][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.815409][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.831124][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.842576][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.860920][T16300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.919060][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.929870][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.941027][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.952416][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.963245][T16300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.974138][T16300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.989746][T16300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.015674][T16300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.027496][T14718] Bluetooth: hci0: command tx timeout [ 696.031183][T16300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.043998][T16300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.053920][T16300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.335540][T16334] veth0_vlan: entered promiscuous mode [ 696.394419][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.416620][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.471576][T16334] veth1_vlan: entered promiscuous mode [ 696.570332][T11609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.583956][T11609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.805794][T16334] veth0_macvtap: entered promiscuous mode [ 696.941447][T16334] veth1_macvtap: entered promiscuous mode [ 697.049883][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.063853][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.088921][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.103903][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.115423][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.126743][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.137152][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 697.148869][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 697.163561][T16334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.209010][T11603] hsr_slave_0: left promiscuous mode [ 697.215302][T11603] hsr_slave_1: left promiscuous mode [ 697.222742][T11603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 697.235174][T11603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 697.245443][T11603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 697.253443][T11603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.266986][T11603] batman_adv: batadv0: Removing interface: virt_wifi0 [ 697.279343][T11603] bridge_slave_1: left allmulticast mode [ 697.285158][T11603] bridge_slave_1: left promiscuous mode [ 697.292051][T11603] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.301785][T11603] bridge_slave_0: left allmulticast mode [ 697.308058][T11603] bridge_slave_0: left promiscuous mode [ 697.314974][T11603] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.384310][T11603] veth1_vlan: left promiscuous mode [ 697.390076][T11603] veth0_vlan: left promiscuous mode [ 699.843409][T11603] team0 (unregistering): Port device team_slave_1 removed [ 699.892116][T11603] team0 (unregistering): Port device team_slave_0 removed [ 699.935815][T11603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 700.280861][T11603] team0 (unregistering): Port device bridge0 removed [ 700.313685][T11603] bond0 (unregistering): Released all slaves [ 700.428374][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.445518][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.456031][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.486251][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.496135][T16334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.522724][T16334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.534708][T16334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.579558][T16334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.595548][T16334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.605812][T16334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.614808][T16334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.750568][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.758704][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.849489][T11604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.862547][T11604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.204841][T16470] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.212725][T16470] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.232084][T16470] bridge0: entered allmulticast mode [ 705.983664][T16557] syzkaller0: entered promiscuous mode [ 706.026557][T16557] syzkaller0: entered allmulticast mode [ 706.543521][T16574] syzkaller0: create flow: hash 2790095116 index 1 [ 706.719083][T16573] syzkaller0: entered promiscuous mode [ 706.731877][T16573] syzkaller0: entered allmulticast mode [ 708.770643][T16574] syzkaller0: delete flow: hash 2790095116 index 1 [ 712.219205][T16633] syzkaller0: entered promiscuous mode [ 712.224905][T16633] syzkaller0: entered allmulticast mode [ 718.847685][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 718.858178][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 718.866259][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 718.875083][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 718.884351][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 718.892150][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 720.432209][ T2906] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.634278][ T2906] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.755163][ T2906] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.885275][ T2906] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 720.895402][ T2906] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 720.909516][ T2906] team0: Port device netdevsim0 removed [ 720.930199][ T2906] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.073609][T16731] syzkaller0: entered promiscuous mode [ 721.094799][T16731] syzkaller0: entered allmulticast mode [ 721.315792][ T5782] Bluetooth: hci2: command tx timeout [ 721.396064][T16743] veth1_macvtap: entered allmulticast mode [ 721.476994][T16705] chnl_net:caif_netlink_parms(): no params data found [ 721.542486][ T2906] tipc: Left network mode [ 723.389983][ T5782] Bluetooth: hci2: command tx timeout [ 724.082133][T16705] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.089534][T16705] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.097750][T16705] bridge_slave_0: entered allmulticast mode [ 724.105129][T16705] bridge_slave_0: entered promiscuous mode [ 724.218161][T16705] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.243198][T16705] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.272618][T16705] bridge_slave_1: entered allmulticast mode [ 724.299420][T16705] bridge_slave_1: entered promiscuous mode [ 724.900396][T16705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.963076][T16705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.283432][T16705] team0: Port device team_slave_0 added [ 725.308967][T16705] team0: Port device team_slave_1 added [ 725.466328][ T5782] Bluetooth: hci2: command tx timeout [ 725.522576][T16705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.534017][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.576677][T16705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.669121][T16705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.693499][T16705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.734419][T16705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.822039][T16790] syzkaller0: entered promiscuous mode [ 725.829762][T16790] syzkaller0: entered allmulticast mode [ 727.549224][ T5782] Bluetooth: hci2: command tx timeout [ 728.499438][ T2906] bond0: (slave wlan1): Releasing backup interface [ 728.518669][ T2906] mac80211_hwsim hwsim16 wlan1 (unregistering): left promiscuous mode [ 728.535941][ T2906] mac80211_hwsim hwsim16 wlan1 (unregistering): left allmulticast mode [ 728.618708][T16705] hsr_slave_0: entered promiscuous mode [ 728.626861][T16705] hsr_slave_1: entered promiscuous mode [ 728.634333][T16705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 728.648536][T16705] Cannot create hsr debugfs directory [ 729.258090][ T2906] hsr_slave_0: left promiscuous mode [ 729.299648][ T2906] hsr_slave_1: left promiscuous mode [ 729.386131][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.393804][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.457299][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.464817][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.507403][ T2906] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 729.526346][ T2906] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 729.566610][ T2906] batman_adv: batadv0: Removing interface: virt_wifi0 [ 729.598595][ T2906] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 729.605725][ T2906] batman_adv: batadv0: Removing interface: veth0_vlan [ 729.641467][ T2906] bridge0: port 4(team0) entered disabled state [ 729.774512][ T2906] bridge0: port 3(bond0) entered disabled state [ 729.883834][ T2906] bridge_slave_1: left allmulticast mode [ 729.933805][ T2906] bridge_slave_1: left promiscuous mode [ 729.961932][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.020089][ T2906] bridge_slave_0: left allmulticast mode [ 730.076911][ T2906] bridge_slave_0: left promiscuous mode [ 730.082859][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.176090][ T2906] veth1_vlan: left promiscuous mode [ 730.198405][ T2906] veth0_vlan: left promiscuous mode [ 730.624065][ T2906] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 730.632657][ T2906] geneve0 (unregistering): left allmulticast mode [ 731.030835][ T2906] team_slave_1 (unregistering): left promiscuous mode [ 731.038456][ T2906] team_slave_1 (unregistering): left allmulticast mode [ 731.049558][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 731.093259][ T2906] C (unregistering): left promiscuous mode [ 731.101157][ T2906] C (unregistering): left allmulticast mode [ 731.111640][ T2906] team0 (unregistering): Port device C removed [ 731.154748][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.166041][ T2906] bond_slave_1 (unregistering): left promiscuous mode [ 731.173330][ T2906] bond_slave_1 (unregistering): left allmulticast mode [ 731.219468][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.231402][ T2906] bond_slave_0 (unregistering): left promiscuous mode [ 731.238669][ T2906] bond_slave_0 (unregistering): left allmulticast mode [ 731.580118][ T2906] bond0 (unregistering): Released all slaves [ 732.841577][T16705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 732.905729][T16705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 732.939945][T16705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 732.973811][T16705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 733.393662][T16705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.419521][T16705] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.432075][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.439298][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 733.471871][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.479111][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.611094][T16705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 733.624176][T16705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 733.930744][T16705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.025877][T16705] veth0_vlan: entered promiscuous mode [ 734.062575][T16705] veth1_vlan: entered promiscuous mode [ 734.128463][T16705] veth0_macvtap: entered promiscuous mode [ 734.143516][T16705] veth1_macvtap: entered promiscuous mode [ 734.184063][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.195216][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.205562][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.216629][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.232860][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.243785][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.260009][T16705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.283340][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.294948][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.307446][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.317974][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.331609][T16705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.344047][T16705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.363124][T16705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.375605][T16705] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.385416][T16705] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.394944][T16705] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.403999][T16705] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.518665][T11604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.536734][T11604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.584487][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 734.600544][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 735.507643][T16952] syzkaller0: entered promiscuous mode [ 735.535315][T16952] syzkaller0: entered allmulticast mode [ 744.087244][T17134] syzkaller0: entered promiscuous mode [ 744.092906][T17134] syzkaller0: entered allmulticast mode [ 747.554696][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.561193][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.288630][T17165] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.983513][T17206] syzkaller0: entered promiscuous mode [ 750.044188][T17206] syzkaller0: entered allmulticast mode [ 752.604482][T17228] syzkaller0: entered promiscuous mode [ 752.610118][T17228] syzkaller0: entered allmulticast mode [ 756.272382][T17306] syzkaller0: entered promiscuous mode [ 756.288159][T17306] syzkaller0: entered allmulticast mode [ 757.287963][T17314] syzkaller0: entered promiscuous mode [ 757.293719][T17314] syzkaller0: entered allmulticast mode [ 765.903130][T17424] veth0_vlan: entered allmulticast mode [ 766.556002][T17425] veth0_vlan: left promiscuous mode [ 766.564247][T17425] veth0_vlan: entered promiscuous mode [ 766.574455][T17426] sit0: entered allmulticast mode [ 766.599909][T17424] sit0: entered promiscuous mode [ 768.242934][T17445] veth0_vlan: left promiscuous mode [ 768.277083][T17445] veth0_vlan: entered promiscuous mode [ 768.368791][T17447] sit0: left promiscuous mode [ 768.940714][T17466] veth0_vlan: entered allmulticast mode [ 769.869534][T17472] veth0_vlan: left promiscuous mode [ 769.896702][T17472] veth0_vlan: entered promiscuous mode [ 769.930147][T17473] sit0: entered allmulticast mode [ 769.965062][T17476] sit0: entered promiscuous mode [ 770.318416][T17490] syzkaller0: entered promiscuous mode [ 770.324077][T17490] syzkaller0: entered allmulticast mode [ 781.213096][T17577] veth0_vlan: entered allmulticast mode [ 781.516428][T17580] veth0_vlan: left promiscuous mode [ 781.560534][T17580] veth0_vlan: entered promiscuous mode [ 781.724166][T17581] sit0: entered allmulticast mode [ 781.983530][T17577] sit0: entered promiscuous mode [ 784.431930][T14718] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 784.448216][T14718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 784.459799][T14718] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 784.472419][T14718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 784.481662][T14718] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 784.490265][T14718] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 786.092343][T17626] chnl_net:caif_netlink_parms(): no params data found [ 786.179737][T11605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.287684][T11605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.323217][T17626] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.331337][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.339274][T17626] bridge_slave_0: entered allmulticast mode [ 786.352302][T17626] bridge_slave_0: entered promiscuous mode [ 786.392451][T11605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.408688][T17626] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.415975][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.423816][T17626] bridge_slave_1: entered allmulticast mode [ 786.431838][T17626] bridge_slave_1: entered promiscuous mode [ 786.503329][T11605] team0: Port device netdevsim0 removed [ 786.512022][T11605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.539516][T17626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.553026][T17626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 786.586967][T14718] Bluetooth: hci3: command tx timeout [ 786.625100][T17626] team0: Port device team_slave_0 added [ 786.633983][T17626] team0: Port device team_slave_1 added [ 786.668242][T17626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.675285][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.701928][T17626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.715169][T17626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.722399][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.748567][T17626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.800353][T17626] hsr_slave_0: entered promiscuous mode [ 786.807283][T17626] hsr_slave_1: entered promiscuous mode [ 786.813424][T17626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 786.821901][T17626] Cannot create hsr debugfs directory [ 787.008882][T11605] tipc: Left network mode [ 788.263199][T17626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 788.278471][T17626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 788.294305][T17626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 788.319855][T11605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.327453][T11605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.335321][T11605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 788.343211][T11605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 788.353674][T11605] bridge_slave_1: left allmulticast mode [ 788.359874][T11605] bridge_slave_1: left promiscuous mode [ 788.365673][T11605] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.380385][T11605] bridge_slave_0: left allmulticast mode [ 788.386074][T11605] bridge_slave_0: left promiscuous mode [ 788.392474][T11605] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.415624][T11605] veth0_macvtap: left promiscuous mode [ 788.421420][T11605] veth1_vlan: left promiscuous mode [ 788.427784][T11605] veth0_vlan: left promiscuous mode [ 788.666492][T14718] Bluetooth: hci3: command tx timeout [ 788.998733][T11605] team0 (unregistering): Port device team_slave_1 removed [ 789.051305][T11605] team0 (unregistering): Port device team_slave_0 removed [ 789.101013][T11605] bond0 (unregistering): (slave 0.&nr): Releasing backup interface [ 789.153869][T11605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.450598][T11605] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 789.581091][T11605] bond0 (unregistering): Released all slaves [ 789.690671][T17626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 789.806093][T17626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.830146][T17626] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.843751][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.850979][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.888649][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.895877][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.966311][T17626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 790.180680][T17626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.229251][T17626] veth0_vlan: entered promiscuous mode [ 790.243941][T17626] veth1_vlan: entered promiscuous mode [ 790.276624][T17626] veth0_macvtap: entered promiscuous mode [ 790.287503][T17626] veth1_macvtap: entered promiscuous mode [ 790.308346][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.320172][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.330472][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.343529][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.354613][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.368198][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.379827][T17626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.390816][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.401912][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.412036][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.422572][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.433145][T17626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.443685][T17626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.457942][T17626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.474738][T17626] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.483984][T17626] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.493876][T17626] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.510452][T17626] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.597864][T11609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.616100][T11609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.642354][T11605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.650498][T11605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.746288][T14718] Bluetooth: hci3: command tx timeout [ 791.709155][T17695] syzkaller0: entered promiscuous mode [ 791.725186][T17695] syzkaller0: entered allmulticast mode [ 792.022222][T17703] syzkaller0: entered promiscuous mode [ 792.028093][T17703] syzkaller0: entered allmulticast mode [ 792.829781][T14718] Bluetooth: hci3: command tx timeout [ 797.229642][T17743] syzkaller0: entered promiscuous mode [ 797.235288][T17743] syzkaller0: entered allmulticast mode [ 797.298973][T17745] syzkaller0: entered promiscuous mode [ 797.304658][T17745] syzkaller0: entered allmulticast mode [ 797.492382][T17752] syzkaller0: entered promiscuous mode [ 797.499425][T17752] syzkaller0: entered allmulticast mode [ 803.551678][T17778] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 803.559019][T17778] syzkaller1: group set to 1 [ 804.190394][T17796] syzkaller0: entered promiscuous mode [ 804.229322][T17796] syzkaller0: entered allmulticast mode [ 804.380439][T17802] syzkaller0: entered promiscuous mode [ 804.393832][T17802] syzkaller0: entered allmulticast mode [ 808.991758][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.015393][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.578895][T17808] syzkaller0: entered promiscuous mode [ 809.584480][T17808] syzkaller0: entered allmulticast mode [ 811.085297][T17836] Bluetooth: hci4: command 0x0406 tx timeout [ 811.096103][T17835] Bluetooth: hci0: command 0x0406 tx timeout [ 814.419362][T17846] syzkaller0: entered promiscuous mode [ 814.425129][T17846] syzkaller0: entered allmulticast mode [ 814.522814][T17851] syzkaller0: entered promiscuous mode [ 814.537925][T17851] syzkaller0: entered allmulticast mode [ 822.906062][T17919] syzkaller0: entered promiscuous mode [ 822.918121][T17919] syzkaller0: entered allmulticast mode [ 826.949125][T17963] syzkaller0: entered promiscuous mode [ 826.963034][T17963] syzkaller0: entered allmulticast mode [ 829.894377][T17999] syzkaller0: entered promiscuous mode [ 829.906227][T17999] syzkaller0: entered allmulticast mode [ 833.862586][T18046] IPv6: pim6reg1: Disabled Multicast RS [ 834.828299][T18071] syzkaller0: entered promiscuous mode [ 834.833868][T18071] syzkaller0: entered allmulticast mode [ 838.132998][T18089] syzkaller0: entered promiscuous mode [ 838.140251][T18089] syzkaller0: entered allmulticast mode [ 838.230413][T18102] bridge0: port 3(hsr_slave_1) entered blocking state [ 838.239304][T18102] bridge0: port 3(hsr_slave_1) entered disabled state [ 838.251294][T18102] hsr_slave_1: entered allmulticast mode [ 838.264322][T18102] hsr_slave_1: left allmulticast mode [ 841.541067][T18151] syzkaller0: entered promiscuous mode [ 841.607230][T18151] syzkaller0: entered allmulticast mode [ 841.726031][T18156] syzkaller0: entered promiscuous mode [ 841.733734][T18156] syzkaller0: entered allmulticast mode [ 841.790346][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 846.495811][T18191] wg2: entered promiscuous mode [ 846.504710][T18191] wg2: entered allmulticast mode [ 847.218691][T18217] syzkaller0: entered promiscuous mode [ 847.228342][T18217] syzkaller0: entered allmulticast mode [ 850.559504][T18236] vlan1: entered allmulticast mode [ 850.565548][T18239] veth0_vlan: left promiscuous mode [ 850.575891][T18239] veth0_vlan: entered promiscuous mode [ 850.877513][T18247] netlink: 'syz.4.4213': attribute type 2 has an invalid length. [ 851.843432][T18263] syzkaller0: entered promiscuous mode [ 851.851284][T18263] syzkaller0: entered allmulticast mode [ 852.060798][T18268] syzkaller0: entered promiscuous mode [ 852.085091][T18268] syzkaller0: entered allmulticast mode [ 854.514924][T18287] IPv6: : Disabled Multicast RS [ 857.183753][T18323] syzkaller0: entered promiscuous mode [ 857.189683][T18323] syzkaller0: entered allmulticast mode [ 861.669870][T18331] syzkaller0: entered promiscuous mode [ 861.675472][T18331] syzkaller0: entered allmulticast mode [ 866.645002][T18391] syzkaller0: entered promiscuous mode [ 866.651501][T18391] syzkaller0: entered allmulticast mode [ 866.714277][T18397] syzkaller0: entered promiscuous mode [ 866.719954][T18397] syzkaller0: entered allmulticast mode [ 869.263485][T18404] syzkaller0: entered promiscuous mode [ 869.269138][T18404] syzkaller0: entered allmulticast mode [ 869.325178][T18415] netlink: 'syz.1.4265': attribute type 25 has an invalid length. [ 869.335976][T18415] netlink: 'syz.1.4265': attribute type 28 has an invalid length. [ 869.354551][T18417] netlink: 'syz.0.4266': attribute type 29 has an invalid length. [ 870.440536][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.456349][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.663412][T18417] netlink: 'syz.0.4266': attribute type 29 has an invalid length. [ 875.067399][T18451] syzkaller0: entered promiscuous mode [ 875.073363][T18451] syzkaller0: entered allmulticast mode [ 875.147180][T18453] netlink: 'syz.1.4279': attribute type 21 has an invalid length. [ 879.249103][T18494] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4290'. [ 879.260563][T18494] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4290'. [ 879.273031][T18494] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4290'. [ 880.503973][T18511] syzkaller0: entered promiscuous mode [ 880.518193][T18511] syzkaller0: entered allmulticast mode [ 884.056224][T18547] netlink: 'syz.0.4307': attribute type 2 has an invalid length. [ 885.961248][T18582] syzkaller0: entered promiscuous mode [ 885.976917][T18582] syzkaller0: entered allmulticast mode [ 885.990556][T18580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4318'. [ 886.510383][T18599] IPv6: pim6reg1: Disabled Multicast RS [ 887.429381][T18612] FAULT_INJECTION: forcing a failure. [ 887.429381][T18612] name failslab, interval 1, probability 0, space 0, times 0 [ 887.448254][T18612] CPU: 0 PID: 18612 Comm: syz.3.4326 Not tainted syzkaller #0 [ 887.455800][T18612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 887.465930][T18612] Call Trace: [ 887.469272][T18612] [ 887.472251][T18612] dump_stack_lvl+0x18c/0x250 [ 887.477012][T18612] ? show_regs_print_info+0x20/0x20 [ 887.482281][T18612] ? load_image+0x420/0x420 [ 887.486864][T18612] ? __might_sleep+0xe0/0xe0 [ 887.491511][T18612] ? __lock_acquire+0x7d40/0x7d40 [ 887.496644][T18612] should_fail_ex+0x39d/0x4d0 [ 887.501376][T18612] should_failslab+0x9/0x20 [ 887.505915][T18612] slab_pre_alloc_hook+0x59/0x310 [ 887.510991][T18612] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 887.516631][T18612] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 887.522234][T18612] __kmem_cache_alloc_node+0x53/0x250 [ 887.527713][T18612] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 887.533296][T18612] __kmalloc+0xa4/0x230 [ 887.537538][T18612] bpf_prog_test_run_skb+0x238/0x12b0 [ 887.542962][T18612] ? __fget_files+0x28/0x4b0 [ 887.547625][T18612] ? __fget_files+0x28/0x4b0 [ 887.552321][T18612] ? __fget_files+0x43d/0x4b0 [ 887.557050][T18612] ? cpu_online+0x60/0x60 [ 887.561426][T18612] bpf_prog_test_run+0x321/0x390 [ 887.566432][T18612] __sys_bpf+0x49d/0x890 [ 887.570749][T18612] ? bpf_link_show_fdinfo+0x390/0x390 [ 887.576196][T18612] ? lock_chain_count+0x20/0x20 [ 887.581126][T18612] __x64_sys_bpf+0x7c/0x90 [ 887.585577][T18612] do_syscall_64+0x55/0xa0 [ 887.590026][T18612] ? clear_bhb_loop+0x40/0x90 [ 887.594735][T18612] ? clear_bhb_loop+0x40/0x90 [ 887.599448][T18612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 887.605383][T18612] RIP: 0033:0x7f561099c819 [ 887.609841][T18612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.629475][T18612] RSP: 002b:00007f5611929028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 887.637969][T18612] RAX: ffffffffffffffda RBX: 00007f5610c15fa0 RCX: 00007f561099c819 [ 887.645985][T18612] RDX: 0000000000000022 RSI: 0000200000000100 RDI: 000000000000000a [ 887.654003][T18612] RBP: 00007f5611929090 R08: 0000000000000000 R09: 0000000000000000 [ 887.662015][T18612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.670035][T18612] R13: 00007f5610c16038 R14: 00007f5610c15fa0 R15: 00007ffcef54c848 [ 887.678064][T18612] [ 890.784648][T18629] syzkaller0: entered promiscuous mode [ 890.793035][T18629] syzkaller0: entered allmulticast mode [ 894.134450][T18650] IPv6: : Disabled Multicast RS [ 894.322137][T18669] syzkaller0: entered promiscuous mode [ 894.327778][T18669] syzkaller0: entered allmulticast mode [ 896.891599][T18704] netlink: 668 bytes leftover after parsing attributes in process `syz.3.4351'. [ 896.916264][T18704] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 896.924641][T18704] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 897.498287][T18722] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.4357'. [ 897.557186][T18722] netlink: 'syz.3.4357': attribute type 10 has an invalid length. [ 897.588494][T18722] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4357'. [ 898.172654][T18739] syzkaller0: entered promiscuous mode [ 898.210181][T18739] syzkaller0: entered allmulticast mode [ 898.901127][T18758] netlink: 'syz.1.4369': attribute type 4 has an invalid length. [ 898.951113][T18758] netlink: 'syz.1.4369': attribute type 3 has an invalid length. [ 898.972313][T18758] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.4369'. [ 899.775374][T18781] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4375'. [ 899.790643][T18781] openvswitch: netlink: Key type 29 is not supported [ 903.051397][T18811] syzkaller0: entered promiscuous mode [ 903.057078][T18811] syzkaller0: entered allmulticast mode [ 903.363990][T18830] netlink: 'syz.4.4393': attribute type 2 has an invalid length. [ 907.288247][T18862] syzkaller0: entered promiscuous mode [ 907.293811][T18862] syzkaller0: entered allmulticast mode [ 907.438484][T18868] syzkaller0: entered promiscuous mode [ 907.444248][T18868] syzkaller0: entered allmulticast mode [ 908.351380][T14718] Bluetooth: hci3: command 0x0406 tx timeout [ 909.770137][T18882] netlink: 'syz.3.4410': attribute type 2 has an invalid length. [ 913.344206][T18888] syzkaller0: entered promiscuous mode [ 913.355230][T18888] syzkaller0: entered allmulticast mode [ 915.748742][T18913] netlink: 'syz.4.4419': attribute type 3 has an invalid length. [ 915.986572][T18927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4424'. [ 916.221160][T18937] netlink: 'syz.0.4429': attribute type 2 has an invalid length. [ 916.275813][T18942] syzkaller0: entered promiscuous mode [ 916.285022][T18942] syzkaller0: entered allmulticast mode [ 920.174243][T18953] syzkaller0: entered promiscuous mode [ 920.204719][T18953] syzkaller0: entered allmulticast mode [ 920.418122][T18970] netlink: 'syz.0.4440': attribute type 9 has an invalid length. [ 920.436841][T18970] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4440'. [ 920.455547][T18969] netlink: 'syz.3.4438': attribute type 10 has an invalid length. [ 920.498257][T18969] team0: Port device netdevsim0 added [ 925.261991][T18975] netlink: 'syz.0.4442': attribute type 10 has an invalid length. [ 925.295378][T18975] team0: Device wg1 is of different type [ 925.478305][T18988] syzkaller0: entered promiscuous mode [ 925.484092][T18988] syzkaller0: entered allmulticast mode [ 925.604830][T18996] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4447'. [ 925.678687][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 7 [ 926.911233][T19010] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4449'. [ 928.688417][T19007] netlink: 'syz.1.4451': attribute type 10 has an invalid length. [ 928.707412][T19007] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.715091][T19007] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.751003][T19007] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.758993][T19007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.767711][T19007] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.774950][T19007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.829450][T19007] team0: Port device bridge0 added [ 929.112948][T19021] netlink: 'syz.3.4455': attribute type 2 has an invalid length. [ 929.242794][T19023] syzkaller0: entered promiscuous mode [ 929.296183][T19023] syzkaller0: entered allmulticast mode [ 931.881473][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.888090][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.721131][T19041] syzkaller0: entered promiscuous mode [ 932.736310][T19041] syzkaller0: entered allmulticast mode [ 935.668205][T19066] syzkaller0: entered promiscuous mode [ 935.673776][T19066] syzkaller0: entered allmulticast mode [ 935.903006][T19086] syzkaller0: entered promiscuous mode [ 935.911106][T19086] syzkaller0: entered allmulticast mode [ 940.683507][T19114] netlink: 'syz.3.4483': attribute type 10 has an invalid length. [ 940.691614][T19114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4483'. [ 940.701441][T19114] ipvlan1: entered promiscuous mode [ 940.706825][T19114] ipvlan1: entered allmulticast mode [ 940.712163][T19114] veth0_vlan: entered allmulticast mode [ 940.720840][T19114] bridge0: port 3(ipvlan1) entered blocking state [ 940.727607][T19114] bridge0: port 3(ipvlan1) entered disabled state [ 940.735906][T19114] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 940.912671][T19119] syzkaller0: entered promiscuous mode [ 940.922885][T19119] syzkaller0: entered allmulticast mode [ 943.626468][T19134] netlink: 'syz.0.4495': attribute type 10 has an invalid length. [ 943.634373][T19134] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4495'. [ 943.645017][T19134] ipvlan1: entered promiscuous mode [ 943.650448][T19134] ipvlan1: entered allmulticast mode [ 943.675684][T19134] bridge0: port 3(ipvlan1) entered blocking state [ 943.699149][T19134] bridge0: port 3(ipvlan1) entered disabled state [ 943.708716][T19134] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 943.730730][T19145] netlink: 'syz.3.4489': attribute type 33 has an invalid length. [ 943.764208][T19145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4489'. [ 944.128447][T19156] netlink: 206164 bytes leftover after parsing attributes in process `syz.4.4493'. [ 944.995632][T19166] netlink: 'syz.0.4506': attribute type 1 has an invalid length. [ 945.023557][T19166] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4506'. [ 945.055620][T19164] netlink: 'syz.3.4499': attribute type 2 has an invalid length. [ 945.595048][T19174] syzkaller0: entered promiscuous mode [ 945.600853][T19174] syzkaller0: entered allmulticast mode [ 949.479669][T19197] netlink: 'syz.1.4504': attribute type 10 has an invalid length. [ 949.504427][T19197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4504'. [ 949.589090][T19197] ipvlan1: entered promiscuous mode [ 949.649356][T19197] ipvlan1: entered allmulticast mode [ 949.680580][T19197] veth0_vlan: entered allmulticast mode [ 949.942751][T19197] bridge0: port 3(ipvlan1) entered blocking state [ 949.999425][T19197] bridge0: port 3(ipvlan1) entered disabled state [ 950.038778][T19197] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 950.243952][T19215] netlink: 'syz.1.4509': attribute type 21 has an invalid length. [ 950.470041][T19219] netlink: 'syz.0.4511': attribute type 10 has an invalid length. [ 950.493415][T19219] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4511'. [ 950.812815][T19232] netlink: 'syz.4.4514': attribute type 2 has an invalid length. [ 954.530583][T19274] netlink: 'syz.1.4526': attribute type 4 has an invalid length. [ 954.576510][T19274] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4526'. [ 955.014783][T19281] netlink: 'syz.0.4529': attribute type 2 has an invalid length. [ 955.343684][T19280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4530'. [ 955.360042][T19280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4530'. [ 955.458992][T19282] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4530'. [ 955.800121][T19283] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4530'. [ 959.333066][T19317] netlink: 'syz.0.4541': attribute type 29 has an invalid length. [ 959.378290][T19317] netlink: 'syz.0.4541': attribute type 29 has an invalid length. [ 959.414803][T19318] IPv6: Can't replace route, no match found [ 959.454530][T19318] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 959.834668][T19332] netlink: 'syz.4.4546': attribute type 2 has an invalid length. [ 960.644546][T19346] netlink: 'syz.3.4549': attribute type 2 has an invalid length. [ 962.124927][T19370] FAULT_INJECTION: forcing a failure. [ 962.124927][T19370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.166216][T19370] CPU: 0 PID: 19370 Comm: syz.0.4558 Not tainted syzkaller #0 [ 962.173768][T19370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 962.183862][T19370] Call Trace: [ 962.187186][T19370] [ 962.190152][T19370] dump_stack_lvl+0x18c/0x250 [ 962.194879][T19370] ? show_regs_print_info+0x20/0x20 [ 962.200147][T19370] ? load_image+0x420/0x420 [ 962.204687][T19370] ? __might_fault+0xaa/0x120 [ 962.209396][T19370] ? __lock_acquire+0x7d40/0x7d40 [ 962.214465][T19370] should_fail_ex+0x39d/0x4d0 [ 962.219186][T19370] _copy_from_user+0x2f/0xe0 [ 962.223819][T19370] sk_setsockopt+0x2b2/0x2bc0 [ 962.228533][T19370] ? sockopt_capable+0x60/0x60 [ 962.233343][T19370] ? aa_sk_perm+0x83c/0x970 [ 962.237882][T19370] ? __fget_files+0x28/0x4b0 [ 962.242538][T19370] ? aa_af_perm+0x330/0x330 [ 962.247106][T19370] ? __fget_files+0x28/0x4b0 [ 962.251739][T19370] ? __fget_files+0x28/0x4b0 [ 962.256361][T19370] ? aa_sock_opt_perm+0x74/0x100 [ 962.261336][T19370] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 962.267042][T19370] ? security_socket_setsockopt+0x7e/0xa0 [ 962.272818][T19370] do_sock_setsockopt+0x11b/0x1a0 [ 962.277903][T19370] __x64_sys_setsockopt+0x182/0x200 [ 962.283151][T19370] do_syscall_64+0x55/0xa0 [ 962.287604][T19370] ? clear_bhb_loop+0x40/0x90 [ 962.292312][T19370] ? clear_bhb_loop+0x40/0x90 [ 962.297116][T19370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.303133][T19370] RIP: 0033:0x7f5f7779c819 [ 962.307580][T19370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.327222][T19370] RSP: 002b:00007f5f78612028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 962.335670][T19370] RAX: ffffffffffffffda RBX: 00007f5f77a15fa0 RCX: 00007f5f7779c819 [ 962.343679][T19370] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000004 [ 962.351673][T19370] RBP: 00007f5f78612090 R08: 0000000000000004 R09: 0000000000000000 [ 962.359669][T19370] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 962.367663][T19370] R13: 00007f5f77a16038 R14: 00007f5f77a15fa0 R15: 00007ffd732df418 [ 962.375673][T19370] [ 962.764154][T19376] netlink: 'syz.4.4560': attribute type 2 has an invalid length. [ 964.081121][T19392] netlink: 'syz.4.4564': attribute type 2 has an invalid length. [ 964.948769][T19395] netlink: 'syz.1.4566': attribute type 10 has an invalid length. [ 965.040049][T19398] netlink: 'syz.1.4566': attribute type 9 has an invalid length. [ 965.136266][T19398] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4566'. [ 965.747140][T19404] netlink: 'syz.1.4566': attribute type 9 has an invalid length. [ 965.754970][T19404] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4566'. [ 966.148045][T19418] netlink: 'syz.4.4572': attribute type 2 has an invalid length. [ 967.010818][T19428] syzkaller0: entered promiscuous mode [ 967.115695][T19428] syzkaller0: entered allmulticast mode [ 970.281612][T19439] syzkaller0: entered promiscuous mode [ 970.287227][T19439] syzkaller0: entered allmulticast mode [ 970.622019][T19460] netlink: 'syz.3.4585': attribute type 2 has an invalid length. [ 973.207086][T19481] netlink: 'syz.4.4591': attribute type 21 has an invalid length. [ 973.471094][T19486] syzkaller0: entered promiscuous mode [ 973.478589][T19486] syzkaller0: entered allmulticast mode [ 973.489566][T19484] netlink: 192 bytes leftover after parsing attributes in process `syz.3.4593'. [ 973.530784][T19489] netlink: 'syz.0.4594': attribute type 2 has an invalid length. [ 973.831521][T19493] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.4596'. [ 977.485756][T19522] netlink: 'syz.4.4603': attribute type 25 has an invalid length. [ 977.495137][T19522] netlink: 'syz.4.4603': attribute type 28 has an invalid length. [ 977.579987][T19525] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4604'. [ 977.607355][T19525] openvswitch: netlink: Tunnel attr 13157 out of range max 16 [ 977.623026][T19525] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4604'. [ 977.858399][T19532] netlink: 'syz.0.4608': attribute type 2 has an invalid length. [ 978.220550][T19539] syzkaller0: entered promiscuous mode [ 978.238032][T19539] syzkaller0: entered allmulticast mode [ 978.689081][T19544] syzkaller0: entered promiscuous mode [ 978.706196][T19544] syzkaller0: entered allmulticast mode [ 981.473775][T19551] syzkaller0: entered promiscuous mode [ 981.483959][T19558] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.4613'. [ 981.496132][T19551] syzkaller0: entered allmulticast mode [ 981.538858][T19561] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4612'. [ 983.616875][T19561] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4612'. [ 983.958253][T19576] netlink: 'syz.0.4616': attribute type 29 has an invalid length. [ 984.265991][T19584] netlink: 'syz.3.4620': attribute type 2 has an invalid length. [ 986.486124][T19576] netlink: 'syz.0.4616': attribute type 29 has an invalid length. [ 986.735201][T19594] netlink: 'syz.3.4622': attribute type 39 has an invalid length. [ 987.018376][T19596] syzkaller0: entered promiscuous mode [ 987.023928][T19596] syzkaller0: entered allmulticast mode [ 987.096294][T19609] syzkaller0: entered promiscuous mode [ 987.102782][T19609] syzkaller0: entered allmulticast mode [ 987.303367][T19615] netlink: 'syz.3.4630': attribute type 2 has an invalid length. [ 990.120120][T19625] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.4632'. [ 990.151270][T19625] openvswitch: netlink: Duplicate key (type 0). [ 990.923225][T19637] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.4634'. [ 992.551937][T19637] netlink: 'syz.3.4634': attribute type 10 has an invalid length. [ 992.560217][T19637] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4634'. [ 992.822833][T19646] netlink: 'syz.4.4638': attribute type 39 has an invalid length. [ 993.079959][T19651] netlink: 'syz.3.4640': attribute type 2 has an invalid length. [ 993.332771][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.339396][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.372094][T19653] syzkaller0: entered promiscuous mode [ 993.424341][T19653] syzkaller0: entered allmulticast mode [ 998.011353][T19710] syzkaller0: entered promiscuous mode [ 998.049854][T19710] syzkaller0: entered allmulticast mode [ 1001.736284][T19748] netlink: 'syz.3.4666': attribute type 4 has an invalid length. [ 1001.957753][T19750] netlink: 'syz.4.4667': attribute type 2 has an invalid length. [ 1003.334388][T19774] syzkaller0: entered promiscuous mode [ 1003.368355][T19774] syzkaller0: entered allmulticast mode [ 1003.917085][T19799] netlink: 'syz.3.4683': attribute type 2 has an invalid length. [ 1007.012387][T19829] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4694'. [ 1007.121603][T19834] netlink: 'syz.4.4695': attribute type 2 has an invalid length. [ 1008.202247][T19857] netlink: 'syz.3.4701': attribute type 10 has an invalid length. [ 1008.774784][T19863] netlink: 'syz.1.4703': attribute type 10 has an invalid length. [ 1008.826855][T19863] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4703'. [ 1010.456269][T19881] netlink: 'syz.3.4708': attribute type 2 has an invalid length. [ 1010.715637][T19877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4707'. [ 1011.040443][T19885] netlink: 'syz.4.4709': attribute type 10 has an invalid length. [ 1011.141949][T19885] netlink: 'syz.4.4709': attribute type 2 has an invalid length. [ 1011.195042][T19885] netlink: 'syz.4.4709': attribute type 8 has an invalid length. [ 1011.236161][T19885] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4709'. [ 1011.276356][T19888] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1012.183125][T19917] netlink: 'syz.0.4721': attribute type 2 has an invalid length. [ 1012.542960][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 7 [ 1013.425705][T19940] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.4730'. [ 1013.859503][T19961] netlink: 'syz.1.4738': attribute type 2 has an invalid length. [ 1014.969351][T19977] netlink: 'syz.0.4743': attribute type 4 has an invalid length. [ 1014.991076][T19977] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4743'. [ 1015.338120][T19988] syzkaller0: entered promiscuous mode [ 1015.343737][T19988] syzkaller0: entered allmulticast mode [ 1017.904396][T20013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4757'. [ 1017.914463][T20013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4757'. [ 1017.955748][T20013] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4757'. [ 1017.988469][T20011] netlink: 'syz.0.4756': attribute type 10 has an invalid length. [ 1018.001708][T20011] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4756'. [ 1018.069241][T20009] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.4754'. [ 1018.779045][T20029] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.4770'. [ 1019.121767][T20034] syzkaller0: entered promiscuous mode [ 1019.142439][T20034] syzkaller0: entered allmulticast mode [ 1020.856649][T20075] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.4777'. [ 1025.242152][T20080] netlink: 'syz.0.4778': attribute type 12 has an invalid length. [ 1025.260149][T20080] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4778'. [ 1025.925105][T20102] FAULT_INJECTION: forcing a failure. [ 1025.925105][T20102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1025.998929][T20102] CPU: 1 PID: 20102 Comm: syz.0.4786 Not tainted syzkaller #0 [ 1026.006583][T20102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1026.016692][T20102] Call Trace: [ 1026.020086][T20102] [ 1026.023090][T20102] dump_stack_lvl+0x18c/0x250 [ 1026.027836][T20102] ? show_regs_print_info+0x20/0x20 [ 1026.033087][T20102] ? load_image+0x420/0x420 [ 1026.037638][T20102] ? __might_fault+0xaa/0x120 [ 1026.042359][T20102] ? __lock_acquire+0x7d40/0x7d40 [ 1026.047433][T20102] should_fail_ex+0x39d/0x4d0 [ 1026.052182][T20102] _copy_to_user+0x2f/0xa0 [ 1026.056660][T20102] btf_new_fd+0x5c0/0x9f0 [ 1026.061042][T20102] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1026.066210][T20102] ? capable+0x88/0xe0 [ 1026.070341][T20102] __sys_bpf+0x670/0x890 [ 1026.074635][T20102] ? bpf_link_show_fdinfo+0x390/0x390 [ 1026.080068][T20102] ? lock_chain_count+0x20/0x20 [ 1026.084994][T20102] __x64_sys_bpf+0x7c/0x90 [ 1026.089467][T20102] do_syscall_64+0x55/0xa0 [ 1026.093914][T20102] ? clear_bhb_loop+0x40/0x90 [ 1026.098634][T20102] ? clear_bhb_loop+0x40/0x90 [ 1026.103375][T20102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1026.109335][T20102] RIP: 0033:0x7f5f7779c819 [ 1026.113832][T20102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.133491][T20102] RSP: 002b:00007f5f78612028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1026.141966][T20102] RAX: ffffffffffffffda RBX: 00007f5f77a15fa0 RCX: 00007f5f7779c819 [ 1026.149988][T20102] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 1026.158009][T20102] RBP: 00007f5f78612090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.166030][T20102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1026.174055][T20102] R13: 00007f5f77a16038 R14: 00007f5f77a15fa0 R15: 00007ffd732df418 [ 1026.182124][T20102] [ 1026.388640][T20104] netlink: 'syz.1.4787': attribute type 10 has an invalid length. [ 1026.539320][T20104] team0: Device vxcan1 is of different type [ 1026.722115][T20108] syzkaller0: entered promiscuous mode [ 1026.733395][T20108] syzkaller0: entered allmulticast mode [ 1029.776380][T20139] netlink: 'syz.3.4797': attribute type 41 has an invalid length. [ 1029.784471][T20139] netlink: 'syz.3.4797': attribute type 41 has an invalid length. [ 1030.049977][T20153] netlink: 'syz.4.4803': attribute type 2 has an invalid length. [ 1030.204229][T20154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1030.574433][T20160] syzkaller0: entered promiscuous mode [ 1030.641530][T20160] syzkaller0: entered allmulticast mode [ 1030.726338][T20166] netlink: 'syz.1.4808': attribute type 21 has an invalid length. [ 1030.743983][T20166] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1034.301759][T20185] netlink: 'syz.3.4813': attribute type 10 has an invalid length. [ 1034.314115][T20185] team0: Device vxcan1 is of different type [ 1034.393684][T20184] syzkaller0: entered promiscuous mode [ 1034.405206][T20184] syzkaller0: entered allmulticast mode [ 1034.768752][T20219] netlink: 'syz.3.4820': attribute type 2 has an invalid length. [ 1037.096355][T20225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4824'. [ 1037.399712][T20233] netlink: 'syz.3.4826': attribute type 29 has an invalid length. [ 1037.408440][T20233] netlink: 'syz.3.4826': attribute type 29 has an invalid length. [ 1037.431800][T20233] netlink: 'syz.3.4826': attribute type 29 has an invalid length. [ 1037.595763][T20233] lo: entered allmulticast mode [ 1037.856005][T20240] syzkaller0: entered promiscuous mode [ 1037.896294][T20240] syzkaller0: entered allmulticast mode [ 1037.909029][T20233] lo: entered promiscuous mode [ 1037.926585][T20233] lo: left allmulticast mode [ 1037.969231][T20239] netlink: 'syz.0.4829': attribute type 10 has an invalid length. [ 1038.093483][T20239] team0: Device vxcan1 is of different type [ 1038.480668][T20263] netlink: 'syz.0.4833': attribute type 2 has an invalid length. [ 1040.560718][T20257] syzkaller0: entered promiscuous mode [ 1040.576150][T20257] syzkaller0: entered allmulticast mode [ 1041.644354][T20290] netlink: 'syz.1.4841': attribute type 29 has an invalid length. [ 1041.690073][T20291] netlink: 'syz.1.4841': attribute type 29 has an invalid length. [ 1043.384551][T20290] netlink: 'syz.1.4841': attribute type 29 has an invalid length. [ 1043.408937][T20294] lo: entered allmulticast mode [ 1043.451486][T20300] lo: entered promiscuous mode [ 1043.457065][T20300] lo: left allmulticast mode [ 1043.570545][T20296] syzkaller0: entered promiscuous mode [ 1043.576169][T20296] syzkaller0: entered allmulticast mode [ 1043.711293][T20315] netlink: 'syz.1.4845': attribute type 2 has an invalid length. [ 1046.037955][T20312] syzkaller0: entered promiscuous mode [ 1046.044123][T20312] syzkaller0: entered allmulticast mode [ 1048.127320][T20332] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4849'. [ 1048.415506][T20338] syzkaller0: entered promiscuous mode [ 1048.437555][T20338] syzkaller0: entered allmulticast mode [ 1048.669810][T20348] netlink: 'syz.0.4855': attribute type 2 has an invalid length. [ 1051.825285][T20354] syzkaller0: entered promiscuous mode [ 1051.831054][T20354] syzkaller0: entered allmulticast mode [ 1054.218777][T20376] syzkaller0: entered promiscuous mode [ 1054.224633][T20376] syzkaller0: entered allmulticast mode [ 1054.752157][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.760628][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.652514][T20405] netlink: 'syz.1.4868': attribute type 2 has an invalid length. [ 1057.016875][T20392] syzkaller0: entered promiscuous mode [ 1057.022417][T20392] syzkaller0: entered allmulticast mode [ 1057.038204][T20397] netlink: 'syz.3.4866': attribute type 25 has an invalid length. [ 1057.053671][T20397] netlink: 'syz.3.4866': attribute type 28 has an invalid length. [ 1059.591240][T20427] syzkaller0: entered promiscuous mode [ 1059.634782][T20427] syzkaller0: entered allmulticast mode [ 1060.100785][T20431] syzkaller0: entered promiscuous mode [ 1060.126380][T20431] syzkaller0: entered allmulticast mode [ 1060.209549][T20440] netlink: 'syz.3.4877': attribute type 4 has an invalid length. [ 1060.226405][T20440] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4877'. [ 1060.353103][T20446] netlink: 'syz.4.4879': attribute type 2 has an invalid length. [ 1065.035610][T20489] netlink: 'syz.0.4890': attribute type 2 has an invalid length. [ 1065.213621][T20493] netlink: 1772 bytes leftover after parsing attributes in process `syz.4.4892'. [ 1065.239281][T20491] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4891'. [ 1065.271939][T20493] netlink: 'syz.4.4892': attribute type 10 has an invalid length. [ 1065.293386][T20493] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4892'. [ 1066.548429][T20508] syzkaller0: entered promiscuous mode [ 1066.564928][T20508] syzkaller0: entered allmulticast mode [ 1068.924142][T20533] syzkaller0: entered promiscuous mode [ 1068.955105][T20533] syzkaller0: entered allmulticast mode [ 1071.677650][T20579] FAULT_INJECTION: forcing a failure. [ 1071.677650][T20579] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.692998][T20579] CPU: 1 PID: 20579 Comm: syz.3.4914 Not tainted syzkaller #0 [ 1071.700523][T20579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1071.710618][T20579] Call Trace: [ 1071.713956][T20579] [ 1071.716945][T20579] dump_stack_lvl+0x18c/0x250 [ 1071.721690][T20579] ? show_regs_print_info+0x20/0x20 [ 1071.726952][T20579] ? load_image+0x420/0x420 [ 1071.731515][T20579] ? __might_sleep+0xe0/0xe0 [ 1071.736166][T20579] ? __lock_acquire+0x7d40/0x7d40 [ 1071.741245][T20579] should_fail_ex+0x39d/0x4d0 [ 1071.745979][T20579] should_failslab+0x9/0x20 [ 1071.750522][T20579] slab_pre_alloc_hook+0x59/0x310 [ 1071.755594][T20579] kmem_cache_alloc_node+0x60/0x320 [ 1071.760830][T20579] ? __alloc_skb+0x103/0x2c0 [ 1071.765453][T20579] __alloc_skb+0x103/0x2c0 [ 1071.769900][T20579] __ip6_append_data+0x2abc/0x3c50 [ 1071.775067][T20579] ? inet6_sk+0xe0/0xe0 [ 1071.779282][T20579] ? ip6_setup_cork+0xfe0/0xfe0 [ 1071.784174][T20579] ip6_append_data+0x1b0/0x350 [ 1071.788976][T20579] ? inet6_sk+0xe0/0xe0 [ 1071.793187][T20579] ping_v6_sendmsg+0xe17/0x11f0 [ 1071.798082][T20579] ? ping_v6_pre_connect+0x30/0x30 [ 1071.803235][T20579] ? perf_trace_preemptirq_template+0xac/0x330 [ 1071.809540][T20579] ? inet_sendmsg+0x14b/0x2f0 [ 1071.814272][T20579] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1071.819672][T20579] ? lockdep_hardirqs_on+0x98/0x150 [ 1071.824899][T20579] ? _local_bh_enable+0xa0/0xa0 [ 1071.829784][T20579] ? do_raw_spin_unlock+0x121/0x230 [ 1071.835020][T20579] ? inet_sendmsg+0x14b/0x2f0 [ 1071.839727][T20579] ? inet_sendmsg+0x14b/0x2f0 [ 1071.844439][T20579] ? inet_send_prepare+0x260/0x260 [ 1071.849600][T20579] ____sys_sendmsg+0x5ba/0x960 [ 1071.854393][T20579] ? __lock_acquire+0x7d40/0x7d40 [ 1071.859453][T20579] ? __asan_memset+0x22/0x40 [ 1071.864084][T20579] ? __sys_sendmsg_sock+0x30/0x30 [ 1071.869136][T20579] ? __import_iovec+0x5f2/0x850 [ 1071.874036][T20579] ? import_iovec+0x73/0xa0 [ 1071.878574][T20579] ___sys_sendmsg+0x2a6/0x360 [ 1071.883463][T20579] ? get_pid_task+0x20/0x1e0 [ 1071.888112][T20579] ? __sys_sendmsg+0x2a0/0x2a0 [ 1071.892941][T20579] ? __lock_acquire+0x7d40/0x7d40 [ 1071.898025][T20579] __se_sys_sendmsg+0x1c2/0x2b0 [ 1071.902916][T20579] ? __x64_sys_sendmsg+0x80/0x80 [ 1071.907909][T20579] ? lockdep_hardirqs_on+0x98/0x150 [ 1071.913149][T20579] do_syscall_64+0x55/0xa0 [ 1071.917588][T20579] ? clear_bhb_loop+0x40/0x90 [ 1071.922291][T20579] ? clear_bhb_loop+0x40/0x90 [ 1071.926999][T20579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1071.932920][T20579] RIP: 0033:0x7f561099c819 [ 1071.937363][T20579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.956996][T20579] RSP: 002b:00007f5611929028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1071.965442][T20579] RAX: ffffffffffffffda RBX: 00007f5610c15fa0 RCX: 00007f561099c819 [ 1071.973534][T20579] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1071.981558][T20579] RBP: 00007f5611929090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.989551][T20579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1071.997541][T20579] R13: 00007f5610c16038 R14: 00007f5610c15fa0 R15: 00007ffcef54c848 [ 1072.005555][T20579] [ 1072.541280][T20588] syzkaller0: entered promiscuous mode [ 1072.556143][T20588] syzkaller0: entered allmulticast mode [ 1074.825786][T20609] syzkaller0: entered promiscuous mode [ 1074.844206][T20609] syzkaller0: entered allmulticast mode [ 1077.189603][T20629] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4928'. [ 1077.489216][T20638] netlink: 'syz.1.4932': attribute type 2 has an invalid length. [ 1077.691142][T20645] syzkaller0: entered promiscuous mode [ 1077.699940][T20645] syzkaller0: entered allmulticast mode [ 1081.133770][T20679] netlink: set zone limit has 8 unknown bytes [ 1081.246304][T20681] netlink: 'syz.3.4941': attribute type 10 has an invalid length. [ 1081.254211][T20681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4941'. [ 1081.321234][T20681] netlink: 'syz.3.4941': attribute type 10 has an invalid length. [ 1081.356220][T20681] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4941'. [ 1082.025897][T20698] syzkaller0: entered promiscuous mode [ 1082.062420][T20698] syzkaller0: entered allmulticast mode [ 1082.553703][T20717] syzkaller0: entered promiscuous mode [ 1082.559548][T20717] syzkaller0: entered allmulticast mode [ 1088.969945][T20746] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.4959'. [ 1090.016190][T20746] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.4959'. [ 1090.025475][T20746] tipc: Started in network mode [ 1090.046172][T20746] tipc: Node identity d, cluster identity 56 [ 1090.052225][T20746] tipc: Node number set to 13 [ 1090.264429][T20754] netlink: 'syz.0.4963': attribute type 2 has an invalid length. [ 1090.370614][T20756] syzkaller0: entered promiscuous mode [ 1090.396141][T20756] syzkaller0: entered allmulticast mode [ 1091.123985][T20771] netlink: 'syz.4.4967': attribute type 1 has an invalid length. [ 1091.140651][T20771] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.4967'. [ 1093.554678][T20770] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4967'. [ 1094.784515][T20810] netlink: 'syz.3.4977': attribute type 2 has an invalid length. [ 1094.862710][T20813] netlink: 'syz.1.4978': attribute type 29 has an invalid length. [ 1094.911147][T20813] netlink: 'syz.1.4978': attribute type 29 has an invalid length. [ 1095.022592][T20816] syzkaller0: entered promiscuous mode [ 1095.033928][T20816] syzkaller0: entered allmulticast mode [ 1095.613699][T20829] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.4983'. [ 1095.656192][T20829] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1101.745279][T20879] syzkaller0: entered promiscuous mode [ 1101.761063][T20879] syzkaller0: entered allmulticast mode [ 1101.836265][T20884] netlink: 'syz.3.4995': attribute type 2 has an invalid length. [ 1105.223495][T20910] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5004'. [ 1106.565941][T20931] netlink: 'syz.1.5011': attribute type 2 has an invalid length. [ 1106.583869][T20929] IPv6: õš: Disabled Multicast RS [ 1106.892607][T20935] syzkaller0: entered promiscuous mode [ 1106.920750][T20935] syzkaller0: entered allmulticast mode [ 1110.286233][T20964] netlink: 'syz.0.5018': attribute type 2 has an invalid length. [ 1110.294082][T20964] netlink: 'syz.0.5018': attribute type 4 has an invalid length. [ 1110.302868][T20964] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5018'. [ 1111.527613][T20977] IPv6: õš: Disabled Multicast RS [ 1111.776410][T20984] netlink: 'syz.1.5024': attribute type 2 has an invalid length. [ 1112.102701][T20993] netlink: 'syz.4.5028': attribute type 21 has an invalid length. [ 1112.142549][T20993] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5028'. [ 1112.261304][T20997] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1112.888393][T21008] FAULT_INJECTION: forcing a failure. [ 1112.888393][T21008] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.910432][T21008] CPU: 1 PID: 21008 Comm: syz.0.5032 Not tainted syzkaller #0 [ 1112.918070][T21008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1112.928207][T21008] Call Trace: [ 1112.931543][T21008] [ 1112.934576][T21008] dump_stack_lvl+0x18c/0x250 [ 1112.939356][T21008] ? show_regs_print_info+0x20/0x20 [ 1112.944628][T21008] ? load_image+0x420/0x420 [ 1112.949195][T21008] ? __might_sleep+0xe0/0xe0 [ 1112.953835][T21008] ? __lock_acquire+0x7d40/0x7d40 [ 1112.958952][T21008] should_fail_ex+0x39d/0x4d0 [ 1112.963704][T21008] should_failslab+0x9/0x20 [ 1112.968263][T21008] slab_pre_alloc_hook+0x59/0x310 [ 1112.973346][T21008] ? __lock_acquire+0x7d40/0x7d40 [ 1112.978433][T21008] kmem_cache_alloc_node+0x60/0x320 [ 1112.983690][T21008] ? __alloc_skb+0x103/0x2c0 [ 1112.988340][T21008] __alloc_skb+0x103/0x2c0 [ 1112.992821][T21008] netlink_sendmsg+0x66a/0xbf0 [ 1112.997695][T21008] ? netlink_getsockopt+0x590/0x590 [ 1113.002962][T21008] ? aa_sock_msg_perm+0x94/0x150 [ 1113.008010][T21008] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1113.013363][T21008] ? security_socket_sendmsg+0x80/0xa0 [ 1113.018892][T21008] ? netlink_getsockopt+0x590/0x590 [ 1113.024151][T21008] ____sys_sendmsg+0x5ba/0x960 [ 1113.028968][T21008] ? __asan_memset+0x22/0x40 [ 1113.033613][T21008] ? __sys_sendmsg_sock+0x30/0x30 [ 1113.038689][T21008] ? __import_iovec+0x5f2/0x850 [ 1113.043598][T21008] ? import_iovec+0x73/0xa0 [ 1113.048148][T21008] ___sys_sendmsg+0x2a6/0x360 [ 1113.052895][T21008] ? get_pid_task+0x20/0x1e0 [ 1113.057555][T21008] ? __sys_sendmsg+0x2a0/0x2a0 [ 1113.062390][T21008] ? __lock_acquire+0x7d40/0x7d40 [ 1113.067573][T21008] __se_sys_sendmsg+0x1c2/0x2b0 [ 1113.072481][T21008] ? __x64_sys_sendmsg+0x80/0x80 [ 1113.077470][T21008] ? lockdep_hardirqs_on+0x98/0x150 [ 1113.082731][T21008] do_syscall_64+0x55/0xa0 [ 1113.087227][T21008] ? clear_bhb_loop+0x40/0x90 [ 1113.091946][T21008] ? clear_bhb_loop+0x40/0x90 [ 1113.096672][T21008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1113.102635][T21008] RIP: 0033:0x7f5f7779c819 [ 1113.107195][T21008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.126846][T21008] RSP: 002b:00007f5f78612028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1113.135290][T21008] RAX: ffffffffffffffda RBX: 00007f5f77a15fa0 RCX: 00007f5f7779c819 [ 1113.143306][T21008] RDX: 0000000020004080 RSI: 0000200000000040 RDI: 0000000000000003 [ 1113.151355][T21008] RBP: 00007f5f78612090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.159367][T21008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.167386][T21008] R13: 00007f5f77a16038 R14: 00007f5f77a15fa0 R15: 00007ffd732df418 [ 1113.175399][T21008] [ 1113.620829][T21022] netlink: 'syz.1.5042': attribute type 4 has an invalid length. [ 1113.690172][T21022] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5042'. [ 1115.189653][T20958] delete_channel: no stack [ 1115.201336][T21039] netlink: 'syz.3.5033': attribute type 10 has an invalid length. [ 1115.246166][T21039] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5033'. [ 1115.305352][T21039] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1115.322955][T21039] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.396135][T21039] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1116.127407][T21050] netlink: 'syz.4.5041': attribute type 2 has an invalid length. [ 1116.192380][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.206333][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.331201][T21018] delete_channel: no stack [ 1120.623724][T21084] syzkaller0: entered promiscuous mode [ 1120.726388][T21084] syzkaller0: entered allmulticast mode [ 1120.921208][T21092] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.5053'. [ 1123.524669][T21118] netlink: 'syz.1.5060': attribute type 2 has an invalid length. [ 1123.944557][T21115] ================================================================== [ 1123.952686][T21115] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 1123.960550][T21115] Write of size 72 at addr ffff88805c8a3210 by task syz.3.5059/21115 [ 1123.968662][T21115] [ 1123.971018][T21115] CPU: 0 PID: 21115 Comm: syz.3.5059 Not tainted syzkaller #0 [ 1123.978518][T21115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1123.988617][T21115] Call Trace: [ 1123.991934][T21115] [ 1123.994917][T21115] dump_stack_lvl+0x18c/0x250 [ 1123.999652][T21115] ? __lock_acquire+0x7d40/0x7d40 [ 1124.004721][T21115] ? show_regs_print_info+0x20/0x20 [ 1124.009984][T21115] ? load_image+0x420/0x420 [ 1124.014524][T21115] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1124.020019][T21115] ? __virt_addr_valid+0x18c/0x540 [ 1124.025177][T21115] ? __virt_addr_valid+0x469/0x540 [ 1124.030339][T21115] print_report+0xa8/0x210 [ 1124.034842][T21115] ? __bpf_get_stackid+0x6bf/0x900 [ 1124.040015][T21115] kasan_report+0x117/0x150 [ 1124.044565][T21115] ? __bpf_get_stackid+0x6bf/0x900 [ 1124.049743][T21115] kasan_check_range+0x241/0x290 [ 1124.054731][T21115] ? __bpf_get_stackid+0x6bf/0x900 [ 1124.059910][T21115] __asan_memcpy+0x40/0x70 [ 1124.064382][T21115] __bpf_get_stackid+0x6bf/0x900 [ 1124.069401][T21115] bpf_get_stackid_pe+0x343/0x410 [ 1124.074496][T21115] bpf_prog_02c92f715e75ceb8+0x30/0x45 [ 1124.079991][T21115] bpf_overflow_handler+0x1fc/0x510 [ 1124.085244][T21115] ? bpf_overflow_handler+0xde/0x510 [ 1124.090572][T21115] ? tp_perf_event_destroy+0x20/0x20 [ 1124.095926][T21115] ? perf_swevent_event+0x4be/0x570 [ 1124.101179][T21115] ? __perf_event_account_interrupt+0x187/0x280 [ 1124.107474][T21115] __perf_event_overflow+0x447/0x630 [ 1124.112802][T21115] perf_swevent_overflow+0x268/0x340 [ 1124.118132][T21115] ? perf_event_switch_output+0x790/0x790 [ 1124.123944][T21115] ? rcu_is_watching+0x15/0xb0 [ 1124.128756][T21115] perf_swevent_event+0x45c/0x570 [ 1124.133838][T21115] ? perf_tp_event+0x1520/0x1520 [ 1124.138841][T21115] ? perf_tp_event+0x13d7/0x1520 [ 1124.143837][T21115] ___perf_sw_event+0x4a7/0x730 [ 1124.148732][T21115] ? ___perf_sw_event+0x199/0x730 [ 1124.153813][T21115] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1124.160334][T21115] ? mark_lock+0x94/0x320 [ 1124.164721][T21115] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1124.170766][T21115] ? lock_chain_count+0x20/0x20 [ 1124.175664][T21115] __perf_sw_event+0x139/0x270 [ 1124.180488][T21115] do_user_addr_fault+0x123e/0x12c0 [ 1124.185741][T21115] ? rcu_is_watching+0x15/0xb0 [ 1124.190555][T21115] exc_page_fault+0x64/0x100 [ 1124.195188][T21115] asm_exc_page_fault+0x26/0x30 [ 1124.200088][T21115] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1124.205939][T21115] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1124.225587][T21115] RSP: 0018:ffffc900056cf2d0 EFLAGS: 00050202 [ 1124.231699][T21115] RAX: ffffffff842a2101 RBX: 0000000000000578 RCX: 0000000000000340 [ 1124.239714][T21115] RDX: 0000000000000001 RSI: 0000200000003000 RDI: ffff888067aea2b8 [ 1124.247727][T21115] RBP: ffffc900056cf478 R08: ffff888067aea5f7 R09: 1ffff1100cf5d4be [ 1124.255742][T21115] R10: dffffc0000000000 R11: ffffed100cf5d4bf R12: 0000200000003340 [ 1124.263755][T21115] R13: 0000000000000578 R14: ffff888067aea080 R15: 0000200000002dc8 [ 1124.271778][T21115] ? _copy_from_user+0x31/0xe0 [ 1124.276600][T21115] _copy_from_user+0x8b/0xe0 [ 1124.281247][T21115] csum_and_copy_from_iter+0x1f3/0x14a0 [ 1124.286870][T21115] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1124.292560][T21115] ? __alloc_skb+0x138/0x2c0 [ 1124.297211][T21115] ? rcu_is_watching+0x15/0xb0 [ 1124.302033][T21115] ? __build_skb_around+0x255/0x3d0 [ 1124.307281][T21115] ping_getfrag+0x6d/0x280 [ 1124.311773][T21115] __ip6_append_data+0x2f1b/0x3c50 [ 1124.316952][T21115] ? inet6_sk+0xe0/0xe0 [ 1124.321169][T21115] ? ip6_setup_cork+0xfe0/0xfe0 [ 1124.326074][T21115] ip6_append_data+0x1b0/0x350 [ 1124.330909][T21115] ? inet6_sk+0xe0/0xe0 [ 1124.335138][T21115] ping_v6_sendmsg+0xe17/0x11f0 [ 1124.340048][T21115] ? ping_v6_pre_connect+0x30/0x30 [ 1124.345206][T21115] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1124.351449][T21115] ? __local_bh_enable_ip+0x142/0x1c0 [ 1124.356869][T21115] ? _local_bh_enable+0xa0/0xa0 [ 1124.361775][T21115] ? do_raw_spin_unlock+0x121/0x230 [ 1124.367024][T21115] ? inet_sendmsg+0x14b/0x2f0 [ 1124.371751][T21115] ? inet_sendmsg+0x14b/0x2f0 [ 1124.376490][T21115] ? inet_send_prepare+0x260/0x260 [ 1124.381658][T21115] ____sys_sendmsg+0x5ba/0x960 [ 1124.386465][T21115] ? __lock_acquire+0x7d40/0x7d40 [ 1124.391538][T21115] ? __asan_memset+0x22/0x40 [ 1124.396198][T21115] ? __sys_sendmsg_sock+0x30/0x30 [ 1124.401279][T21115] ? __import_iovec+0x5f2/0x850 [ 1124.406178][T21115] ? import_iovec+0x73/0xa0 [ 1124.410726][T21115] ___sys_sendmsg+0x2a6/0x360 [ 1124.415461][T21115] ? __sys_sendmsg+0x2a0/0x2a0 [ 1124.420304][T21115] __se_sys_sendmsg+0x1c2/0x2b0 [ 1124.425202][T21115] ? __x64_sys_sendmsg+0x80/0x80 [ 1124.430189][T21115] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1124.436127][T21115] do_syscall_64+0x55/0xa0 [ 1124.440623][T21115] ? clear_bhb_loop+0x40/0x90 [ 1124.445369][T21115] ? clear_bhb_loop+0x40/0x90 [ 1124.450139][T21115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1124.456081][T21115] RIP: 0033:0x7f561099c819 [ 1124.460536][T21115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.480184][T21115] RSP: 002b:00007f5611929028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1124.488645][T21115] RAX: ffffffffffffffda RBX: 00007f5610c15fa0 RCX: 00007f561099c819 [ 1124.496663][T21115] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 1124.504678][T21115] RBP: 00007f5610a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1124.512692][T21115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.520705][T21115] R13: 00007f5610c16038 R14: 00007f5610c15fa0 R15: 00007ffcef54c848 [ 1124.528779][T21115] [ 1124.531832][T21115] [ 1124.534189][T21115] Allocated by task 21115: [ 1124.538649][T21115] kasan_set_track+0x4e/0x70 [ 1124.543286][T21115] __kasan_kmalloc+0x8f/0xa0 [ 1124.547913][T21115] __kmalloc_node+0xb4/0x230 [ 1124.552556][T21115] bpf_map_area_alloc+0x5e/0x110 [ 1124.557543][T21115] prealloc_elems_and_freelist+0x86/0x1c0 [ 1124.563303][T21115] stack_map_alloc+0x33a/0x4c0 [ 1124.568111][T21115] map_create+0x877/0x12f0 [ 1124.572599][T21115] __sys_bpf+0x651/0x890 [ 1124.576894][T21115] __x64_sys_bpf+0x7c/0x90 [ 1124.581351][T21115] do_syscall_64+0x55/0xa0 [ 1124.585900][T21115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1124.591841][T21115] [ 1124.594212][T21115] Last potentially related work creation: [ 1124.599953][T21115] kasan_save_stack+0x3e/0x60 [ 1124.604701][T21115] __kasan_record_aux_stack+0xaf/0xc0 [ 1124.610117][T21115] call_rcu+0x153/0x950 [ 1124.614327][T21115] __nf_register_net_hook+0x788/0x910 [ 1124.619752][T21115] nf_register_net_hook+0xb2/0x190 [ 1124.624916][T21115] nf_register_net_hooks+0x44/0x1b0 [ 1124.630168][T21115] nf_ct_netns_do_get+0x213/0x5c0 [ 1124.635251][T21115] nf_ct_netns_inet_get+0x3b/0x150 [ 1124.640410][T21115] nf_conncount_init+0x127/0x380 [ 1124.645388][T21115] ovs_ct_init+0x316/0x490 [ 1124.649841][T21115] ovs_init_net+0x1e6/0x250 [ 1124.654428][T21115] ops_init+0x397/0x640 [ 1124.658640][T21115] setup_net+0x3b6/0xa30 [ 1124.662944][T21115] copy_net_ns+0x36d/0x5e0 [ 1124.667403][T21115] create_new_namespaces+0x3d3/0x6f0 [ 1124.672726][T21115] copy_namespaces+0x430/0x4a0 [ 1124.677540][T21115] copy_process+0x1724/0x3d80 [ 1124.682258][T21115] kernel_clone+0x24b/0x8a0 [ 1124.686803][T21115] __x64_sys_clone+0x1b7/0x230 [ 1124.691610][T21115] do_syscall_64+0x55/0xa0 [ 1124.696066][T21115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1124.702035][T21115] [ 1124.704406][T21115] Second to last potentially related work creation: [ 1124.711034][T21115] kasan_save_stack+0x3e/0x60 [ 1124.715773][T21115] __kasan_record_aux_stack+0xaf/0xc0 [ 1124.721194][T21115] call_rcu+0x153/0x950 [ 1124.725416][T21115] nf_unregister_net_hooks+0xcb/0x130 [ 1124.730831][T21115] setup_net+0x7e7/0xa30 [ 1124.735145][T21115] copy_net_ns+0x36d/0x5e0 [ 1124.739610][T21115] create_new_namespaces+0x3d3/0x6f0 [ 1124.744950][T21115] copy_namespaces+0x430/0x4a0 [ 1124.749781][T21115] copy_process+0x1724/0x3d80 [ 1124.754574][T21115] kernel_clone+0x24b/0x8a0 [ 1124.759115][T21115] __x64_sys_clone+0x1b7/0x230 [ 1124.763928][T21115] do_syscall_64+0x55/0xa0 [ 1124.768388][T21115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1124.774332][T21115] [ 1124.776682][T21115] The buggy address belongs to the object at ffff88805c8a3200 [ 1124.776682][T21115] which belongs to the cache kmalloc-cg-64 of size 64 [ 1124.790864][T21115] The buggy address is located 16 bytes inside of [ 1124.790864][T21115] allocated 40-byte region [ffff88805c8a3200, ffff88805c8a3228) [ 1124.804882][T21115] [ 1124.807238][T21115] The buggy address belongs to the physical page: [ 1124.813692][T21115] page:ffffea00017228c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c8a3 [ 1124.823889][T21115] memcg:ffff88802eb33001 [ 1124.828158][T21115] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1124.835769][T21115] page_type: 0xffffffff() [ 1124.840140][T21115] raw: 00fff00000000800 ffff888017c4da00 ffffea0000b46a80 0000000000000004 [ 1124.848768][T21115] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802eb33001 [ 1124.857395][T21115] page dumped because: kasan: bad access detected [ 1124.863886][T21115] page_owner tracks the page as allocated [ 1124.869632][T21115] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 17104, tgid 17103 (syz.1.3855), ts 743699718008, free_ts 743696697978 [ 1124.888089][T21115] post_alloc_hook+0x1c1/0x200 [ 1124.892933][T21115] get_page_from_freelist+0x1951/0x19e0 [ 1124.898551][T21115] __alloc_pages+0x1f0/0x460 [ 1124.903187][T21115] alloc_slab_page+0x5d/0x160 [ 1124.907896][T21115] new_slab+0x87/0x2d0 [ 1124.912002][T21115] ___slab_alloc+0xc5d/0x12f0 [ 1124.916733][T21115] __kmem_cache_alloc_node+0x19e/0x250 [ 1124.922246][T21115] __kmalloc_node+0xa4/0x230 [ 1124.926970][T21115] kvmalloc_node+0x70/0x180 [ 1124.931519][T21115] __nf_hook_entries_try_shrink+0x310/0x6d0 [ 1124.937465][T21115] __nf_unregister_net_hook+0x4e1/0x6e0 [ 1124.943058][T21115] nf_unregister_net_hooks+0xcb/0x130 [ 1124.948477][T21115] nf_ct_netns_put+0x2d2/0x520 [ 1124.953309][T21115] nf_conncount_destroy+0x41/0x150 [ 1124.958465][T21115] ovs_ct_exit+0x9c/0x200 [ 1124.962934][T21115] ovs_exit_net+0xed/0x7a0 [ 1124.967401][T21115] page last free stack trace: [ 1124.972096][T21115] free_unref_page_prepare+0x7b2/0x8c0 [ 1124.977606][T21115] free_unref_page+0x32/0x2e0 [ 1124.982328][T21115] vfree+0x1a6/0x320 [ 1124.986272][T21115] delayed_vfree_work+0x55/0x80 [ 1124.991168][T21115] process_scheduled_works+0xa5d/0x15d0 [ 1124.996765][T21115] worker_thread+0xa55/0xfc0 [ 1125.001402][T21115] kthread+0x2fa/0x390 [ 1125.005541][T21115] ret_from_fork+0x48/0x80 [ 1125.010035][T21115] ret_from_fork_asm+0x11/0x20 [ 1125.014858][T21115] [ 1125.017225][T21115] Memory state around the buggy address: [ 1125.022885][T21115] ffff88805c8a3100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1125.030986][T21115] ffff88805c8a3180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1125.039098][T21115] >ffff88805c8a3200: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1125.047199][T21115] ^ [ 1125.052602][T21115] ffff88805c8a3280: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1125.060728][T21115] ffff88805c8a3300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1125.068830][T21115] ================================================================== [ 1125.076947][T21115] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1125.084199][T21115] CPU: 0 PID: 21115 Comm: syz.3.5059 Not tainted syzkaller #0 [ 1125.091688][T21115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1125.101788][T21115] Call Trace: [ 1125.105112][T21115] [ 1125.108078][T21115] dump_stack_lvl+0x18c/0x250 [ 1125.112832][T21115] ? show_regs_print_info+0x20/0x20 [ 1125.118103][T21115] ? load_image+0x420/0x420 [ 1125.122692][T21115] panic+0x2dc/0x730 [ 1125.126640][T21115] ? __lock_acquire+0x7d40/0x7d40 [ 1125.131716][T21115] ? bpf_jit_dump+0xd0/0xd0 [ 1125.136273][T21115] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1125.142213][T21115] ? _raw_spin_unlock+0x40/0x40 [ 1125.147126][T21115] ? __bpf_get_stackid+0x6bf/0x900 [ 1125.152293][T21115] check_panic_on_warn+0x84/0xa0 [ 1125.157282][T21115] ? __bpf_get_stackid+0x6bf/0x900 [ 1125.162457][T21115] end_report+0x6f/0x130 [ 1125.166752][T21115] kasan_report+0x128/0x150 [ 1125.171377][T21115] ? __bpf_get_stackid+0x6bf/0x900 [ 1125.176544][T21115] kasan_check_range+0x241/0x290 [ 1125.181530][T21115] ? __bpf_get_stackid+0x6bf/0x900 [ 1125.186697][T21115] __asan_memcpy+0x40/0x70 [ 1125.191175][T21115] __bpf_get_stackid+0x6bf/0x900 [ 1125.196169][T21115] bpf_get_stackid_pe+0x343/0x410 [ 1125.201253][T21115] bpf_prog_02c92f715e75ceb8+0x30/0x45 [ 1125.206754][T21115] bpf_overflow_handler+0x1fc/0x510 [ 1125.212044][T21115] ? bpf_overflow_handler+0xde/0x510 [ 1125.217385][T21115] ? tp_perf_event_destroy+0x20/0x20 [ 1125.222717][T21115] ? perf_swevent_event+0x4be/0x570 [ 1125.227970][T21115] ? __perf_event_account_interrupt+0x187/0x280 [ 1125.234259][T21115] __perf_event_overflow+0x447/0x630 [ 1125.239598][T21115] perf_swevent_overflow+0x268/0x340 [ 1125.244940][T21115] ? perf_event_switch_output+0x790/0x790 [ 1125.250888][T21115] ? rcu_is_watching+0x15/0xb0 [ 1125.255707][T21115] perf_swevent_event+0x45c/0x570 [ 1125.260793][T21115] ? perf_tp_event+0x1520/0x1520 [ 1125.265791][T21115] ? perf_tp_event+0x13d7/0x1520 [ 1125.270773][T21115] ___perf_sw_event+0x4a7/0x730 [ 1125.275688][T21115] ? ___perf_sw_event+0x199/0x730 [ 1125.280773][T21115] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1125.287253][T21115] ? mark_lock+0x94/0x320 [ 1125.291640][T21115] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1125.297670][T21115] ? lock_chain_count+0x20/0x20 [ 1125.302571][T21115] __perf_sw_event+0x139/0x270 [ 1125.307386][T21115] do_user_addr_fault+0x123e/0x12c0 [ 1125.312636][T21115] ? rcu_is_watching+0x15/0xb0 [ 1125.317453][T21115] exc_page_fault+0x64/0x100 [ 1125.322096][T21115] asm_exc_page_fault+0x26/0x30 [ 1125.327009][T21115] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1125.332862][T21115] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1125.352517][T21115] RSP: 0018:ffffc900056cf2d0 EFLAGS: 00050202 [ 1125.358629][T21115] RAX: ffffffff842a2101 RBX: 0000000000000578 RCX: 0000000000000340 [ 1125.366651][T21115] RDX: 0000000000000001 RSI: 0000200000003000 RDI: ffff888067aea2b8 [ 1125.374670][T21115] RBP: ffffc900056cf478 R08: ffff888067aea5f7 R09: 1ffff1100cf5d4be [ 1125.382683][T21115] R10: dffffc0000000000 R11: ffffed100cf5d4bf R12: 0000200000003340 [ 1125.390698][T21115] R13: 0000000000000578 R14: ffff888067aea080 R15: 0000200000002dc8 [ 1125.398726][T21115] ? _copy_from_user+0x31/0xe0 [ 1125.403557][T21115] _copy_from_user+0x8b/0xe0 [ 1125.408213][T21115] csum_and_copy_from_iter+0x1f3/0x14a0 [ 1125.413814][T21115] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1125.419514][T21115] ? __alloc_skb+0x138/0x2c0 [ 1125.424142][T21115] ? rcu_is_watching+0x15/0xb0 [ 1125.428959][T21115] ? __build_skb_around+0x255/0x3d0 [ 1125.434208][T21115] ping_getfrag+0x6d/0x280 [ 1125.438678][T21115] __ip6_append_data+0x2f1b/0x3c50 [ 1125.443890][T21115] ? inet6_sk+0xe0/0xe0 [ 1125.448103][T21115] ? ip6_setup_cork+0xfe0/0xfe0 [ 1125.453034][T21115] ip6_append_data+0x1b0/0x350 [ 1125.457843][T21115] ? inet6_sk+0xe0/0xe0 [ 1125.462049][T21115] ping_v6_sendmsg+0xe17/0x11f0 [ 1125.466954][T21115] ? ping_v6_pre_connect+0x30/0x30 [ 1125.472113][T21115] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1125.478332][T21115] ? __local_bh_enable_ip+0x142/0x1c0 [ 1125.483755][T21115] ? _local_bh_enable+0xa0/0xa0 [ 1125.488653][T21115] ? do_raw_spin_unlock+0x121/0x230 [ 1125.493910][T21115] ? inet_sendmsg+0x14b/0x2f0 [ 1125.498643][T21115] ? inet_sendmsg+0x14b/0x2f0 [ 1125.503369][T21115] ? inet_send_prepare+0x260/0x260 [ 1125.508538][T21115] ____sys_sendmsg+0x5ba/0x960 [ 1125.513346][T21115] ? __lock_acquire+0x7d40/0x7d40 [ 1125.518416][T21115] ? __asan_memset+0x22/0x40 [ 1125.523072][T21115] ? __sys_sendmsg_sock+0x30/0x30 [ 1125.528151][T21115] ? __import_iovec+0x5f2/0x850 [ 1125.533079][T21115] ? import_iovec+0x73/0xa0 [ 1125.537628][T21115] ___sys_sendmsg+0x2a6/0x360 [ 1125.542366][T21115] ? __sys_sendmsg+0x2a0/0x2a0 [ 1125.547199][T21115] __se_sys_sendmsg+0x1c2/0x2b0 [ 1125.552092][T21115] ? __x64_sys_sendmsg+0x80/0x80 [ 1125.557088][T21115] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1125.563034][T21115] do_syscall_64+0x55/0xa0 [ 1125.567486][T21115] ? clear_bhb_loop+0x40/0x90 [ 1125.572240][T21115] ? clear_bhb_loop+0x40/0x90 [ 1125.576967][T21115] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1125.583258][T21115] RIP: 0033:0x7f561099c819 [ 1125.587713][T21115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.607357][T21115] RSP: 002b:00007f5611929028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1125.615820][T21115] RAX: ffffffffffffffda RBX: 00007f5610c15fa0 RCX: 00007f561099c819 [ 1125.623835][T21115] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 1125.631846][T21115] RBP: 00007f5610a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1125.639860][T21115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.647875][T21115] R13: 00007f5610c16038 R14: 00007f5610c15fa0 R15: 00007ffcef54c848 [ 1125.655904][T21115] [ 1125.659632][T21115] Kernel Offset: disabled [ 1125.663977][T21115] Rebooting in 86400 seconds..