last executing test programs: 13.265505167s ago: executing program 2 (id=3058): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10ae80, 0x2, 0x0, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="e8586a59baf45a0000000000005617c3dd08ca0c8ef2059aad7dcb16bc3f62ca6d1882afdafd87883ac11c7b58b93b427dcc87bef5ac4cb61b432e73512194c8004c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x8, 0xc16, 0x5, 0x4023, 0xffffffffffffffff, 0x5, '\x00', 0x0, r3, 0x3, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x0, &(0x7f00000006c0), &(0x7f0000000700)='syzkaller\x00', 0x3, 0x33, &(0x7f0000000800)=""/51, 0x41100, 0x0, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000980)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[r4, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, r2, r5, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x0, 0x3, 0x7, 0x5}, {0x4, 0x1, 0x5, 0x4}, {0x3, 0x2, 0x1, 0x2}], 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) socket$kcm(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e0072", 0x54}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8924, &(0x7f0000000080)) openat$cgroup_ro(r3, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) 5.114181462s ago: executing program 0 (id=3093): ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000500", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000001700)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x400}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5d33, 0x48a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70400000800000085000000950000029500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x18000000000002a0, 0x26, 0x300, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000006000aac14140ce000000d49e832f0", 0x0, 0x10004, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.715271045s ago: executing program 3 (id=3097): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 4.161997857s ago: executing program 3 (id=3099): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x50) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(0x3) close(0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 4.161531467s ago: executing program 0 (id=3100): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_clone(0xa00d000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffbfffffffff}, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@tipc=@id, 0xc, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffd6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) sendmsg$unix(r4, &(0x7f0000000280)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e26}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000580)="806abf98a363bac5920357340cdf6798fa94e95fdf315a09c01a355f9c870abb3e3a53e310571a8b39c45bcbd2596218a2dd0d88c92fa5c5d9c578e0da72367e5426f0bcce5f58603d6dc06cba5ac0b3d4a36c149b043633f61f77f20559d19e192011a43d2aaf9d7e286e173e0f9eafc2efeaf5a1fc0df1522a7eaa28568f8e196278e418baeacc0a05b31c587662385057caa343fe9159765f136d4c07500074cb82ced2b56af099f034041b3ca2ceba1d48606fbce917c7335ae48831f8d60dd5f93065831cf14e7cab8945bf6a29", 0xd0}], 0x1, &(0x7f00000006c0)=[@rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, r6, r4, r5, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x48, 0x4000}, 0x40400d0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000007f00000000000000000800000000000000"], 0x18}, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, '\b'}], 0x18}, 0x0) recvmsg$kcm(r7, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000540)="1400000016000700f1197828ffbb278016f37438", 0x14}], 0x1}, 0x8020) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @multicast2}}}], 0x20}, 0x4000080) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9}, 0x94) 3.995363517s ago: executing program 3 (id=3102): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001c00e080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd0", 0x83}], 0x1}, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'team0\x00', 0x8001}) socket$kcm(0x29, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.777675249s ago: executing program 1 (id=3103): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 3.439576709s ago: executing program 3 (id=3105): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001c00e080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a2", 0x85}], 0x1}, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'team0\x00', 0x8001}) socket$kcm(0x29, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.353978834s ago: executing program 0 (id=3106): socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="ff", 0x34000}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e3900421803001825", 0x21}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) recvmsg(r2, &(0x7f0000000940)={&(0x7f0000000780)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000800)=""/108, 0x6c}, {&(0x7f0000000880)=""/169, 0xa9}], 0x2, &(0x7f00000003c0)}, 0x2100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.931472789s ago: executing program 3 (id=3107): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x533, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40844) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000015c0)={r1, 0x0, 0xd1, 0x0, &(0x7f00000014c0)="906d8d95efca9d4561d0afb2bc9b0468d7b2416ba6dc74ab2995340c6c45574a575fdc75294b861c2208d27e1ef4d36498f30b56719b75895a4f758c7aaf5d28c996bfe3ee69a67e48e3c738c75833288adadc1d32972116b45046548cb05ba1a5acd4d485eab2403063df9f590a5ef34865d86b7323474a51f213d895f1cf1a88d497a7f93c2928c5d2fff2af074aa92a0f3f50c2acca36501c746d1c38a7ad8c56b0f3bb0113c63eeaa0d7d6f684c7ec8ba5124104474a393c0a1159dfbd2855dcbb1c2ba11c9755a00b88e5d7c04dba", 0x0, 0x7fff, 0x0, 0xad, 0x0, &(0x7f0000001380)="15b46d4db068cdde5a89e763f243ebbd11f9bbbab5aeffc355a510d69e3df19c2b41f2bcd9f8e8a0ec9e57f3abd86c49a595ebaaa34a052d946681131611d87c70fc2005773afa6005ab6366212373da9292e7e179ac281c0cc950187204abdb6d54cc9901059d2fbd9fa4a7d90f8bbfabf9b28f95fae8012e03938ad03464747996795da5deda6d15bfb0e3069a72693418be30d75535fd1ef25c03e47019ffc383dbecd2f5538171d1c0cc6a", 0x0, 0x2, 0x0, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x3f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) socket$kcm(0x15, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.864361943s ago: executing program 1 (id=3109): socket$kcm(0x11, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 2.709759062s ago: executing program 1 (id=3110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRESDEC=r1], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10ae80, 0x2, 0x0, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) close(r7) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xc0045878, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="e8586a59baf45a0000000000005617c3dd08ca0c8ef2059aad7dcb16bc3f62ca6d1882afdafd87883ac11c7b58b93b427dcc87bef5ac4cb61b432e73512194c8004c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x8, 0xc16, 0x5, 0x4023, 0xffffffffffffffff, 0x5, '\x00', 0x0, r6, 0x3, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x0, &(0x7f00000006c0), &(0x7f0000000700)='syzkaller\x00', 0x3, 0x33, &(0x7f0000000800)=""/51, 0x41100, 0x0, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000980)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r9, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x0, 0x3, 0x7, 0x5}, {0x4, 0x1, 0x5, 0x4}, {0x3, 0x2, 0x1, 0x2}], 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e0072", 0x54}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8924, &(0x7f0000000080)) openat$cgroup_ro(r6, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) 2.608348148s ago: executing program 4 (id=3111): socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="ff", 0x34000}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e3900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) recvmsg(r2, &(0x7f0000000940)={&(0x7f0000000780)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000800)=""/108, 0x6c}, {&(0x7f0000000880)=""/169, 0xa9}], 0x2, &(0x7f00000003c0)}, 0x2100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.410777039s ago: executing program 0 (id=3112): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x9e, &(0x7f0000000200)=""/158, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x5, 0x7}, 0x10, 0x18a57, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000340)=[{0x4, 0x1, 0xa, 0xa}, {0x1, 0x2}, {0x3, 0x1, 0xd, 0xb}, {0x2, 0x2, 0xc, 0x1}], 0x10, 0xbe}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}, 0xe}}, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x804) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0x1, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xcdea339a50f18c37, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.271556447s ago: executing program 3 (id=3113): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"/341, @ANYRES32, @ANYRES64=r0], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="110000000000000000000008", @ANYRES32=r4, @ANYBLOB="ad851907a80082b14b0beaef18d791bfaa420b31152fc97d43878fef544ae5b8cab09f449e5a796c53abb3c7f34b1e878b278c6e7240d5f9", @ANYRES64=0x0], 0x20) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000001", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b703000000000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000280)=0xffffffffffff0001, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8}, 0x800, 0x0, 0x0, 0x0, 0x46fa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000000, &(0x7f00000005c0)="4674d1dff67e676de7a39d29f7c79b6888f20e3fc38f0141283e1d319e423d9117acd716ade2b94b8edee8356e5e0d2e95d37e6054a3ef44cc4d48177fed524aec6ed0cedf514682bad6214047258208e719abea4a0aafe0e913ffa71aa4c4cdb7b0c6d7ae9db350242aa3b903676ebfbcbdddcfc74e5cba224786c238020f2a99a3135367", 0x85, &(0x7f00000000c0), &(0x7f0000000300), &(0x7f0000000680)="eeac9935b3627602ec81af3950e1c85db744da1f34edba2b6edff47fdfbc0068c5761ad358e558ab30a0afd6df1abaf1b36d53b913758637210044803dc5b1ea0cd54f92731913fa5e51298c1ba43f963eabb4f7597af8d0f285e042d08abba481f8cfe5ef9695076b19c7bc44bc240f7388a96861b67592a15712bbbb635121e528795550457601079ba62a56f67c1c8a0ed190993ed197af66887523") perf_event_open(0x0, r8, 0x1, r0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) 2.245858849s ago: executing program 2 (id=3052): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.106179657s ago: executing program 2 (id=3114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRESDEC=r1], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10ae80, 0x2, 0x0, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) close(r7) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xc0045878, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="e8586a59baf45a0000000000005617c3dd08ca0c8ef2059aad7dcb16bc3f62ca6d1882afdafd87883ac11c7b58b93b427dcc87bef5ac4cb61b432e73512194c8004c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x8, 0xc16, 0x5, 0x4023, 0xffffffffffffffff, 0x5, '\x00', 0x0, r6, 0x3, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x0, &(0x7f00000006c0), &(0x7f0000000700)='syzkaller\x00', 0x3, 0x33, &(0x7f0000000800)=""/51, 0x41100, 0x0, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000980)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r8, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, r5, r9, 0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e0072", 0x54}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8924, &(0x7f0000000080)) openat$cgroup_ro(r6, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) 1.821175063s ago: executing program 1 (id=3116): close(0x3) r0 = perf_event_open(&(0x7f0000001200)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0={0x76}, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000800000076"], 0x40, 0x4000}, 0x20004000) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed009875f37438e486dd0000000003"], 0xfe1b) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'team0\x00', @random='\x00\x00\x00\x00\x00 '}) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth0_to_hsr\x00', 0x200}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000d80)="e0274239ed0d85", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0xd95ed09}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0100000001000000a00300000500000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r5, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x401, 0xfffffffc, 0x400, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000020000000000000000000000000000035a8cdb2e11f60b8c0b27f08047f016053563257ff87686b7380cec3a1100c22c1b9c67934a11355d18cc0dd64b46cfb03269e5c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000207e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700) 1.792422145s ago: executing program 0 (id=3117): socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x4, 0x8, &(0x7f00000002c0)="0000ffff", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="ffa8", 0x2}, {&(0x7f0000000400)="3cd91c", 0x3}], 0x2}, 0x40810) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000011c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, 0x0}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffe74, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c11", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.54225924s ago: executing program 2 (id=3118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000019c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.465025534s ago: executing program 4 (id=3119): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x50) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffff9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(0x3) close(0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 1.18495692s ago: executing program 1 (id=3120): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001c00e080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd0", 0x83}], 0x1}, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2200, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'team0\x00', 0x8001}) socket$kcm(0x29, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.026395749s ago: executing program 4 (id=3121): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 987.015202ms ago: executing program 0 (id=3122): socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f00000002c0)="ff", 0x34000}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e390042180300182500", 0x22}], 0x1}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) recvmsg(r2, &(0x7f0000000940)={&(0x7f0000000780)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000800)=""/108, 0x6c}, {&(0x7f0000000880)=""/169, 0xa9}], 0x2, &(0x7f00000003c0)}, 0x2100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 717.987028ms ago: executing program 4 (id=3123): socket$kcm(0x11, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x9, 0x1, 0x8, 0x2, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100033200fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) 676.05901ms ago: executing program 4 (id=3124): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), 0x3b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f7404000a74016c053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x96}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r0, 0x0, 0x0}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x69, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB="00f3"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000140), &(0x7f0000000200)=""/137, 0x2}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd0000004000000000000000", @ANYRES32, @ANYBLOB="0000ca7bf4fffaff00000000000000f5ffb5308c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f5c4e59f8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) 454.914933ms ago: executing program 4 (id=3125): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="85000000070000e70708cde5006a0adfff000000000c00000000000031850cf70dbedd37df43b93923c471cf5995646d9e98ff0a311117ff081b089233eecdab010ed05c871e9df3b9d05ce27d83637bb5d25086de9ae38975d17b02631e8fede2f18112f32389000000006553ec485341980e0183015ea58d75c8b26df0545df5c21522cda6aecf2d54caf0af78f653052bfc91004926f9c40b2422e8f7dc9de4bdb88c4c23ca7586af319cc2b475e383fe10d47bee1dfcbd8d86601b8d114dfc3829fd665f7d5e75e11b230d34b2bf4ea4f43095ab70e4636e445f3c42f2175861565bcd295231884d821a496029034189bca332953329e7f749701cc3e750bc3031b6dfd5698c6e4b34b8d2a71b475fceff329ccc979bae3d227403bd626ca77143130fcd9ff1e9d859415d50aa6d11e20ea02b3c0f7c07d63af9e6684077e699f6988500"/341, @ANYRES32, @ANYRES64=r0], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="110000000000000000000008", @ANYRES32=r4, @ANYBLOB="ad851907a80082b14b0beaef18d791bfaa420b31152fc97d43878fef544ae5b8cab09f449e5a796c53abb3c7f34b1e878b278c6e7240d5f9", @ANYRES64=0x0], 0x20) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000001", @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b703000000000000850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) write$cgroup_int(r0, &(0x7f0000000280)=0xffffffffffff0001, 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8}, 0x800, 0x0, 0x0, 0x0, 0x46fa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x8000000, &(0x7f00000005c0)="4674d1dff67e676de7a39d29f7c79b6888f20e3fc38f0141283e1d319e423d9117acd716ade2b94b8edee8356e5e0d2e95d37e6054a3ef44cc4d48177fed524aec6ed0cedf514682bad6214047258208e719abea4a0aafe0e913ffa71aa4c4cdb7b0c6d7ae9db350242aa3b903676ebfbcbdddcfc74e5cba224786c238020f2a99a3135367", 0x85, &(0x7f00000000c0), &(0x7f0000000300), &(0x7f0000000680)="eeac9935b3627602ec81af3950e1c85db744da1f34edba2b6edff47fdfbc0068c5761ad358e558ab30a0afd6df1abaf1b36d53b913758637210044803dc5b1ea0cd54f92731913fa5e51298c1ba43f963eabb4f7597af8d0f285e042d08abba481f8cfe5ef9695076b19c7bc44bc240f7388a96861b67592a15712bbbb635121e528795550457601079ba62a56f67c1c8a0ed190993ed197af66887523") perf_event_open(0x0, r8, 0x1, r0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) 421.704475ms ago: executing program 2 (id=3126): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x533, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40844) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000015c0)={r1, 0x0, 0xd1, 0x0, &(0x7f00000014c0)="906d8d95efca9d4561d0afb2bc9b0468d7b2416ba6dc74ab2995340c6c45574a575fdc75294b861c2208d27e1ef4d36498f30b56719b75895a4f758c7aaf5d28c996bfe3ee69a67e48e3c738c75833288adadc1d32972116b45046548cb05ba1a5acd4d485eab2403063df9f590a5ef34865d86b7323474a51f213d895f1cf1a88d497a7f93c2928c5d2fff2af074aa92a0f3f50c2acca36501c746d1c38a7ad8c56b0f3bb0113c63eeaa0d7d6f684c7ec8ba5124104474a393c0a1159dfbd2855dcbb1c2ba11c9755a00b88e5d7c04dba", 0x0, 0x7fff, 0x0, 0xad, 0x0, &(0x7f0000001380)="15b46d4db068cdde5a89e763f243ebbd11f9bbbab5aeffc355a510d69e3df19c2b41f2bcd9f8e8a0ec9e57f3abd86c49a595ebaaa34a052d946681131611d87c70fc2005773afa6005ab6366212373da9292e7e179ac281c0cc950187204abdb6d54cc9901059d2fbd9fa4a7d90f8bbfabf9b28f95fae8012e03938ad03464747996795da5deda6d15bfb0e3069a72693418be30d75535fd1ef25c03e47019ffc383dbecd2f5538171d1c0cc6a", 0x0, 0x2, 0x0, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) close(r2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x3f) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x4) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 359.861509ms ago: executing program 1 (id=3127): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x9e, &(0x7f0000000200)=""/158, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0xb, 0x5, 0x7}, 0x10, 0x18a57, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000340)=[{0x4, 0x1, 0xa, 0xa}, {0x1, 0x2}, {0x3, 0x1, 0xd, 0xb}, {0x2, 0x2, 0xc, 0x1}], 0x10, 0xbe}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x0, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xf}, 0xe}}, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x804) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1f, &(0x7f0000000100), 0x120) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xcdea339a50f18c37, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 0s ago: executing program 2 (id=3128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRESDEC=r1], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r7 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10ae80, 0x2, 0x0, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) close(r7) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0xc0045878, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="e8586a59baf45a0000000000005617c3dd08ca0c8ef2059aad7dcb16bc3f62ca6d1882afdafd87883ac11c7b58b93b427dcc87bef5ac4cb61b432e73512194c8004c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x96) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x8, 0xc16, 0x5, 0x4023, 0xffffffffffffffff, 0x5, '\x00', 0x0, r6, 0x3, 0x3, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x0, &(0x7f00000006c0), &(0x7f0000000700)='syzkaller\x00', 0x3, 0x33, &(0x7f0000000800)=""/51, 0x41100, 0x0, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000980)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r8, 0xffffffffffffffff, r6, 0xffffffffffffffff, 0xffffffffffffffff, r5, r9, 0xffffffffffffffff], 0x0, 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e0072", 0x54}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8924, &(0x7f0000000080)) openat$cgroup_ro(r6, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): st_run+0x31e/0x390 [ 269.013637][ T9974] __sys_bpf+0x5a5/0x6f0 [ 269.017906][ T9974] ? bpf_link_show_fdinfo+0x380/0x380 [ 269.023309][ T9974] __x64_sys_bpf+0x78/0x90 [ 269.027740][ T9974] do_syscall_64+0x4c/0xa0 [ 269.032287][ T9974] ? clear_bhb_loop+0x30/0x80 [ 269.037006][ T9974] ? clear_bhb_loop+0x30/0x80 [ 269.041764][ T9974] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.047680][ T9974] RIP: 0033:0x7f5858864cb9 [ 269.052122][ T9974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.071749][ T9974] RSP: 002b:00007f5856ac0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 269.080179][ T9974] RAX: ffffffffffffffda RBX: 00007f5858adffa0 RCX: 00007f5858864cb9 [ 269.088173][ T9974] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 269.096189][ T9974] RBP: 00007f5856ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 269.104178][ T9974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.112160][ T9974] R13: 00007f5858ae0038 R14: 00007f5858adffa0 R15: 00007ffd6ef70668 [ 269.120166][ T9974] [ 269.396178][ T9973] netlink: 'syz.2.2025': attribute type 2 has an invalid length. [ 269.403990][ T9973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2025'. [ 269.972410][T10004] netlink: 'syz.0.2035': attribute type 12 has an invalid length. [ 270.020075][T10004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2035'. [ 270.326202][T10012] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2039'. [ 270.897771][T10024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.926781][T10024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.042205][T10030] FAULT_INJECTION: forcing a failure. [ 271.042205][T10030] name failslab, interval 1, probability 0, space 0, times 0 [ 271.091765][T10030] CPU: 0 PID: 10030 Comm: syz.4.2046 Not tainted syzkaller #0 [ 271.098967][T10024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.099315][T10030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 271.099334][T10030] Call Trace: [ 271.099343][T10030] [ 271.099352][T10030] dump_stack_lvl+0x188/0x250 [ 271.099388][T10030] ? show_regs_print_info+0x20/0x20 [ 271.099414][T10030] ? load_image+0x400/0x400 [ 271.099442][T10030] ? __might_sleep+0xf0/0xf0 [ 271.099465][T10030] ? __lock_acquire+0x7d10/0x7d10 [ 271.099488][T10030] ? perf_trace_lock+0xe4/0x390 [ 271.099516][T10030] should_fail+0x38c/0x4c0 [ 271.099547][T10030] should_failslab+0x5/0x20 [ 271.099567][T10030] slab_pre_alloc_hook+0x51/0xc0 [ 271.099592][T10030] kmem_cache_alloc_node+0x47/0x2d0 [ 271.099612][T10030] ? __alloc_skb+0xf4/0x750 [ 271.099641][T10030] __alloc_skb+0xf4/0x750 [ 271.099669][T10030] alloc_skb_with_frags+0xa7/0x730 [ 271.099692][T10030] ? mark_lock+0x94/0x320 [ 271.099722][T10030] sock_alloc_send_pskb+0x87f/0x9a0 [ 271.099765][T10030] ? sock_kzfree_s+0x50/0x50 [ 271.099805][T10030] tun_get_user+0x7c8/0x3a70 [ 271.099849][T10030] ? tun_ring_recv+0xc40/0xc40 [ 271.099884][T10030] ? rcu_lock_release+0x5/0x20 [ 271.099911][T10030] ? __lock_acquire+0x7d10/0x7d10 [ 271.099963][T10030] tun_chr_write_iter+0x112/0x1e0 [ 271.099991][T10030] vfs_write+0x745/0xd60 [ 271.100019][T10030] ? file_end_write+0x250/0x250 [ 271.100049][T10030] ? __fget_files+0x40f/0x480 [ 271.100081][T10030] ? __fdget_pos+0x1e2/0x370 [ 271.100099][T10030] ? ksys_write+0x71/0x260 [ 271.100122][T10030] ksys_write+0x152/0x260 [ 271.100146][T10030] ? __ia32_sys_read+0x80/0x80 [ 271.100172][T10030] ? lockdep_hardirqs_on+0x94/0x140 [ 271.100202][T10030] do_syscall_64+0x4c/0xa0 [ 271.100221][T10030] ? clear_bhb_loop+0x30/0x80 [ 271.100242][T10030] ? clear_bhb_loop+0x30/0x80 [ 271.100264][T10030] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 271.100286][T10030] RIP: 0033:0x7faaa8c4ecb9 [ 271.100306][T10030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.100324][T10030] RSP: 002b:00007faaa6eaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 271.100349][T10030] RAX: ffffffffffffffda RBX: 00007faaa8ec9fa0 RCX: 00007faaa8c4ecb9 [ 271.100366][T10030] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 271.100382][T10030] RBP: 00007faaa6eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 271.100396][T10030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.100409][T10030] R13: 00007faaa8eca038 R14: 00007faaa8ec9fa0 R15: 00007ffc9e40b3c8 [ 271.100443][T10030] [ 271.435891][T10024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.593985][T10024] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 271.606978][T10024] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 272.434462][T10069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 272.460884][T10069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.699447][T10074] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2063'. [ 273.515459][T10112] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 273.544730][T10112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.623814][T10144] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 274.687351][T10144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 275.780880][T10192] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 275.847692][T10192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.341258][T10228] netlink: 'syz.0.2125': attribute type 12 has an invalid length. [ 277.364066][T10228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2125'. [ 277.524242][T10241] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 277.556637][T10241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.668625][T10249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.714123][T10249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.770065][T10249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.801911][T10249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.082999][T10258] netlink: 'syz.4.2137': attribute type 12 has an invalid length. [ 278.095411][T10258] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2137'. [ 278.881043][T10282] netlink: 'syz.1.2146': attribute type 12 has an invalid length. [ 278.923861][T10282] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2146'. [ 279.150070][T10292] netlink: 'syz.2.2150': attribute type 9 has an invalid length. [ 279.190315][T10292] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2150'. [ 279.488532][T10309] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2156'. [ 279.912172][T10319] netlink: 'syz.2.2161': attribute type 12 has an invalid length. [ 279.922987][T10319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2161'. [ 280.251641][T10331] netlink: 'syz.4.2165': attribute type 9 has an invalid length. [ 280.303235][T10331] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2165'. [ 280.788517][T10351] netlink: 'syz.3.2173': attribute type 12 has an invalid length. [ 280.833547][T10351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2173'. [ 281.363010][T10363] FAULT_INJECTION: forcing a failure. [ 281.363010][T10363] name failslab, interval 1, probability 0, space 0, times 0 [ 281.376018][T10363] CPU: 0 PID: 10363 Comm: syz.3.2180 Not tainted syzkaller #0 [ 281.383514][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.393605][T10363] Call Trace: [ 281.396910][T10363] [ 281.399884][T10363] dump_stack_lvl+0x188/0x250 [ 281.404619][T10363] ? show_regs_print_info+0x20/0x20 [ 281.409854][T10363] ? load_image+0x400/0x400 [ 281.414413][T10363] ? lock_acquire+0x208/0x400 [ 281.419140][T10363] should_fail+0x38c/0x4c0 [ 281.423627][T10363] should_failslab+0x5/0x20 [ 281.428178][T10363] slab_pre_alloc_hook+0x51/0xc0 [ 281.433167][T10363] ? dst_alloc+0x101/0x160 [ 281.437617][T10363] kmem_cache_alloc+0x3d/0x290 [ 281.442423][T10363] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 281.448094][T10363] dst_alloc+0x101/0x160 [ 281.452366][T10363] ip6_pol_route+0x921/0x12c0 [ 281.457066][T10363] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 281.462740][T10363] fib6_rule_lookup+0x208/0x5d0 [ 281.467627][T10363] ? ip6_route_output_flags_noref+0x390/0x390 [ 281.473748][T10363] ? fib6_lookup+0x2d0/0x2d0 [ 281.478382][T10363] ? __ipv6_addr_type+0x108/0x2f0 [ 281.483449][T10363] ? ip6_route_output_flags_noref+0x230/0x390 [ 281.489549][T10363] ip6_route_output_flags+0xbf/0x300 [ 281.495035][T10363] ip6_dst_lookup_tail+0x1a9/0x1280 [ 281.500271][T10363] ? rcu_is_watching+0x11/0xa0 [ 281.505066][T10363] ? ip6_dst_lookup+0x60/0x60 [ 281.509774][T10363] ? lockdep_hardirqs_on+0x94/0x140 [ 281.515007][T10363] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 281.521184][T10363] ? ip6_dst_lookup_flow+0x2b/0xd0 [ 281.526418][T10363] ip6_dst_lookup_flow+0x44/0xd0 [ 281.531383][T10363] rawv6_sendmsg+0xca4/0x1700 [ 281.536083][T10363] ? compat_rawv6_ioctl+0x60/0x60 [ 281.541135][T10363] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 281.547128][T10363] ? lock_chain_count+0x20/0x20 [ 281.552003][T10363] ? lockdep_hardirqs_on+0x94/0x140 [ 281.557227][T10363] ? sock_rps_record_flow+0x17/0x3b0 [ 281.562531][T10363] ? inet_sendmsg+0x78/0x2f0 [ 281.567135][T10363] ? inet_send_prepare+0x260/0x260 [ 281.572259][T10363] ____sys_sendmsg+0x5b7/0x8f0 [ 281.577048][T10363] ? __sys_sendmsg_sock+0x30/0x30 [ 281.582096][T10363] ? import_iovec+0x6f/0xa0 [ 281.586621][T10363] ___sys_sendmsg+0x236/0x2e0 [ 281.591421][T10363] ? __sys_sendmsg+0x2a0/0x2a0 [ 281.596261][T10363] __se_sys_sendmsg+0x1af/0x290 [ 281.601132][T10363] ? __x64_sys_sendmsg+0x80/0x80 [ 281.606185][T10363] ? syscall_enter_from_user_mode+0x2a/0x70 [ 281.612100][T10363] do_syscall_64+0x4c/0xa0 [ 281.616530][T10363] ? clear_bhb_loop+0x30/0x80 [ 281.621220][T10363] ? clear_bhb_loop+0x30/0x80 [ 281.625910][T10363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 281.631826][T10363] RIP: 0033:0x7f08e3c58cb9 [ 281.636254][T10363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.655867][T10363] RSP: 002b:00007f08e1eb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.664289][T10363] RAX: ffffffffffffffda RBX: 00007f08e3ed3fa0 RCX: 00007f08e3c58cb9 [ 281.672280][T10363] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 281.680264][T10363] RBP: 00007f08e1eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 281.688253][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.696253][T10363] R13: 00007f08e3ed4038 R14: 00007f08e3ed3fa0 R15: 00007ffcd5d31118 [ 281.704256][T10363] [ 282.030856][T10380] tap0: tun_chr_ioctl cmd 1074025677 [ 282.052297][T10380] tap0: linktype set to 774 [ 282.178895][T10385] netlink: 'syz.2.2190': attribute type 12 has an invalid length. [ 282.235468][T10385] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2190'. [ 282.551117][T10393] netlink: 'syz.1.2192': attribute type 9 has an invalid length. [ 282.573618][T10393] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2192'. [ 282.681532][T10397] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 282.759318][T10397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.187134][T10418] netlink: 'syz.4.2202': attribute type 21 has an invalid length. [ 283.197166][T10418] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2202'. [ 283.647485][T10440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.662814][T10440] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.672744][T10440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.701226][T10440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.777951][T10436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 283.816593][T10436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.526063][T10468] netlink: 'syz.1.2218': attribute type 21 has an invalid length. [ 284.564719][T10468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2218'. [ 285.479067][T10489] netlink: 'syz.4.2226': attribute type 9 has an invalid length. [ 285.505390][T10489] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2226'. [ 285.526914][T10491] FAULT_INJECTION: forcing a failure. [ 285.526914][T10491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.547995][T10491] CPU: 1 PID: 10491 Comm: syz.1.2227 Not tainted syzkaller #0 [ 285.555526][T10491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 285.565733][T10491] Call Trace: [ 285.569069][T10491] [ 285.572042][T10491] dump_stack_lvl+0x188/0x250 [ 285.576792][T10491] ? show_regs_print_info+0x20/0x20 [ 285.582050][T10491] ? load_image+0x400/0x400 [ 285.586637][T10491] ? __lock_acquire+0x7d10/0x7d10 [ 285.591741][T10491] should_fail+0x38c/0x4c0 [ 285.596238][T10491] _copy_to_user+0x2e/0x130 [ 285.600808][T10491] simple_read_from_buffer+0xe3/0x150 [ 285.606251][T10491] proc_fail_nth_read+0x1a6/0x220 [ 285.611350][T10491] ? proc_fault_inject_write+0x310/0x310 [ 285.617151][T10491] ? fsnotify_perm+0x254/0x560 [ 285.621970][T10491] ? proc_fault_inject_write+0x310/0x310 [ 285.627674][T10491] vfs_read+0x301/0xd60 [ 285.631928][T10491] ? kernel_read+0x1e0/0x1e0 [ 285.636594][T10491] ? __fget_files+0x40f/0x480 [ 285.641442][T10491] ? mutex_lock_nested+0x17/0x20 [ 285.646433][T10491] ? __fdget_pos+0x2bf/0x370 [ 285.651065][T10491] ? ksys_read+0x71/0x260 [ 285.655458][T10491] ksys_read+0x152/0x260 [ 285.659762][T10491] ? vfs_write+0xd60/0xd60 [ 285.664248][T10491] ? lockdep_hardirqs_on+0x94/0x140 [ 285.669513][T10491] do_syscall_64+0x4c/0xa0 [ 285.673986][T10491] ? clear_bhb_loop+0x30/0x80 [ 285.678708][T10491] ? clear_bhb_loop+0x30/0x80 [ 285.683443][T10491] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 285.689390][T10491] RIP: 0033:0x7fa59557c58e [ 285.693875][T10491] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 285.713531][T10491] RSP: 002b:00007fa593816fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 285.722010][T10491] RAX: ffffffffffffffda RBX: 00007fa5938176c0 RCX: 00007fa59557c58e [ 285.730035][T10491] RDX: 000000000000000f RSI: 00007fa5938170a0 RDI: 0000000000000007 [ 285.738074][T10491] RBP: 00007fa593817090 R08: 0000000000000000 R09: 0000000000000000 [ 285.746090][T10491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.754111][T10491] R13: 00007fa595837038 R14: 00007fa595836fa0 R15: 00007ffe4e9956b8 [ 285.762281][T10491] [ 285.947056][T10498] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.2230'. [ 286.233685][T10495] netlink: 'syz.0.2229': attribute type 12 has an invalid length. [ 286.250504][T10495] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2229'. [ 287.501610][T10535] netlink: 14609 bytes leftover after parsing attributes in process `syz.0.2244'. [ 287.708002][T10543] netlink: 'syz.2.2246': attribute type 2 has an invalid length. [ 287.721126][T10543] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2246'. [ 288.577735][T10550] netlink: 'syz.0.2248': attribute type 9 has an invalid length. [ 288.597922][T10550] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2248'. [ 288.919018][T10559] netlink: 'syz.2.2251': attribute type 12 has an invalid length. [ 288.962461][T10559] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2251'. [ 289.576167][T10593] netlink: 'syz.4.2261': attribute type 9 has an invalid length. [ 289.589042][T10593] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2261'. [ 289.791300][T10602] netlink: 'syz.4.2266': attribute type 12 has an invalid length. [ 289.807889][T10602] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2266'. [ 290.232195][T10620] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2272'. [ 290.630588][T10641] netlink: 'syz.3.2277': attribute type 9 has an invalid length. [ 290.651103][T10641] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2277'. [ 292.165044][T10686] FAULT_INJECTION: forcing a failure. [ 292.165044][T10686] name failslab, interval 1, probability 0, space 0, times 0 [ 292.205820][T10686] CPU: 1 PID: 10686 Comm: syz.4.2298 Not tainted syzkaller #0 [ 292.213439][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.223527][T10686] Call Trace: [ 292.226840][T10686] [ 292.229797][T10686] dump_stack_lvl+0x188/0x250 [ 292.234513][T10686] ? show_regs_print_info+0x20/0x20 [ 292.239835][T10686] ? load_image+0x400/0x400 [ 292.244376][T10686] ? __might_sleep+0xf0/0xf0 [ 292.249005][T10686] ? __lock_acquire+0x7d10/0x7d10 [ 292.254062][T10686] ? mark_lock+0x94/0x320 [ 292.258428][T10686] should_fail+0x38c/0x4c0 [ 292.262899][T10686] should_failslab+0x5/0x20 [ 292.267430][T10686] slab_pre_alloc_hook+0x51/0xc0 [ 292.272428][T10686] __kmalloc+0x6b/0x330 [ 292.276616][T10686] ? tomoyo_realpath_from_path+0x118/0x610 [ 292.282470][T10686] tomoyo_realpath_from_path+0x118/0x610 [ 292.288173][T10686] tomoyo_path_number_perm+0x242/0x660 [ 292.293691][T10686] ? verify_lock_unused+0x140/0x140 [ 292.298925][T10686] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 292.304430][T10686] ? ksys_write+0x1c6/0x260 [ 292.309031][T10686] security_file_ioctl+0x6c/0xa0 [ 292.314005][T10686] __se_sys_ioctl+0x48/0x170 [ 292.318718][T10686] do_syscall_64+0x4c/0xa0 [ 292.323169][T10686] ? clear_bhb_loop+0x30/0x80 [ 292.327888][T10686] ? clear_bhb_loop+0x30/0x80 [ 292.332601][T10686] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 292.338524][T10686] RIP: 0033:0x7faaa8c4ecb9 [ 292.342977][T10686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.362627][T10686] RSP: 002b:00007faaa6eaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.371070][T10686] RAX: ffffffffffffffda RBX: 00007faaa8ec9fa0 RCX: 00007faaa8c4ecb9 [ 292.379069][T10686] RDX: 0000200000000040 RSI: 00000000000089b1 RDI: 0000000000000003 [ 292.387604][T10686] RBP: 00007faaa6eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 292.395607][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.403608][T10686] R13: 00007faaa8eca038 R14: 00007faaa8ec9fa0 R15: 00007ffc9e40b3c8 [ 292.411641][T10686] [ 292.467998][T10686] ERROR: Out of memory at tomoyo_realpath_from_path. [ 292.750913][T10690] syz.2.2300[10690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 292.751175][T10690] syz.2.2300[10690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 294.789505][T10742] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2317'. [ 295.102526][T10753] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2322'. [ 295.747585][T10766] netlink: 'syz.4.2326': attribute type 9 has an invalid length. [ 295.786839][T10766] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2326'. [ 296.239488][T10783] netlink: 'syz.4.2331': attribute type 12 has an invalid length. [ 296.304314][T10783] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2331'. [ 296.358149][T10792] netlink: 'syz.2.2333': attribute type 9 has an invalid length. [ 296.407166][T10792] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2333'. [ 296.582730][ T26] audit: type=1800 audit(1769045583.010:2): pid=10784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2332" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 296.627658][T10784] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 296.639129][T10784] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 296.658998][T10784] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 296.832749][T10784] syz.3.2332 (10784) used greatest stack depth: 17816 bytes left [ 296.899444][T10813] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2338'. [ 297.302531][T10821] netlink: 'syz.1.2342': attribute type 9 has an invalid length. [ 297.338697][T10821] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2342'. [ 297.928811][T10843] netlink: 'syz.3.2349': attribute type 9 has an invalid length. [ 297.969911][T10843] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2349'. [ 298.565140][T10846] syz.1.2351 (10846) used greatest stack depth: 16016 bytes left [ 298.605980][T10867] FAULT_INJECTION: forcing a failure. [ 298.605980][T10867] name failslab, interval 1, probability 0, space 0, times 0 [ 298.656582][T10867] CPU: 1 PID: 10867 Comm: syz.3.2357 Not tainted syzkaller #0 [ 298.664105][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.674186][T10867] Call Trace: [ 298.677497][T10867] [ 298.680504][T10867] dump_stack_lvl+0x188/0x250 [ 298.685248][T10867] ? show_regs_print_info+0x20/0x20 [ 298.690488][T10867] ? load_image+0x400/0x400 [ 298.695053][T10867] ? __might_sleep+0xf0/0xf0 [ 298.699683][T10867] ? __lock_acquire+0x7d10/0x7d10 [ 298.704801][T10867] should_fail+0x38c/0x4c0 [ 298.709363][T10867] should_failslab+0x5/0x20 [ 298.713892][T10867] slab_pre_alloc_hook+0x51/0xc0 [ 298.718952][T10867] kmem_cache_alloc_node+0x47/0x2d0 [ 298.724180][T10867] ? perf_event_alloc+0x161/0x2240 [ 298.729371][T10867] perf_event_alloc+0x161/0x2240 [ 298.734350][T10867] ? __lock_acquire+0x7d10/0x7d10 [ 298.739411][T10867] ? do_raw_spin_unlock+0x11d/0x230 [ 298.744657][T10867] __se_sys_perf_event_open+0x6f5/0x1bb0 [ 298.750345][T10867] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 298.756025][T10867] ? lockdep_hardirqs_on+0x94/0x140 [ 298.761259][T10867] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 298.766927][T10867] do_syscall_64+0x4c/0xa0 [ 298.771386][T10867] ? clear_bhb_loop+0x30/0x80 [ 298.776092][T10867] ? clear_bhb_loop+0x30/0x80 [ 298.780801][T10867] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.786853][T10867] RIP: 0033:0x7f08e3c58cb9 [ 298.791301][T10867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.810941][T10867] RSP: 002b:00007f08e1eb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 298.819384][T10867] RAX: ffffffffffffffda RBX: 00007f08e3ed3fa0 RCX: 00007f08e3c58cb9 [ 298.827390][T10867] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000200000000480 [ 298.835377][T10867] RBP: 00007f08e1eb4090 R08: 0000000000000003 R09: 0000000000000000 [ 298.843399][T10867] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 298.851404][T10867] R13: 00007f08e3ed4038 R14: 00007f08e3ed3fa0 R15: 00007ffcd5d31118 [ 298.859405][T10867] [ 298.886829][T10874] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2358'. [ 301.833573][T10936] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2381'. [ 302.278068][T10953] netlink: 'syz.0.2388': attribute type 12 has an invalid length. [ 302.288630][T10953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2388'. [ 302.690751][T10962] FAULT_INJECTION: forcing a failure. [ 302.690751][T10962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.743677][T10966] FAULT_INJECTION: forcing a failure. [ 302.743677][T10966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.765382][T10962] CPU: 0 PID: 10962 Comm: syz.1.2392 Not tainted syzkaller #0 [ 302.772916][T10962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.783027][T10962] Call Trace: [ 302.786342][T10962] [ 302.789311][T10962] dump_stack_lvl+0x188/0x250 [ 302.794043][T10962] ? show_regs_print_info+0x20/0x20 [ 302.799376][T10962] ? load_image+0x400/0x400 [ 302.803923][T10962] ? __lock_acquire+0x7d10/0x7d10 [ 302.809035][T10962] should_fail+0x38c/0x4c0 [ 302.813513][T10962] _copy_from_user+0x2e/0x170 [ 302.818236][T10962] iovec_from_user+0x142/0x370 [ 302.823095][T10962] __import_iovec+0x70/0x490 [ 302.827862][T10962] import_iovec+0x6f/0xa0 [ 302.832256][T10962] ___sys_recvmsg+0x4e9/0x5c0 [ 302.836984][T10962] ? __sys_recvmsg+0x280/0x280 [ 302.841786][T10962] ? trace_event_raw_event_lock+0x270/0x270 [ 302.847886][T10962] __x64_sys_recvmsg+0x1f9/0x2c0 [ 302.852876][T10962] ? ___sys_recvmsg+0x5c0/0x5c0 [ 302.857764][T10962] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 302.863816][T10962] ? lockdep_hardirqs_on+0x94/0x140 [ 302.869081][T10962] do_syscall_64+0x4c/0xa0 [ 302.873553][T10962] ? clear_bhb_loop+0x30/0x80 [ 302.878270][T10962] ? clear_bhb_loop+0x30/0x80 [ 302.882996][T10962] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 302.888920][T10962] RIP: 0033:0x7fa5955bbcb9 [ 302.893391][T10962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.913051][T10962] RSP: 002b:00007fa593817028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 302.921512][T10962] RAX: ffffffffffffffda RBX: 00007fa595836fa0 RCX: 00007fa5955bbcb9 [ 302.929521][T10962] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 302.937622][T10962] RBP: 00007fa593817090 R08: 0000000000000000 R09: 0000000000000000 [ 302.945630][T10962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.953635][T10962] R13: 00007fa595837038 R14: 00007fa595836fa0 R15: 00007ffe4e9956b8 [ 302.961851][T10962] [ 302.969406][T10966] CPU: 0 PID: 10966 Comm: syz.0.2393 Not tainted syzkaller #0 [ 302.976913][T10966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.986997][T10966] Call Trace: [ 302.990303][T10966] [ 302.993258][T10966] dump_stack_lvl+0x188/0x250 [ 302.997982][T10966] ? show_regs_print_info+0x20/0x20 [ 303.003215][T10966] ? load_image+0x400/0x400 [ 303.007760][T10966] ? __lock_acquire+0x7d10/0x7d10 [ 303.012818][T10966] should_fail+0x38c/0x4c0 [ 303.017279][T10966] _copy_to_user+0x2e/0x130 [ 303.021813][T10966] simple_read_from_buffer+0xe3/0x150 [ 303.027226][T10966] proc_fail_nth_read+0x1a6/0x220 [ 303.032286][T10966] ? proc_fault_inject_write+0x310/0x310 [ 303.037957][T10966] ? fsnotify_perm+0x254/0x560 [ 303.042753][T10966] ? proc_fault_inject_write+0x310/0x310 [ 303.048420][T10966] vfs_read+0x301/0xd60 [ 303.052639][T10966] ? kernel_read+0x1e0/0x1e0 [ 303.057270][T10966] ? __fget_files+0x40f/0x480 [ 303.061994][T10966] ? mutex_lock_nested+0x17/0x20 [ 303.066966][T10966] ? __fdget_pos+0x2bf/0x370 [ 303.071595][T10966] ? ksys_read+0x71/0x260 [ 303.075961][T10966] ksys_read+0x152/0x260 [ 303.080234][T10966] ? vfs_write+0xd60/0xd60 [ 303.084720][T10966] ? lockdep_hardirqs_on+0x94/0x140 [ 303.090028][T10966] do_syscall_64+0x4c/0xa0 [ 303.094479][T10966] ? clear_bhb_loop+0x30/0x80 [ 303.099197][T10966] ? clear_bhb_loop+0x30/0x80 [ 303.103909][T10966] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 303.109914][T10966] RIP: 0033:0x7f585882558e [ 303.114366][T10966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 303.133997][T10966] RSP: 002b:00007f5856abffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.142444][T10966] RAX: ffffffffffffffda RBX: 00007f5856ac06c0 RCX: 00007f585882558e [ 303.150471][T10966] RDX: 000000000000000f RSI: 00007f5856ac00a0 RDI: 0000000000000004 [ 303.158591][T10966] RBP: 00007f5856ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 303.166615][T10966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.174619][T10966] R13: 00007f5858ae0038 R14: 00007f5858adffa0 R15: 00007ffd6ef70668 [ 303.182748][T10966] [ 303.709349][T10983] netlink: 'syz.0.2400': attribute type 12 has an invalid length. [ 303.722512][T10983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2400'. [ 303.995379][T11002] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2405'. [ 304.337013][T11017] FAULT_INJECTION: forcing a failure. [ 304.337013][T11017] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 304.351113][T11017] CPU: 0 PID: 11017 Comm: syz.0.2412 Not tainted syzkaller #0 [ 304.358618][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.368703][T11017] Call Trace: [ 304.372007][T11017] [ 304.374972][T11017] dump_stack_lvl+0x188/0x250 [ 304.379693][T11017] ? show_regs_print_info+0x20/0x20 [ 304.384922][T11017] ? load_image+0x400/0x400 [ 304.389456][T11017] ? verify_lock_unused+0x140/0x140 [ 304.394693][T11017] ? __lock_acquire+0x12e8/0x7d10 [ 304.399761][T11017] should_fail+0x38c/0x4c0 [ 304.404225][T11017] prepare_alloc_pages+0x1e4/0x5f0 [ 304.409390][T11017] __alloc_pages+0x11b/0x480 [ 304.414034][T11017] ? zone_statistics+0x170/0x170 [ 304.419028][T11017] new_slab+0xc0/0x4b0 [ 304.423135][T11017] ___slab_alloc+0x80a/0xdd0 [ 304.427756][T11017] ? tomoyo_realpath_from_path+0x118/0x610 [ 304.433609][T11017] __kmalloc+0x1cd/0x330 [ 304.437882][T11017] ? tomoyo_realpath_from_path+0x118/0x610 [ 304.443742][T11017] tomoyo_realpath_from_path+0x118/0x610 [ 304.449557][T11017] tomoyo_path_number_perm+0x242/0x660 [ 304.455066][T11017] ? verify_lock_unused+0x140/0x140 [ 304.460321][T11017] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 304.465823][T11017] ? ksys_write+0x1c6/0x260 [ 304.470420][T11017] security_file_ioctl+0x6c/0xa0 [ 304.475422][T11017] __se_sys_ioctl+0x48/0x170 [ 304.480054][T11017] do_syscall_64+0x4c/0xa0 [ 304.484495][T11017] ? clear_bhb_loop+0x30/0x80 [ 304.489189][T11017] ? clear_bhb_loop+0x30/0x80 [ 304.493908][T11017] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.499948][T11017] RIP: 0033:0x7f5858864cb9 [ 304.504396][T11017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.524047][T11017] RSP: 002b:00007f5856ac0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.532514][T11017] RAX: ffffffffffffffda RBX: 00007f5858adffa0 RCX: 00007f5858864cb9 [ 304.540539][T11017] RDX: 0000200000000040 RSI: 0000000000008948 RDI: 0000000000000003 [ 304.548542][T11017] RBP: 00007f5856ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 304.556632][T11017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.564633][T11017] R13: 00007f5858ae0038 R14: 00007f5858adffa0 R15: 00007ffd6ef70668 [ 304.572647][T11017] [ 304.931906][T11026] netlink: 'syz.4.2415': attribute type 12 has an invalid length. [ 304.975517][T11026] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2415'. [ 305.027998][T11037] netlink: 'syz.2.2418': attribute type 21 has an invalid length. [ 305.066181][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2418'. [ 305.623704][T11059] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2424'. [ 306.350968][T11084] FAULT_INJECTION: forcing a failure. [ 306.350968][T11084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.475872][T11085] netlink: 'syz.4.2433': attribute type 12 has an invalid length. [ 306.485605][T11084] CPU: 0 PID: 11084 Comm: syz.1.2434 Not tainted syzkaller #0 [ 306.493515][T11084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.505620][T11084] Call Trace: [ 306.509133][T11084] [ 306.512352][T11084] dump_stack_lvl+0x188/0x250 [ 306.517729][T11084] ? show_regs_print_info+0x20/0x20 [ 306.524176][T11084] ? load_image+0x400/0x400 [ 306.529562][T11084] ? __lock_acquire+0x7d10/0x7d10 [ 306.535408][T11084] ? vfs_write+0x8b2/0xd60 [ 306.540361][T11084] should_fail+0x38c/0x4c0 [ 306.545134][T11084] _copy_from_user+0x2e/0x170 [ 306.550534][T11084] __sys_bpf+0x26d/0x6f0 [ 306.555774][T11084] ? bpf_link_show_fdinfo+0x380/0x380 [ 306.562613][T11084] ? rcu_nmi_exit+0x6f/0xf0 [ 306.568210][T11084] ? vtime_user_exit+0x2c8/0x3e0 [ 306.573968][T11084] __x64_sys_bpf+0x78/0x90 [ 306.579325][T11084] do_syscall_64+0x4c/0xa0 [ 306.584433][T11084] ? clear_bhb_loop+0x30/0x80 [ 306.589914][T11084] ? clear_bhb_loop+0x30/0x80 [ 306.595252][T11084] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 306.601927][T11084] RIP: 0033:0x7fa5955bbcb9 [ 306.607254][T11084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.633835][T11084] RSP: 002b:00007fa593817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.643987][T11084] RAX: ffffffffffffffda RBX: 00007fa595836fa0 RCX: 00007fa5955bbcb9 [ 306.653448][T11084] RDX: 0000000000000010 RSI: 00002000000006c0 RDI: 000000000000000f [ 306.661919][T11084] RBP: 00007fa593817090 R08: 0000000000000000 R09: 0000000000000000 [ 306.670111][T11084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.678987][T11084] R13: 00007fa595837038 R14: 00007fa595836fa0 R15: 00007ffe4e9956b8 [ 306.687600][T11084] [ 306.785772][T11085] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2433'. [ 307.522098][T11113] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2447'. [ 307.815073][T11125] netlink: 'syz.3.2450': attribute type 12 has an invalid length. [ 307.845256][T11125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2450'. [ 307.867641][T11128] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2451'. [ 308.763561][T11170] FAULT_INJECTION: forcing a failure. [ 308.763561][T11170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.777832][T11170] CPU: 1 PID: 11170 Comm: syz.1.2465 Not tainted syzkaller #0 [ 308.785649][T11170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.796374][T11170] Call Trace: [ 308.800095][T11170] [ 308.803108][T11170] dump_stack_lvl+0x188/0x250 [ 308.808115][T11170] ? show_regs_print_info+0x20/0x20 [ 308.813561][T11170] ? load_image+0x400/0x400 [ 308.818357][T11170] ? perf_trace_lock_acquire+0x340/0x3e0 [ 308.824155][T11170] ? __lock_acquire+0x7d10/0x7d10 [ 308.829326][T11170] ? aa_label_sk_perm+0x3d0/0x530 [ 308.834437][T11170] should_fail+0x38c/0x4c0 [ 308.839100][T11170] _copy_from_user+0x2e/0x170 [ 308.844658][T11170] copy_from_sockptr+0x69/0x80 [ 308.849720][T11170] packet_setsockopt+0xb13/0x1af0 [ 308.854910][T11170] ? __might_sleep+0xf0/0xf0 [ 308.859737][T11170] ? packet_ioctl+0x240/0x240 [ 308.864501][T11170] ? rcu_lock_release+0x9/0x20 [ 308.869421][T11170] ? __lock_acquire+0x7d10/0x7d10 [ 308.874563][T11170] ? aa_sk_perm+0x7dc/0x910 [ 308.879149][T11170] ? aa_af_perm+0x340/0x340 [ 308.883737][T11170] ? __fget_files+0x40f/0x480 [ 308.888588][T11170] ? aa_sock_opt_perm+0x74/0x100 [ 308.893763][T11170] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 308.899365][T11170] ? security_socket_setsockopt+0x7a/0xa0 [ 308.905146][T11170] ? packet_ioctl+0x240/0x240 [ 308.909935][T11170] __sys_setsockopt+0x2bf/0x3d0 [ 308.914948][T11170] __x64_sys_setsockopt+0xb1/0xc0 [ 308.920037][T11170] do_syscall_64+0x4c/0xa0 [ 308.924636][T11170] ? clear_bhb_loop+0x30/0x80 [ 308.929441][T11170] ? clear_bhb_loop+0x30/0x80 [ 308.934898][T11170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 308.941138][T11170] RIP: 0033:0x7fa5955bbcb9 [ 308.945856][T11170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.965742][T11170] RSP: 002b:00007fa593817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.974901][T11170] RAX: ffffffffffffffda RBX: 00007fa595836fa0 RCX: 00007fa5955bbcb9 [ 308.983030][T11170] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 308.991211][T11170] RBP: 00007fa593817090 R08: 0000000000000004 R09: 0000000000000000 [ 308.999431][T11170] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 309.008184][T11170] R13: 00007fa595837038 R14: 00007fa595836fa0 R15: 00007ffe4e9956b8 [ 309.017505][T11170] [ 309.120636][T11164] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2463'. [ 309.441410][T11190] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2472'. [ 309.991463][T11212] netlink: 'syz.3.2480': attribute type 9 has an invalid length. [ 310.035387][T11212] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2480'. [ 310.058469][T11215] netlink: 'syz.2.2479': attribute type 12 has an invalid length. [ 310.090928][T11215] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2479'. [ 310.214435][T11220] netlink: 'syz.0.2482': attribute type 9 has an invalid length. [ 310.285212][T11220] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2482'. [ 310.390643][T11225] netlink: 'syz.2.2484': attribute type 2 has an invalid length. [ 310.438409][T11225] netlink: 'syz.2.2484': attribute type 8 has an invalid length. [ 310.448477][T11225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2484'. [ 310.556752][T11237] netlink: 'syz.0.2488': attribute type 39 has an invalid length. [ 310.635225][T11224] delete_channel: no stack [ 310.886939][T11252] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2493'. [ 311.111455][T11252] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 311.411247][T11250] netlink: 'syz.0.2494': attribute type 12 has an invalid length. [ 312.370943][T11287] FAULT_INJECTION: forcing a failure. [ 312.370943][T11287] name failslab, interval 1, probability 0, space 0, times 0 [ 312.414816][T11287] CPU: 0 PID: 11287 Comm: syz.2.2504 Not tainted syzkaller #0 [ 312.422610][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.432717][T11287] Call Trace: [ 312.436032][T11287] [ 312.439000][T11287] dump_stack_lvl+0x188/0x250 [ 312.443729][T11287] ? show_regs_print_info+0x20/0x20 [ 312.449093][T11287] ? load_image+0x400/0x400 [ 312.453646][T11287] ? __might_sleep+0xf0/0xf0 [ 312.458281][T11287] ? __lock_acquire+0x7d10/0x7d10 [ 312.463489][T11287] ? netlink_insert+0xe95/0x11f0 [ 312.468475][T11287] should_fail+0x38c/0x4c0 [ 312.473028][T11287] should_failslab+0x5/0x20 [ 312.477657][T11287] slab_pre_alloc_hook+0x51/0xc0 [ 312.482677][T11287] kmem_cache_alloc_node+0x47/0x2d0 [ 312.487922][T11287] ? __alloc_skb+0xf4/0x750 [ 312.492485][T11287] __alloc_skb+0xf4/0x750 [ 312.497406][T11287] netlink_sendmsg+0x654/0xbe0 [ 312.502318][T11287] ? netlink_getsockopt+0x570/0x570 [ 312.507571][T11287] ? aa_sock_msg_perm+0x94/0x150 [ 312.512642][T11287] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 312.518133][T11287] ? security_socket_sendmsg+0x7c/0xa0 [ 312.523635][T11287] ? netlink_getsockopt+0x570/0x570 [ 312.528970][T11287] ____sys_sendmsg+0x5b7/0x8f0 [ 312.533808][T11287] ? __sys_sendmsg_sock+0x30/0x30 [ 312.538890][T11287] ? import_iovec+0x6f/0xa0 [ 312.543485][T11287] ___sys_sendmsg+0x236/0x2e0 [ 312.548224][T11287] ? __sys_sendmsg+0x2a0/0x2a0 [ 312.553049][T11287] ? vfs_write+0x8b2/0xd60 [ 312.557635][T11287] __se_sys_sendmsg+0x1af/0x290 [ 312.562671][T11287] ? __x64_sys_sendmsg+0x80/0x80 [ 312.567765][T11287] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 312.573823][T11287] ? lockdep_hardirqs_on+0x94/0x140 [ 312.580038][T11287] do_syscall_64+0x4c/0xa0 [ 312.584608][T11287] ? clear_bhb_loop+0x30/0x80 [ 312.589581][T11287] ? clear_bhb_loop+0x30/0x80 [ 312.594416][T11287] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 312.601020][T11287] RIP: 0033:0x7f7855494cb9 [ 312.605491][T11287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.625666][T11287] RSP: 002b:00007f78536f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.634396][T11287] RAX: ffffffffffffffda RBX: 00007f785570ffa0 RCX: 00007f7855494cb9 [ 312.642675][T11287] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 312.651123][T11287] RBP: 00007f78536f0090 R08: 0000000000000000 R09: 0000000000000000 [ 312.659138][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.667240][T11287] R13: 00007f7855710038 R14: 00007f785570ffa0 R15: 00007ffc6c887ec8 [ 312.675278][T11287] [ 312.775705][T11293] netlink: 'syz.0.2507': attribute type 12 has an invalid length. [ 312.788250][T11293] __nla_validate_parse: 2 callbacks suppressed [ 312.788350][T11293] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2507'. [ 312.906510][T11297] FAULT_INJECTION: forcing a failure. [ 312.906510][T11297] name failslab, interval 1, probability 0, space 0, times 0 [ 312.957230][T11297] CPU: 1 PID: 11297 Comm: syz.2.2518 Not tainted syzkaller #0 [ 312.965034][T11297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 312.975396][T11297] Call Trace: [ 312.978714][T11297] [ 312.981675][T11297] dump_stack_lvl+0x188/0x250 [ 312.986429][T11297] ? show_regs_print_info+0x20/0x20 [ 312.991686][T11297] ? load_image+0x400/0x400 [ 312.996240][T11297] ? __might_sleep+0xf0/0xf0 [ 313.000882][T11297] ? __lock_acquire+0x7d10/0x7d10 [ 313.005956][T11297] ? mark_lock+0x94/0x320 [ 313.010451][T11297] should_fail+0x38c/0x4c0 [ 313.014940][T11297] should_failslab+0x5/0x20 [ 313.019491][T11297] slab_pre_alloc_hook+0x51/0xc0 [ 313.024515][T11297] kmem_cache_alloc_node+0x47/0x2d0 [ 313.029855][T11297] ? __alloc_skb+0xf4/0x750 [ 313.034417][T11297] __alloc_skb+0xf4/0x750 [ 313.038823][T11297] __ip_append_data+0x2105/0x32d0 [ 313.043920][T11297] ? raw_send_hdrinc+0x1110/0x1110 [ 313.049088][T11297] ? lock_chain_count+0x20/0x20 [ 313.053995][T11297] ? ip_setup_cork+0x890/0x890 [ 313.058804][T11297] ? ip_setup_cork+0x496/0x890 [ 313.063619][T11297] ip_append_data+0x132/0x1a0 [ 313.068346][T11297] ? raw_send_hdrinc+0x1110/0x1110 [ 313.073510][T11297] raw_sendmsg+0x1433/0x1aa0 [ 313.078167][T11297] ? compat_raw_ioctl+0x60/0x60 [ 313.083076][T11297] ? aa_sk_perm+0x7dc/0x910 [ 313.087678][T11297] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 313.094151][T11297] ? sock_rps_record_flow+0x17/0x3b0 [ 313.099488][T11297] ? inet_sendmsg+0x78/0x2f0 [ 313.104145][T11297] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 313.109479][T11297] ? security_socket_sendmsg+0x7c/0xa0 [ 313.115120][T11297] ? inet_send_prepare+0x260/0x260 [ 313.120389][T11297] ____sys_sendmsg+0x5b7/0x8f0 [ 313.125317][T11297] ? __sys_sendmsg_sock+0x30/0x30 [ 313.130404][T11297] ? import_iovec+0x6f/0xa0 [ 313.134957][T11297] ___sys_sendmsg+0x236/0x2e0 [ 313.139690][T11297] ? __sys_sendmsg+0x2a0/0x2a0 [ 313.144631][T11297] ? vfs_write+0x8b2/0xd60 [ 313.149123][T11297] __se_sys_sendmsg+0x1af/0x290 [ 313.154110][T11297] ? __x64_sys_sendmsg+0x80/0x80 [ 313.159088][T11297] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 313.165207][T11297] ? lockdep_hardirqs_on+0x94/0x140 [ 313.170465][T11297] do_syscall_64+0x4c/0xa0 [ 313.174921][T11297] ? clear_bhb_loop+0x30/0x80 [ 313.179676][T11297] ? clear_bhb_loop+0x30/0x80 [ 313.184418][T11297] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.190368][T11297] RIP: 0033:0x7f7855494cb9 [ 313.194913][T11297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.214744][T11297] RSP: 002b:00007f78536f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 313.223321][T11297] RAX: ffffffffffffffda RBX: 00007f785570ffa0 RCX: 00007f7855494cb9 [ 313.231338][T11297] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 313.239355][T11297] RBP: 00007f78536f0090 R08: 0000000000000000 R09: 0000000000000000 [ 313.247371][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.255391][T11297] R13: 00007f7855710038 R14: 00007f785570ffa0 R15: 00007ffc6c887ec8 [ 313.263432][T11297] [ 313.617086][T11299] delete_channel: no stack [ 313.872812][T11320] netlink: 'syz.4.2516': attribute type 21 has an invalid length. [ 313.895360][T11320] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2516'. [ 314.179243][T11329] netlink: 'syz.1.2520': attribute type 29 has an invalid length. [ 314.271794][T11329] netlink: 'syz.1.2520': attribute type 29 has an invalid length. [ 314.379166][T11333] netlink: 'syz.2.2521': attribute type 12 has an invalid length. [ 314.408482][T11333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2521'. [ 314.786984][T11337] FAULT_INJECTION: forcing a failure. [ 314.786984][T11337] name failslab, interval 1, probability 0, space 0, times 0 [ 314.834933][T11337] CPU: 1 PID: 11337 Comm: syz.2.2523 Not tainted syzkaller #0 [ 314.842465][T11337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.852570][T11337] Call Trace: [ 314.855878][T11337] [ 314.858861][T11337] dump_stack_lvl+0x188/0x250 [ 314.863583][T11337] ? show_regs_print_info+0x20/0x20 [ 314.868966][T11337] ? load_image+0x400/0x400 [ 314.873531][T11337] ? __lock_acquire+0x7d10/0x7d10 [ 314.878712][T11337] ? __lock_acquire+0x7d10/0x7d10 [ 314.883787][T11337] ? do_raw_spin_lock+0x128/0x2f0 [ 314.888854][T11337] should_fail+0x38c/0x4c0 [ 314.893324][T11337] should_failslab+0x5/0x20 [ 314.897862][T11337] slab_pre_alloc_hook+0x51/0xc0 [ 314.902836][T11337] ? sockfs_init_fs_context+0xa0/0xa0 [ 314.908285][T11337] ? sock_alloc_inode+0x17/0xb0 [ 314.913201][T11337] kmem_cache_alloc+0x3d/0x290 [ 314.918035][T11337] ? sockfs_init_fs_context+0xa0/0xa0 [ 314.923730][T11337] sock_alloc_inode+0x17/0xb0 [ 314.929072][T11337] ? sockfs_init_fs_context+0xa0/0xa0 [ 314.934723][T11337] new_inode_pseudo+0x5f/0x210 [ 314.939541][T11337] __sock_create+0x129/0x900 [ 314.944198][T11337] __sys_socketpair+0x232/0x540 [ 314.949119][T11337] __x64_sys_socketpair+0x97/0xb0 [ 314.954242][T11337] do_syscall_64+0x4c/0xa0 [ 314.958898][T11337] ? clear_bhb_loop+0x30/0x80 [ 314.963725][T11337] ? clear_bhb_loop+0x30/0x80 [ 314.968729][T11337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 314.974848][T11337] RIP: 0033:0x7f7855494cb9 [ 314.979315][T11337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.999417][T11337] RSP: 002b:00007f78536f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 315.008336][T11337] RAX: ffffffffffffffda RBX: 00007f785570ffa0 RCX: 00007f7855494cb9 [ 315.017035][T11337] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 315.025240][T11337] RBP: 00007f78536f0090 R08: 0000000000000000 R09: 0000000000000000 [ 315.034675][T11337] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 315.043132][T11337] R13: 00007f7855710038 R14: 00007f785570ffa0 R15: 00007ffc6c887ec8 [ 315.051783][T11337] [ 315.629059][T11337] socket: no more sockets [ 315.743398][T11351] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2528'. [ 315.789225][T11351] netlink: 'syz.2.2528': attribute type 10 has an invalid length. [ 316.969343][T11361] netlink: 'syz.3.2535': attribute type 4 has an invalid length. [ 317.030904][T11361] netlink: 105084 bytes leftover after parsing attributes in process `syz.3.2535'. [ 317.133675][T11375] netlink: 'syz.1.2536': attribute type 9 has an invalid length. [ 317.171516][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.177903][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.185867][T11375] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2536'. [ 317.254071][T11361] netlink: 'syz.3.2535': attribute type 21 has an invalid length. [ 317.346273][T11361] netlink: 'syz.3.2535': attribute type 6 has an invalid length. [ 317.354459][T11361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2535'. [ 317.560103][T11382] netlink: 'syz.1.2538': attribute type 12 has an invalid length. [ 317.575822][T11382] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2538'. [ 317.906484][T11395] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2544'. [ 318.476398][T11411] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2548'. [ 319.231025][T11423] validate_nla: 2 callbacks suppressed [ 319.231128][T11423] netlink: 'syz.3.2552': attribute type 12 has an invalid length. [ 319.268062][T11423] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2552'. [ 319.510252][T11438] netlink: 'syz.1.2556': attribute type 12 has an invalid length. [ 319.545950][T11438] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2556'. [ 319.906116][T11457] FAULT_INJECTION: forcing a failure. [ 319.906116][T11457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.995981][T11457] CPU: 0 PID: 11457 Comm: syz.0.2564 Not tainted syzkaller #0 [ 320.003607][T11457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.013936][T11457] Call Trace: [ 320.017262][T11457] [ 320.020227][T11457] dump_stack_lvl+0x188/0x250 [ 320.025046][T11457] ? show_regs_print_info+0x20/0x20 [ 320.027281][T11459] netlink: 'syz.2.2565': attribute type 4 has an invalid length. [ 320.030384][T11457] ? load_image+0x400/0x400 [ 320.030444][T11457] ? __lock_acquire+0x7d10/0x7d10 [ 320.030479][T11457] should_fail+0x38c/0x4c0 [ 320.030511][T11457] _copy_to_user+0x2e/0x130 [ 320.030536][T11457] simple_read_from_buffer+0xe3/0x150 [ 320.030567][T11457] proc_fail_nth_read+0x1a6/0x220 [ 320.030595][T11457] ? proc_fault_inject_write+0x310/0x310 [ 320.072998][T11457] ? fsnotify_perm+0x254/0x560 [ 320.077842][T11457] ? proc_fault_inject_write+0x310/0x310 [ 320.083531][T11457] vfs_read+0x301/0xd60 [ 320.087916][T11457] ? kernel_read+0x1e0/0x1e0 [ 320.092630][T11457] ? __fget_files+0x40f/0x480 [ 320.097363][T11457] ? mutex_lock_nested+0x17/0x20 [ 320.102350][T11457] ? __fdget_pos+0x2bf/0x370 [ 320.107108][T11457] ? ksys_read+0x71/0x260 [ 320.111488][T11457] ksys_read+0x152/0x260 [ 320.115778][T11457] ? vfs_write+0xd60/0xd60 [ 320.120377][T11457] ? lockdep_hardirqs_on+0x94/0x140 [ 320.122034][T11459] netlink: 105084 bytes leftover after parsing attributes in process `syz.2.2565'. [ 320.125653][T11457] do_syscall_64+0x4c/0xa0 [ 320.125680][T11457] ? clear_bhb_loop+0x30/0x80 [ 320.125702][T11457] ? clear_bhb_loop+0x30/0x80 [ 320.125729][T11457] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 320.125750][T11457] RIP: 0033:0x7f585882558e [ 320.125769][T11457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 320.125788][T11457] RSP: 002b:00007f5856abffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.125813][T11457] RAX: ffffffffffffffda RBX: 00007f5856ac06c0 RCX: 00007f585882558e [ 320.125829][T11457] RDX: 000000000000000f RSI: 00007f5856ac00a0 RDI: 0000000000000005 [ 320.125844][T11457] RBP: 00007f5856ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 320.125857][T11457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.125870][T11457] R13: 00007f5858ae0038 R14: 00007f5858adffa0 R15: 00007ffd6ef70668 [ 320.125902][T11457] [ 320.493707][T11464] netlink: 'syz.2.2565': attribute type 21 has an invalid length. [ 320.523567][T11464] netlink: 'syz.2.2565': attribute type 6 has an invalid length. [ 320.552100][T11464] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2565'. [ 320.824324][T11484] netlink: 'syz.0.2573': attribute type 3 has an invalid length. [ 320.861634][T11484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2573'. [ 321.729676][T11518] netlink: 'syz.4.2585': attribute type 4 has an invalid length. [ 321.787146][T11518] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.2585'. [ 321.851920][T11521] netlink: 'syz.2.2584': attribute type 10 has an invalid length. [ 322.031299][T11518] netlink: 'syz.4.2585': attribute type 21 has an invalid length. [ 322.105784][T11518] netlink: 'syz.4.2585': attribute type 6 has an invalid length. [ 322.145475][T11518] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2585'. [ 322.180324][T11526] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2586'. [ 322.921394][T11552] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2603'. [ 323.116218][T11558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2593'. [ 323.585836][T11574] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2600'. [ 323.673235][T11577] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2601'. [ 324.151359][T11589] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2606'. [ 324.334035][T11591] validate_nla: 6 callbacks suppressed [ 324.334084][T11591] netlink: 'syz.0.2608': attribute type 12 has an invalid length. [ 324.350824][T11591] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2608'. [ 324.505493][T11600] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2611'. [ 324.888675][T11618] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2617'. [ 325.095962][T11618] device sit0 entered promiscuous mode [ 325.540149][T11631] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2622'. [ 325.861919][T11640] netlink: 'syz.1.2623': attribute type 12 has an invalid length. [ 325.890935][T11637] netlink: 'syz.3.2624': attribute type 4 has an invalid length. [ 325.925914][T11637] netlink: 105084 bytes leftover after parsing attributes in process `syz.3.2624'. [ 326.034388][T11642] netlink: 'syz.0.2625': attribute type 9 has an invalid length. [ 326.048691][T11646] netlink: 'syz.2.2627': attribute type 10 has an invalid length. [ 326.099928][T11646] device geneve0 entered promiscuous mode [ 326.310324][T11658] delete_channel: no stack [ 326.332687][T11658] delete_channel: no stack [ 326.371407][T11658] FAULT_INJECTION: forcing a failure. [ 326.371407][T11658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.387594][T11658] CPU: 0 PID: 11658 Comm: syz.4.2631 Not tainted syzkaller #0 [ 326.395464][T11658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.405741][T11658] Call Trace: [ 326.409162][T11658] [ 326.412260][T11658] dump_stack_lvl+0x188/0x250 [ 326.417074][T11658] ? show_regs_print_info+0x20/0x20 [ 326.422325][T11658] ? load_image+0x400/0x400 [ 326.426873][T11658] ? __lock_acquire+0x7d10/0x7d10 [ 326.431947][T11658] should_fail+0x38c/0x4c0 [ 326.436424][T11658] _copy_from_user+0x2e/0x170 [ 326.441153][T11658] __sys_bpf+0x26d/0x6f0 [ 326.445453][T11658] ? bpf_link_show_fdinfo+0x380/0x380 [ 326.450891][T11658] __x64_sys_bpf+0x78/0x90 [ 326.455357][T11658] do_syscall_64+0x4c/0xa0 [ 326.459915][T11658] ? clear_bhb_loop+0x30/0x80 [ 326.464720][T11658] ? clear_bhb_loop+0x30/0x80 [ 326.469533][T11658] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.475667][T11658] RIP: 0033:0x7faaa8c4ecb9 [ 326.480339][T11658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.500305][T11658] RSP: 002b:00007faaa6eaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.509124][T11658] RAX: ffffffffffffffda RBX: 00007faaa8ec9fa0 RCX: 00007faaa8c4ecb9 [ 326.517478][T11658] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 326.525651][T11658] RBP: 00007faaa6eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 326.533747][T11658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.542038][T11658] R13: 00007faaa8eca038 R14: 00007faaa8ec9fa0 R15: 00007ffc9e40b3c8 [ 326.550841][T11658] [ 327.225665][T11685] device sit0 entered promiscuous mode [ 327.279050][T11686] device bridge_slave_1 left promiscuous mode [ 327.401949][T11686] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.459187][T11686] device bridge_slave_0 left promiscuous mode [ 327.470259][T11686] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.571209][T11712] __nla_validate_parse: 4 callbacks suppressed [ 328.571229][T11712] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2648'. [ 328.644079][T11713] netlink: 'syz.1.2649': attribute type 2 has an invalid length. [ 328.704157][T11713] netlink: 'syz.1.2649': attribute type 1 has an invalid length. [ 329.035890][T11712] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2648'. [ 329.731516][T11740] netlink: 'syz.3.2655': attribute type 10 has an invalid length. [ 330.016005][T11747] netlink: 'syz.2.2658': attribute type 1 has an invalid length. [ 330.105156][T11747] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.2658'. [ 330.214321][T11755] netlink: 'syz.4.2661': attribute type 9 has an invalid length. [ 330.239358][T11755] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2661'. [ 330.403123][T11769] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2663'. [ 330.443418][T11771] netlink: 'syz.4.2665': attribute type 10 has an invalid length. [ 331.461375][T11800] netlink: 'syz.2.2674': attribute type 12 has an invalid length. [ 331.501738][T11800] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2674'. [ 331.571608][T11807] netlink: 'syz.4.2675': attribute type 9 has an invalid length. [ 331.601087][T11807] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2675'. [ 331.733234][T11811] netlink: 'syz.0.2676': attribute type 12 has an invalid length. [ 331.743346][T11810] netlink: 'syz.3.2677': attribute type 4 has an invalid length. [ 331.775028][T11811] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2676'. [ 331.784803][T11810] netlink: 105084 bytes leftover after parsing attributes in process `syz.3.2677'. [ 331.851685][T11810] netlink: 'syz.3.2677': attribute type 21 has an invalid length. [ 331.891236][T11810] netlink: 'syz.3.2677': attribute type 6 has an invalid length. [ 331.900278][T11810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2677'. [ 334.573375][T11898] __nla_validate_parse: 7 callbacks suppressed [ 334.573412][T11898] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2705'. [ 334.901027][T11911] validate_nla: 9 callbacks suppressed [ 334.901066][T11911] netlink: 'syz.3.2709': attribute type 4 has an invalid length. [ 334.987806][T11911] netlink: 105084 bytes leftover after parsing attributes in process `syz.3.2709'. [ 335.113055][T11913] netlink: 'syz.3.2709': attribute type 21 has an invalid length. [ 335.166086][T11913] netlink: 'syz.3.2709': attribute type 6 has an invalid length. [ 335.195262][T11913] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2709'. [ 335.682137][T11932] netlink: 'syz.0.2713': attribute type 2 has an invalid length. [ 335.746617][T11932] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2713'. [ 335.809889][T11935] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2713'. [ 335.924068][T11938] FAULT_INJECTION: forcing a failure. [ 335.924068][T11938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.983609][T11938] CPU: 0 PID: 11938 Comm: syz.4.2716 Not tainted syzkaller #0 [ 335.991148][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 336.001426][T11938] Call Trace: [ 336.005374][T11938] [ 336.008625][T11938] dump_stack_lvl+0x188/0x250 [ 336.013359][T11938] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 336.019617][T11938] ? show_regs_print_info+0x20/0x20 [ 336.024875][T11938] ? load_image+0x400/0x400 [ 336.029851][T11938] should_fail+0x38c/0x4c0 [ 336.034337][T11938] _copy_from_user+0x2e/0x170 [ 336.039067][T11938] __copy_msghdr_from_user+0xc9/0x630 [ 336.044521][T11938] ? verify_lock_unused+0x140/0x140 [ 336.049767][T11938] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 336.055122][T11938] ___sys_sendmsg+0x19a/0x2e0 [ 336.060050][T11938] ? __sys_sendmsg+0x2a0/0x2a0 [ 336.064960][T11938] ? ktime_get_real_ts64+0x440/0x440 [ 336.070308][T11938] __se_sys_sendmsg+0x1af/0x290 [ 336.075292][T11938] ? __x64_sys_sendmsg+0x80/0x80 [ 336.080301][T11938] ? syscall_enter_from_user_mode+0x2a/0x70 [ 336.086244][T11938] do_syscall_64+0x4c/0xa0 [ 336.090699][T11938] ? clear_bhb_loop+0x30/0x80 [ 336.095413][T11938] ? clear_bhb_loop+0x30/0x80 [ 336.100137][T11938] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 336.106200][T11938] RIP: 0033:0x7faaa8c4ecb9 [ 336.110660][T11938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.130612][T11938] RSP: 002b:00007faaa6eaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.139449][T11938] RAX: ffffffffffffffda RBX: 00007faaa8ec9fa0 RCX: 00007faaa8c4ecb9 [ 336.147554][T11938] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000006 [ 336.155564][T11938] RBP: 00007faaa6eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 336.163779][T11938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.171816][T11938] R13: 00007faaa8eca038 R14: 00007faaa8ec9fa0 R15: 00007ffc9e40b3c8 [ 336.179876][T11938] [ 336.225657][T11949] netlink: 'syz.3.2718': attribute type 9 has an invalid length. [ 336.233699][T11949] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2718'. [ 336.477993][T11962] netlink: 'syz.2.2722': attribute type 12 has an invalid length. [ 336.495719][T11962] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2722'. [ 337.334152][T11989] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2730'. [ 337.542746][T12001] netlink: 'syz.1.2734': attribute type 2 has an invalid length. [ 337.582332][T12001] netlink: 'syz.1.2734': attribute type 8 has an invalid length. [ 337.594937][T12001] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2734'. [ 337.606414][T12000] netlink: 'syz.3.2731': attribute type 9 has an invalid length. [ 337.617321][T12000] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2731'. [ 337.757844][T12005] netlink: 'syz.2.2735': attribute type 12 has an invalid length. [ 337.912672][T12009] FAULT_INJECTION: forcing a failure. [ 337.912672][T12009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.941298][T12009] CPU: 0 PID: 12009 Comm: syz.1.2736 Not tainted syzkaller #0 [ 337.948841][T12009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.959103][T12009] Call Trace: [ 337.962427][T12009] [ 337.965396][T12009] dump_stack_lvl+0x188/0x250 [ 337.970117][T12009] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 337.976306][T12009] ? show_regs_print_info+0x20/0x20 [ 337.981562][T12009] ? load_image+0x400/0x400 [ 337.986112][T12009] should_fail+0x38c/0x4c0 [ 337.990567][T12009] _copy_from_user+0x2e/0x170 [ 337.995373][T12009] __copy_msghdr_from_user+0xc9/0x630 [ 338.000799][T12009] ? verify_lock_unused+0x140/0x140 [ 338.006048][T12009] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 338.011463][T12009] ___sys_sendmsg+0x19a/0x2e0 [ 338.016183][T12009] ? __sys_sendmsg+0x2a0/0x2a0 [ 338.021015][T12009] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 338.026796][T12009] __se_sys_sendmsg+0x1af/0x290 [ 338.031688][T12009] ? __x64_sys_sendmsg+0x80/0x80 [ 338.036767][T12009] ? syscall_enter_from_user_mode+0x2a/0x70 [ 338.042701][T12009] do_syscall_64+0x4c/0xa0 [ 338.047141][T12009] ? clear_bhb_loop+0x30/0x80 [ 338.051848][T12009] ? clear_bhb_loop+0x30/0x80 [ 338.056719][T12009] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 338.062650][T12009] RIP: 0033:0x7fa5955bbcb9 [ 338.067110][T12009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.086842][T12009] RSP: 002b:00007fa593817028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.095396][T12009] RAX: ffffffffffffffda RBX: 00007fa595836fa0 RCX: 00007fa5955bbcb9 [ 338.103406][T12009] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 338.111419][T12009] RBP: 00007fa593817090 R08: 0000000000000000 R09: 0000000000000000 [ 338.119600][T12009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.127604][T12009] R13: 00007fa595837038 R14: 00007fa595836fa0 R15: 00007ffe4e9956b8 [ 338.135757][T12009] [ 340.077740][T12082] validate_nla: 7 callbacks suppressed [ 340.077775][T12082] netlink: 'syz.2.2762': attribute type 9 has an invalid length. [ 340.098701][T12082] __nla_validate_parse: 6 callbacks suppressed [ 340.098951][T12082] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2762'. [ 340.606484][T12103] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2769'. [ 341.000008][T12117] netlink: 'syz.1.2776': attribute type 10 has an invalid length. [ 341.488600][T12129] netlink: 'syz.2.2778': attribute type 9 has an invalid length. [ 341.505882][T12129] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2778'. [ 341.832882][T12143] netlink: 'syz.4.2784': attribute type 4 has an invalid length. [ 341.887467][T12143] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.2784'. [ 342.056267][T12140] netlink: 'syz.4.2784': attribute type 21 has an invalid length. [ 342.131097][T12140] netlink: 'syz.4.2784': attribute type 6 has an invalid length. [ 342.144028][T12147] netlink: 'syz.0.2786': attribute type 4 has an invalid length. [ 342.144100][T12147] netlink: 105084 bytes leftover after parsing attributes in process `syz.0.2786'. [ 342.199190][T12140] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2784'. [ 342.343207][T12149] netlink: 'syz.1.2788': attribute type 2 has an invalid length. [ 342.370805][T12149] netlink: 'syz.1.2788': attribute type 8 has an invalid length. [ 342.380526][T12149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2788'. [ 342.406110][T12147] netlink: 'syz.0.2786': attribute type 21 has an invalid length. [ 342.414383][T12147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2786'. [ 342.494943][T12155] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2791'. [ 342.724529][T12165] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2793'. [ 343.371003][T12195] tap0: tun_chr_ioctl cmd 1074025673 [ 345.143068][T12263] validate_nla: 16 callbacks suppressed [ 345.143089][T12263] netlink: 'syz.0.2828': attribute type 10 has an invalid length. [ 345.715903][T12277] netlink: 'syz.0.2830': attribute type 39 has an invalid length. [ 346.216331][T12290] netlink: 'syz.4.2834': attribute type 21 has an invalid length. [ 346.224344][T12290] __nla_validate_parse: 9 callbacks suppressed [ 346.224363][T12290] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2834'. [ 346.287623][T12290] netlink: 'syz.4.2834': attribute type 5 has an invalid length. [ 346.329952][T12290] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2834'. [ 346.496336][T12286] netlink: 'syz.2.2832': attribute type 9 has an invalid length. [ 346.504132][T12286] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2832'. [ 347.236046][T12313] netlink: 'syz.0.2839': attribute type 21 has an invalid length. [ 347.244006][T12313] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2839'. [ 347.657397][T12319] netlink: 'syz.4.2842': attribute type 10 has an invalid length. [ 347.670685][T12319] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2842'. [ 347.977507][T12333] FAULT_INJECTION: forcing a failure. [ 347.977507][T12333] name failslab, interval 1, probability 0, space 0, times 0 [ 348.032501][T12333] CPU: 1 PID: 12333 Comm: syz.3.2846 Not tainted syzkaller #0 [ 348.040037][T12333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 348.050163][T12333] Call Trace: [ 348.053467][T12333] [ 348.056449][T12333] dump_stack_lvl+0x188/0x250 [ 348.061172][T12333] ? show_regs_print_info+0x20/0x20 [ 348.066412][T12333] ? load_image+0x400/0x400 [ 348.070967][T12333] ? __might_sleep+0xf0/0xf0 [ 348.075591][T12333] ? __lock_acquire+0x7d10/0x7d10 [ 348.080668][T12333] should_fail+0x38c/0x4c0 [ 348.085125][T12333] should_failslab+0x5/0x20 [ 348.089656][T12333] slab_pre_alloc_hook+0x51/0xc0 [ 348.094642][T12333] __kmalloc_node+0x6e/0x3b0 [ 348.099286][T12333] ? kvmalloc_node+0x84/0x130 [ 348.104007][T12333] kvmalloc_node+0x84/0x130 [ 348.108545][T12333] alloc_netdev_mqs+0x7c7/0xc40 [ 348.113444][T12333] ppp_ioctl+0x623/0x1a80 [ 348.117820][T12333] ? ppp_poll+0x250/0x250 [ 348.122197][T12333] ? bpf_lsm_file_ioctl+0x5/0x10 [ 348.127167][T12333] ? security_file_ioctl+0x7c/0xa0 [ 348.132301][T12333] ? ppp_poll+0x250/0x250 [ 348.136658][T12333] __se_sys_ioctl+0xfa/0x170 [ 348.141290][T12333] do_syscall_64+0x4c/0xa0 [ 348.145731][T12333] ? clear_bhb_loop+0x30/0x80 [ 348.150428][T12333] ? clear_bhb_loop+0x30/0x80 [ 348.155135][T12333] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.161069][T12333] RIP: 0033:0x7f08e3c58cb9 [ 348.165532][T12333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.185281][T12333] RSP: 002b:00007f08e1eb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 348.193730][T12333] RAX: ffffffffffffffda RBX: 00007f08e3ed3fa0 RCX: 00007f08e3c58cb9 [ 348.201808][T12333] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000008 [ 348.209793][T12333] RBP: 00007f08e1eb4090 R08: 0000000000000000 R09: 0000000000000000 [ 348.217778][T12333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.225768][T12333] R13: 00007f08e3ed4038 R14: 00007f08e3ed3fa0 R15: 00007ffcd5d31118 [ 348.233780][T12333] [ 348.946005][T12356] netlink: 'syz.0.2851': attribute type 9 has an invalid length. [ 348.954361][T12356] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2851'. [ 349.208047][T12364] netlink: 'syz.4.2852': attribute type 9 has an invalid length. [ 349.227826][T12364] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2852'. [ 349.593364][T12376] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2854'. [ 350.137339][T12385] netlink: 'syz.2.2859': attribute type 10 has an invalid length. [ 350.288053][T12385] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2859'. [ 350.685706][T12402] netlink: 'syz.1.2865': attribute type 10 has an invalid length. [ 350.828211][T12402] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 351.028288][T12407] netlink: 'syz.2.2866': attribute type 9 has an invalid length. [ 351.075014][T12407] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2866'. [ 351.459715][T12415] netlink: 'syz.4.2869': attribute type 21 has an invalid length. [ 351.497922][T12415] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2869'. [ 351.609571][T12423] netlink: 'syz.0.2870': attribute type 9 has an invalid length. [ 351.673077][T12423] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2870'. [ 351.745423][T12430] FAULT_INJECTION: forcing a failure. [ 351.745423][T12430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.792095][T12430] CPU: 1 PID: 12430 Comm: syz.1.2874 Not tainted syzkaller #0 [ 351.799666][T12430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 351.809771][T12430] Call Trace: [ 351.813098][T12430] [ 351.816104][T12430] dump_stack_lvl+0x188/0x250 [ 351.820841][T12430] ? show_regs_print_info+0x20/0x20 [ 351.826071][T12430] ? load_image+0x400/0x400 [ 351.830614][T12430] ? __lock_acquire+0x7d10/0x7d10 [ 351.835697][T12430] ? __might_sleep+0xf0/0xf0 [ 351.840344][T12430] should_fail+0x38c/0x4c0 [ 351.844842][T12430] _copy_from_user+0x2e/0x170 [ 351.849646][T12430] generic_map_update_batch+0x483/0x7d0 [ 351.855348][T12430] ? rcu_read_unlock+0x90/0x90 [ 351.860277][T12430] ? __fdget+0x18b/0x210 [ 351.864575][T12430] ? rcu_read_unlock+0x90/0x90 [ 351.869365][T12430] bpf_map_do_batch+0x466/0x600 [ 351.874257][T12430] __sys_bpf+0x671/0x6f0 [ 351.878538][T12430] ? bpf_link_show_fdinfo+0x380/0x380 [ 351.883939][T12430] ? rcu_nmi_exit+0x6f/0xf0 [ 351.888508][T12430] ? vtime_user_exit+0x2c8/0x3e0 [ 351.893492][T12430] __x64_sys_bpf+0x78/0x90 [ 351.897963][T12430] do_syscall_64+0x4c/0xa0 [ 351.902401][T12430] ? clear_bhb_loop+0x30/0x80 [ 351.907099][T12430] ? clear_bhb_loop+0x30/0x80 [ 351.911813][T12430] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 351.917816][T12430] RIP: 0033:0x7fa5955bbcb9 [ 351.922289][T12430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.941933][T12430] RSP: 002b:00007fa593817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.950399][T12430] RAX: ffffffffffffffda RBX: 00007fa595836fa0 RCX: 00007fa5955bbcb9 [ 351.958407][T12430] RDX: 0000000000000038 RSI: 0000200000000180 RDI: 000000000000001a [ 351.966409][T12430] RBP: 00007fa593817090 R08: 0000000000000000 R09: 0000000000000000 [ 351.974408][T12430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.982691][T12430] R13: 00007fa595837038 R14: 00007fa595836fa0 R15: 00007ffe4e9956b8 [ 351.990744][T12430] [ 352.253262][T12432] netlink: 'syz.4.2875': attribute type 12 has an invalid length. [ 352.266205][T12432] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2875'. [ 352.460049][T12439] netlink: 'syz.3.2876': attribute type 21 has an invalid length. [ 352.480040][T12439] netlink: 'syz.3.2876': attribute type 6 has an invalid length. [ 352.507056][T12439] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2876'. [ 352.665262][T12441] netlink: 'syz.0.2877': attribute type 21 has an invalid length. [ 352.712161][T12441] netlink: 'syz.0.2877': attribute type 6 has an invalid length. [ 352.827411][T12441] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2877'. [ 353.283707][T12458] netlink: 'syz.4.2882': attribute type 9 has an invalid length. [ 353.316273][T12458] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2882'. [ 353.703990][T12474] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2886'. [ 353.814445][T12475] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2896'. [ 353.930162][T12475] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 354.830777][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.071228][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.253764][T12511] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2900'. [ 355.271625][T12482] chnl_net:caif_netlink_parms(): no params data found [ 355.351746][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.518150][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.604493][T12482] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.618927][T12528] netlink: 105084 bytes leftover after parsing attributes in process `syz.1.2905'. [ 355.632904][T12482] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.642240][T12482] device bridge_slave_0 entered promiscuous mode [ 355.697197][T12482] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.712882][T12482] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.721726][T12482] device bridge_slave_1 entered promiscuous mode [ 355.745380][T12531] validate_nla: 6 callbacks suppressed [ 355.745396][T12531] netlink: 'syz.1.2905': attribute type 21 has an invalid length. [ 355.781462][T12531] netlink: 'syz.1.2905': attribute type 6 has an invalid length. [ 355.891028][T12482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.933289][T12482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.081006][T12482] team0: Port device team_slave_0 added [ 356.116187][ T2236] Bluetooth: hci5: command 0x0409 tx timeout [ 356.135954][T12482] team0: Port device team_slave_1 added [ 356.533577][T12482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.553260][T12482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.629706][T12482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.667123][T12482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.681628][T12482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.795201][T12482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.195327][ T4298] Bluetooth: hci5: command 0x041b tx timeout [ 359.135075][T12482] device hsr_slave_0 entered promiscuous mode [ 359.212970][T12482] device hsr_slave_1 entered promiscuous mode [ 359.231702][T12482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.239849][T12482] Cannot create hsr debugfs directory [ 359.327921][T12593] netlink: 'syz.4.2920': attribute type 4 has an invalid length. [ 359.364837][T12593] __nla_validate_parse: 3 callbacks suppressed [ 359.364871][T12593] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.2920'. [ 359.365695][T12594] netlink: 'syz.4.2920': attribute type 21 has an invalid length. [ 359.407688][T12594] netlink: 'syz.4.2920': attribute type 6 has an invalid length. [ 359.440364][T12594] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2920'. [ 359.935864][T12612] netlink: 'syz.3.2926': attribute type 6 has an invalid length. [ 360.286589][ T4173] Bluetooth: hci5: command 0x040f tx timeout [ 360.680733][T12482] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.355230][ T4173] Bluetooth: hci5: command 0x0419 tx timeout [ 363.446584][T12482] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 363.463383][T12650] netlink: 'syz.3.2934': attribute type 10 has an invalid length. [ 363.493412][T12482] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 363.610254][T12482] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 363.766333][T12658] netlink: 'syz.1.2937': attribute type 4 has an invalid length. [ 363.784884][T12658] netlink: 105084 bytes leftover after parsing attributes in process `syz.1.2937'. [ 364.027787][ T9] device hsr_slave_0 left promiscuous mode [ 364.039829][ T9] device hsr_slave_1 left promiscuous mode [ 364.101778][T12681] netlink: 'syz.1.2943': attribute type 4 has an invalid length. [ 364.119937][T12681] netlink: 105084 bytes leftover after parsing attributes in process `syz.1.2943'. [ 364.354240][ T9] team0 (unregistering): Port device team_slave_1 removed [ 364.374151][ T9] team0 (unregistering): Port device team_slave_0 removed [ 364.470060][T12683] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2942'. [ 364.481296][T12681] netlink: 'syz.1.2943': attribute type 21 has an invalid length. [ 364.489686][T12681] netlink: 'syz.1.2943': attribute type 6 has an invalid length. [ 364.499956][T12681] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2943'. [ 364.658791][T12482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.704457][T12697] netlink: 'syz.4.2947': attribute type 10 has an invalid length. [ 365.111203][T12714] netlink: 'syz.3.2953': attribute type 4 has an invalid length. [ 365.126433][T12714] netlink: 105084 bytes leftover after parsing attributes in process `syz.3.2953'. [ 365.160812][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 365.183256][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.261622][T12482] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.294381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 365.304378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.321317][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.328491][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.416917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 365.447547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 365.483512][T12727] netlink: 'syz.3.2964': attribute type 4 has an invalid length. [ 365.510017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.519484][T12727] netlink: 105084 bytes leftover after parsing attributes in process `syz.3.2964'. [ 365.549190][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.556364][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.585771][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 365.636391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 365.674711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 365.733384][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 365.772211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 365.791019][T12739] netlink: 'syz.4.2968': attribute type 4 has an invalid length. [ 365.801936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.838378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.849457][T12739] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.2968'. [ 365.883900][T12482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 365.924625][T12482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.976669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.009667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.041669][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.106683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.143376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 366.156127][T12756] netlink: 'syz.2.2958': attribute type 4 has an invalid length. [ 366.203817][T12756] netlink: 105084 bytes leftover after parsing attributes in process `syz.2.2958'. [ 366.323832][T12756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2958'. [ 366.469147][T12772] FAULT_INJECTION: forcing a failure. [ 366.469147][T12772] name failslab, interval 1, probability 0, space 0, times 0 [ 366.536093][T12772] CPU: 1 PID: 12772 Comm: syz.4.2961 Not tainted syzkaller #0 [ 366.543631][T12772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 366.553736][T12772] Call Trace: [ 366.557072][T12772] [ 366.560047][T12772] dump_stack_lvl+0x188/0x250 [ 366.564782][T12772] ? show_regs_print_info+0x20/0x20 [ 366.570037][T12772] ? load_image+0x400/0x400 [ 366.574596][T12772] ? __might_sleep+0xf0/0xf0 [ 366.579223][T12772] ? __lock_acquire+0x7d10/0x7d10 [ 366.584360][T12772] should_fail+0x38c/0x4c0 [ 366.589009][T12772] should_failslab+0x5/0x20 [ 366.593561][T12772] slab_pre_alloc_hook+0x51/0xc0 [ 366.598550][T12772] __kmalloc_node+0x6e/0x3b0 [ 366.603194][T12772] ? kvmalloc_node+0x84/0x130 [ 366.607933][T12772] kvmalloc_node+0x84/0x130 [ 366.612487][T12772] map_lookup_and_delete_elem+0x52b/0x970 [ 366.618282][T12772] __sys_bpf+0x546/0x6f0 [ 366.622588][T12772] ? bpf_link_show_fdinfo+0x380/0x380 [ 366.628028][T12772] ? vtime_user_exit+0x2c8/0x3e0 [ 366.633032][T12772] __x64_sys_bpf+0x78/0x90 [ 366.637495][T12772] do_syscall_64+0x4c/0xa0 [ 366.641949][T12772] ? clear_bhb_loop+0x30/0x80 [ 366.646658][T12772] ? clear_bhb_loop+0x30/0x80 [ 366.651383][T12772] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 366.657313][T12772] RIP: 0033:0x7faaa8c4ecb9 [ 366.661789][T12772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.681438][T12772] RSP: 002b:00007faaa6eaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.689912][T12772] RAX: ffffffffffffffda RBX: 00007faaa8ec9fa0 RCX: 00007faaa8c4ecb9 [ 366.697929][T12772] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000015 [ 366.705944][T12772] RBP: 00007faaa6eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 366.713956][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.721960][T12772] R13: 00007faaa8eca038 R14: 00007faaa8ec9fa0 R15: 00007ffc9e40b3c8 [ 366.730003][T12772] [ 366.782020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 366.805413][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 366.868961][T12482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.948308][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 366.963279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.043858][T12785] FAULT_INJECTION: forcing a failure. [ 367.043858][T12785] name failslab, interval 1, probability 0, space 0, times 0 [ 367.058147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 367.058884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.060938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.152537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.163346][T12785] CPU: 0 PID: 12785 Comm: syz.4.2966 Not tainted syzkaller #0 [ 367.170871][T12785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 367.180967][T12785] Call Trace: [ 367.184276][T12785] [ 367.187240][T12785] dump_stack_lvl+0x188/0x250 [ 367.191957][T12785] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 367.198162][T12785] ? show_regs_print_info+0x20/0x20 [ 367.202061][T12482] device veth0_vlan entered promiscuous mode [ 367.203402][T12785] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 367.215572][T12785] should_fail+0x38c/0x4c0 [ 367.220028][T12785] should_failslab+0x5/0x20 [ 367.224564][T12785] slab_pre_alloc_hook+0x51/0xc0 [ 367.229545][T12785] ? _sctp_make_chunk+0x14e/0x420 [ 367.234626][T12785] kmem_cache_alloc+0x3d/0x290 [ 367.239479][T12785] _sctp_make_chunk+0x14e/0x420 [ 367.244373][T12785] sctp_make_init+0x552/0x2650 [ 367.249193][T12785] ? sctp_addto_chunk+0x220/0x220 [ 367.254271][T12785] sctp_sf_do_prm_asoc+0xce/0x3e0 [ 367.259331][T12785] sctp_do_sm+0x245/0x55f0 [ 367.263787][T12785] ? stack_trace_snprint+0xf0/0xf0 [ 367.268941][T12785] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 367.274903][T12785] ? sctp_stream_init_ext+0x53/0x160 [ 367.280227][T12785] ? sctp_sendmsg_to_asoc+0x1711/0x1d90 [ 367.285846][T12785] ? sctp_sendmsg+0x196a/0x2900 [ 367.290744][T12785] ? ____sys_sendmsg+0x5b7/0x8f0 [ 367.295718][T12785] ? ___sys_sendmsg+0x236/0x2e0 [ 367.300645][T12785] sctp_primitive_ASSOCIATE+0x91/0xc0 [ 367.306061][T12785] sctp_sendmsg_to_asoc+0x14a7/0x1d90 [ 367.311488][T12785] ? sctp_assoc_add_peer+0xe3f/0x15a0 [ 367.317127][T12785] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 367.322998][T12785] ? __sctp_connect+0xd80/0xd80 [ 367.327905][T12785] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 367.333491][T12785] ? security_sctp_bind_connect+0x85/0xb0 [ 367.339257][T12785] sctp_sendmsg+0x196a/0x2900 [ 367.344022][T12785] ? sctp_getsockopt+0x8a0/0x8a0 [ 367.349001][T12785] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 367.351714][T12482] device veth1_vlan entered promiscuous mode [ 367.355205][T12785] ? sock_rps_record_flow+0x17/0x3b0 [ 367.355238][T12785] ? inet_sendmsg+0x78/0x2f0 [ 367.371133][T12785] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 367.376464][T12785] ? security_socket_sendmsg+0x7c/0xa0 [ 367.382053][T12785] ? inet_send_prepare+0x260/0x260 [ 367.387197][T12785] ____sys_sendmsg+0x5b7/0x8f0 [ 367.392092][T12785] ? __import_iovec+0x38d/0x490 [ 367.396986][T12785] ? __sys_sendmsg_sock+0x30/0x30 [ 367.402047][T12785] ? import_iovec+0x6f/0xa0 [ 367.406583][T12785] ___sys_sendmsg+0x236/0x2e0 [ 367.411303][T12785] ? __sys_sendmsg+0x2a0/0x2a0 [ 367.416109][T12785] ? ktime_get_real_ts64+0x440/0x440 [ 367.421459][T12785] __se_sys_sendmsg+0x1af/0x290 [ 367.426359][T12785] ? __x64_sys_sendmsg+0x80/0x80 [ 367.431351][T12785] ? syscall_enter_from_user_mode+0x2a/0x70 [ 367.437332][T12785] do_syscall_64+0x4c/0xa0 [ 367.441791][T12785] ? clear_bhb_loop+0x30/0x80 [ 367.446501][T12785] ? clear_bhb_loop+0x30/0x80 [ 367.451210][T12785] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 367.457154][T12785] RIP: 0033:0x7faaa8c4ecb9 [ 367.461601][T12785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.481232][T12785] RSP: 002b:00007faaa6eaa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.489687][T12785] RAX: ffffffffffffffda RBX: 00007faaa8ec9fa0 RCX: 00007faaa8c4ecb9 [ 367.497701][T12785] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000008 [ 367.505739][T12785] RBP: 00007faaa6eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 367.513752][T12785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 367.521744][T12785] R13: 00007faaa8eca038 R14: 00007faaa8ec9fa0 R15: 00007ffc9e40b3c8 [ 367.529765][T12785] [ 367.577775][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 367.599378][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 367.672588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 367.684009][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 367.698553][T12482] device veth0_macvtap entered promiscuous mode [ 367.717414][T12795] netlink: 105084 bytes leftover after parsing attributes in process `syz.3.2972'. [ 367.744270][T12482] device veth1_macvtap entered promiscuous mode [ 367.787712][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 367.799235][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 367.828753][T12482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.867132][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 367.906383][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 367.955353][T12482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.997000][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 368.018052][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 368.069277][T12482] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.100212][T12482] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.166357][T12482] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.180493][T12482] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.303919][ T3066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.319444][ T3066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.366195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 369.478031][ T3066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.505483][ T3066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.548136][T12845] FAULT_INJECTION: forcing a failure. [ 369.548136][T12845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.564010][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 369.631734][T12845] CPU: 0 PID: 12845 Comm: syz.4.2983 Not tainted syzkaller #0 [ 369.639264][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.649359][T12845] Call Trace: [ 369.652819][T12845] [ 369.655777][T12845] dump_stack_lvl+0x188/0x250 [ 369.660502][T12845] ? show_regs_print_info+0x20/0x20 [ 369.665750][T12845] ? load_image+0x400/0x400 [ 369.670295][T12845] ? __lock_acquire+0x7d10/0x7d10 [ 369.675367][T12845] should_fail+0x38c/0x4c0 [ 369.680440][T12845] _copy_from_user+0x2e/0x170 [ 369.685157][T12845] kstrtouint_from_user+0xd3/0x220 [ 369.690309][T12845] ? kstrtol_from_user+0x2a0/0x2a0 [ 369.695479][T12845] proc_fail_nth_write+0x8b/0x200 [ 369.700564][T12845] ? proc_fail_nth_read+0x220/0x220 [ 369.705798][T12845] ? common_file_perm+0x171/0x1c0 [ 369.710862][T12845] ? proc_fail_nth_read+0x220/0x220 [ 369.716099][T12845] vfs_write+0x30b/0xd60 [ 369.720384][T12845] ? file_end_write+0x250/0x250 [ 369.725274][T12845] ? __fget_files+0x40f/0x480 [ 369.729996][T12845] ? mutex_lock_nested+0x17/0x20 [ 369.734975][T12845] ? __fdget_pos+0x2bf/0x370 [ 369.739604][T12845] ? ksys_write+0x71/0x260 [ 369.744206][T12845] ksys_write+0x152/0x260 [ 369.748586][T12845] ? __ia32_sys_read+0x80/0x80 [ 369.753388][T12845] ? lockdep_hardirqs_on+0x94/0x140 [ 369.758614][T12845] do_syscall_64+0x4c/0xa0 [ 369.763106][T12845] ? clear_bhb_loop+0x30/0x80 [ 369.767825][T12845] ? clear_bhb_loop+0x30/0x80 [ 369.772550][T12845] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 369.778472][T12845] RIP: 0033:0x7faaa8c0f58e [ 369.782917][T12845] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 369.802751][T12845] RSP: 002b:00007faaa6ea9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 369.811250][T12845] RAX: ffffffffffffffda RBX: 00007faaa6eaa6c0 RCX: 00007faaa8c0f58e [ 369.819261][T12845] RDX: 0000000000000001 RSI: 00007faaa6eaa0a0 RDI: 0000000000000004 [ 369.827261][T12845] RBP: 00007faaa6eaa090 R08: 0000000000000000 R09: 0000000000000000 [ 369.835251][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.843261][T12845] R13: 00007faaa8eca038 R14: 00007faaa8ec9fa0 R15: 00007ffc9e40b3c8 [ 369.851271][T12845] [ 369.923125][T12852] validate_nla: 5 callbacks suppressed [ 369.923164][T12852] netlink: 'syz.2.2985': attribute type 4 has an invalid length. [ 369.978030][T12852] netlink: 105084 bytes leftover after parsing attributes in process `syz.2.2985'. [ 370.174328][T12857] netlink: 'syz.0.2889': attribute type 12 has an invalid length. [ 370.240294][T12857] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2889'. [ 370.303511][T12863] netlink: 'syz.3.2986': attribute type 10 has an invalid length. [ 370.461625][T12868] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2989'. [ 370.764308][T12880] sctp: [Deprecated]: syz.2.2992 (pid 12880) Use of int in maxseg socket option. [ 370.764308][T12880] Use struct sctp_assoc_value instead [ 370.819057][T12880] netlink: 'syz.2.2992': attribute type 49 has an invalid length. [ 371.244981][T12891] netlink: 13566 bytes leftover after parsing attributes in process `syz.4.2995'. [ 371.367410][T12900] netlink: 'syz.3.2997': attribute type 9 has an invalid length. [ 371.379559][T12900] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2997'. [ 371.459184][T12878] chnl_net:caif_netlink_parms(): no params data found [ 371.568222][T12878] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.578468][T12878] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.589234][T12878] device bridge_slave_0 entered promiscuous mode [ 371.603948][T12878] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.612929][T12878] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.623324][T12878] device bridge_slave_1 entered promiscuous mode [ 371.660377][T12878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.677682][T12878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.722230][T12878] team0: Port device team_slave_0 added [ 371.733045][T12878] team0: Port device team_slave_1 added [ 371.764921][T12878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.773832][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.804352][T12878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.824960][T12878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.832608][T12878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.862942][T12878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.178765][T12908] netlink: 'syz.0.2998': attribute type 4 has an invalid length. [ 372.190999][T12908] netlink: 105084 bytes leftover after parsing attributes in process `syz.0.2998'. [ 372.835561][ T4248] Bluetooth: hci4: command 0x0409 tx timeout [ 373.497430][T12878] device hsr_slave_0 entered promiscuous mode [ 373.544899][T12878] device hsr_slave_1 entered promiscuous mode [ 373.636454][T12911] netlink: 'syz.3.2999': attribute type 10 has an invalid length. [ 373.650419][T12917] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.682114][T12917] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.717400][T12917] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.738684][T12917] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.959259][T12923] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3004'. [ 374.049992][T12878] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.152893][T12925] sctp: [Deprecated]: syz.3.3005 (pid 12925) Use of int in maxseg socket option. [ 374.152893][T12925] Use struct sctp_assoc_value instead [ 374.188755][T12878] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.230807][T12925] netlink: 'syz.3.3005': attribute type 49 has an invalid length. [ 374.410806][T12878] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.472625][T12878] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.702274][T12938] netlink: 'syz.3.3008': attribute type 9 has an invalid length. [ 374.735510][T12938] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.3008'. [ 374.841065][T12878] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 374.878819][T12878] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 374.915505][ T4298] Bluetooth: hci4: command 0x041b tx timeout [ 374.925895][T12878] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 374.976485][T12946] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3010'. [ 374.999193][T12878] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 375.094055][T12950] netlink: 'syz.4.3012': attribute type 4 has an invalid length. [ 375.132169][T12950] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.3012'. [ 375.150962][T12960] FAULT_INJECTION: forcing a failure. [ 375.150962][T12960] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 375.169930][T12960] CPU: 1 PID: 12960 Comm: syz.0.3014 Not tainted syzkaller #0 [ 375.177455][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 375.187543][T12960] Call Trace: [ 375.190854][T12960] [ 375.193808][T12960] dump_stack_lvl+0x188/0x250 [ 375.198532][T12960] ? show_regs_print_info+0x20/0x20 [ 375.203772][T12960] ? load_image+0x400/0x400 [ 375.208399][T12960] ? __lock_acquire+0x7d10/0x7d10 [ 375.213789][T12960] should_fail+0x38c/0x4c0 [ 375.218439][T12960] prepare_alloc_pages+0x1e4/0x5f0 [ 375.223648][T12960] __alloc_pages+0x11b/0x480 [ 375.228379][T12960] ? zone_statistics+0x170/0x170 [ 375.234189][T12960] ? alloc_pages+0x438/0x550 [ 375.239359][T12960] __get_free_pages+0x8/0x30 [ 375.244250][T12960] kasan_populate_vmalloc_pte+0x21/0xc0 [ 375.250077][T12960] __apply_to_page_range+0x983/0xd10 [ 375.256037][T12960] ? kasan_populate_vmalloc+0x70/0x70 [ 375.261722][T12960] alloc_vmap_area+0x18d5/0x1a10 [ 375.266735][T12960] ? vm_map_ram+0xba0/0xba0 [ 375.271288][T12960] __get_vm_area_node+0x14f/0x2d0 [ 375.276486][T12960] __vmalloc_node_range+0xef/0x8b0 [ 375.281656][T12960] ? dev_map_create_hash+0x24/0x1d0 [ 375.287100][T12960] bpf_map_area_alloc+0xd4/0xe0 [ 375.292001][T12960] ? dev_map_create_hash+0x24/0x1d0 [ 375.297578][T12960] dev_map_create_hash+0x24/0x1d0 [ 375.303150][T12960] ? bpf_map_init_from_attr+0x146/0x300 [ 375.308925][T12960] dev_map_alloc+0x2c1/0x520 [ 375.314183][T12960] map_create+0x485/0x2350 [ 375.318970][T12960] __sys_bpf+0x30a/0x6f0 [ 375.323623][T12960] ? bpf_link_show_fdinfo+0x380/0x380 [ 375.329319][T12960] ? rcu_nmi_exit+0x6f/0xf0 [ 375.336055][T12960] ? vtime_user_exit+0x2c8/0x3e0 [ 375.341434][T12960] __x64_sys_bpf+0x78/0x90 [ 375.346978][T12960] do_syscall_64+0x4c/0xa0 [ 375.352848][T12960] ? clear_bhb_loop+0x30/0x80 [ 375.358228][T12960] ? clear_bhb_loop+0x30/0x80 [ 375.363150][T12960] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 375.369192][T12960] RIP: 0033:0x7f8c652c9cb9 [ 375.373825][T12960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.394805][T12960] RSP: 002b:00007f8c63525028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 375.404120][T12960] RAX: ffffffffffffffda RBX: 00007f8c65544fa0 RCX: 00007f8c652c9cb9 [ 375.413622][T12960] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 375.422348][T12960] RBP: 00007f8c63525090 R08: 0000000000000000 R09: 0000000000000000 [ 375.430608][T12960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.438614][T12960] R13: 00007f8c65545038 R14: 00007f8c65544fa0 R15: 00007ffeb7548b98 [ 375.447182][T12960] [ 375.776326][T12878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.808277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.837153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.888068][T12878] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.928172][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 375.941951][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.951815][ T3066] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.959100][ T3066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.983709][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 375.994161][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 376.005497][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 376.033262][ T3066] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.042372][ T3066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.103905][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 376.138201][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 376.241624][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 376.347308][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 376.419557][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 376.485730][T12978] netlink: 'syz.2.3020': attribute type 9 has an invalid length. [ 376.551171][T12978] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.3020'. [ 376.588614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 376.611438][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 376.638169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 376.652385][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 376.664678][T12988] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3024'. [ 376.746980][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 376.779940][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.995314][ T2236] Bluetooth: hci4: command 0x040f tx timeout [ 377.480912][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 377.489837][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.547267][T12878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.618706][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 377.652686][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 377.684209][T13012] netlink: 'syz.4.3031': attribute type 4 has an invalid length. [ 377.726874][T13012] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.3031'. [ 377.760203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 377.790187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 377.817495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 377.849579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 377.888850][T12878] device veth0_vlan entered promiscuous mode [ 377.982145][T12878] device veth1_vlan entered promiscuous mode [ 377.984641][T13021] sctp: [Deprecated]: syz.4.3034 (pid 13021) Use of int in maxseg socket option. [ 377.984641][T13021] Use struct sctp_assoc_value instead [ 378.076350][T13021] netlink: 'syz.4.3034': attribute type 49 has an invalid length. [ 378.096086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.109263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 378.179143][T12878] device veth0_macvtap entered promiscuous mode [ 378.228002][T12878] device veth1_macvtap entered promiscuous mode [ 378.345998][T13030] netlink: 'syz.3.3036': attribute type 9 has an invalid length. [ 378.372395][T13030] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.3036'. [ 378.431747][T12878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.500274][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 378.548771][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 378.584209][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 378.611004][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.617943][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.651612][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 378.707844][T12878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.880575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 378.914010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 378.958571][T12878] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.975864][T12878] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.995648][T12878] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.004749][T12878] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.075390][ T2236] Bluetooth: hci4: command 0x0419 tx timeout [ 379.250336][T13055] netlink: 'syz.0.3046': attribute type 4 has an invalid length. [ 379.266088][T13055] netlink: 105084 bytes leftover after parsing attributes in process `syz.0.3046'. [ 379.303099][ T4283] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.319405][ T4283] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.377930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 379.450952][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.492300][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.548709][T13065] netlink: 'syz.3.3048': attribute type 9 has an invalid length. [ 379.605900][T13065] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.3048'. [ 379.643050][ T6534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 379.779999][T13071] netlink: 'syz.3.3051': attribute type 10 has an invalid length. [ 379.930425][T13075] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3051'. [ 379.945965][T13077] netlink: 'syz.0.3053': attribute type 10 has an invalid length. [ 380.060793][T13077] team0: Device hsr_slave_0 failed to register rx_handler [ 380.180540][T13071] netlink: 'syz.3.3051': attribute type 16 has an invalid length. [ 380.200818][T13071] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3051'. [ 380.619551][T13084] netlink: 'syz.0.3054': attribute type 12 has an invalid length. [ 380.665611][T13084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3054'. [ 381.330373][T13102] netlink: 'syz.1.3061': attribute type 9 has an invalid length. [ 381.381504][T13102] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.3061'. [ 381.563153][T13110] netlink: 'syz.0.3062': attribute type 4 has an invalid length. [ 381.574770][T13110] netlink: 105084 bytes leftover after parsing attributes in process `syz.0.3062'. [ 381.659635][T13089] chnl_net:caif_netlink_parms(): no params data found [ 381.861814][T13089] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.871429][T13089] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.889171][T13089] device bridge_slave_0 entered promiscuous mode [ 381.899558][T13089] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.907774][T13089] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.916930][T13089] device bridge_slave_1 entered promiscuous mode [ 381.956967][T13120] delete_channel: no stack [ 382.008143][T13089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.024298][T13089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.102535][T13089] team0: Port device team_slave_0 added [ 382.120532][T13089] team0: Port device team_slave_1 added [ 382.336135][T13089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.378994][T13089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.406528][T13089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.428323][T13131] netlink: 'syz.1.3068': attribute type 12 has an invalid length. [ 382.495946][T13131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3068'. [ 382.593252][T13089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.601590][ T4298] Bluetooth: hci0: command 0x0409 tx timeout [ 382.610930][T13089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.648787][T13089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.668331][ T9] device hsr_slave_0 left promiscuous mode [ 382.692102][ T9] device hsr_slave_1 left promiscuous mode [ 382.702137][ T9] bridge0: port 3(dummy0) entered disabled state [ 382.712377][ T9] device bridge_slave_1 left promiscuous mode [ 382.720496][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.732706][ T9] device bridge_slave_0 left promiscuous mode [ 382.739267][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.940156][ T9] team0 (unregistering): Port device team_slave_1 removed [ 382.958364][ T9] team0 (unregistering): Port device team_slave_0 removed [ 383.119163][T13089] device hsr_slave_0 entered promiscuous mode [ 383.128170][T13089] device hsr_slave_1 entered promiscuous mode [ 383.135967][T13089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.146396][T13089] Cannot create hsr debugfs directory [ 383.376434][T13147] netlink: 'syz.3.3072': attribute type 9 has an invalid length. [ 383.396697][T13147] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.3072'. [ 383.583518][T13089] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.776672][T13089] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.863232][T13165] FAULT_INJECTION: forcing a failure. [ 383.863232][T13165] name failslab, interval 1, probability 0, space 0, times 0 [ 383.906081][T13165] CPU: 1 PID: 13165 Comm: syz.0.3078 Not tainted syzkaller #0 [ 383.913700][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.923792][T13165] Call Trace: [ 383.927110][T13165] [ 383.930070][T13165] dump_stack_lvl+0x188/0x250 [ 383.934787][T13165] ? show_regs_print_info+0x20/0x20 [ 383.940028][T13165] ? load_image+0x400/0x400 [ 383.944627][T13165] ? __might_sleep+0xf0/0xf0 [ 383.949262][T13165] ? __lock_acquire+0x7d10/0x7d10 [ 383.954557][T13165] ? lockdep_unlock+0x143/0x2e0 [ 383.959455][T13165] ? lockdep_lock+0x1f0/0x1f0 [ 383.964192][T13165] should_fail+0x38c/0x4c0 [ 383.968669][T13165] should_failslab+0x5/0x20 [ 383.973211][T13165] slab_pre_alloc_hook+0x51/0xc0 [ 383.978186][T13165] __kmalloc_node+0x6e/0x3b0 [ 383.982806][T13165] ? bpf_map_area_alloc+0x47/0xe0 [ 383.987878][T13165] bpf_map_area_alloc+0x47/0xe0 [ 383.992785][T13165] htab_map_alloc+0x3c3/0x15a0 [ 383.997682][T13165] ? capable+0x84/0xe0 [ 384.001813][T13165] ? htab_map_alloc_check+0x3e9/0x4d0 [ 384.007325][T13165] map_create+0x485/0x2350 [ 384.011795][T13165] __sys_bpf+0x30a/0x6f0 [ 384.016087][T13165] ? bpf_link_show_fdinfo+0x380/0x380 [ 384.021527][T13165] ? rcu_nmi_exit+0x6f/0xf0 [ 384.026268][T13165] ? vtime_user_exit+0x2c8/0x3e0 [ 384.031251][T13165] __x64_sys_bpf+0x78/0x90 [ 384.035707][T13165] do_syscall_64+0x4c/0xa0 [ 384.040146][T13165] ? clear_bhb_loop+0x30/0x80 [ 384.044845][T13165] ? clear_bhb_loop+0x30/0x80 [ 384.049552][T13165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 384.055476][T13165] RIP: 0033:0x7f8c652c9cb9 [ 384.059926][T13165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.079569][T13165] RSP: 002b:00007f8c63504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 384.088024][T13165] RAX: ffffffffffffffda RBX: 00007f8c65545090 RCX: 00007f8c652c9cb9 [ 384.096122][T13165] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 0000000000000000 [ 384.104217][T13165] RBP: 00007f8c63504090 R08: 0000000000000000 R09: 0000000000000000 [ 384.112230][T13165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.120362][T13165] R13: 00007f8c65545128 R14: 00007f8c65545090 R15: 00007ffeb7548b98 [ 384.128428][T13165] [ 384.198094][T13089] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.311910][T13089] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.443695][T13173] netlink: 'syz.4.3081': attribute type 12 has an invalid length. [ 384.485535][T13173] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3081'. [ 384.521550][T13178] netlink: 'syz.3.3084': attribute type 16 has an invalid length. [ 384.547447][T13178] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3084'. [ 384.675515][ T4298] Bluetooth: hci0: command 0x041b tx timeout [ 384.702882][T13089] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 384.746112][T13089] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 384.784462][T13089] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 384.803711][T13089] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 384.872441][T13184] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.3086'. [ 385.122909][T13199] netlink: 'syz.0.3088': attribute type 9 has an invalid length. [ 385.142677][T13199] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.3088'. [ 385.180232][T13202] netlink: 'syz.1.3090': attribute type 4 has an invalid length. [ 385.218848][T13202] netlink: 105084 bytes leftover after parsing attributes in process `syz.1.3090'. [ 385.374315][T13089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.414543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 385.426136][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 385.463758][T13089] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.482932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.505998][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.529231][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.536468][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.556114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 386.755399][ T7156] Bluetooth: hci0: command 0x040f tx timeout [ 387.388425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 387.398507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 387.407588][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.414736][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.490867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 387.510851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 387.539282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 387.593404][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 387.619429][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 387.639101][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 387.669756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 387.698654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 387.723292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 387.764203][T13089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 387.848646][T13089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 387.888444][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 387.907935][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 387.936060][T13215] netlink: 'syz.4.3095': attribute type 12 has an invalid length. [ 387.959565][T13215] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3095'. [ 388.264297][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 388.272832][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 388.303589][T13089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.342278][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 388.356066][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.419803][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 388.436092][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 388.467050][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 388.490406][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 388.533193][T13089] device veth0_vlan entered promiscuous mode [ 388.643626][T13089] device veth1_vlan entered promiscuous mode [ 388.705344][T13243] netlink: 'syz.4.3101': attribute type 9 has an invalid length. [ 388.822193][T13243] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.3101'. [ 388.900622][ T4298] Bluetooth: hci0: command 0x0419 tx timeout [ 388.998840][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.029063][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.042925][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.055585][ T1171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.074477][T13089] device veth0_macvtap entered promiscuous mode [ 389.094598][T13089] device veth1_macvtap entered promiscuous mode [ 389.228865][T13089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.298060][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 389.336429][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 389.361642][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 389.382280][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 389.399135][T13089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 389.437592][T13089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.459557][T13089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.485654][T13089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.507014][T13089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.527789][T13089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.547595][T13089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.590422][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 389.600357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 389.813230][T13264] netlink: 'syz.4.3108': attribute type 4 has an invalid length. [ 389.831802][ T3066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.868276][ T3066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.873454][T13264] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.3108'. [ 389.995591][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 390.126584][ T6534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 390.156653][ T6534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 390.266365][T13274] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3111'. [ 390.286632][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 390.338312][T13278] netlink: 'syz.0.3112': attribute type 10 has an invalid length. [ 390.679022][T13287] batman_adv: The newly added mac address (00:72:00:00:00:00) already exists on: batadv_slave_0 [ 390.690572][T13287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.088642][T13292] netlink: 'syz.1.3116': attribute type 12 has an invalid length. [ 391.137668][T13292] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3116'. [ 391.353027][T13296] netlink: 'syz.0.3117': attribute type 9 has an invalid length. [ 391.388660][T13296] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.3117'. [ 391.788706][T13312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.803845][T13312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.835014][T13312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.848350][T13312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.011372][T13318] netlink: 'syz.4.3124': attribute type 4 has an invalid length. [ 392.031761][T13318] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.3124'. [ 392.245577][ T9] device hsr_slave_0 left promiscuous mode [ 392.264388][ T9] device hsr_slave_1 left promiscuous mode [ 392.310325][ T9] device veth1_vlan left promiscuous mode [ 392.675373][ C1] ------------[ cut here ]------------ [ 392.681315][ C1] WARNING: CPU: 1 PID: 0 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 392.690670][ C1] Modules linked in: [ 392.694612][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 392.701728][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.712022][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 392.718341][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 392.738344][ C1] RSP: 0018:ffffc90000dcfd28 EFLAGS: 00010246 [ 392.744460][ C1] RAX: ffffffff81a08ea0 RBX: 0000000000000000 RCX: ffff888017968000 [ 392.752625][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.760708][ C1] RBP: 0000000000000000 R08: ffffc90000dd0157 R09: ffffc90000dd0124 [ 392.768801][ C1] R10: dffffc0000000000 R11: fffff520001ba02b R12: ffff888017969788 [ 392.776955][ C1] R13: ffffc9000126c030 R14: ffffc90000dcfd88 R15: 0000000000000000 [ 392.785046][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 392.794077][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.800879][ C1] CR2: 0000000000000000 CR3: 000000005a7f4000 CR4: 00000000003506e0 [ 392.809100][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 392.817745][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 392.826511][ C1] Call Trace: [ 392.830124][ C1] [ 392.833004][ C1] bpf_probe_read_user+0x26/0x70 [ 392.838349][ C1] bpf_prog_f2594087b0f175cc+0x32/0x1d0 [ 392.843958][ C1] bpf_flow_dissect+0x12b/0x3f0 [ 392.849028][ C1] __skb_flow_dissect+0x792/0x60b0 [ 392.854197][ C1] ? mark_lock+0x94/0x320 [ 392.858763][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 392.863848][ C1] ? mark_lock+0x94/0x320 [ 392.868297][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 392.873368][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 392.878575][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 392.883703][ C1] ? verify_lock_unused+0x140/0x140 [ 392.889009][ C1] ? mark_lock+0x94/0x320 [ 392.893402][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 392.898626][ C1] ? trace_event_raw_event_lock+0x270/0x270 [ 392.904594][ C1] ? trace_event_raw_event_lock+0x270/0x270 [ 392.910604][ C1] ? verify_lock_unused+0x140/0x140 [ 392.915901][ C1] ? perf_trace_lock+0xe4/0x390 [ 392.920813][ C1] ___skb_get_hash+0x55/0x680 [ 392.925631][ C1] __skb_get_hash+0xd2/0x270 [ 392.930288][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 392.936198][ C1] ? rcu_lock_release+0x9/0x20 [ 392.941045][ C1] netdev_pick_tx+0x335/0xad0 [ 392.945834][ C1] netdev_core_pick_tx+0x12e/0x2e0 [ 392.950998][ C1] __dev_queue_xmit+0x756/0x2fd0 [ 392.956108][ C1] ? dev_queue_xmit+0x20/0x20 [ 392.960845][ C1] ? mark_lock+0x94/0x320 [ 392.965489][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 392.971537][ C1] ? lock_chain_count+0x20/0x20 [ 392.976526][ C1] ? __ipv6_neigh_lookup_noref+0x61d/0x7d0 [ 392.982644][ C1] ? ip6_finish_output2+0xcb6/0x1510 [ 392.988076][ C1] ? ip6_finish_output2+0xe80/0x1510 [ 392.993412][ C1] ip6_finish_output2+0x1051/0x1510 [ 392.998796][ C1] ? nf_hook+0x360/0x360 [ 393.003195][ C1] ndisc_send_skb+0xc2a/0x1500 [ 393.008167][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 393.013155][ C1] ? rcu_lock_release+0x20/0x20 [ 393.018198][ C1] ? ndisc_send_rs+0x544/0x730 [ 393.023028][ C1] addrconf_rs_timer+0x2d1/0x630 [ 393.028088][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 393.034231][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 393.040458][ C1] call_timer_fn+0x17b/0x540 [ 393.045131][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 393.051248][ C1] ? __run_timers+0x7f0/0x7f0 [ 393.056031][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 393.061284][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 393.066561][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 393.072693][ C1] __run_timers+0x53a/0x7f0 [ 393.077299][ C1] ? detach_timer+0x2b0/0x2b0 [ 393.082023][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 393.088217][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 393.093122][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 393.098510][ C1] run_timer_softirq+0x63/0xf0 [ 393.103334][ C1] handle_softirqs+0x339/0x830 [ 393.108184][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 393.113089][ C1] ? do_softirq+0x210/0x210 [ 393.117685][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 393.122925][ C1] __irq_exit_rcu+0x13b/0x230 [ 393.127676][ C1] ? irq_exit_rcu+0x20/0x20 [ 393.132328][ C1] irq_exit_rcu+0x5/0x20 [ 393.136764][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 393.142452][ C1] [ 393.145448][ C1] [ 393.148493][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 393.154509][ C1] RIP: 0010:default_idle+0xb/0x10 [ 393.159629][ C1] Code: b7 48 89 df e8 f6 ea f8 f7 eb ad e8 8f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d b7 96 60 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 393.179423][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 393.185568][ C1] RAX: 93be387c64922e00 RBX: ffff888017968000 RCX: 93be387c64922e00 [ 393.193857][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780 [ 393.201899][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 393.209947][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff11002f2d000 [ 393.218015][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff920001acfb4 [ 393.226107][ C1] default_idle_call+0x81/0xc0 [ 393.230927][ C1] do_idle+0x21f/0x580 [ 393.235053][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 393.240607][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 393.247047][ C1] ? schedule_idle+0x57/0x90 [ 393.252112][ C1] cpu_startup_entry+0x14/0x20 [ 393.257689][ C1] start_secondary+0x330/0x430 [ 393.262500][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 393.267990][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 393.274041][ C1] [ 393.277163][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 393.284862][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 393.292112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.302623][ C1] Call Trace: [ 393.306464][ C1] [ 393.309570][ C1] dump_stack_lvl+0x188/0x250 [ 393.314391][ C1] ? show_regs_print_info+0x20/0x20 [ 393.319805][ C1] ? load_image+0x400/0x400 [ 393.324551][ C1] panic+0x2e5/0x810 [ 393.328671][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 393.333205][ C1] ? secondary_startup_64_no_verify+0xb1/0xbb [ 393.339514][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 393.345119][ C1] __warn+0x248/0x2b0 [ 393.349424][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 393.355041][ C1] report_bug+0x1b7/0x2e0 [ 393.359523][ C1] handle_bug+0x3a/0x70 [ 393.363814][ C1] exc_invalid_op+0x16/0x40 [ 393.368352][ C1] asm_exc_invalid_op+0x16/0x20 [ 393.373511][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 393.380019][ C1] Code: 24 45 31 f6 31 ff 89 de e8 7d 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 00 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 393.399907][ C1] RSP: 0018:ffffc90000dcfd28 EFLAGS: 00010246 [ 393.406220][ C1] RAX: ffffffff81a08ea0 RBX: 0000000000000000 RCX: ffff888017968000 [ 393.414358][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 393.422589][ C1] RBP: 0000000000000000 R08: ffffc90000dd0157 R09: ffffc90000dd0124 [ 393.430724][ C1] R10: dffffc0000000000 R11: fffff520001ba02b R12: ffff888017969788 [ 393.439125][ C1] R13: ffffc9000126c030 R14: ffffc90000dcfd88 R15: 0000000000000000 [ 393.447226][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 393.453059][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 393.459052][ C1] bpf_probe_read_user+0x26/0x70 [ 393.464405][ C1] bpf_prog_f2594087b0f175cc+0x32/0x1d0 [ 393.469996][ C1] bpf_flow_dissect+0x12b/0x3f0 [ 393.475019][ C1] __skb_flow_dissect+0x792/0x60b0 [ 393.480266][ C1] ? mark_lock+0x94/0x320 [ 393.484732][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 393.489851][ C1] ? mark_lock+0x94/0x320 [ 393.494325][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 393.499482][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 393.504671][ C1] ? __lock_acquire+0x13bc/0x7d10 [ 393.510010][ C1] ? verify_lock_unused+0x140/0x140 [ 393.515365][ C1] ? mark_lock+0x94/0x320 [ 393.519827][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 393.525239][ C1] ? trace_event_raw_event_lock+0x270/0x270 [ 393.531315][ C1] ? trace_event_raw_event_lock+0x270/0x270 [ 393.537304][ C1] ? verify_lock_unused+0x140/0x140 [ 393.542638][ C1] ? perf_trace_lock+0xe4/0x390 [ 393.547526][ C1] ___skb_get_hash+0x55/0x680 [ 393.552240][ C1] __skb_get_hash+0xd2/0x270 [ 393.556852][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 393.562591][ C1] ? rcu_lock_release+0x9/0x20 [ 393.567490][ C1] netdev_pick_tx+0x335/0xad0 [ 393.572184][ C1] netdev_core_pick_tx+0x12e/0x2e0 [ 393.577311][ C1] __dev_queue_xmit+0x756/0x2fd0 [ 393.582376][ C1] ? dev_queue_xmit+0x20/0x20 [ 393.587077][ C1] ? mark_lock+0x94/0x320 [ 393.591444][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 393.597558][ C1] ? lock_chain_count+0x20/0x20 [ 393.602444][ C1] ? __ipv6_neigh_lookup_noref+0x61d/0x7d0 [ 393.608324][ C1] ? ip6_finish_output2+0xcb6/0x1510 [ 393.613742][ C1] ? ip6_finish_output2+0xe80/0x1510 [ 393.619093][ C1] ip6_finish_output2+0x1051/0x1510 [ 393.624315][ C1] ? nf_hook+0x360/0x360 [ 393.628594][ C1] ndisc_send_skb+0xc2a/0x1500 [ 393.633395][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 393.638353][ C1] ? rcu_lock_release+0x20/0x20 [ 393.643240][ C1] ? ndisc_send_rs+0x544/0x730 [ 393.648204][ C1] addrconf_rs_timer+0x2d1/0x630 [ 393.653170][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 393.659425][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 393.665532][ C1] call_timer_fn+0x17b/0x540 [ 393.670178][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 393.676284][ C1] ? __run_timers+0x7f0/0x7f0 [ 393.681008][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 393.686247][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 393.691462][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 393.697546][ C1] __run_timers+0x53a/0x7f0 [ 393.702100][ C1] ? detach_timer+0x2b0/0x2b0 [ 393.706793][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 393.712795][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 393.717689][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 393.723000][ C1] run_timer_softirq+0x63/0xf0 [ 393.727875][ C1] handle_softirqs+0x339/0x830 [ 393.732658][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 393.737533][ C1] ? do_softirq+0x210/0x210 [ 393.742072][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 393.747313][ C1] __irq_exit_rcu+0x13b/0x230 [ 393.752013][ C1] ? irq_exit_rcu+0x20/0x20 [ 393.756544][ C1] irq_exit_rcu+0x5/0x20 [ 393.761062][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 393.766711][ C1] [ 393.769660][ C1] [ 393.772613][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 393.778622][ C1] RIP: 0010:default_idle+0xb/0x10 [ 393.783661][ C1] Code: b7 48 89 df e8 f6 ea f8 f7 eb ad e8 8f af f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 00 cc 66 90 0f 00 2d b7 96 60 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 393.803391][ C1] RSP: 0018:ffffc90000d67d48 EFLAGS: 000002c2 [ 393.809478][ C1] RAX: 93be387c64922e00 RBX: ffff888017968000 RCX: 93be387c64922e00 [ 393.817670][ C1] RDX: 0000000000000001 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f780 [ 393.825761][ C1] RBP: ffffc90000d67e80 R08: ffff8880b913b30b R09: 1ffff11017227661 [ 393.834059][ C1] R10: dffffc0000000000 R11: ffffed1017227662 R12: 1ffff11002f2d000 [ 393.842154][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff920001acfb4 [ 393.850405][ C1] default_idle_call+0x81/0xc0 [ 393.855226][ C1] do_idle+0x21f/0x580 [ 393.859355][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 393.864598][ C1] ? asm_sysvec_call_function_single+0x16/0x20 [ 393.870786][ C1] ? schedule_idle+0x57/0x90 [ 393.875399][ C1] cpu_startup_entry+0x14/0x20 [ 393.880183][ C1] start_secondary+0x330/0x430 [ 393.884969][ C1] ? arch_scale_freq_tick+0x120/0x120 [ 393.890366][ C1] secondary_startup_64_no_verify+0xb1/0xbb [ 393.896295][ C1] [ 393.899580][ C1] Kernel Offset: disabled [ 393.904064][ C1] Rebooting in 86400 seconds..