last executing test programs: 14.539606412s ago: executing program 2 (id=2385): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x48) write$cgroup_freezer_state(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0x22, 0x0, 0x8000, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000400)}, 0x40) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4006, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x2, 0x922000000001, 0x106) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31066b876c1d0000007ea6e763160af36504001ac0080010000400020002000000ef64bc24eab556a705251e618294ff0051f60a9553adac000e4509c5bbcd72c6c953ec3ded4d82", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 13.408555724s ago: executing program 2 (id=2389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 12.263845198s ago: executing program 2 (id=2392): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320081", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r2, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000010000008500000041000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0x5}, 0x2f) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 9.839915786s ago: executing program 2 (id=2396): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000001700)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x104046, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x7fffffffffffffff) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r5, 0x0) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0x58, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='pids.events\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x20, &(0x7f0000000b80)={&(0x7f0000000d80)=""/220, 0xdc, 0x0, &(0x7f0000000a40)=""/14, 0xe}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x27, &(0x7f0000000500)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xc3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000001c0)='GPL\x00', 0x10, 0x4d, &(0x7f0000000640)=""/77, 0x41100, 0x76, '\x00', r7, 0x1b, r8, 0x8, &(0x7f00000009c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x0, 0xf, 0x80000001}, 0x10, r9, 0x0, 0x6, &(0x7f0000000c00)=[r10], &(0x7f0000000c40)=[{0x2, 0x2, 0x10, 0x3}, {0x4, 0x4, 0xb}, {0x4, 0x5, 0x5, 0x5}, {0x3, 0x3, 0x3, 0xf}, {0x2, 0x5, 0x10, 0xc}, {0x1, 0x3, 0x2, 0xa}], 0x10, 0x3b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e88a8", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x82}], 0x1}, 0x0) 9.260065494s ago: executing program 2 (id=2398): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320081", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r2, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000010000008500000041000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 8.93352541s ago: executing program 2 (id=2399): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18000005000000000dd327920000000023000000008000000000000095000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffc0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e120900", 0x26}], 0x1}, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="08f272f808af"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 3.312528459s ago: executing program 0 (id=2440): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320081", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r2, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000010000008500000041000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0x5}, 0x2f) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 2.667675702s ago: executing program 1 (id=2437): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320081", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r2, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000010000008500000041000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0x5}, 0x2f) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 2.348445018s ago: executing program 0 (id=2446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 2.030363614s ago: executing program 1 (id=2439): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b27ae7ec800001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x44810) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x8, 0x7}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x7) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.events\x00', 0x26e1, 0x0) close(r10) 1.978492788s ago: executing program 0 (id=2441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 1.83878591s ago: executing program 3 (id=2442): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e1208001e0000000401a8000700fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@alu={0x7, 0x1, 0x7, 0x3, 0x3, 0x80, 0x1c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2000c000) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800"/26], 0x0, 0x1a}, 0x28) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x114301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x6, 0x5, &(0x7f0000001040)=ANY=[], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x79, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fd", 0x5dc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) 1.58874655s ago: executing program 0 (id=2443): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) 1.502963887s ago: executing program 3 (id=2444): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e1208001e0000000401a8000700fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@alu={0x7, 0x1, 0x7, 0x3, 0x3, 0x80, 0x1c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2000c000) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800"/26], 0x0, 0x1a}, 0x28) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x114301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x6, 0x5, &(0x7f0000001040)=ANY=[], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x79, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fd", 0x5dc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) 1.500976767s ago: executing program 1 (id=2452): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e1208001e0000000401a8000700fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@alu={0x7, 0x1, 0x7, 0x3, 0x3, 0x80, 0x1c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800"/26], 0x0, 0x1a}, 0x28) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x114301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x6, 0x5, &(0x7f0000001040)=ANY=[], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x79, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fd", 0x5dc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) 1.242767738s ago: executing program 3 (id=2445): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18000000, &(0x7f0000000080)=[{&(0x7f0000000040)="1800000039000511d25a80648c63940d0424fc600b003540", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0xd, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000feffffff00000000feffffff1801000020204a250000000000202020791af8ff00000000bfa100005d8e000007070000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000005c0)={0x4, 0x80, 0x25, 0x40, 0x5, 0x9, 0x0, 0x100000001, 0x2a7, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffff7, 0x4, @perf_bp={&(0x7f0000000540)}, 0x200, 0x8000000000000001, 0x9, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x3677, 0x0, 0x10}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e00000006000000ffff00000300000014000300", @ANYRES32, @ANYBLOB="0002000064", @ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000002000000010000000400"/24, @ANYRES32, @ANYBLOB], 0x50) perf_event_open(&(0x7f00000007c0)={0x0, 0x80, 0xbd, 0xff, 0x2c, 0x3, 0x0, 0x3, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000780), 0x6}, 0x81480, 0x100000001, 0x0, 0x8, 0x8001, 0x2, 0x6, 0x0, 0x30000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f0000000400000006000000070000", @ANYRES32, @ANYBLOB="000000000000000000800000000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) 1.207573281s ago: executing program 1 (id=2447): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320081", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r2, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000010000008500000041000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000000100)) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_pressure(r10, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r11, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0x5}, 0x2f) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 1.081308042s ago: executing program 0 (id=2448): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018124300", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70700000000000085000000080000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="9e36d449b388dd965f7ade1a86dd", 0x0, 0x10727, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_int(r1, &(0x7f00000000c0)=0x100000000, 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0xa, 0xf, 0x1, 0x3, 0x0, 0x3, 0x80100, 0xd, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000080)}, 0xc032, 0x7, 0x7fffffff, 0x0, 0xc, 0xffffffa7, 0x5, 0x0, 0x7, 0x0, 0x9}, 0x0, 0x7, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x5b81) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) 939.914873ms ago: executing program 3 (id=2449): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320081", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r2, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x7, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000010000008500000041000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000100)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_pressure(r9, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0x5}, 0x2f) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 772.021587ms ago: executing program 0 (id=2450): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000005000000020000000000000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xd, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc800320081", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r2, 0xfffffbffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x541b, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000010000008500000041000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 591.891442ms ago: executing program 1 (id=2451): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000001700)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x104046, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x7fffffffffffffff) r6 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r5, 0x0) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0xb) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0x58, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='pids.events\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0x20, &(0x7f0000000b80)={&(0x7f0000000d80)=""/220, 0xdc, 0x0, &(0x7f0000000a40)=""/14, 0xe}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000cc0)=@bpf_lsm={0x1d, 0x27, &(0x7f0000000500)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @call={0x85, 0x0, 0x0, 0xc3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000001c0)='GPL\x00', 0x10, 0x4d, &(0x7f0000000640)=""/77, 0x41100, 0x76, '\x00', r7, 0x1b, r8, 0x8, &(0x7f00000009c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x0, 0xf, 0x80000001}, 0x10, r9, 0x0, 0x6, &(0x7f0000000c00)=[r10], &(0x7f0000000c40)=[{0x2, 0x2, 0x10, 0x3}, {0x4, 0x4, 0xb}, {0x4, 0x5, 0x5, 0x5}, {0x3, 0x3, 0x3, 0xf}, {0x2, 0x5, 0x10, 0xc}, {0x1, 0x3, 0x2, 0xa}], 0x10, 0x3b}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000240)="ce010000009a697f65360c5e88a8", 0x0, 0x1fe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r13, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x82}], 0x1}, 0x0) 470.005552ms ago: executing program 3 (id=2453): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b27ae7ec800001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x44810) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x8, 0x7}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x7) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.events\x00', 0x26e1, 0x0) close(r10) 80.729743ms ago: executing program 1 (id=2454): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b27ae7ec800001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x44810) socket$kcm(0x10, 0x2, 0x10) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x1f, &(0x7f0000000040), 0xcf) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x8, 0x7}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x7) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.events\x00', 0x26e1, 0x0) close(r10) 0s ago: executing program 3 (id=2455): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x10000000, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c02e8fc55a10a0015000600142603600e1208001e0000000401a8000700fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x4, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@alu={0x7, 0x1, 0x7, 0x3, 0x3, 0x80, 0x1c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800"/26], 0x0, 0x1a}, 0x28) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x114301, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x6, 0x5, &(0x7f0000001040)=ANY=[], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="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", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) socket$kcm(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x79, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fd", 0x5dc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001f000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) kernel console output (not intermixed with test programs): 25698][ T9414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.813054][ T9414] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 272.048246][ T9422] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1352'. [ 272.066639][ T9424] FAULT_INJECTION: forcing a failure. [ 272.066639][ T9424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.123915][ T9424] CPU: 1 PID: 9424 Comm: syz.1.1353 Not tainted syzkaller #0 [ 272.131384][ T9424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.141764][ T9424] Call Trace: [ 272.145172][ T9424] [ 272.148313][ T9424] dump_stack_lvl+0x16c/0x230 [ 272.153581][ T9424] ? show_regs_print_info+0x20/0x20 [ 272.158930][ T9424] ? load_image+0x3b0/0x3b0 [ 272.163486][ T9424] ? __might_fault+0xaa/0x120 [ 272.168385][ T9424] ? __lock_acquire+0x7c80/0x7c80 [ 272.173541][ T9424] should_fail_ex+0x39d/0x4d0 [ 272.178352][ T9424] _copy_from_iter+0x1d3/0x1290 [ 272.192063][ T9424] ? slab_post_alloc_hook+0x8a/0x4d0 [ 272.197628][ T9424] ? __virt_addr_valid+0x18c/0x540 [ 272.202962][ T9424] ? __lock_acquire+0x7c80/0x7c80 [ 272.208176][ T9424] ? rcu_is_watching+0x15/0xb0 [ 272.213094][ T9424] ? copyout_mc+0x70/0x70 [ 272.217565][ T9424] ? __virt_addr_valid+0x18c/0x540 [ 272.222987][ T9424] ? __virt_addr_valid+0x18c/0x540 [ 272.228423][ T9424] ? __virt_addr_valid+0x469/0x540 [ 272.233765][ T9424] ? __check_object_size+0x506/0xa30 [ 272.239381][ T9424] netlink_sendmsg+0x75c/0xbe0 [ 272.244290][ T9424] ? netlink_getsockopt+0x580/0x580 [ 272.249833][ T9424] ? aa_sock_msg_perm+0x94/0x150 [ 272.254818][ T9424] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 272.260314][ T9424] ? security_socket_sendmsg+0x80/0xa0 [ 272.266081][ T9424] ? netlink_getsockopt+0x580/0x580 [ 272.271444][ T9424] ____sys_sendmsg+0x5bf/0x950 [ 272.276364][ T9424] ? __asan_memset+0x22/0x40 [ 272.281269][ T9424] ? __sys_sendmsg_sock+0x30/0x30 [ 272.286449][ T9424] ? __import_iovec+0x5f2/0x860 [ 272.291362][ T9424] ? import_iovec+0x73/0xa0 [ 272.296176][ T9424] ___sys_sendmsg+0x220/0x290 [ 272.301184][ T9424] ? __sys_sendmsg+0x270/0x270 [ 272.306285][ T9424] ? __lock_acquire+0x7c80/0x7c80 [ 272.311523][ T9424] __se_sys_sendmsg+0x1a5/0x270 [ 272.316600][ T9424] ? __x64_sys_sendmsg+0x80/0x80 [ 272.321780][ T9424] ? lockdep_hardirqs_on+0x98/0x150 [ 272.327288][ T9424] do_syscall_64+0x55/0xb0 [ 272.331840][ T9424] ? clear_bhb_loop+0x40/0x90 [ 272.336734][ T9424] ? clear_bhb_loop+0x40/0x90 [ 272.341641][ T9424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.347618][ T9424] RIP: 0033:0x7f5325b8ebe9 [ 272.352068][ T9424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.372417][ T9424] RSP: 002b:00007f5326a4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.380881][ T9424] RAX: ffffffffffffffda RBX: 00007f5325db5fa0 RCX: 00007f5325b8ebe9 [ 272.389148][ T9424] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000004 [ 272.397419][ T9424] RBP: 00007f5326a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 272.405595][ T9424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.413942][ T9424] R13: 00007f5325db6038 R14: 00007f5325db5fa0 R15: 00007ffccf224ad8 [ 272.422253][ T9424] [ 272.824216][ T9435] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1357'. [ 273.058457][ T9440] netlink: 'syz.2.1358': attribute type 25 has an invalid length. [ 273.307088][ T9437] netlink: 'syz.2.1358': attribute type 16 has an invalid length. [ 273.338167][ T9437] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1358'. [ 273.842197][ T9454] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1363'. [ 273.865023][ T9452] netlink: 'syz.2.1362': attribute type 22 has an invalid length. [ 273.899885][ T9452] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.1362'. [ 274.661632][ T9465] netlink: 'syz.0.1366': attribute type 25 has an invalid length. [ 274.775614][ T9464] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1366'. [ 274.973964][ T9477] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1372'. [ 275.250538][ T9475] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1371'. [ 276.092161][ T9495] validate_nla: 5 callbacks suppressed [ 276.092180][ T9495] netlink: 'syz.2.1377': attribute type 22 has an invalid length. [ 276.114593][ T9495] __nla_validate_parse: 2 callbacks suppressed [ 276.114612][ T9495] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.1377'. [ 276.332671][ T9501] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1381'. [ 276.490777][ T9503] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1382'. [ 276.705545][ T9509] netlink: 'syz.3.1383': attribute type 25 has an invalid length. [ 276.739857][ T9514] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1384'. [ 276.785882][ T9513] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1385'. [ 276.802586][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.813760][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.839857][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.856054][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.869035][ T9513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.881122][ T9513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.892494][ T9513] batadv_slave_1: entered promiscuous mode [ 276.902781][ T9505] netlink: 'syz.3.1383': attribute type 16 has an invalid length. [ 277.241634][ T9505] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1383'. [ 277.445651][ T9523] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1389'. [ 278.391399][ T9534] netlink: 'syz.1.1394': attribute type 25 has an invalid length. [ 278.454130][ T9537] netlink: 'syz.1.1394': attribute type 16 has an invalid length. [ 278.476904][ T9537] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1394'. [ 278.514604][ T9536] netlink: 'syz.0.1395': attribute type 25 has an invalid length. [ 278.551153][ T9541] netlink: 'syz.2.1397': attribute type 16 has an invalid length. [ 278.566618][ T9541] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1397'. [ 278.722065][ T9542] netlink: 'syz.0.1395': attribute type 16 has an invalid length. [ 278.736701][ T9542] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1395'. [ 278.749619][ T9551] netlink: 'syz.3.1399': attribute type 22 has an invalid length. [ 278.788337][ T9551] veth0_vlan: entered allmulticast mode [ 279.336031][ T9556] netlink: 'syz.1.1400': attribute type 25 has an invalid length. [ 280.472872][ T9574] ÿÿÿÿÿÿ: renamed from vlan1 [ 281.519136][ T9595] validate_nla: 15 callbacks suppressed [ 281.519153][ T9595] netlink: 'syz.0.1415': attribute type 25 has an invalid length. [ 281.535303][ T9598] netlink: 'syz.0.1415': attribute type 16 has an invalid length. [ 281.544535][ T9598] __nla_validate_parse: 7 callbacks suppressed [ 281.544550][ T9598] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1415'. [ 281.654553][ T9603] netlink: 'syz.2.1420': attribute type 2 has an invalid length. [ 281.677374][ T9603] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1420'. [ 282.159013][ T9610] netlink: 'syz.2.1423': attribute type 25 has an invalid length. [ 282.293803][ T9615] netlink: 'syz.2.1423': attribute type 16 has an invalid length. [ 282.315465][ T9615] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1423'. [ 282.349305][ T9618] netlink: 'syz.3.1425': attribute type 22 has an invalid length. [ 282.367401][ T9618] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.1425'. [ 282.902481][ T9631] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1429'. [ 282.953844][ T9630] FAULT_INJECTION: forcing a failure. [ 282.953844][ T9630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.970524][ T9630] CPU: 1 PID: 9630 Comm: syz.0.1430 Not tainted syzkaller #0 [ 282.978314][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.988701][ T9630] Call Trace: [ 282.992208][ T9630] [ 282.995190][ T9630] dump_stack_lvl+0x16c/0x230 [ 283.000097][ T9630] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.006528][ T9630] ? show_regs_print_info+0x20/0x20 [ 283.011867][ T9630] ? load_image+0x3b0/0x3b0 [ 283.016422][ T9630] should_fail_ex+0x39d/0x4d0 [ 283.021287][ T9630] _copy_from_user+0x2f/0xe0 [ 283.025934][ T9630] __sys_bpf+0x1e9/0x800 [ 283.030236][ T9630] ? bpf_link_show_fdinfo+0x350/0x350 [ 283.035665][ T9630] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 283.042389][ T9630] __x64_sys_bpf+0x7c/0x90 [ 283.046944][ T9630] do_syscall_64+0x55/0xb0 [ 283.051837][ T9630] ? clear_bhb_loop+0x40/0x90 [ 283.056584][ T9630] ? clear_bhb_loop+0x40/0x90 [ 283.061395][ T9630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 283.067584][ T9630] RIP: 0033:0x7fe54918ebe9 [ 283.072296][ T9630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.092285][ T9630] RSP: 002b:00007fe54a09d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.101095][ T9630] RAX: ffffffffffffffda RBX: 00007fe5493b5fa0 RCX: 00007fe54918ebe9 [ 283.109261][ T9630] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 283.117624][ T9630] RBP: 00007fe54a09d090 R08: 0000000000000000 R09: 0000000000000000 [ 283.125961][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.134149][ T9630] R13: 00007fe5493b6038 R14: 00007fe5493b5fa0 R15: 00007ffc58259928 [ 283.142679][ T9630] [ 283.154967][ T9635] netlink: 'syz.2.1432': attribute type 2 has an invalid length. [ 283.162994][ T9635] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1432'. [ 283.273946][ T9634] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1431'. [ 284.090215][ T9654] netlink: 'syz.3.1439': attribute type 22 has an invalid length. [ 284.117622][ T9654] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.1439'. [ 284.158089][ T9655] netlink: 'syz.1.1437': attribute type 25 has an invalid length. [ 284.214154][ T9659] netlink: 'syz.1.1437': attribute type 16 has an invalid length. [ 284.254237][ T9659] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1437'. [ 284.267570][ T9661] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1440'. [ 284.568786][ T9669] FAULT_INJECTION: forcing a failure. [ 284.568786][ T9669] name failslab, interval 1, probability 0, space 0, times 0 [ 284.607579][ T9669] CPU: 1 PID: 9669 Comm: syz.1.1443 Not tainted syzkaller #0 [ 284.615145][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.625437][ T9669] Call Trace: [ 284.628945][ T9669] [ 284.632159][ T9669] dump_stack_lvl+0x16c/0x230 [ 284.636993][ T9669] ? show_regs_print_info+0x20/0x20 [ 284.642259][ T9669] ? load_image+0x3b0/0x3b0 [ 284.647014][ T9669] ? __might_sleep+0xe0/0xe0 [ 284.652080][ T9669] ? __lock_acquire+0x7c80/0x7c80 [ 284.657974][ T9669] should_fail_ex+0x39d/0x4d0 [ 284.662791][ T9669] should_failslab+0x9/0x20 [ 284.667622][ T9669] slab_pre_alloc_hook+0x59/0x310 [ 284.672905][ T9669] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 284.679109][ T9669] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 284.685135][ T9669] __kmem_cache_alloc_node+0x53/0x260 [ 284.690743][ T9669] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 284.696907][ T9669] __kmalloc+0xa4/0x240 [ 284.701118][ T9669] tomoyo_realpath_from_path+0xe3/0x5d0 [ 284.707004][ T9669] tomoyo_path_number_perm+0x1ea/0x590 [ 284.712701][ T9669] ? tomoyo_path_number_perm+0x1ba/0x590 [ 284.718829][ T9669] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 284.724605][ T9669] ? ksys_write+0x1c1/0x250 [ 284.729242][ T9669] ? __fget_files+0x28/0x4d0 [ 284.733904][ T9669] security_file_ioctl+0x70/0xa0 [ 284.738982][ T9669] __se_sys_ioctl+0x48/0x170 [ 284.743618][ T9669] do_syscall_64+0x55/0xb0 [ 284.748249][ T9669] ? clear_bhb_loop+0x40/0x90 [ 284.753045][ T9669] ? clear_bhb_loop+0x40/0x90 [ 284.758026][ T9669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.764133][ T9669] RIP: 0033:0x7f5325b8ebe9 [ 284.768781][ T9669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.788954][ T9669] RSP: 002b:00007f5326a4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.797682][ T9669] RAX: ffffffffffffffda RBX: 00007f5325db5fa0 RCX: 00007f5325b8ebe9 [ 284.805883][ T9669] RDX: 0000200000000000 RSI: 0000000000008b15 RDI: 0000000000000005 [ 284.814158][ T9669] RBP: 00007f5326a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 284.822155][ T9669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.830158][ T9669] R13: 00007f5325db6038 R14: 00007f5325db5fa0 R15: 00007ffccf224ad8 [ 284.838571][ T9669] [ 284.976861][ T9669] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.254702][ T9708] FAULT_INJECTION: forcing a failure. [ 286.254702][ T9708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.277602][ T9708] CPU: 0 PID: 9708 Comm: syz.1.1457 Not tainted syzkaller #0 [ 286.285132][ T9708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.295822][ T9708] Call Trace: [ 286.299115][ T9708] [ 286.302068][ T9708] dump_stack_lvl+0x16c/0x230 [ 286.306765][ T9708] ? show_regs_print_info+0x20/0x20 [ 286.312066][ T9708] ? load_image+0x3b0/0x3b0 [ 286.316754][ T9708] ? __might_fault+0xaa/0x120 [ 286.321653][ T9708] ? __lock_acquire+0x7c80/0x7c80 [ 286.326958][ T9708] should_fail_ex+0x39d/0x4d0 [ 286.331926][ T9708] _copy_from_user+0x2f/0xe0 [ 286.336655][ T9708] ___sys_sendmsg+0x159/0x290 [ 286.341640][ T9708] ? __sys_sendmsg+0x270/0x270 [ 286.346545][ T9708] ? __lock_acquire+0x7c80/0x7c80 [ 286.351696][ T9708] __se_sys_sendmsg+0x1a5/0x270 [ 286.356654][ T9708] ? __x64_sys_sendmsg+0x80/0x80 [ 286.361709][ T9708] ? lockdep_hardirqs_on+0x98/0x150 [ 286.367226][ T9708] do_syscall_64+0x55/0xb0 [ 286.371753][ T9708] ? clear_bhb_loop+0x40/0x90 [ 286.376463][ T9708] ? clear_bhb_loop+0x40/0x90 [ 286.381190][ T9708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.387291][ T9708] RIP: 0033:0x7f5325b8ebe9 [ 286.391855][ T9708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.412277][ T9708] RSP: 002b:00007f5326a4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.420983][ T9708] RAX: ffffffffffffffda RBX: 00007f5325db5fa0 RCX: 00007f5325b8ebe9 [ 286.429190][ T9708] RDX: 000000002000c000 RSI: 0000200000000280 RDI: 0000000000000004 [ 286.437450][ T9708] RBP: 00007f5326a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 286.445612][ T9708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.453594][ T9708] R13: 00007f5325db6038 R14: 00007f5325db5fa0 R15: 00007ffccf224ad8 [ 286.461768][ T9708] [ 286.687642][ T9716] __nla_validate_parse: 6 callbacks suppressed [ 286.687659][ T9716] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1461'. [ 286.771310][ T9714] C: renamed from team_slave_0 (while UP) [ 286.785910][ T9714] validate_nla: 6 callbacks suppressed [ 286.785926][ T9714] netlink: 'syz.2.1460': attribute type 3 has an invalid length. [ 286.816455][ T9714] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1460'. [ 286.834639][ T9714] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 286.856245][ T9719] netlink: 'syz.0.1462': attribute type 2 has an invalid length. [ 286.876620][ T9719] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1462'. [ 286.921314][ T9722] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1463'. [ 287.093405][ T9729] netlink: 'syz.0.1467': attribute type 22 has an invalid length. [ 287.115412][ T9729] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.1467'. [ 288.370419][ T9745] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1472'. [ 288.381194][ T9748] netlink: 'syz.3.1468': attribute type 25 has an invalid length. [ 288.393268][ T9746] netlink: 'syz.3.1468': attribute type 16 has an invalid length. [ 288.451088][ T9746] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1468'. [ 288.655041][ T9759] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1484'. [ 288.666249][ T9761] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1476'. [ 289.123785][ T9769] netlink: 'syz.1.1479': attribute type 25 has an invalid length. [ 289.138866][ T9769] netlink: 'syz.1.1479': attribute type 16 has an invalid length. [ 289.157996][ T9769] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1479'. [ 289.188904][ T9774] netlink: 'syz.3.1482': attribute type 25 has an invalid length. [ 289.210851][ T9774] netlink: 'syz.3.1482': attribute type 16 has an invalid length. [ 289.566891][ T9787] FAULT_INJECTION: forcing a failure. [ 289.566891][ T9787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.583042][ T9787] CPU: 0 PID: 9787 Comm: syz.0.1488 Not tainted syzkaller #0 [ 289.590932][ T9787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.601351][ T9787] Call Trace: [ 289.604800][ T9787] [ 289.607862][ T9787] dump_stack_lvl+0x16c/0x230 [ 289.612722][ T9787] ? show_regs_print_info+0x20/0x20 [ 289.618060][ T9787] ? load_image+0x3b0/0x3b0 [ 289.622965][ T9787] ? __might_fault+0xaa/0x120 [ 289.627706][ T9787] ? __lock_acquire+0x7c80/0x7c80 [ 289.632968][ T9787] should_fail_ex+0x39d/0x4d0 [ 289.637874][ T9787] _copy_from_user+0x2f/0xe0 [ 289.642757][ T9787] ip6_tnl_siocdevprivate+0x1af/0xac0 [ 289.648276][ T9787] ? __mutex_lock+0x953/0xcc0 [ 289.653313][ T9787] ? __lock_acquire+0x7c80/0x7c80 [ 289.658495][ T9787] ? do_raw_spin_lock+0x121/0x2c0 [ 289.663731][ T9787] ? ip6_tnl_start_xmit+0x1140/0x1140 [ 289.669237][ T9787] ? do_raw_spin_unlock+0x121/0x230 [ 289.674548][ T9787] ? __mutex_lock+0x4e8/0xcc0 [ 289.679397][ T9787] ? full_name_hash+0x92/0xe0 [ 289.684120][ T9787] dev_ifsioc+0xae6/0xe20 [ 289.688573][ T9787] ? dev_ioctl+0x1170/0x1170 [ 289.693394][ T9787] ? dev_load+0x21/0x1f0 [ 289.697740][ T9787] ? dev_load+0x21/0x1f0 [ 289.702261][ T9787] dev_ioctl+0x87a/0x1170 [ 289.706701][ T9787] sock_ioctl+0x726/0x7a0 [ 289.711063][ T9787] ? sock_poll+0x3d0/0x3d0 [ 289.715717][ T9787] ? bpf_lsm_file_ioctl+0x9/0x10 [ 289.720667][ T9787] ? security_file_ioctl+0x80/0xa0 [ 289.725886][ T9787] ? sock_poll+0x3d0/0x3d0 [ 289.730496][ T9787] __se_sys_ioctl+0xfd/0x170 [ 289.735108][ T9787] do_syscall_64+0x55/0xb0 [ 289.739561][ T9787] ? clear_bhb_loop+0x40/0x90 [ 289.744367][ T9787] ? clear_bhb_loop+0x40/0x90 [ 289.749126][ T9787] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.755137][ T9787] RIP: 0033:0x7fe54918ebe9 [ 289.759787][ T9787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.779684][ T9787] RSP: 002b:00007fe54a07c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 289.788459][ T9787] RAX: ffffffffffffffda RBX: 00007fe5493b6090 RCX: 00007fe54918ebe9 [ 289.796530][ T9787] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 289.804700][ T9787] RBP: 00007fe54a07c090 R08: 0000000000000000 R09: 0000000000000000 [ 289.812773][ T9787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.820844][ T9787] R13: 00007fe5493b6128 R14: 00007fe5493b6090 R15: 00007ffc58259928 [ 289.829210][ T9787] [ 289.876604][ T9780] netlink: 'syz.2.1486': attribute type 25 has an invalid length. [ 291.832077][ T9826] validate_nla: 4 callbacks suppressed [ 291.832094][ T9826] netlink: 'syz.0.1501': attribute type 25 has an invalid length. [ 291.872301][ T9830] netlink: 'syz.0.1501': attribute type 16 has an invalid length. [ 291.981692][ T9830] __nla_validate_parse: 29 callbacks suppressed [ 291.981709][ T9830] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1501'. [ 292.241366][ T9842] netlink: 'syz.1.1508': attribute type 25 has an invalid length. [ 292.312674][ T9841] netlink: 'syz.1.1508': attribute type 16 has an invalid length. [ 292.330678][ T9841] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1508'. [ 292.454598][ T9845] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1509'. [ 292.596090][ T9852] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1511'. [ 293.186445][ T9864] ªªªªªª: renamed from veth0_vlan [ 293.188677][ T9862] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1516'. [ 293.259792][ T9865] netlink: 'syz.3.1517': attribute type 2 has an invalid length. [ 293.320210][ T9865] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1517'. [ 293.436298][ T9866] can: request_module (can-proto-0) failed. [ 293.522664][ T9869] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1518'. [ 293.649095][ T9873] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1520'. [ 294.037788][ T9878] netlink: 'syz.1.1521': attribute type 25 has an invalid length. [ 294.733609][ T9888] netlink: 'syz.0.1531': attribute type 16 has an invalid length. [ 295.108728][ T9888] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1531'. [ 295.823187][ T9905] netlink: 'syz.1.1532': attribute type 2 has an invalid length. [ 295.835482][ T9905] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1532'. [ 296.902277][ T9918] netlink: 'syz.0.1537': attribute type 25 has an invalid length. [ 296.920858][ T9912] netlink: 'syz.1.1535': attribute type 25 has an invalid length. [ 296.942558][ T9918] netlink: 'syz.0.1537': attribute type 16 has an invalid length. [ 296.954364][ T9912] netlink: 'syz.1.1535': attribute type 16 has an invalid length. [ 297.284097][ T9921] netlink: 'syz.2.1547': attribute type 25 has an invalid length. [ 297.295163][ T9921] netlink: 'syz.2.1547': attribute type 16 has an invalid length. [ 297.343386][ T9921] __nla_validate_parse: 2 callbacks suppressed [ 297.343405][ T9921] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1547'. [ 297.631856][ T9931] netlink: 'syz.3.1542': attribute type 2 has an invalid length. [ 297.640567][ T9931] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1542'. [ 298.638689][ T9948] netlink: 'syz.0.1549': attribute type 16 has an invalid length. [ 298.689179][ T9948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1549'. [ 298.891077][ T9962] netlink: 'syz.1.1555': attribute type 2 has an invalid length. [ 298.899605][ T9962] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1555'. [ 298.984205][ T9961] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1554'. [ 299.109492][ T9956] netlink: 'syz.2.1552': attribute type 25 has an invalid length. [ 299.147319][ T9966] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1564'. [ 299.198415][ T9956] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1552'. [ 300.101395][ T9987] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1562'. [ 300.371694][ T9993] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1567'. [ 300.464832][ T9997] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1569'. [ 302.390915][T10047] validate_nla: 8 callbacks suppressed [ 302.390934][T10047] netlink: 'syz.3.1590': attribute type 25 has an invalid length. [ 302.429016][T10047] netlink: 'syz.3.1590': attribute type 16 has an invalid length. [ 302.438236][T10047] __nla_validate_parse: 2 callbacks suppressed [ 302.438261][T10047] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1590'. [ 302.570121][T10057] netlink: 'syz.0.1593': attribute type 5 has an invalid length. [ 302.580393][T10057] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1593'. [ 302.720670][T10066] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1596'. [ 302.885174][T10071] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1607'. [ 303.223552][T10082] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1606'. [ 303.361282][T10087] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1608'. [ 303.465233][T10085] netlink: 'syz.0.1605': attribute type 25 has an invalid length. [ 303.498122][T10085] netlink: 'syz.0.1605': attribute type 16 has an invalid length. [ 303.511397][T10085] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1605'. [ 303.744383][T10097] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1611'. [ 304.498372][T10114] netlink: 'syz.1.1619': attribute type 25 has an invalid length. [ 304.514266][T10114] netlink: 'syz.1.1619': attribute type 16 has an invalid length. [ 304.523075][T10114] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1619'. [ 304.594119][T10124] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1622'. [ 305.331487][T10149] netlink: 'syz.0.1632': attribute type 29 has an invalid length. [ 305.371586][T10149] netlink: 'syz.0.1632': attribute type 29 has an invalid length. [ 305.402284][T10151] netlink: 'syz.0.1632': attribute type 29 has an invalid length. [ 305.810128][T10163] FAULT_INJECTION: forcing a failure. [ 305.810128][T10163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.833628][T10163] CPU: 1 PID: 10163 Comm: syz.0.1637 Not tainted syzkaller #0 [ 305.841342][T10163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.851436][T10163] Call Trace: [ 305.854837][T10163] [ 305.857828][T10163] dump_stack_lvl+0x16c/0x230 [ 305.862647][T10163] ? show_regs_print_info+0x20/0x20 [ 305.867990][T10163] ? load_image+0x3b0/0x3b0 [ 305.872563][T10163] ? __lock_acquire+0x7c80/0x7c80 [ 305.877666][T10163] ? __virt_addr_valid+0x18c/0x540 [ 305.882912][T10163] should_fail_ex+0x39d/0x4d0 [ 305.887639][T10163] _copy_from_user+0x2f/0xe0 [ 305.892349][T10163] bpf_test_init+0xf9/0x150 [ 305.897076][T10163] bpf_prog_test_run_xdp+0x382/0xfa0 [ 305.902598][T10163] ? dev_put+0x80/0x80 [ 305.906719][T10163] ? dev_put+0x80/0x80 [ 305.910838][T10163] bpf_prog_test_run+0x321/0x390 [ 305.915908][T10163] __sys_bpf+0x440/0x800 [ 305.920281][T10163] ? bpf_link_show_fdinfo+0x350/0x350 [ 305.925888][T10163] ? lock_chain_count+0x20/0x20 [ 305.930958][T10163] __x64_sys_bpf+0x7c/0x90 [ 305.935506][T10163] do_syscall_64+0x55/0xb0 [ 305.939979][T10163] ? clear_bhb_loop+0x40/0x90 [ 305.944683][T10163] ? clear_bhb_loop+0x40/0x90 [ 305.949480][T10163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 305.955507][T10163] RIP: 0033:0x7fe54918ebe9 [ 305.960134][T10163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.980482][T10163] RSP: 002b:00007fe54a09d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.989035][T10163] RAX: ffffffffffffffda RBX: 00007fe5493b5fa0 RCX: 00007fe54918ebe9 [ 305.997120][T10163] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 306.005116][T10163] RBP: 00007fe54a09d090 R08: 0000000000000000 R09: 0000000000000000 [ 306.013188][T10163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.021433][T10163] R13: 00007fe5493b6038 R14: 00007fe5493b5fa0 R15: 00007ffc58259928 [ 306.029518][T10163] [ 307.474228][T10194] validate_nla: 4 callbacks suppressed [ 307.474244][T10194] netlink: 'syz.2.1650': attribute type 13 has an invalid length. [ 307.489170][T10194] __nla_validate_parse: 5 callbacks suppressed [ 307.489185][T10194] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1650'. [ 307.509057][T10194] bond0: entered promiscuous mode [ 307.514252][T10194] bond_slave_0: entered promiscuous mode [ 307.520763][T10194] bond_slave_1: entered promiscuous mode [ 307.527863][T10194] bridge0: entered promiscuous mode [ 307.536185][T10194] bond0: entered allmulticast mode [ 307.542407][T10194] bond_slave_0: entered allmulticast mode [ 307.548810][T10194] bond_slave_1: entered allmulticast mode [ 307.554837][T10194] bridge0: entered allmulticast mode [ 308.032607][T10211] netlink: 'syz.0.1652': attribute type 2 has an invalid length. [ 308.040872][T10211] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1652'. [ 308.050778][T10212] netlink: 'syz.3.1654': attribute type 21 has an invalid length. [ 308.074893][T10213] netlink: 'syz.1.1651': attribute type 25 has an invalid length. [ 308.111227][T10203] netlink: 'syz.1.1651': attribute type 16 has an invalid length. [ 308.137896][T10203] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1651'. [ 308.350433][T10217] netlink: 'syz.2.1656': attribute type 21 has an invalid length. [ 308.444414][T10219] netlink: 'syz.0.1657': attribute type 1 has an invalid length. [ 308.467490][T10219] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1657'. [ 308.649409][T10219] netlink: 'syz.0.1657': attribute type 5 has an invalid length. [ 309.244242][T10235] netlink: 'syz.2.1663': attribute type 2 has an invalid length. [ 309.267441][T10235] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1663'. [ 309.764560][T10245] netlink: 'syz.1.1667': attribute type 25 has an invalid length. [ 309.788242][T10243] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1667'. [ 309.900701][T10249] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1669'. [ 310.595752][T10263] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1673'. [ 310.682145][T10264] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1674'. [ 310.822682][T10270] FAULT_INJECTION: forcing a failure. [ 310.822682][T10270] name failslab, interval 1, probability 0, space 0, times 0 [ 310.837355][T10270] CPU: 0 PID: 10270 Comm: syz.3.1676 Not tainted syzkaller #0 [ 310.845395][T10270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.855743][T10270] Call Trace: [ 310.859064][T10270] [ 310.862117][T10270] dump_stack_lvl+0x16c/0x230 [ 310.866908][T10270] ? show_regs_print_info+0x20/0x20 [ 310.872220][T10270] ? load_image+0x3b0/0x3b0 [ 310.876739][T10270] ? __might_sleep+0xe0/0xe0 [ 310.881440][T10270] ? __lock_acquire+0x7c80/0x7c80 [ 310.886574][T10270] should_fail_ex+0x39d/0x4d0 [ 310.891453][T10270] should_failslab+0x9/0x20 [ 310.896582][T10270] slab_pre_alloc_hook+0x59/0x310 [ 310.901809][T10270] kmem_cache_alloc_lru+0x4d/0x2e0 [ 310.907412][T10270] ? __d_alloc+0x31/0x730 [ 310.912040][T10270] __d_alloc+0x31/0x730 [ 310.916655][T10270] ? idr_preload_end+0xe4/0x200 [ 310.921714][T10270] d_alloc_pseudo+0x1d/0x70 [ 310.926409][T10270] alloc_file_pseudo+0xcc/0x200 [ 310.931375][T10270] ? alloc_empty_backing_file+0xe0/0xe0 [ 310.937298][T10270] ? __lock_acquire+0x7c80/0x7c80 [ 310.942426][T10270] ? __local_bh_enable_ip+0x12e/0x1c0 [ 310.947825][T10270] ? _local_bh_enable+0xa0/0xa0 [ 310.952813][T10270] anon_inode_getfile+0xc5/0x1a0 [ 310.958038][T10270] bpf_link_prime+0xa6/0x1d0 [ 310.962735][T10270] tcx_link_attach+0x20d/0x8b0 [ 310.967788][T10270] ? tcx_prog_query+0x140/0x140 [ 310.972747][T10270] ? __fget_files+0x44a/0x4d0 [ 310.977509][T10270] ? bpf_prog_attach_check_attach_type+0x188/0x440 [ 310.984202][T10270] link_create+0x390/0x720 [ 310.989329][T10270] __sys_bpf+0x479/0x800 [ 310.993588][T10270] ? bpf_link_show_fdinfo+0x350/0x350 [ 310.998994][T10270] ? lock_chain_count+0x20/0x20 [ 311.003919][T10270] __x64_sys_bpf+0x7c/0x90 [ 311.008350][T10270] do_syscall_64+0x55/0xb0 [ 311.012888][T10270] ? clear_bhb_loop+0x40/0x90 [ 311.017689][T10270] ? clear_bhb_loop+0x40/0x90 [ 311.022402][T10270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 311.028417][T10270] RIP: 0033:0x7f14abf8ebe9 [ 311.033020][T10270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.052655][T10270] RSP: 002b:00007f14acd11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.061619][T10270] RAX: ffffffffffffffda RBX: 00007f14ac1b5fa0 RCX: 00007f14abf8ebe9 [ 311.069985][T10270] RDX: 0000000000000020 RSI: 0000200000000000 RDI: 000000000000001c [ 311.078341][T10270] RBP: 00007f14acd11090 R08: 0000000000000000 R09: 0000000000000000 [ 311.086527][T10270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.094689][T10270] R13: 00007f14ac1b6038 R14: 00007f14ac1b5fa0 R15: 00007ffdc7b37c98 [ 311.103046][T10270] [ 311.633841][T10287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1679'. [ 313.021663][T10304] FAULT_INJECTION: forcing a failure. [ 313.021663][T10304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 313.043130][T10304] CPU: 1 PID: 10304 Comm: syz.1.1687 Not tainted syzkaller #0 [ 313.051082][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 313.061447][T10304] Call Trace: [ 313.064768][T10304] [ 313.067754][T10304] dump_stack_lvl+0x16c/0x230 [ 313.072674][T10304] ? show_regs_print_info+0x20/0x20 [ 313.078112][T10304] ? load_image+0x3b0/0x3b0 [ 313.082782][T10304] ? __lock_acquire+0x7c80/0x7c80 [ 313.088221][T10304] ? snprintf+0xdb/0x120 [ 313.092741][T10304] should_fail_ex+0x39d/0x4d0 [ 313.097754][T10304] _copy_to_user+0x2f/0xa0 [ 313.102314][T10304] simple_read_from_buffer+0xe7/0x150 [ 313.107749][T10304] proc_fail_nth_read+0x1e3/0x250 [ 313.112938][T10304] ? proc_fault_inject_write+0x340/0x340 [ 313.118716][T10304] ? fsnotify_perm+0x271/0x5e0 [ 313.123513][T10304] ? proc_fault_inject_write+0x340/0x340 [ 313.129342][T10304] vfs_read+0x27e/0x920 [ 313.133709][T10304] ? kernel_read+0x1e0/0x1e0 [ 313.138408][T10304] ? __fget_files+0x28/0x4d0 [ 313.143109][T10304] ? __fget_files+0x44a/0x4d0 [ 313.147907][T10304] ? __fdget_pos+0x2a3/0x330 [ 313.152511][T10304] ? ksys_read+0x75/0x250 [ 313.156856][T10304] ksys_read+0x147/0x250 [ 313.161123][T10304] ? vfs_write+0x940/0x940 [ 313.165657][T10304] ? lockdep_hardirqs_on+0x98/0x150 [ 313.170879][T10304] do_syscall_64+0x55/0xb0 [ 313.175310][T10304] ? clear_bhb_loop+0x40/0x90 [ 313.180085][T10304] ? clear_bhb_loop+0x40/0x90 [ 313.184779][T10304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.190945][T10304] RIP: 0033:0x7f5325b8d5fc [ 313.195391][T10304] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 313.215887][T10304] RSP: 002b:00007f5326a4c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 313.224420][T10304] RAX: ffffffffffffffda RBX: 00007f5325db5fa0 RCX: 00007f5325b8d5fc [ 313.232678][T10304] RDX: 000000000000000f RSI: 00007f5326a4c0a0 RDI: 0000000000000004 [ 313.241363][T10304] RBP: 00007f5326a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 313.249602][T10304] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 313.257861][T10304] R13: 00007f5325db6038 R14: 00007f5325db5fa0 R15: 00007ffccf224ad8 [ 313.266268][T10304] [ 313.313689][T10309] validate_nla: 7 callbacks suppressed [ 313.313709][T10309] netlink: 'syz.0.1690': attribute type 21 has an invalid length. [ 313.563579][T10317] __nla_validate_parse: 3 callbacks suppressed [ 313.563598][T10317] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1692'. [ 313.639652][T10319] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1694'. [ 313.743875][T10322] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1696'. [ 314.270714][T10327] netlink: 'syz.2.1695': attribute type 25 has an invalid length. [ 314.504362][T10327] netlink: 'syz.2.1695': attribute type 16 has an invalid length. [ 314.517555][T10327] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1695'. [ 314.526717][T10331] netlink: 'syz.1.1699': attribute type 21 has an invalid length. [ 314.567390][T10333] syz.1.1699[10333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.567548][T10332] syz.1.1699[10332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.567610][T10333] syz.1.1699[10333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 314.812037][T10342] netlink: 'syz.3.1704': attribute type 21 has an invalid length. [ 314.843120][T10347] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1705'. [ 314.879190][T10345] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1703'. [ 315.996846][T10357] netlink: 'syz.1.1709': attribute type 25 has an invalid length. [ 316.039382][T10359] netlink: 'syz.1.1709': attribute type 16 has an invalid length. [ 316.054979][T10359] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1709'. [ 316.073760][T10361] netlink: 'syz.3.1708': attribute type 25 has an invalid length. [ 316.087809][T10362] netlink: 'syz.3.1708': attribute type 16 has an invalid length. [ 316.111837][T10362] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1708'. [ 316.486143][T10375] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1714'. [ 316.511760][T10377] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1715'. [ 316.711476][T10381] netlink: 'syz.3.1717': attribute type 21 has an invalid length. [ 317.439849][T10390] syzkaller0: entered promiscuous mode [ 317.446218][T10390] syzkaller0: entered allmulticast mode [ 317.946347][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.953163][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.433077][T10399] __nla_validate_parse: 1 callbacks suppressed [ 319.433094][T10399] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1725'. [ 319.450909][T10401] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1726'. [ 319.678936][T10410] validate_nla: 3 callbacks suppressed [ 319.678954][T10410] netlink: 'syz.3.1729': attribute type 21 has an invalid length. [ 319.918649][T10415] FAULT_INJECTION: forcing a failure. [ 319.918649][T10415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.947574][T10415] CPU: 1 PID: 10415 Comm: syz.3.1731 Not tainted syzkaller #0 [ 319.955467][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 319.965586][T10415] Call Trace: [ 319.969064][T10415] [ 319.972020][T10415] dump_stack_lvl+0x16c/0x230 [ 319.976852][T10415] ? show_regs_print_info+0x20/0x20 [ 319.982308][T10415] ? load_image+0x3b0/0x3b0 [ 319.987176][T10415] ? __might_fault+0xaa/0x120 [ 319.992009][T10415] ? __lock_acquire+0x7c80/0x7c80 [ 319.997252][T10415] should_fail_ex+0x39d/0x4d0 [ 320.002075][T10415] _copy_from_user+0x2f/0xe0 [ 320.006987][T10415] __sys_bpf+0x1e9/0x800 [ 320.011627][T10415] ? bpf_link_show_fdinfo+0x350/0x350 [ 320.017150][T10415] ? lock_chain_count+0x20/0x20 [ 320.022157][T10415] __x64_sys_bpf+0x7c/0x90 [ 320.026613][T10415] do_syscall_64+0x55/0xb0 [ 320.031252][T10415] ? clear_bhb_loop+0x40/0x90 [ 320.036023][T10415] ? clear_bhb_loop+0x40/0x90 [ 320.040843][T10415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.046971][T10415] RIP: 0033:0x7f14abf8ebe9 [ 320.051598][T10415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.071510][T10415] RSP: 002b:00007f14acd11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 320.080320][T10415] RAX: ffffffffffffffda RBX: 00007f14ac1b5fa0 RCX: 00007f14abf8ebe9 [ 320.088682][T10415] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 320.097215][T10415] RBP: 00007f14acd11090 R08: 0000000000000000 R09: 0000000000000000 [ 320.105490][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.113508][T10415] R13: 00007f14ac1b6038 R14: 00007f14ac1b5fa0 R15: 00007ffdc7b37c98 [ 320.121717][T10415] [ 320.315979][T10422] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1734'. [ 320.939699][T10425] netlink: 'syz.3.1736': attribute type 16 has an invalid length. [ 320.976115][T10425] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1736'. [ 321.037387][T10432] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1738'. [ 321.073957][T10434] netlink: 'syz.2.1740': attribute type 21 has an invalid length. [ 321.175255][T10436] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1741'. [ 321.201555][T10436] FAULT_INJECTION: forcing a failure. [ 321.201555][T10436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.221491][T10436] CPU: 1 PID: 10436 Comm: syz.1.1741 Not tainted syzkaller #0 [ 321.229115][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.239279][T10436] Call Trace: [ 321.242572][T10436] [ 321.245523][T10436] dump_stack_lvl+0x16c/0x230 [ 321.250306][T10436] ? show_regs_print_info+0x20/0x20 [ 321.255811][T10436] ? load_image+0x3b0/0x3b0 [ 321.260349][T10436] ? __might_fault+0xaa/0x120 [ 321.265397][T10436] ? __lock_acquire+0x7c80/0x7c80 [ 321.270614][T10436] should_fail_ex+0x39d/0x4d0 [ 321.275488][T10436] _copy_from_user+0x2f/0xe0 [ 321.280103][T10436] ___sys_sendmsg+0x159/0x290 [ 321.285131][T10436] ? __sys_sendmsg+0x270/0x270 [ 321.290314][T10436] ? __lock_acquire+0x7c80/0x7c80 [ 321.295464][T10436] __se_sys_sendmsg+0x1a5/0x270 [ 321.300545][T10436] ? __x64_sys_sendmsg+0x80/0x80 [ 321.305512][T10436] ? lockdep_hardirqs_on+0x98/0x150 [ 321.310896][T10436] do_syscall_64+0x55/0xb0 [ 321.315602][T10436] ? clear_bhb_loop+0x40/0x90 [ 321.320467][T10436] ? clear_bhb_loop+0x40/0x90 [ 321.325329][T10436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.331683][T10436] RIP: 0033:0x7f5325b8ebe9 [ 321.336385][T10436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.356644][T10436] RSP: 002b:00007f5326a4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.365450][T10436] RAX: ffffffffffffffda RBX: 00007f5325db5fa0 RCX: 00007f5325b8ebe9 [ 321.373700][T10436] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 321.382048][T10436] RBP: 00007f5326a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 321.390494][T10436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.398959][T10436] R13: 00007f5325db6038 R14: 00007f5325db5fa0 R15: 00007ffccf224ad8 [ 321.407751][T10436] [ 321.742950][T10444] syzkaller0: entered promiscuous mode [ 321.748938][T10444] syzkaller0: entered allmulticast mode [ 324.094646][T10455] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1749'. [ 324.106876][T10457] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1750'. [ 324.294218][T10463] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1753'. [ 324.528875][T10469] FAULT_INJECTION: forcing a failure. [ 324.528875][T10469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.551127][T10469] CPU: 0 PID: 10469 Comm: syz.2.1755 Not tainted syzkaller #0 [ 324.558661][T10469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.569024][T10469] Call Trace: [ 324.572317][T10469] [ 324.575336][T10469] dump_stack_lvl+0x16c/0x230 [ 324.580216][T10469] ? show_regs_print_info+0x20/0x20 [ 324.585797][T10469] ? load_image+0x3b0/0x3b0 [ 324.590807][T10469] ? __might_fault+0xaa/0x120 [ 324.595984][T10469] ? __lock_acquire+0x7c80/0x7c80 [ 324.601135][T10469] should_fail_ex+0x39d/0x4d0 [ 324.605926][T10469] _copy_from_user+0x2f/0xe0 [ 324.610550][T10469] ___sys_sendmsg+0x159/0x290 [ 324.615276][T10469] ? __sys_sendmsg+0x270/0x270 [ 324.620400][T10469] ? seqcount_lockdep_reader_access+0x160/0x1c0 [ 324.626760][T10469] __se_sys_sendmsg+0x1a5/0x270 [ 324.631666][T10469] ? perf_trace_preemptirq_template+0x281/0x340 [ 324.637936][T10469] ? __x64_sys_sendmsg+0x80/0x80 [ 324.643087][T10469] ? lockdep_hardirqs_on+0x98/0x150 [ 324.648494][T10469] do_syscall_64+0x55/0xb0 [ 324.653211][T10469] ? clear_bhb_loop+0x40/0x90 [ 324.657996][T10469] ? clear_bhb_loop+0x40/0x90 [ 324.662770][T10469] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.669407][T10469] RIP: 0033:0x7f2f1f38ebe9 [ 324.674032][T10469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.694021][T10469] RSP: 002b:00007f2f20204038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.702650][T10469] RAX: ffffffffffffffda RBX: 00007f2f1f5b5fa0 RCX: 00007f2f1f38ebe9 [ 324.710887][T10469] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000006 [ 324.719085][T10469] RBP: 00007f2f20204090 R08: 0000000000000000 R09: 0000000000000000 [ 324.727077][T10469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.735326][T10469] R13: 00007f2f1f5b6038 R14: 00007f2f1f5b5fa0 R15: 00007ffe9060ab38 [ 324.743507][T10469] [ 325.018260][T10480] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1759'. [ 325.234710][T10483] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1760'. [ 325.843060][T10490] netlink: 'syz.2.1764': attribute type 16 has an invalid length. [ 325.877771][T10490] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1764'. [ 325.960460][T10504] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1767'. [ 325.965105][T10503] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1769'. [ 326.318119][T10513] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1772'. [ 326.386864][T10517] FAULT_INJECTION: forcing a failure. [ 326.386864][T10517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.414869][T10517] CPU: 1 PID: 10517 Comm: syz.2.1774 Not tainted syzkaller #0 [ 326.422581][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.432941][T10517] Call Trace: [ 326.436253][T10517] [ 326.439215][T10517] dump_stack_lvl+0x16c/0x230 [ 326.444120][T10517] ? show_regs_print_info+0x20/0x20 [ 326.449360][T10517] ? load_image+0x3b0/0x3b0 [ 326.453988][T10517] ? __might_fault+0xaa/0x120 [ 326.458757][T10517] ? __lock_acquire+0x7c80/0x7c80 [ 326.464022][T10517] should_fail_ex+0x39d/0x4d0 [ 326.468841][T10517] _copy_from_user+0x2f/0xe0 [ 326.473473][T10517] ___sys_sendmsg+0x159/0x290 [ 326.478458][T10517] ? __sys_sendmsg+0x270/0x270 [ 326.483545][T10517] ? __lock_acquire+0x7c80/0x7c80 [ 326.488910][T10517] __se_sys_sendmsg+0x1a5/0x270 [ 326.493965][T10517] ? __x64_sys_sendmsg+0x80/0x80 [ 326.499043][T10517] ? lockdep_hardirqs_on+0x98/0x150 [ 326.504538][T10517] do_syscall_64+0x55/0xb0 [ 326.508989][T10517] ? clear_bhb_loop+0x40/0x90 [ 326.513960][T10517] ? clear_bhb_loop+0x40/0x90 [ 326.518753][T10517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.524782][T10517] RIP: 0033:0x7f2f1f38ebe9 [ 326.529230][T10517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.549492][T10517] RSP: 002b:00007f2f20204038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.558022][T10517] RAX: ffffffffffffffda RBX: 00007f2f1f5b5fa0 RCX: 00007f2f1f38ebe9 [ 326.566106][T10517] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 326.574361][T10517] RBP: 00007f2f20204090 R08: 0000000000000000 R09: 0000000000000000 [ 326.582786][T10517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.591169][T10517] R13: 00007f2f1f5b6038 R14: 00007f2f1f5b5fa0 R15: 00007ffe9060ab38 [ 326.599735][T10517] [ 327.225360][T10526] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1778'. [ 327.634052][T10535] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1782'. [ 327.825862][T10541] netlink: 'syz.2.1784': attribute type 28 has an invalid length. [ 327.834983][T10541] netlink: 'syz.2.1784': attribute type 29 has an invalid length. [ 327.844393][T10541] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1784'. [ 328.028680][T10547] netlink: 'syz.3.1787': attribute type 10 has an invalid length. [ 328.070234][T10547] batman_adv: batadv0: Adding interface: netdevsim0 [ 328.103154][T10547] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.149300][T10547] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 328.202558][T10555] FAULT_INJECTION: forcing a failure. [ 328.202558][T10555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.216930][T10555] CPU: 0 PID: 10555 Comm: syz.0.1788 Not tainted syzkaller #0 [ 328.224521][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 328.234709][T10555] Call Trace: [ 328.238019][T10555] [ 328.240983][T10555] dump_stack_lvl+0x16c/0x230 [ 328.246228][T10555] ? show_regs_print_info+0x20/0x20 [ 328.251549][T10555] ? load_image+0x3b0/0x3b0 [ 328.256098][T10555] ? __lock_acquire+0x7c80/0x7c80 [ 328.261596][T10555] ? snprintf+0xdb/0x120 [ 328.265884][T10555] should_fail_ex+0x39d/0x4d0 [ 328.270960][T10555] _copy_to_user+0x2f/0xa0 [ 328.275411][T10555] simple_read_from_buffer+0xe7/0x150 [ 328.280834][T10555] proc_fail_nth_read+0x1e3/0x250 [ 328.285922][T10555] ? proc_fault_inject_write+0x340/0x340 [ 328.291845][T10555] ? fsnotify_perm+0x271/0x5e0 [ 328.297067][T10555] ? proc_fault_inject_write+0x340/0x340 [ 328.302864][T10555] vfs_read+0x27e/0x920 [ 328.307079][T10555] ? kernel_read+0x1e0/0x1e0 [ 328.311799][T10555] ? __fget_files+0x28/0x4d0 [ 328.316518][T10555] ? __fget_files+0x44a/0x4d0 [ 328.321326][T10555] ? __fdget_pos+0x2a3/0x330 [ 328.325948][T10555] ? ksys_read+0x75/0x250 [ 328.330409][T10555] ksys_read+0x147/0x250 [ 328.334891][T10555] ? vfs_write+0x940/0x940 [ 328.339433][T10555] ? lockdep_hardirqs_on+0x98/0x150 [ 328.344686][T10555] do_syscall_64+0x55/0xb0 [ 328.349144][T10555] ? clear_bhb_loop+0x40/0x90 [ 328.353862][T10555] ? clear_bhb_loop+0x40/0x90 [ 328.358580][T10555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.364895][T10555] RIP: 0033:0x7fe54918d5fc [ 328.369383][T10555] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 328.389388][T10555] RSP: 002b:00007fe54a05b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 328.398300][T10555] RAX: ffffffffffffffda RBX: 00007fe5493b6180 RCX: 00007fe54918d5fc [ 328.406491][T10555] RDX: 000000000000000f RSI: 00007fe54a05b0a0 RDI: 0000000000000006 [ 328.414626][T10555] RBP: 00007fe54a05b090 R08: 0000000000000000 R09: 0000000000000000 [ 328.422739][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.430795][T10555] R13: 00007fe5493b6218 R14: 00007fe5493b6180 R15: 00007ffc58259928 [ 328.439125][T10555] [ 328.603101][T10554] netlink: 'syz.2.1789': attribute type 25 has an invalid length. [ 328.621859][T10554] netlink: 'syz.2.1789': attribute type 16 has an invalid length. [ 328.630108][T10554] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1789'. [ 329.773113][T10577] netlink: 'syz.3.1797': attribute type 22 has an invalid length. [ 329.807324][T10580] netlink: 'syz.1.1798': attribute type 21 has an invalid length. [ 330.417130][T10587] netlink: 'syz.0.1800': attribute type 16 has an invalid length. [ 330.425776][T10587] __nla_validate_parse: 3 callbacks suppressed [ 330.425791][T10587] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1800'. [ 330.443478][T10592] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1802'. [ 330.453884][T10590] netlink: 'syz.1.1801': attribute type 25 has an invalid length. [ 330.482516][T10590] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1801'. [ 330.938277][T10606] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1807'. [ 331.006395][T10612] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1808'. [ 331.421718][T10617] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1811'. [ 331.772680][T10619] validate_nla: 1 callbacks suppressed [ 331.772717][T10619] netlink: 'syz.3.1812': attribute type 16 has an invalid length. [ 331.797513][T10619] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1812'. [ 332.224534][T10630] netlink: 'syz.2.1818': attribute type 16 has an invalid length. [ 332.233815][T10630] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1818'. [ 332.396820][T10638] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1819'. [ 332.601183][T10644] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1822'. [ 332.909462][T10654] netlink: 'syz.3.1825': attribute type 16 has an invalid length. [ 333.929728][T10672] netlink: 'syz.0.1833': attribute type 28 has an invalid length. [ 333.947465][T10672] netlink: 'syz.0.1833': attribute type 29 has an invalid length. [ 334.489525][T10681] netlink: 'syz.2.1837': attribute type 16 has an invalid length. [ 335.615137][T10706] __nla_validate_parse: 6 callbacks suppressed [ 335.615158][T10706] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1844'. [ 336.050205][T10719] netlink: 'syz.3.1845': attribute type 25 has an invalid length. [ 336.083961][T10719] netlink: 'syz.3.1845': attribute type 16 has an invalid length. [ 336.096660][T10719] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1845'. [ 336.381302][T10725] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1848'. [ 336.527219][T10729] netlink: 'syz.1.1849': attribute type 16 has an invalid length. [ 336.538060][T10729] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1849'. [ 337.088722][T10739] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1854'. [ 337.259320][T10743] netlink: 'syz.0.1856': attribute type 10 has an invalid length. [ 337.277634][T10743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1856'. [ 337.310464][T10744] netlink: 'syz.0.1856': attribute type 3 has an invalid length. [ 337.334884][T10744] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1856'. [ 337.463652][T10743] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1856'. [ 338.002365][T10756] netlink: 'syz.1.1860': attribute type 10 has an invalid length. [ 338.013479][T10756] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.060879][T10756] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.068184][T10756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.089300][T10756] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 338.156547][T10762] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1862'. [ 338.802444][T10765] netlink: 'syz.3.1864': attribute type 16 has an invalid length. [ 338.884465][T10765] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1864'. [ 339.202037][T10776] syz.3.1869 uses obsolete (PF_INET,SOCK_PACKET) [ 339.353910][T10780] netlink: 'syz.1.1870': attribute type 10 has an invalid length. [ 339.378435][T10780] netlink: 'syz.1.1870': attribute type 3 has an invalid length. [ 340.094951][T10796] netlink: 'syz.0.1876': attribute type 2 has an invalid length. [ 340.780899][T10815] netlink: 'syz.3.1883': attribute type 10 has an invalid length. [ 340.795384][T10815] __nla_validate_parse: 6 callbacks suppressed [ 340.795402][T10815] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1883'. [ 340.818258][T10815] netlink: 'syz.3.1883': attribute type 3 has an invalid length. [ 340.826424][T10815] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1883'. [ 340.939126][T10820] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1883'. [ 341.093915][T10822] netlink: 'syz.1.1885': attribute type 22 has an invalid length. [ 341.127544][T10822] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.1885'. [ 341.712687][T10834] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1888'. [ 341.996043][T10840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1889'. [ 342.174629][T10848] FAULT_INJECTION: forcing a failure. [ 342.174629][T10848] name failslab, interval 1, probability 0, space 0, times 0 [ 342.188195][T10848] CPU: 1 PID: 10848 Comm: syz.0.1895 Not tainted syzkaller #0 [ 342.196054][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.207028][T10848] Call Trace: [ 342.209488][T10843] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1893'. [ 342.210497][T10848] [ 342.210534][T10848] dump_stack_lvl+0x16c/0x230 [ 342.210569][T10848] ? show_regs_print_info+0x20/0x20 [ 342.232913][T10848] ? load_image+0x3b0/0x3b0 [ 342.237637][T10848] should_fail_ex+0x39d/0x4d0 [ 342.242435][T10848] should_failslab+0x9/0x20 [ 342.247511][T10848] slab_pre_alloc_hook+0x59/0x310 [ 342.252789][T10848] kmem_cache_alloc+0x5a/0x2e0 [ 342.258496][T10848] ? radix_tree_node_alloc+0x7e/0x3a0 [ 342.264083][T10848] radix_tree_node_alloc+0x7e/0x3a0 [ 342.269524][T10848] idr_get_free+0x2b3/0xa60 [ 342.274201][T10848] idr_alloc_cyclic+0x1a2/0x530 [ 342.279591][T10848] ? idr_alloc+0x2c0/0x2c0 [ 342.284308][T10848] ? do_raw_spin_lock+0x121/0x2c0 [ 342.289462][T10848] ? bpf_map_alloc_id+0x21/0xd0 [ 342.294712][T10848] bpf_map_alloc_id+0x40/0xd0 [ 342.299775][T10848] map_create+0xccc/0x1110 [ 342.304844][T10848] ? security_bpf+0x7e/0xa0 [ 342.309530][T10848] __sys_bpf+0x5f0/0x800 [ 342.313806][T10848] ? bpf_link_show_fdinfo+0x350/0x350 [ 342.319647][T10848] ? lock_chain_count+0x20/0x20 [ 342.324517][T10848] __x64_sys_bpf+0x7c/0x90 [ 342.329653][T10848] do_syscall_64+0x55/0xb0 [ 342.334103][T10848] ? clear_bhb_loop+0x40/0x90 [ 342.338821][T10848] ? clear_bhb_loop+0x40/0x90 [ 342.343710][T10848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 342.350091][T10848] RIP: 0033:0x7fe54918ebe9 [ 342.354517][T10848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.374317][T10848] RSP: 002b:00007fe54a09d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.383442][T10848] RAX: ffffffffffffffda RBX: 00007fe5493b5fa0 RCX: 00007fe54918ebe9 [ 342.391671][T10848] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 0000000000000000 [ 342.399831][T10848] RBP: 00007fe54a09d090 R08: 0000000000000000 R09: 0000000000000000 [ 342.408866][T10848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.417374][T10848] R13: 00007fe5493b6038 R14: 00007fe5493b5fa0 R15: 00007ffc58259928 [ 342.425617][T10848] [ 342.745406][T10854] validate_nla: 3 callbacks suppressed [ 342.746389][T10854] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 342.766495][T10854] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1898'. [ 342.857132][T10854] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 342.881464][T10858] netlink: 'syz.2.1900': attribute type 2 has an invalid length. [ 342.904481][T10858] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1900'. [ 342.917309][T10861] netlink: 'syz.3.1901': attribute type 22 has an invalid length. [ 342.950005][T10861] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.1901'. [ 343.191993][T10866] netlink: 'syz.1.1910': attribute type 2 has an invalid length. [ 343.205617][T10854] syz.0.1898 (10854) used greatest stack depth: 20136 bytes left [ 343.348002][T10869] netlink: 'syz.2.1902': attribute type 10 has an invalid length. [ 343.429058][T10869] netlink: 'syz.2.1902': attribute type 3 has an invalid length. [ 343.520402][T10872] FAULT_INJECTION: forcing a failure. [ 343.520402][T10872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.557334][T10872] CPU: 1 PID: 10872 Comm: syz.0.1903 Not tainted syzkaller #0 [ 343.565066][T10872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.575341][T10872] Call Trace: [ 343.578701][T10872] [ 343.581772][T10872] dump_stack_lvl+0x16c/0x230 [ 343.586945][T10872] ? show_regs_print_info+0x20/0x20 [ 343.592370][T10872] ? load_image+0x3b0/0x3b0 [ 343.597089][T10872] ? __might_fault+0xaa/0x120 [ 343.601980][T10872] ? __lock_acquire+0x7c80/0x7c80 [ 343.607277][T10872] ? __virt_addr_valid+0x18c/0x540 [ 343.612535][T10872] should_fail_ex+0x39d/0x4d0 [ 343.617444][T10872] _copy_from_user+0x2f/0xe0 [ 343.622242][T10872] bpf_prog_test_run_skb+0x259/0x11c0 [ 343.627830][T10872] ? __fget_files+0x28/0x4d0 [ 343.632645][T10872] ? __fget_files+0x44a/0x4d0 [ 343.637547][T10872] ? cpu_online+0x60/0x60 [ 343.642013][T10872] bpf_prog_test_run+0x321/0x390 [ 343.646978][T10872] __sys_bpf+0x440/0x800 [ 343.651328][T10872] ? bpf_link_show_fdinfo+0x350/0x350 [ 343.656738][T10872] ? lock_chain_count+0x20/0x20 [ 343.661622][T10872] __x64_sys_bpf+0x7c/0x90 [ 343.666052][T10872] do_syscall_64+0x55/0xb0 [ 343.670590][T10872] ? clear_bhb_loop+0x40/0x90 [ 343.675364][T10872] ? clear_bhb_loop+0x40/0x90 [ 343.680237][T10872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.686142][T10872] RIP: 0033:0x7fe54918ebe9 [ 343.690658][T10872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.710800][T10872] RSP: 002b:00007fe54a09d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.719765][T10872] RAX: ffffffffffffffda RBX: 00007fe5493b5fa0 RCX: 00007fe54918ebe9 [ 343.727756][T10872] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 343.735861][T10872] RBP: 00007fe54a09d090 R08: 0000000000000000 R09: 0000000000000000 [ 343.744114][T10872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.752093][T10872] R13: 00007fe5493b6038 R14: 00007fe5493b5fa0 R15: 00007ffc58259928 [ 343.760173][T10872] [ 344.384077][T10883] netlink: 'syz.2.1907': attribute type 16 has an invalid length. [ 344.483471][T10893] netlink: 'syz.3.1913': attribute type 2 has an invalid length. [ 344.624663][T10897] netlink: 'syz.0.1914': attribute type 22 has an invalid length. [ 344.727891][T10899] netlink: 'syz.2.1915': attribute type 21 has an invalid length. [ 345.962314][T10936] __nla_validate_parse: 12 callbacks suppressed [ 345.962336][T10936] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.1930'. [ 346.501338][T10946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1932'. [ 346.515974][T10946] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1932'. [ 346.731272][T10950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1934'. [ 346.839136][T10948] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1933'. [ 347.540048][T10970] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.1942'. [ 348.208199][T10979] validate_nla: 14 callbacks suppressed [ 348.208285][T10979] netlink: 'syz.1.1946': attribute type 16 has an invalid length. [ 348.248862][T10979] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1946'. [ 349.032640][T10992] netlink: 'syz.0.1950': attribute type 16 has an invalid length. [ 349.107732][T10992] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1950'. [ 349.519628][T11011] netlink: 'syz.1.1960': attribute type 21 has an invalid length. [ 349.543544][T11011] netlink: 'syz.1.1960': attribute type 1 has an invalid length. [ 349.552952][T11011] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.1960'. [ 349.972276][T11024] netlink: 'syz.3.1965': attribute type 16 has an invalid length. [ 349.980830][T11024] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1965'. [ 350.033924][T11026] FAULT_INJECTION: forcing a failure. [ 350.033924][T11026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.047866][T11026] CPU: 0 PID: 11026 Comm: syz.2.1966 Not tainted syzkaller #0 [ 350.055505][T11026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.065783][T11026] Call Trace: [ 350.069200][T11026] [ 350.072171][T11026] dump_stack_lvl+0x16c/0x230 [ 350.077267][T11026] ? show_regs_print_info+0x20/0x20 [ 350.082610][T11026] ? load_image+0x3b0/0x3b0 [ 350.087140][T11026] ? __might_fault+0xaa/0x120 [ 350.091858][T11026] ? __lock_acquire+0x7c80/0x7c80 [ 350.097008][T11026] ? __virt_addr_valid+0x18c/0x540 [ 350.102183][T11026] should_fail_ex+0x39d/0x4d0 [ 350.106893][T11026] _copy_from_user+0x2f/0xe0 [ 350.111535][T11026] ___bpf_copy_key+0xb0/0x100 [ 350.116250][T11026] map_update_elem+0x260/0x700 [ 350.121076][T11026] __sys_bpf+0x652/0x800 [ 350.125557][T11026] ? bpf_link_show_fdinfo+0x350/0x350 [ 350.131071][T11026] ? lock_chain_count+0x20/0x20 [ 350.136333][T11026] __x64_sys_bpf+0x7c/0x90 [ 350.141503][T11026] do_syscall_64+0x55/0xb0 [ 350.145975][T11026] ? clear_bhb_loop+0x40/0x90 [ 350.150884][T11026] ? clear_bhb_loop+0x40/0x90 [ 350.155822][T11026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.161909][T11026] RIP: 0033:0x7f2f1f38ebe9 [ 350.166562][T11026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.187196][T11026] RSP: 002b:00007f2f20204038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.196123][T11026] RAX: ffffffffffffffda RBX: 00007f2f1f5b5fa0 RCX: 00007f2f1f38ebe9 [ 350.204411][T11026] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000002 [ 350.212405][T11026] RBP: 00007f2f20204090 R08: 0000000000000000 R09: 0000000000000000 [ 350.220501][T11026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.228640][T11026] R13: 00007f2f1f5b6038 R14: 00007f2f1f5b5fa0 R15: 00007ffe9060ab38 [ 350.236942][T11026] [ 351.105687][T11060] FAULT_INJECTION: forcing a failure. [ 351.105687][T11060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.131073][T11060] CPU: 0 PID: 11060 Comm: syz.2.1979 Not tainted syzkaller #0 [ 351.135396][T11059] netlink: 'syz.0.1976': attribute type 16 has an invalid length. [ 351.138930][T11060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.138947][T11060] Call Trace: [ 351.138956][T11060] [ 351.138965][T11060] dump_stack_lvl+0x16c/0x230 [ 351.138999][T11060] ? show_regs_print_info+0x20/0x20 [ 351.139022][T11060] ? load_image+0x3b0/0x3b0 [ 351.139044][T11060] ? __might_fault+0xaa/0x120 [ 351.139064][T11060] ? __lock_acquire+0x7c80/0x7c80 [ 351.139092][T11060] should_fail_ex+0x39d/0x4d0 [ 351.139132][T11060] _copy_from_user+0x2f/0xe0 [ 351.139155][T11060] ____sys_sendmsg+0x30d/0x950 [ 351.139188][T11060] ? __sys_sendmsg_sock+0x30/0x30 [ 351.147763][T11059] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1976'. [ 351.157706][T11060] ? __import_iovec+0x3fa/0x860 [ 351.157757][T11060] ? import_iovec+0x73/0xa0 [ 351.157785][T11060] ___sys_sendmsg+0x220/0x290 [ 351.157816][T11060] ? __sys_sendmsg+0x270/0x270 [ 351.157860][T11060] ? __lock_acquire+0x7c80/0x7c80 [ 351.241835][T11060] __se_sys_sendmsg+0x1a5/0x270 [ 351.246805][T11060] ? __x64_sys_sendmsg+0x80/0x80 [ 351.251940][T11060] ? lockdep_hardirqs_on+0x98/0x150 [ 351.257416][T11060] do_syscall_64+0x55/0xb0 [ 351.262927][T11060] ? clear_bhb_loop+0x40/0x90 [ 351.267646][T11060] ? clear_bhb_loop+0x40/0x90 [ 351.272390][T11060] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.278315][T11060] RIP: 0033:0x7f2f1f38ebe9 [ 351.283266][T11060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.304325][T11060] RSP: 002b:00007f2f201e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.313188][T11060] RAX: ffffffffffffffda RBX: 00007f2f1f5b6090 RCX: 00007f2f1f38ebe9 [ 351.321513][T11060] RDX: 0000000020004065 RSI: 0000200000000400 RDI: 0000000000000003 [ 351.329679][T11060] RBP: 00007f2f201e3090 R08: 0000000000000000 R09: 0000000000000000 [ 351.338195][T11060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.346702][T11060] R13: 00007f2f1f5b6128 R14: 00007f2f1f5b6090 R15: 00007ffe9060ab38 [ 351.354966][T11060] [ 352.206774][T11068] netlink: 'syz.0.1990': attribute type 16 has an invalid length. [ 352.220577][T11068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1990'. [ 352.234322][T11079] netlink: 'syz.2.1986': attribute type 10 has an invalid length. [ 352.246009][T11079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1986'. [ 352.282062][T11079] netlink: 'syz.2.1986': attribute type 3 has an invalid length. [ 352.291962][T11079] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1986'. [ 352.354314][T11079] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1986'. [ 352.921338][T11096] netlink: 'syz.3.1994': attribute type 16 has an invalid length. [ 352.936142][T11096] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1994'. [ 353.248772][T11102] netlink: 'syz.0.1997': attribute type 16 has an invalid length. [ 353.265823][T11102] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1997'. [ 353.325753][T11115] netlink: 'syz.3.2000': attribute type 3 has an invalid length. [ 353.339926][T11115] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2000'. [ 353.360177][T11112] netlink: 'syz.3.2000': attribute type 10 has an invalid length. [ 353.368825][T11112] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2000'. [ 353.385888][T11112] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2000'. [ 353.502065][T11118] FAULT_INJECTION: forcing a failure. [ 353.502065][T11118] name failslab, interval 1, probability 0, space 0, times 0 [ 353.538131][T11118] CPU: 1 PID: 11118 Comm: syz.1.2001 Not tainted syzkaller #0 [ 353.546406][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 353.556686][T11118] Call Trace: [ 353.560012][T11118] [ 353.562974][T11118] dump_stack_lvl+0x16c/0x230 [ 353.567720][T11118] ? show_regs_print_info+0x20/0x20 [ 353.572952][T11118] ? load_image+0x3b0/0x3b0 [ 353.577487][T11118] ? __might_sleep+0xe0/0xe0 [ 353.582121][T11118] ? __lock_acquire+0x7c80/0x7c80 [ 353.587228][T11118] should_fail_ex+0x39d/0x4d0 [ 353.592067][T11118] should_failslab+0x9/0x20 [ 353.596904][T11118] slab_pre_alloc_hook+0x59/0x310 [ 353.602007][T11118] ? bpf_raw_tp_link_attach+0x23a/0x560 [ 353.607695][T11118] __kmem_cache_alloc_node+0x53/0x260 [ 353.613275][T11118] ? bpf_raw_tp_link_attach+0x23a/0x560 [ 353.618842][T11118] kmalloc_trace+0x2a/0xe0 [ 353.623539][T11118] bpf_raw_tp_link_attach+0x23a/0x560 [ 353.629020][T11118] ? bpf_insn_prepare_dump+0x840/0x840 [ 353.634771][T11118] bpf_raw_tracepoint_open+0x197/0x210 [ 353.640974][T11118] __sys_bpf+0x364/0x800 [ 353.645418][T11118] ? bpf_link_show_fdinfo+0x350/0x350 [ 353.651178][T11118] ? lock_chain_count+0x20/0x20 [ 353.656078][T11118] __x64_sys_bpf+0x7c/0x90 [ 353.660610][T11118] do_syscall_64+0x55/0xb0 [ 353.665528][T11118] ? clear_bhb_loop+0x40/0x90 [ 353.670315][T11118] ? clear_bhb_loop+0x40/0x90 [ 353.675012][T11118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.681031][T11118] RIP: 0033:0x7f5325b8ebe9 [ 353.685633][T11118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.705883][T11118] RSP: 002b:00007f5326a4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.714946][T11118] RAX: ffffffffffffffda RBX: 00007f5325db5fa0 RCX: 00007f5325b8ebe9 [ 353.723390][T11118] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 353.731471][T11118] RBP: 00007f5326a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 353.739623][T11118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.747881][T11118] R13: 00007f5325db6038 R14: 00007f5325db5fa0 R15: 00007ffccf224ad8 [ 353.756385][T11118] [ 354.206757][T11132] netlink: 'syz.2.2008': attribute type 16 has an invalid length. [ 354.469707][T11135] netlink: 'syz.3.2010': attribute type 16 has an invalid length. [ 354.497513][T11144] netlink: 'syz.0.2012': attribute type 10 has an invalid length. [ 354.512886][T11144] netlink: 'syz.0.2012': attribute type 3 has an invalid length. [ 354.956458][T11147] netlink: 'syz.2.2011': attribute type 16 has an invalid length. [ 355.044578][T11151] netlink: 'syz.1.2013': attribute type 16 has an invalid length. [ 355.535553][T11164] netlink: 'syz.2.2019': attribute type 16 has an invalid length. [ 355.549491][T11166] FAULT_INJECTION: forcing a failure. [ 355.549491][T11166] name failslab, interval 1, probability 0, space 0, times 0 [ 355.580754][T11166] CPU: 0 PID: 11166 Comm: syz.3.2021 Not tainted syzkaller #0 [ 355.589868][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.600405][T11166] Call Trace: [ 355.603718][T11166] [ 355.606870][T11166] dump_stack_lvl+0x16c/0x230 [ 355.611606][T11166] ? show_regs_print_info+0x20/0x20 [ 355.616843][T11166] ? load_image+0x3b0/0x3b0 [ 355.621381][T11166] ? __might_sleep+0xe0/0xe0 [ 355.626282][T11166] ? __lock_acquire+0x7c80/0x7c80 [ 355.631361][T11166] should_fail_ex+0x39d/0x4d0 [ 355.636201][T11166] should_failslab+0x9/0x20 [ 355.640849][T11166] slab_pre_alloc_hook+0x59/0x310 [ 355.646023][T11166] ? tomoyo_encode+0x28b/0x540 [ 355.650914][T11166] ? tomoyo_encode+0x28b/0x540 [ 355.655895][T11166] __kmem_cache_alloc_node+0x53/0x260 [ 355.661572][T11166] ? tomoyo_encode+0x28b/0x540 [ 355.666375][T11166] __kmalloc+0xa4/0x240 [ 355.670744][T11166] tomoyo_encode+0x28b/0x540 [ 355.675548][T11166] tomoyo_realpath_from_path+0x592/0x5d0 [ 355.681322][T11166] tomoyo_path_number_perm+0x1ea/0x590 [ 355.686987][T11166] ? tomoyo_path_number_perm+0x1ba/0x590 [ 355.692856][T11166] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 355.698545][T11166] ? ksys_write+0x1c1/0x250 [ 355.703229][T11166] ? __fget_files+0x28/0x4d0 [ 355.707965][T11166] security_file_ioctl+0x70/0xa0 [ 355.713120][T11166] __se_sys_ioctl+0x48/0x170 [ 355.717933][T11166] do_syscall_64+0x55/0xb0 [ 355.722728][T11166] ? clear_bhb_loop+0x40/0x90 [ 355.727434][T11166] ? clear_bhb_loop+0x40/0x90 [ 355.732254][T11166] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 355.738282][T11166] RIP: 0033:0x7f14abf8ebe9 [ 355.742810][T11166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.762983][T11166] RSP: 002b:00007f14acd11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.771520][T11166] RAX: ffffffffffffffda RBX: 00007f14ac1b5fa0 RCX: 00007f14abf8ebe9 [ 355.779865][T11166] RDX: 0000200000000000 RSI: 0000000000008918 RDI: 0000000000000003 [ 355.787954][T11166] RBP: 00007f14acd11090 R08: 0000000000000000 R09: 0000000000000000 [ 355.796031][T11166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.804027][T11166] R13: 00007f14ac1b6038 R14: 00007f14ac1b5fa0 R15: 00007ffdc7b37c98 [ 355.812129][T11166] [ 355.887960][T11166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 356.664645][T11197] __nla_validate_parse: 13 callbacks suppressed [ 356.664663][T11197] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2032'. [ 356.699056][T11193] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2031'. [ 356.822675][T11202] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2041'. [ 356.964876][T11207] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2036'. [ 356.982217][T11207] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2036'. [ 357.047929][T11210] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2036'. [ 357.355214][T11208] team0: Port device wlan1 added [ 357.427074][T11209] syz.2.2035 (11209) used obsolete PPPIOCDETACH ioctl [ 357.437100][T11211] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2033'. [ 357.464046][T11204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.608262][T11208] syz.2.2035 (11208) used greatest stack depth: 18984 bytes left [ 357.679214][T11217] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2038'. [ 357.899056][T11215] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2037'. [ 358.085234][T11220] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2040'. [ 358.964059][T11232] validate_nla: 13 callbacks suppressed [ 358.964088][T11232] netlink: 'syz.0.2044': attribute type 16 has an invalid length. [ 358.982995][T11236] netlink: 'syz.1.2045': attribute type 2 has an invalid length. [ 359.092876][T11238] netlink: 'syz.2.2046': attribute type 10 has an invalid length. [ 359.104005][T11238] netlink: 'syz.2.2046': attribute type 3 has an invalid length. [ 359.344512][T11244] netlink: 'syz.0.2055': attribute type 16 has an invalid length. [ 359.541899][T11252] netlink: 'syz.3.2051': attribute type 21 has an invalid length. [ 359.561698][T11246] netlink: 'syz.2.2047': attribute type 16 has an invalid length. [ 359.885365][T11255] netlink: 'syz.0.2052': attribute type 16 has an invalid length. [ 359.931903][T11262] netlink: 'syz.3.2056': attribute type 2 has an invalid length. [ 360.062340][T11264] netlink: 'syz.3.2057': attribute type 10 has an invalid length. [ 361.169119][T11289] FAULT_INJECTION: forcing a failure. [ 361.169119][T11289] name failslab, interval 1, probability 0, space 0, times 0 [ 361.275994][T11289] CPU: 0 PID: 11289 Comm: syz.1.2064 Not tainted syzkaller #0 [ 361.283703][T11289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 361.295192][T11289] Call Trace: [ 361.298569][T11289] [ 361.301715][T11289] dump_stack_lvl+0x16c/0x230 [ 361.307022][T11289] ? show_regs_print_info+0x20/0x20 [ 361.312600][T11289] ? load_image+0x3b0/0x3b0 [ 361.317660][T11289] ? __local_bh_enable_ip+0x12e/0x1c0 [ 361.323256][T11289] ? lockdep_hardirqs_on+0x98/0x150 [ 361.329036][T11289] ? __local_bh_enable_ip+0x12e/0x1c0 [ 361.334522][T11289] should_fail_ex+0x39d/0x4d0 [ 361.339691][T11289] should_failslab+0x9/0x20 [ 361.344429][T11289] slab_pre_alloc_hook+0x59/0x310 [ 361.349747][T11289] ? sctp_get_port_local+0xe47/0x1610 [ 361.355225][T11289] ? sctp_add_bind_addr+0x8c/0x360 [ 361.360526][T11289] __kmem_cache_alloc_node+0x53/0x260 [ 361.366016][T11289] ? sctp_add_bind_addr+0x8c/0x360 [ 361.371405][T11289] kmalloc_trace+0x2a/0xe0 [ 361.375931][T11289] sctp_add_bind_addr+0x8c/0x360 [ 361.380989][T11289] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 361.386584][T11289] sctp_do_bind+0x614/0x9a0 [ 361.391462][T11289] sctp_connect_new_asoc+0x256/0x690 [ 361.397251][T11289] ? __sctp_connect+0xd20/0xd20 [ 361.402594][T11289] ? __local_bh_enable_ip+0x12e/0x1c0 [ 361.408102][T11289] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 361.413754][T11289] ? security_sctp_bind_connect+0x89/0xb0 [ 361.419924][T11289] sctp_sendmsg+0x155c/0x27e0 [ 361.424719][T11289] ? sctp_getsockopt+0xb60/0xb60 [ 361.429931][T11289] ? perf_trace_lock+0xf7/0x380 [ 361.434837][T11289] ? aa_sk_perm+0x7fc/0x930 [ 361.439486][T11289] ? aa_af_perm+0x2b0/0x2b0 [ 361.444022][T11289] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 361.450729][T11289] ? sock_rps_record_flow+0x19/0x400 [ 361.456115][T11289] ? inet_send_prepare+0x260/0x260 [ 361.461240][T11289] ? inet_sendmsg+0xe9/0x2f0 [ 361.465940][T11289] ? inet_send_prepare+0x260/0x260 [ 361.471444][T11289] ____sys_sendmsg+0x5bf/0x950 [ 361.476312][T11289] ? __asan_memset+0x22/0x40 [ 361.481134][T11289] ? __sys_sendmsg_sock+0x30/0x30 [ 361.486341][T11289] ? __import_iovec+0x5f2/0x860 [ 361.491336][T11289] ? import_iovec+0x73/0xa0 [ 361.495993][T11289] ___sys_sendmsg+0x220/0x290 [ 361.501080][T11289] ? __sys_sendmsg+0x270/0x270 [ 361.505910][T11289] ? __lock_acquire+0x7c80/0x7c80 [ 361.511067][T11289] __se_sys_sendmsg+0x1a5/0x270 [ 361.515989][T11289] ? __x64_sys_sendmsg+0x80/0x80 [ 361.520955][T11289] ? lockdep_hardirqs_on+0x98/0x150 [ 361.526344][T11289] do_syscall_64+0x55/0xb0 [ 361.530947][T11289] ? clear_bhb_loop+0x40/0x90 [ 361.535739][T11289] ? clear_bhb_loop+0x40/0x90 [ 361.540526][T11289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.546440][T11289] RIP: 0033:0x7f5325b8ebe9 [ 361.550966][T11289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.571297][T11289] RSP: 002b:00007f5326a2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.580347][T11289] RAX: ffffffffffffffda RBX: 00007f5325db6090 RCX: 00007f5325b8ebe9 [ 361.588516][T11289] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000009 [ 361.596675][T11289] RBP: 00007f5326a2b090 R08: 0000000000000000 R09: 0000000000000000 [ 361.604835][T11289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.613213][T11289] R13: 00007f5325db6128 R14: 00007f5325db6090 R15: 00007ffccf224ad8 [ 361.621611][T11289] [ 361.800987][T11292] __nla_validate_parse: 13 callbacks suppressed [ 361.801005][T11292] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2065'. [ 362.103086][T11296] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2076'. [ 362.113429][T11294] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2063'. [ 362.137437][T11299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2066'. [ 362.156489][T11299] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2066'. [ 362.232665][T11303] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2066'. [ 363.031541][T11308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2067'. [ 363.041672][T11306] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2070'. [ 363.538866][T11324] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2079'. [ 363.805425][T11328] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2081'. [ 364.013590][T11333] team0: Port device wlan1 added [ 364.197444][T11332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.232710][T11338] validate_nla: 14 callbacks suppressed [ 364.232749][T11338] netlink: 'syz.1.2084': attribute type 16 has an invalid length. [ 364.464501][T11347] netlink: 'syz.2.2088': attribute type 2 has an invalid length. [ 364.601542][T11352] netlink: 'syz.2.2089': attribute type 21 has an invalid length. [ 364.678436][T11354] FAULT_INJECTION: forcing a failure. [ 364.678436][T11354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.707526][T11354] CPU: 0 PID: 11354 Comm: syz.3.2090 Not tainted syzkaller #0 [ 364.715273][T11354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.725733][T11354] Call Trace: [ 364.729228][T11354] [ 364.732332][T11354] dump_stack_lvl+0x16c/0x230 [ 364.737077][T11354] ? show_regs_print_info+0x20/0x20 [ 364.742409][T11354] ? load_image+0x3b0/0x3b0 [ 364.747231][T11354] ? __lock_acquire+0x7c80/0x7c80 [ 364.752475][T11354] ? snprintf+0xdb/0x120 [ 364.756865][T11354] should_fail_ex+0x39d/0x4d0 [ 364.761684][T11354] _copy_to_user+0x2f/0xa0 [ 364.766193][T11354] simple_read_from_buffer+0xe7/0x150 [ 364.771809][T11354] proc_fail_nth_read+0x1e3/0x250 [ 364.776966][T11354] ? proc_fault_inject_write+0x340/0x340 [ 364.782741][T11354] ? fsnotify_perm+0x271/0x5e0 [ 364.787547][T11354] ? proc_fault_inject_write+0x340/0x340 [ 364.793317][T11354] vfs_read+0x27e/0x920 [ 364.797706][T11354] ? kernel_read+0x1e0/0x1e0 [ 364.802709][T11354] ? __fget_files+0x28/0x4d0 [ 364.807516][T11354] ? __fget_files+0x44a/0x4d0 [ 364.812256][T11354] ? __fdget_pos+0x2a3/0x330 [ 364.816884][T11354] ? ksys_read+0x75/0x250 [ 364.821255][T11354] ksys_read+0x147/0x250 [ 364.825548][T11354] ? vfs_write+0x940/0x940 [ 364.830012][T11354] ? lockdep_hardirqs_on+0x98/0x150 [ 364.835566][T11354] do_syscall_64+0x55/0xb0 [ 364.840147][T11354] ? clear_bhb_loop+0x40/0x90 [ 364.845045][T11354] ? clear_bhb_loop+0x40/0x90 [ 364.849867][T11354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.855798][T11354] RIP: 0033:0x7f14abf8d5fc [ 364.860251][T11354] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 364.880062][T11354] RSP: 002b:00007f14acd11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 364.888705][T11354] RAX: ffffffffffffffda RBX: 00007f14ac1b5fa0 RCX: 00007f14abf8d5fc [ 364.896907][T11354] RDX: 000000000000000f RSI: 00007f14acd110a0 RDI: 0000000000000004 [ 364.905114][T11354] RBP: 00007f14acd11090 R08: 0000000000000000 R09: 0000000000000000 [ 364.913308][T11354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.921583][T11354] R13: 00007f14ac1b6038 R14: 00007f14ac1b5fa0 R15: 00007ffdc7b37c98 [ 364.929841][T11354] [ 365.306975][T11366] netlink: 'syz.3.2093': attribute type 3 has an invalid length. [ 365.332673][T11362] netlink: 'syz.3.2093': attribute type 10 has an invalid length. [ 365.417074][T11360] netlink: 'syz.1.2092': attribute type 16 has an invalid length. [ 365.764395][T11374] netlink: 'syz.1.2097': attribute type 2 has an invalid length. [ 365.779587][T11368] netlink: 'syz.0.2095': attribute type 25 has an invalid length. [ 365.843603][T11379] netlink: 'syz.3.2099': attribute type 10 has an invalid length. [ 366.021907][T11386] netlink: 'syz.3.2102': attribute type 21 has an invalid length. [ 366.249478][T11384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.277114][T11384] syz.0.2101 (11384) used greatest stack depth: 18920 bytes left [ 367.092836][T11401] __nla_validate_parse: 12 callbacks suppressed [ 367.092857][T11401] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2106'. [ 367.715343][T11423] FAULT_INJECTION: forcing a failure. [ 367.715343][T11423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.730862][T11423] CPU: 0 PID: 11423 Comm: syz.3.2114 Not tainted syzkaller #0 [ 367.738653][T11423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.749011][T11423] Call Trace: [ 367.752325][T11423] [ 367.755303][T11423] dump_stack_lvl+0x16c/0x230 [ 367.760179][T11423] ? show_regs_print_info+0x20/0x20 [ 367.765434][T11423] ? load_image+0x3b0/0x3b0 [ 367.770162][T11423] ? __might_fault+0xaa/0x120 [ 367.774967][T11423] ? __lock_acquire+0x7c80/0x7c80 [ 367.780050][T11423] should_fail_ex+0x39d/0x4d0 [ 367.784806][T11423] _copy_from_user+0x2f/0xe0 [ 367.789719][T11423] ___sys_sendmsg+0x159/0x290 [ 367.794448][T11423] ? __sys_sendmsg+0x270/0x270 [ 367.799375][T11423] ? seqcount_lockdep_reader_access+0x160/0x1c0 [ 367.806127][T11423] __se_sys_sendmsg+0x1a5/0x270 [ 367.811226][T11423] ? perf_trace_preemptirq_template+0x281/0x340 [ 367.817702][T11423] ? __x64_sys_sendmsg+0x80/0x80 [ 367.822787][T11423] ? lockdep_hardirqs_on+0x98/0x150 [ 367.828069][T11423] do_syscall_64+0x55/0xb0 [ 367.832611][T11423] ? clear_bhb_loop+0x40/0x90 [ 367.837395][T11423] ? clear_bhb_loop+0x40/0x90 [ 367.842198][T11423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 367.848353][T11423] RIP: 0033:0x7f14abf8ebe9 [ 367.853082][T11423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.873277][T11423] RSP: 002b:00007f14acd11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.882088][T11423] RAX: ffffffffffffffda RBX: 00007f14ac1b5fa0 RCX: 00007f14abf8ebe9 [ 367.890119][T11423] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 367.898686][T11423] RBP: 00007f14acd11090 R08: 0000000000000000 R09: 0000000000000000 [ 367.907065][T11423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.915319][T11423] R13: 00007f14ac1b6038 R14: 00007f14ac1b5fa0 R15: 00007ffdc7b37c98 [ 367.923334][T11423] [ 368.064205][T11430] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2117'. [ 368.146364][T11434] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2118'. [ 368.300922][T11440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2120'. [ 368.331298][T11440] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2120'. [ 368.437069][T11440] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2120'. [ 368.978122][T11457] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2129'. [ 369.084704][T11464] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2131'. [ 369.350056][T11473] validate_nla: 16 callbacks suppressed [ 369.350076][T11473] netlink: 'syz.2.2136': attribute type 10 has an invalid length. [ 369.372030][T11473] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2136'. [ 369.387564][T11466] netlink: 'syz.0.2132': attribute type 25 has an invalid length. [ 369.405146][T11473] netlink: 'syz.2.2136': attribute type 3 has an invalid length. [ 369.445797][T11473] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2136'. [ 370.028782][T11478] netlink: 'syz.3.2135': attribute type 25 has an invalid length. [ 370.325237][T11482] netlink: 'syz.0.2138': attribute type 21 has an invalid length. [ 370.684493][T11486] netlink: 'syz.2.2140': attribute type 16 has an invalid length. [ 370.695101][T11490] netlink: 'syz.1.2142': attribute type 2 has an invalid length. [ 370.904376][T11488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.930079][T11497] netlink: 'syz.2.2144': attribute type 10 has an invalid length. [ 371.218314][T11498] netlink: 'syz.1.2145': attribute type 25 has an invalid length. [ 371.245824][T11504] netlink: 'syz.2.2147': attribute type 10 has an invalid length. [ 372.216228][T11522] batadv0: entered promiscuous mode [ 372.605657][T11543] FAULT_INJECTION: forcing a failure. [ 372.605657][T11543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.635838][T11543] CPU: 1 PID: 11543 Comm: syz.1.2161 Not tainted syzkaller #0 [ 372.643399][T11543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.653942][T11543] Call Trace: [ 372.657288][T11543] [ 372.660357][T11543] dump_stack_lvl+0x16c/0x230 [ 372.665452][T11543] ? show_regs_print_info+0x20/0x20 [ 372.670804][T11543] ? load_image+0x3b0/0x3b0 [ 372.675370][T11543] ? __might_fault+0xaa/0x120 [ 372.680253][T11543] ? __lock_acquire+0x7c80/0x7c80 [ 372.685362][T11543] should_fail_ex+0x39d/0x4d0 [ 372.690135][T11543] _copy_from_user+0x2f/0xe0 [ 372.694881][T11543] ___sys_sendmsg+0x159/0x290 [ 372.699923][T11543] ? __sys_sendmsg+0x270/0x270 [ 372.705582][T11543] ? __lock_acquire+0x7c80/0x7c80 [ 372.710725][T11543] __se_sys_sendmsg+0x1a5/0x270 [ 372.715612][T11543] ? __x64_sys_sendmsg+0x80/0x80 [ 372.720779][T11543] ? lockdep_hardirqs_on+0x98/0x150 [ 372.726017][T11543] do_syscall_64+0x55/0xb0 [ 372.731507][T11543] ? clear_bhb_loop+0x40/0x90 [ 372.736393][T11543] ? clear_bhb_loop+0x40/0x90 [ 372.741163][T11543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.747353][T11543] RIP: 0033:0x7f5325b8ebe9 [ 372.751874][T11543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.771940][T11543] RSP: 002b:00007f5326a4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.780555][T11543] RAX: ffffffffffffffda RBX: 00007f5325db5fa0 RCX: 00007f5325b8ebe9 [ 372.788647][T11543] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000c [ 372.796654][T11543] RBP: 00007f5326a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 372.804924][T11543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.813090][T11543] R13: 00007f5325db6038 R14: 00007f5325db5fa0 R15: 00007ffccf224ad8 [ 372.821204][T11543] [ 373.015199][T11550] __nla_validate_parse: 9 callbacks suppressed [ 373.015220][T11550] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.2165'. [ 373.181080][T11557] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2167'. [ 373.901574][T11575] batadv0: entered promiscuous mode [ 373.975768][T11575] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2174'. [ 374.159309][T11588] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2179'. [ 374.367486][T11592] validate_nla: 13 callbacks suppressed [ 374.367504][T11592] netlink: 'syz.0.2181': attribute type 22 has an invalid length. [ 374.382931][T11592] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.2181'. [ 375.637740][T11596] netlink: 'syz.2.2183': attribute type 25 has an invalid length. [ 375.887718][T11621] netlink: 'syz.3.2190': attribute type 21 has an invalid length. [ 375.915056][T11619] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2189'. [ 376.132712][T11624] netlink: 'syz.3.2191': attribute type 10 has an invalid length. [ 376.152827][T11626] netlink: 'syz.2.2199': attribute type 21 has an invalid length. [ 376.456496][T11635] netlink: 'syz.2.2194': attribute type 22 has an invalid length. [ 376.517640][T11635] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2194'. [ 377.048663][T11645] netlink: 'syz.0.2197': attribute type 10 has an invalid length. [ 377.056675][T11645] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2197'. [ 377.149120][T11645] netlink: 'syz.0.2197': attribute type 3 has an invalid length. [ 377.172773][T11645] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2197'. [ 377.215444][T11649] netlink: 'syz.2.2200': attribute type 21 has an invalid length. [ 377.331442][T11645] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2197'. [ 377.640011][T11663] netlink: 'syz.0.2203': attribute type 21 has an invalid length. [ 378.090584][T11675] __nla_validate_parse: 3 callbacks suppressed [ 378.090605][T11675] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2208'. [ 379.129400][T11701] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2218'. [ 379.170434][T11701] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2218'. [ 379.236271][T11701] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2218'. [ 379.381407][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.394279][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.486627][T11713] validate_nla: 9 callbacks suppressed [ 379.486645][T11713] netlink: 'syz.0.2224': attribute type 21 has an invalid length. [ 379.592964][T11708] batadv0: entered promiscuous mode [ 379.666300][T11714] netlink: 'syz.2.2221': attribute type 2 has an invalid length. [ 379.675144][T11714] netlink: 'syz.2.2221': attribute type 8 has an invalid length. [ 379.689914][T11714] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2221'. [ 379.893314][T11722] netlink: 'syz.1.2228': attribute type 21 has an invalid length. [ 380.205608][T11728] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2230'. [ 380.280068][T11732] netlink: 'syz.1.2232': attribute type 10 has an invalid length. [ 380.307292][T11732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2232'. [ 380.339517][T11732] netlink: 'syz.1.2232': attribute type 3 has an invalid length. [ 380.351011][T11732] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2232'. [ 380.407943][T11742] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2232'. [ 380.832269][T11745] batadv0: entered promiscuous mode [ 381.166992][T11752] netlink: 'syz.1.2239': attribute type 25 has an invalid length. [ 381.294020][T11763] netlink: 'syz.0.2241': attribute type 21 has an invalid length. [ 381.631894][T11772] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2245'. [ 382.000714][T11783] netlink: 'syz.1.2247': attribute type 3 has an invalid length. [ 382.013659][T11778] netlink: 'syz.0.2248': attribute type 10 has an invalid length. [ 383.193277][T11814] __nla_validate_parse: 4 callbacks suppressed [ 383.193295][T11814] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2257'. [ 383.379524][T11819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2259'. [ 383.406593][T11819] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2259'. [ 383.456151][T11819] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2259'. [ 383.548594][T11827] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.2262'. [ 384.677059][T11859] validate_nla: 10 callbacks suppressed [ 384.677075][T11859] netlink: 'syz.2.2271': attribute type 3 has an invalid length. [ 384.704202][T11862] netlink: 'syz.2.2271': attribute type 10 has an invalid length. [ 384.723450][T11862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2271'. [ 384.723837][T11859] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2271'. [ 384.779089][T11857] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2271'. [ 384.845064][T11866] netlink: 'syz.1.2273': attribute type 22 has an invalid length. [ 384.853491][T11866] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.2273'. [ 385.203838][T11876] netlink: 'syz.2.2275': attribute type 25 has an invalid length. [ 385.495526][T11889] netlink: 'syz.2.2279': attribute type 21 has an invalid length. [ 385.856289][T11898] netlink: 'syz.2.2281': attribute type 25 has an invalid length. [ 386.094502][T11905] netlink: 'syz.1.2283': attribute type 10 has an invalid length. [ 386.103275][T11905] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2283'. [ 386.115982][T11905] netlink: 'syz.1.2283': attribute type 3 has an invalid length. [ 386.136687][T11907] netlink: 'syz.2.2284': attribute type 22 has an invalid length. [ 386.646296][T11925] netlink: 'syz.1.2290': attribute type 21 has an invalid length. [ 388.833766][T11979] __nla_validate_parse: 10 callbacks suppressed [ 388.833787][T11979] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2307'. [ 388.889841][T11981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2306'. [ 388.905933][T11981] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2306'. [ 388.954992][T11981] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2306'. [ 389.171642][T11988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2309'. [ 389.192183][T11988] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2309'. [ 389.230650][T11988] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2309'. [ 389.983036][T12007] validate_nla: 13 callbacks suppressed [ 389.983075][T12007] netlink: 'syz.0.2315': attribute type 25 has an invalid length. [ 390.270280][T12014] netlink: 'syz.3.2318': attribute type 25 has an invalid length. [ 390.305112][T12024] netlink: 'syz.0.2319': attribute type 22 has an invalid length. [ 390.314304][T12024] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.2319'. [ 390.532821][T12029] netlink: 'syz.3.2320': attribute type 10 has an invalid length. [ 390.551505][T12029] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2320'. [ 390.570533][T12032] netlink: 'syz.2.2322': attribute type 10 has an invalid length. [ 390.587670][T12029] netlink: 'syz.3.2320': attribute type 3 has an invalid length. [ 390.595725][T12032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2322'. [ 390.622141][T12032] netlink: 'syz.2.2322': attribute type 3 has an invalid length. [ 390.766493][T12039] netlink: 'syz.2.2324': attribute type 21 has an invalid length. [ 391.325344][T12047] netlink: 'syz.1.2326': attribute type 25 has an invalid length. [ 391.703877][T12055] netlink: 'syz.2.2328': attribute type 25 has an invalid length. [ 393.355386][ T5105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 393.365974][ T5105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 393.374851][ T5105] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 393.385332][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 393.396777][ T5105] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 393.404586][ T5105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 393.647057][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.263582][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.325628][T12099] chnl_net:caif_netlink_parms(): no params data found [ 394.453691][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.693597][ T35] batman_adv: batadv0: Removing interface: netdevsim0 [ 394.708787][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.887992][T12099] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.924291][T12099] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.941962][T12099] bridge_slave_0: entered allmulticast mode [ 394.963558][T12099] bridge_slave_0: entered promiscuous mode [ 394.987806][T12131] validate_nla: 11 callbacks suppressed [ 394.987825][T12131] netlink: 'syz.2.2349': attribute type 10 has an invalid length. [ 395.022630][T12099] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.047939][T12099] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.087451][T12099] bridge_slave_1: entered allmulticast mode [ 395.094940][T12099] bridge_slave_1: entered promiscuous mode [ 395.415778][T12142] __nla_validate_parse: 9 callbacks suppressed [ 395.415796][T12142] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2351'. [ 395.469487][ T5797] Bluetooth: hci2: command tx timeout [ 395.479480][T12099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.511108][T12099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.796702][T12099] team0: Port device team_slave_0 added [ 395.878884][T12150] netlink: 'syz.1.2354': attribute type 22 has an invalid length. [ 395.941497][T12150] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.2354'. [ 396.017948][T12099] team0: Port device team_slave_1 added [ 396.144096][T12152] netlink: 'syz.0.2353': attribute type 25 has an invalid length. [ 396.783143][T12169] netlink: 'syz.2.2355': attribute type 10 has an invalid length. [ 396.794103][T12099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.815641][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.848735][T12099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.895659][T12099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.924495][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.970761][T12099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.573733][ T5797] Bluetooth: hci2: command tx timeout [ 397.729755][T12099] hsr_slave_0: entered promiscuous mode [ 397.748004][T12099] hsr_slave_1: entered promiscuous mode [ 397.764150][T12099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.793164][T12099] Cannot create hsr debugfs directory [ 397.818789][T12194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2360'. [ 398.082995][T12199] netlink: 'syz.1.2362': attribute type 21 has an invalid length. [ 398.378198][T12206] netlink: 'syz.1.2364': attribute type 21 has an invalid length. [ 398.487620][T12208] netlink: 'syz.2.2365': attribute type 22 has an invalid length. [ 398.534150][T12208] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2365'. [ 399.064964][T12219] netlink: 'syz.1.2366': attribute type 10 has an invalid length. [ 399.617749][ T5797] Bluetooth: hci2: command tx timeout [ 399.933973][T12247] netlink: 'syz.0.2371': attribute type 21 has an invalid length. [ 399.997833][T12252] netlink: 'syz.2.2373': attribute type 21 has an invalid length. [ 400.813555][T12099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.008927][T12266] netlink: 'syz.2.2377': attribute type 22 has an invalid length. [ 401.037385][T12266] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2377'. [ 401.127478][T12099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 401.186878][T12099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 401.264323][T12099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 401.560513][T12293] netlink: 'syz.1.2381': attribute type 21 has an invalid length. [ 401.698615][ T5797] Bluetooth: hci2: command tx timeout [ 402.166005][T12099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.497574][T12099] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.885525][T12328] FAULT_INJECTION: forcing a failure. [ 402.885525][T12328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.915723][T12328] CPU: 1 PID: 12328 Comm: syz.0.2386 Not tainted syzkaller #0 [ 402.923350][T12328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.933446][T12328] Call Trace: [ 402.936768][T12328] [ 402.939810][T12328] dump_stack_lvl+0x16c/0x230 [ 402.944548][T12328] ? show_regs_print_info+0x20/0x20 [ 402.949877][T12328] ? load_image+0x3b0/0x3b0 [ 402.954431][T12328] ? __lock_acquire+0x7c80/0x7c80 [ 402.959505][T12328] should_fail_ex+0x39d/0x4d0 [ 402.964234][T12328] _copy_from_user+0x2f/0xe0 [ 402.968876][T12328] __copy_msghdr+0x3bb/0x580 [ 402.973516][T12328] ___sys_sendmsg+0x1a6/0x290 [ 402.978337][T12328] ? __sys_sendmsg+0x270/0x270 [ 402.983457][T12328] ? __lock_acquire+0x7c80/0x7c80 [ 402.988857][T12328] __se_sys_sendmsg+0x1a5/0x270 [ 402.993765][T12328] ? __x64_sys_sendmsg+0x80/0x80 [ 402.998782][T12328] ? lockdep_hardirqs_on+0x98/0x150 [ 403.004136][T12328] do_syscall_64+0x55/0xb0 [ 403.008690][T12328] ? clear_bhb_loop+0x40/0x90 [ 403.013435][T12328] ? clear_bhb_loop+0x40/0x90 [ 403.018245][T12328] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 403.024182][T12328] RIP: 0033:0x7fe54918ebe9 [ 403.028636][T12328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.048640][T12328] RSP: 002b:00007fe54a09d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.057379][T12328] RAX: ffffffffffffffda RBX: 00007fe5493b5fa0 RCX: 00007fe54918ebe9 [ 403.065641][T12328] RDX: 0000000024044840 RSI: 0000200000000000 RDI: 0000000000000004 [ 403.073953][T12328] RBP: 00007fe54a09d090 R08: 0000000000000000 R09: 0000000000000000 [ 403.082140][T12328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.090371][T12328] R13: 00007fe5493b6038 R14: 00007fe5493b5fa0 R15: 00007ffc58259928 [ 403.098507][T12328] [ 403.131640][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.139677][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.244622][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.252275][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.360458][T12335] netlink: 'syz.1.2387': attribute type 22 has an invalid length. [ 403.392692][T12335] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.2387'. [ 404.216879][T12099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 404.508920][T12364] netlink: 'syz.1.2390': attribute type 21 has an invalid length. [ 405.128617][T12378] netlink: 'syz.1.2393': attribute type 25 has an invalid length. [ 405.271374][ T35] hsr_slave_0: left promiscuous mode [ 405.280185][ T35] hsr_slave_1: left promiscuous mode [ 405.289141][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.296847][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.316014][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.324538][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.339738][ T35] bridge_slave_1: left allmulticast mode [ 405.345445][ T35] bridge_slave_1: left promiscuous mode [ 405.353183][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.368498][ T35] bridge_slave_0: left promiscuous mode [ 405.374521][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.413604][ T35] veth1_macvtap: left promiscuous mode [ 405.422394][ T35] veth0_macvtap: left promiscuous mode [ 405.429876][ T35] veth1_vlan: left promiscuous mode [ 406.037947][ T35] team0 (unregistering): Port device team_slave_1 removed [ 406.084072][ T35] team0 (unregistering): Port device team_slave_0 removed [ 406.132674][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.180517][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.683955][ T35] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 406.694577][ T35] bond0 (unregistering): Released all slaves [ 406.772985][T12099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.849070][T12099] veth0_vlan: entered promiscuous mode [ 406.908385][T12099] veth1_vlan: entered promiscuous mode [ 407.040298][T12099] veth0_macvtap: entered promiscuous mode [ 407.120462][T12099] veth1_macvtap: entered promiscuous mode [ 407.235699][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.246948][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.278104][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.289542][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.301198][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 407.312577][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.325170][T12099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.333272][T12399] netlink: 'syz.2.2396': attribute type 10 has an invalid length. [ 407.345959][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.356907][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.367598][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.380257][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.390606][T12099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 407.402133][T12099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 407.418849][T12099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.454915][T12099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.465518][T12099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.483100][T12099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.493286][T12099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.723510][T12404] netlink: 'syz.1.2397': attribute type 25 has an invalid length. [ 407.785849][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.806761][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.860717][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.874471][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.961295][T12411] netlink: 'syz.2.2399': attribute type 22 has an invalid length. [ 407.983553][T12411] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2399'. [ 408.725651][T12428] netlink: 'syz.1.2405': attribute type 21 has an invalid length. [ 408.771024][T12425] netlink: 'syz.0.2403': attribute type 25 has an invalid length. [ 409.174578][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.188217][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.196866][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.206487][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 409.215087][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 409.224238][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.612015][T12451] FAULT_INJECTION: forcing a failure. [ 409.612015][T12451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.629454][T12451] CPU: 0 PID: 12451 Comm: syz.1.2410 Not tainted syzkaller #0 [ 409.637240][T12451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 409.647764][T12451] Call Trace: [ 409.651065][T12451] [ 409.654007][T12451] dump_stack_lvl+0x16c/0x230 [ 409.658754][T12451] ? show_regs_print_info+0x20/0x20 [ 409.664163][T12451] ? load_image+0x3b0/0x3b0 [ 409.668869][T12451] ? __might_fault+0xaa/0x120 [ 409.673859][T12451] ? __lock_acquire+0x7c80/0x7c80 [ 409.679000][T12451] should_fail_ex+0x39d/0x4d0 [ 409.683871][T12451] _copy_from_user+0x2f/0xe0 [ 409.688650][T12451] __sys_bpf+0x1e9/0x800 [ 409.692906][T12451] ? bpf_link_show_fdinfo+0x350/0x350 [ 409.698933][T12451] ? lock_chain_count+0x20/0x20 [ 409.703901][T12451] __x64_sys_bpf+0x7c/0x90 [ 409.708339][T12451] do_syscall_64+0x55/0xb0 [ 409.712882][T12451] ? clear_bhb_loop+0x40/0x90 [ 409.717592][T12451] ? clear_bhb_loop+0x40/0x90 [ 409.722739][T12451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 409.728834][T12451] RIP: 0033:0x7f5325b8ebe9 [ 409.733349][T12451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.753165][T12451] RSP: 002b:00007f5326a4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 409.761782][T12451] RAX: ffffffffffffffda RBX: 00007f5325db5fa0 RCX: 00007f5325b8ebe9 [ 409.769784][T12451] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 409.777862][T12451] RBP: 00007f5326a4c090 R08: 0000000000000000 R09: 0000000000000000 [ 409.786291][T12451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.794363][T12451] R13: 00007f5325db6038 R14: 00007f5325db5fa0 R15: 00007ffccf224ad8 [ 409.802367][T12451] [ 409.904939][T12435] chnl_net:caif_netlink_parms(): no params data found [ 410.182937][T12462] netlink: 'syz.3.2413': attribute type 21 has an invalid length. [ 410.239432][T12457] netlink: 'syz.1.2412': attribute type 25 has an invalid length. [ 410.329796][ T1082] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.413127][T12435] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.429356][T12435] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.436877][T12435] bridge_slave_0: entered allmulticast mode [ 410.446842][T12435] bridge_slave_0: entered promiscuous mode [ 410.502938][ T1082] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.545078][T12435] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.571892][T12435] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.581019][T12435] bridge_slave_1: entered allmulticast mode [ 410.589603][T12435] bridge_slave_1: entered promiscuous mode [ 410.653679][ T1082] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.706443][T12435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.716296][T12471] netlink: 'syz.1.2416': attribute type 25 has an invalid length. [ 410.734330][T12435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.800929][ T1082] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.886505][T12435] team0: Port device team_slave_0 added [ 410.930967][T12435] team0: Port device team_slave_1 added [ 410.969945][T12435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.977383][T12435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.012058][T12435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.026799][T12435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.040326][T12435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.071070][T12435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.209971][T12435] hsr_slave_0: entered promiscuous mode [ 411.236491][T12435] hsr_slave_1: entered promiscuous mode [ 411.246300][T12435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.254446][T12435] Cannot create hsr debugfs directory [ 411.263830][T12482] netlink: 'syz.3.2419': attribute type 21 has an invalid length. [ 411.298134][ T5797] Bluetooth: hci0: command tx timeout [ 412.244251][T12504] netlink: 'syz.0.2423': attribute type 10 has an invalid length. [ 412.260508][T12502] netlink: 'syz.1.2424': attribute type 25 has an invalid length. [ 412.872944][T12523] netlink: 'syz.0.2429': attribute type 21 has an invalid length. [ 413.069574][T12435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 413.154328][T12435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 413.305701][T12435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 413.333983][T12435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 413.384458][ T5797] Bluetooth: hci0: command tx timeout [ 413.538644][T12546] netlink: 'syz.1.2434': attribute type 21 has an invalid length. [ 413.948158][T12559] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2435'. [ 414.176976][T12435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.235389][T12435] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.279450][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.286853][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.315756][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.323247][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.732125][T12572] netlink: 'syz.3.2438': attribute type 10 has an invalid length. [ 414.861307][T12578] netlink: 'syz.1.2439': attribute type 10 has an invalid length. [ 414.878386][T12578] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2439'. [ 414.907607][T12578] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2439'. [ 414.976748][T12578] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2439'. [ 415.276366][T12435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.331495][T12588] validate_nla: 2 callbacks suppressed [ 415.331516][T12588] netlink: 'syz.1.2452': attribute type 21 has an invalid length. [ 415.347864][T12587] netlink: 'syz.3.2444': attribute type 21 has an invalid length. [ 415.459461][ T5797] Bluetooth: hci0: command tx timeout [ 415.551837][T12435] veth0_vlan: entered promiscuous mode [ 415.580385][T12435] veth1_vlan: entered promiscuous mode [ 415.686482][T12590] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2445'. [ 415.985831][T12435] veth0_macvtap: entered promiscuous mode [ 416.020819][T12435] veth1_macvtap: entered promiscuous mode [ 416.069918][T12435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.080780][T12435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.107557][T12435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.133901][T12435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.146858][T12435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.165429][T12435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.176261][T12435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.189968][T12435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.203088][T12435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.267532][T12435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.299352][T12435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.325532][T12435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.346350][T12435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.357045][T12435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.368299][T12435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.380394][T12435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.391534][T12435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.406772][T12610] netlink: 'syz.3.2453': attribute type 3 has an invalid length. [ 416.416784][T12435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.425487][T12610] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2453'. [ 416.446024][T12608] netlink: 'syz.3.2453': attribute type 10 has an invalid length. [ 416.455735][T12608] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2453'. [ 416.476867][T12435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.495877][T12435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.507303][T12435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.516346][T12435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.523172][T12608] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2453'. [ 416.537579][T12605] netlink: 'syz.1.2451': attribute type 10 has an invalid length. [ 416.755776][T12612] netlink: 'syz.1.2454': attribute type 10 has an invalid length. [ 416.778043][T12612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2454'. [ 416.793021][T12612] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2454'. [ 416.812035][T12614] netlink: 'syz.3.2455': attribute type 21 has an invalid length. [ 416.839915][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.854017][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.862981][ T1082] [ 416.865615][ T1082] ====================================================== [ 416.872760][ T1082] WARNING: possible circular locking dependency detected [ 416.879959][ T1082] syzkaller #0 Not tainted [ 416.884454][ T1082] ------------------------------------------------------ [ 416.891570][ T1082] kworker/u4:6/1082 is trying to acquire lock: [ 416.897815][ T1082] ffff88807cb70d00 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 416.907696][ T1082] [ 416.907696][ T1082] but task is already holding lock: [ 416.915591][ T1082] ffff88801e7f8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 416.926136][ T1082] [ 416.926136][ T1082] which lock already depends on the new lock. [ 416.926136][ T1082] [ 416.937094][ T1082] [ 416.937094][ T1082] the existing dependency chain (in reverse order) is: [ 416.946300][ T1082] [ 416.946300][ T1082] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 416.954845][ T1082] __mutex_lock+0x129/0xcc0 [ 416.960162][ T1082] ieee80211_open+0x144/0x200 [ 416.965615][ T1082] __dev_open+0x2bc/0x430 [ 416.970610][ T1082] dev_open+0xab/0x170 [ 416.975211][ T1082] team_add_slave+0xae7/0x2660 [ 416.980500][ T1082] do_setlink+0xe14/0x3fb0 [ 416.985624][ T1082] rtnl_newlink+0x175b/0x2020 [ 416.990852][ T1082] rtnetlink_rcv_msg+0x7c7/0xf10 [ 416.996495][ T1082] netlink_rcv_skb+0x216/0x480 [ 417.001889][ T1082] netlink_unicast+0x751/0x8d0 [ 417.007623][ T1082] netlink_sendmsg+0x8c1/0xbe0 [ 417.012922][ T1082] ____sys_sendmsg+0x5bf/0x950 [ 417.018226][ T1082] ___sys_sendmsg+0x220/0x290 [ 417.023445][ T1082] __se_sys_sendmsg+0x1a5/0x270 [ 417.028828][ T1082] do_syscall_64+0x55/0xb0 [ 417.033864][ T1082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.040304][ T1082] [ 417.040304][ T1082] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 417.048658][ T1082] __lock_acquire+0x2ddb/0x7c80 [ 417.054122][ T1082] lock_acquire+0x197/0x410 [ 417.059862][ T1082] __mutex_lock+0x129/0xcc0 [ 417.065309][ T1082] team_del_slave+0x32/0x1c0 [ 417.070520][ T1082] team_device_event+0x28d/0xa20 [ 417.076069][ T1082] notifier_call_chain+0x197/0x390 [ 417.081732][ T1082] unregister_netdevice_many_notify+0xf36/0x1810 [ 417.088854][ T1082] unregister_netdevice_queue+0x324/0x360 [ 417.095277][ T1082] _cfg80211_unregister_wdev+0x16b/0x580 [ 417.101534][ T1082] ieee80211_remove_interfaces+0x496/0x680 [ 417.107973][ T1082] ieee80211_unregister_hw+0x5d/0x2a0 [ 417.113874][ T1082] mac80211_hwsim_del_radio+0x274/0x450 [ 417.119954][ T1082] hwsim_exit_net+0x585/0x640 [ 417.125170][ T1082] cleanup_net+0x6f4/0xb90 [ 417.130203][ T1082] process_scheduled_works+0xa45/0x15b0 [ 417.136371][ T1082] worker_thread+0xa55/0xfc0 [ 417.141678][ T1082] kthread+0x2fa/0x390 [ 417.146463][ T1082] ret_from_fork+0x48/0x80 [ 417.151675][ T1082] ret_from_fork_asm+0x11/0x20 [ 417.157148][ T1082] [ 417.157148][ T1082] other info that might help us debug this: [ 417.157148][ T1082] [ 417.167645][ T1082] Possible unsafe locking scenario: [ 417.167645][ T1082] [ 417.175445][ T1082] CPU0 CPU1 [ 417.180902][ T1082] ---- ---- [ 417.186377][ T1082] lock(&rdev->wiphy.mtx); [ 417.191430][ T1082] lock(team->team_lock_key); [ 417.198911][ T1082] lock(&rdev->wiphy.mtx); [ 417.206226][ T1082] lock(team->team_lock_key); [ 417.211010][ T1082] [ 417.211010][ T1082] *** DEADLOCK *** [ 417.211010][ T1082] [ 417.219153][ T1082] 5 locks held by kworker/u4:6/1082: [ 417.224444][ T1082] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 417.235639][ T1082] #1: ffffc9000465fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 417.246897][ T1082] #2: ffffffff8dfaf510 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 417.256668][ T1082] #3: ffffffff8dfbc348 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 417.266712][ T1082] #4: ffff88801e7f8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 417.278062][ T1082] [ 417.278062][ T1082] stack backtrace: [ 417.284049][ T1082] CPU: 1 PID: 1082 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 417.292046][ T1082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 417.302738][ T1082] Workqueue: netns cleanup_net [ 417.307738][ T1082] Call Trace: [ 417.311120][ T1082] [ 417.314149][ T1082] dump_stack_lvl+0x16c/0x230 [ 417.319540][ T1082] ? load_image+0x3b0/0x3b0 [ 417.324151][ T1082] ? show_regs_print_info+0x20/0x20 [ 417.329486][ T1082] ? print_circular_bug+0x12b/0x1a0 [ 417.334877][ T1082] check_noncircular+0x2bd/0x3c0 [ 417.340471][ T1082] ? print_deadlock_bug+0x5d0/0x5d0 [ 417.346003][ T1082] ? lockdep_lock+0xe0/0x220 [ 417.350619][ T1082] ? __lock_acquire+0x1334/0x7c80 [ 417.355752][ T1082] ? _find_first_zero_bit+0xd3/0x100 [ 417.361086][ T1082] __lock_acquire+0x2ddb/0x7c80 [ 417.365983][ T1082] ? verify_lock_unused+0x140/0x140 [ 417.371286][ T1082] ? trace_call_bpf+0xc3/0x690 [ 417.376244][ T1082] ? trace_call_bpf+0xc3/0x690 [ 417.381126][ T1082] ? trace_call_bpf+0x5ba/0x690 [ 417.386215][ T1082] ? trace_call_bpf+0xc3/0x690 [ 417.391100][ T1082] lock_acquire+0x197/0x410 [ 417.395886][ T1082] ? team_del_slave+0x32/0x1c0 [ 417.400937][ T1082] ? __might_sleep+0xe0/0xe0 [ 417.405794][ T1082] ? read_lock_is_recursive+0x20/0x20 [ 417.411358][ T1082] __mutex_lock+0x129/0xcc0 [ 417.415965][ T1082] ? team_del_slave+0x32/0x1c0 [ 417.420751][ T1082] ? __lock_acquire+0x7c80/0x7c80 [ 417.425870][ T1082] ? rcu_is_watching+0x15/0xb0 [ 417.430646][ T1082] ? trace_contention_end+0x39/0xe0 [ 417.435857][ T1082] ? __mutex_lock+0x304/0xcc0 [ 417.440604][ T1082] ? team_del_slave+0x32/0x1c0 [ 417.445406][ T1082] ? mutex_lock_nested+0x20/0x20 [ 417.450552][ T1082] ? bond_netdev_event+0xe1/0xef0 [ 417.455948][ T1082] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 417.461629][ T1082] ? bond_ipsec_offload_ok+0x410/0x410 [ 417.467196][ T1082] team_del_slave+0x32/0x1c0 [ 417.472612][ T1082] team_device_event+0x28d/0xa20 [ 417.478014][ T1082] notifier_call_chain+0x197/0x390 [ 417.483259][ T1082] unregister_netdevice_many_notify+0xf36/0x1810 [ 417.489740][ T1082] ? lock_chain_count+0x20/0x20 [ 417.494709][ T1082] ? unregister_netdevice_many+0x20/0x20 [ 417.500361][ T1082] ? kernfs_remove_by_name_ns+0x117/0x150 [ 417.506279][ T1082] ? __lock_acquire+0x7c80/0x7c80 [ 417.511318][ T1082] unregister_netdevice_queue+0x324/0x360 [ 417.517052][ T1082] ? list_netdevice+0x730/0x730 [ 417.522005][ T1082] ? kernfs_remove_by_name_ns+0x117/0x150 [ 417.527830][ T1082] _cfg80211_unregister_wdev+0x16b/0x580 [ 417.533827][ T1082] ieee80211_remove_interfaces+0x496/0x680 [ 417.539917][ T1082] ? ieee80211_do_stop+0x1db0/0x1db0 [ 417.545401][ T1082] ? rcu_is_watching+0x15/0xb0 [ 417.550444][ T1082] ieee80211_unregister_hw+0x5d/0x2a0 [ 417.555927][ T1082] mac80211_hwsim_del_radio+0x274/0x450 [ 417.561502][ T1082] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 417.567115][ T1082] hwsim_exit_net+0x585/0x640 [ 417.571896][ T1082] ? hwsim_init_net+0x90/0x90 [ 417.576927][ T1082] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 417.583139][ T1082] cleanup_net+0x6f4/0xb90 [ 417.587656][ T1082] ? ops_free_list+0x3b0/0x3b0 [ 417.592611][ T1082] ? _raw_spin_unlock_irq+0x23/0x50 [ 417.598084][ T1082] ? process_scheduled_works+0x957/0x15b0 [ 417.603894][ T1082] ? process_scheduled_works+0x957/0x15b0 [ 417.609705][ T1082] process_scheduled_works+0xa45/0x15b0 [ 417.615643][ T1082] ? assign_work+0x400/0x400 [ 417.620246][ T1082] ? assign_work+0x39e/0x400 [ 417.625271][ T1082] worker_thread+0xa55/0xfc0 [ 417.629870][ T1082] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 417.635962][ T1082] ? _raw_spin_unlock+0x40/0x40 [ 417.640909][ T1082] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 417.647082][ T1082] kthread+0x2fa/0x390 [ 417.651422][ T1082] ? pr_cont_work+0x560/0x560 [ 417.656479][ T1082] ? kthread_blkcg+0xd0/0xd0 [ 417.661244][ T1082] ret_from_fork+0x48/0x80 [ 417.666042][ T1082] ? kthread_blkcg+0xd0/0xd0 [ 417.670768][ T1082] ret_from_fork_asm+0x11/0x20 [ 417.675778][ T1082] [ 417.684537][ T5797] Bluetooth: hci0: command tx timeout [ 417.692674][ T1082] team0: Port device wlan1 removed [ 417.712245][T12435] ieee80211 phy111: Selected rate control algorithm 'minstrel_ht' [ 417.790894][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.813813][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.834212][ T1082] hsr_slave_0: left promiscuous mode [ 417.842058][ T1082] hsr_slave_1: left promiscuous mode [ 417.849087][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.859107][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.867433][ T1082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.875208][ T1082] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.883478][ T1082] bridge_slave_1: left allmulticast mode [ 417.889314][ T1082] bridge_slave_1: left promiscuous mode [ 417.895104][ T1082] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.904131][ T1082] bridge_slave_0: left promiscuous mode [ 417.910146][ T1082] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.920803][ T1082] veth1_macvtap: left promiscuous mode [ 417.926366][ T1082] veth0_macvtap: left promiscuous mode [ 417.932033][ T1082] veth1_vlan: left promiscuous mode [ 418.175855][ T1082] team0 (unregistering): Port device team_slave_1 removed [ 418.203405][ T1082] team0 (unregistering): Port device C removed [ 418.231758][ T1082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.241031][ T1082] bond_slave_1 (unregistering): left promiscuous mode [ 418.248192][ T1082] bond_slave_1 (unregistering): left allmulticast mode [ 418.278416][ T1082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.289376][ T1082] bond_slave_0 (unregistering): left promiscuous mode [ 418.296451][ T1082] bond_slave_0 (unregistering): left allmulticast mode [ 418.522351][ T1082] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 418.531460][ T1082] bridge0 (unregistering): left promiscuous mode [ 418.538234][ T1082] bridge0 (unregistering): left allmulticast mode [ 418.544951][ T1082] bond0 (unregistering): Released all slaves