last executing test programs: 4.72053729s ago: executing program 0 (id=7525): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeef) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000b40)={&(0x7f00000001c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/8, 0x8}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000580)=""/90, 0x5a}, {&(0x7f0000000780)=""/196, 0xc4}, {&(0x7f0000000880)=""/217, 0xd9}, {&(0x7f0000000980)=""/18, 0x12}, {&(0x7f0000000a00)=""/111, 0x6f}], 0x8, &(0x7f0000000b00)}, 0x8020) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x88408, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc, 0xffffffffffffd059}, 0x0, 0x2000003, 0x0, 0x5, 0x0, 0x48e7, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x1880, 0x0, 0xc2ba, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'xfrm0\x00', 0x400}) close(0x3) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0x4, 0x0, 0xf000000) 3.665980709s ago: executing program 0 (id=7527): socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa0000000000007110d3350010219bbf96000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x2d, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000900)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0x8, 0x81, 0x100}, 0x10, 0x0, r0, 0x2, &(0x7f0000000a40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x1, 0x5, 0x5, 0x6}, {0x2, 0x2, 0x4, 0x8}], 0x10, 0x401}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x0, 0x44, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x2, 0x0, [0x0, 0x0]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x2af185cb, 0x80000000, 0x8, 0x40100, 0x1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="4522bed426e77cd0aae12b34c278fdce80c88608e0d30befb5bb7654a2197f6ce9e7150c95d39bcb68007f9aef7113879a9a42f11bff3b996a79137d4c86fa506b42e6a4caf8678b9f77d400dc7051cbff7086298d9b2da493766206e2885a731f6c959209748d9aeb1d8f345d143379676cfc6dc2906309c3764428b6c0a9b1bd8e5726258c7d2e32e84c8d", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa3000000000000b704000000000000850000003c0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x22a82, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000100)={r6}) socket$kcm(0x2, 0x1, 0x84) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x14, &(0x7f0000000440), 0x3d) close(r8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8090) 3.664075689s ago: executing program 2 (id=7538): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x5452, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40300, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x2420, 0x0, 0x0, 0xb48326eb63de6817, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d8ee"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3.08523444s ago: executing program 0 (id=7529): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0xa, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x300, 0x1, 0x0, 0x0, 0x0, 0x3}, [], {0x95, 0x0, 0x300}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x804, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000711132000000000085100000020000008500000000000000950000000000000095008a0500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x38}, 0x200040c4) 3.08402267s ago: executing program 2 (id=7541): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x5452, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40300, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x2420, 0x0, 0x0, 0xb48326eb63de6817, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d8ee"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.84059881s ago: executing program 4 (id=7531): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@union={0xf, 0x4, 0x0, 0x5, 0x1, 0x200, [{0x8, 0x0, 0x1000}, {0x8, 0x4, 0x40}, {0xc, 0x3, 0x9}, {0x5, 0x3}]}]}, {0x0, [0x2e, 0x3e, 0x30, 0x30, 0x5f]}}, &(0x7f0000000300)=""/180, 0x5b, 0xb4, 0x1}, 0x28) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) write$cgroup_int(r2, &(0x7f0000000040), 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32], 0x0, 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x12, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 2.641177961s ago: executing program 3 (id=7532): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x23, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.569852156s ago: executing program 2 (id=7533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) close(0xffffffffffffffff) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x64317119, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r7}, &(0x7f00000007c0), &(0x7f0000000640)=r6}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r7, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r7, 0x0, &(0x7f0000000400)=""/154}, 0x20) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d08020100000004faffa1bc0001000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f0000000040)="54f6d4d87edd4afc057a218ff3b3f140", 0x10}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795a", 0x47}], 0x3, 0x0, 0x0, 0x7400}, 0x10) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)=r10, 0x129) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r5, 0xd) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000013c0)=ANY=[@ANYBLOB="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", @ANYBLOB="8b7575db826ade76282273c4e3a88d152b552f1748e545e3d1bf8b9c35f607b789a16aad3e8859b47cc6a4b0f07901c6c89026da15182b33696a8916813051b07d9b82f7bd8ed896a2858407414624f24f7e6431d0eb244a0eb387489f917a9a82744a06cd7fd404fb242d3b71d3dfc4d9476260d5c14112aa9bff3fd53dc537ff59dce48639b576f88569610fe95ccbd7465258ebde4ada3b8edc792889868d1b9b584c31e3045867d73fee", @ANYRESDEC=r4, @ANYRES32=r2], 0x0, 0xffffffbd, 0x19, &(0x7f0000001380)=""/25, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) 2.519884827s ago: executing program 1 (id=7534): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfdef) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40000) 2.477599486s ago: executing program 3 (id=7535): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={0x0, 0x0}, 0x28) r0 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273f"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0xff4c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x79, &(0x7f0000000000), 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000340)=0x100) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x7, &(0x7f0000000540)=[{0x1000, 0xdc, 0xe2, 0x400}, {0x1, 0x3, 0xf, 0x5}, {0x3, 0x7, 0x8, 0x80000005}, {0x3ff, 0x7c, 0x5f, 0x6}, {0x2, 0x0, 0xe, 0x1}, {0xfff8, 0x4, 0x78, 0x7}, {0x3, 0x1, 0xf8, 0xfffffff8}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x67, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x6}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x11300, 0xd3e, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 2.477231266s ago: executing program 4 (id=7536): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x48000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x5452, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40300, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x2420, 0x0, 0x0, 0xb48326eb63de6817, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d8ee"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.87879683s ago: executing program 3 (id=7539): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000002000000000000ad6f88dfe2024cfeb909f57877c1e611359dc895ec4586cee359822ec258861cbbc78c6f046b3ffbac2f7eff7ce91c71137a13450781403320bbbcbe09214058bee19e01bbe004c2dcb71981c6e54f5279dd466cf8f40b89be2aa84a0b86ee1494a47a1d623d2fe30b80447c3d83aedebeaafd437156fed9b5"], 0x0, 0x1a, 0x0, 0x1, 0x711}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x6, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x5, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0xffd1}], 0x1}, 0xc9) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) recvmsg(r3, &(0x7f0000000440)={&(0x7f00000001c0)=@caif=@util, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/212, 0xd4}], 0x2}, 0x2000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0x8) close(0x3) 1.730945071s ago: executing program 1 (id=7540): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x88) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) r4 = socket$kcm(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000019000000760000000000000027000000000800009500000000000000667f0c7ee76ae58cc18062bce3975ba022fb733e72b1f275f5083d567b4ad780d7664fe81ef35f0b0bec1128d351df080aaab6a7f1356be8408e34a4e722c145d8219bca1ac6a9e3da3565043c4294b2246562c9f623a0739bb9217fecce9cef022d82c783"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$kcm(r4, &(0x7f0000003180)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @remote}, 0x4, 0x0, 0x3, 0x2}}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@union={0x6, 0x1, 0x0, 0x5, 0x0, 0xfb, [{0x6, 0x3, 0xa}]}, @func={0x9, 0x0, 0x0, 0xc, 0x1}, @fwd={0xe}]}, {0x0, [0x61, 0x61, 0x5f, 0x61, 0x30, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000b00)=""/105, 0x52, 0x69, 0x0, 0x0, 0x10000, @value=r3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x42}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) 1.699460617s ago: executing program 4 (id=7542): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x84010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0xffff, 0x80}, 0x100c, 0x7, 0x1, 0x9, 0xfff, 0x7, 0x2}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) 1.653071407s ago: executing program 0 (id=7543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000800)='0', &(0x7f00000006c0)=""/194}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) 1.504412077s ago: executing program 3 (id=7544): socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="3daa0000000000007110d3350010219bbf96000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x2d, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000900)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x5, 0x8, 0x81, 0x100}, 0x10, 0x0, r0, 0x2, &(0x7f0000000a40)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x1, 0x5, 0x5, 0x6}, {0x2, 0x2, 0x4, 0x8}], 0x10, 0x401}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x0, 0x44, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f0000000340), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)={0x2, 0x0, [0x0, 0x0]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x2af185cb, 0x80000000, 0x8, 0x40100, 0x1, 0x1, '\x00', r2, 0xffffffffffffffff, 0x5, 0x2, 0x1, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="4522bed426e77cd0aae12b34c278fdce80c88608e0d30befb5bb7654a2197f6ce9e7150c95d39bcb68007f9aef7113879a9a42f11bff3b996a79137d4c86fa506b42e6a4caf8678b9f77d400dc7051cbff7086298d9b2da493766206e2885a731f6c959209748d9aeb1d8f345d143379676cfc6dc2906309c3764428b6c0a9b1bd8e5726258c7d2e32e84c8d", @ANYRES32=r3, @ANYBLOB="0000000000000000bfa3000000000000b704000000000000850000003c0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x22a82, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000100)={r6}) socket$kcm(0x2, 0x1, 0x84) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x14, &(0x7f0000000440), 0x3d) close(r8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8090) 1.503472128s ago: executing program 2 (id=7554): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000002000000000000ad6f88dfe2024cfeb909f57877c1e611359dc895ec4586cee359822ec258861cbbc78c6f046b3ffbac2f7eff7ce91c71137a13450781403320bbbcbe09214058bee19e01bbe004c2dcb71981c6e54f5279dd466cf8f40b89be2aa84a0b86ee1494a47a1d623d2fe30b80447c3d83aedebeaafd437156fed9b5"], 0x0, 0x1a, 0x0, 0x1, 0x711}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x5, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0xffd1}], 0x1}, 0xc9) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) recvmsg(r3, &(0x7f0000000440)={&(0x7f00000001c0)=@caif=@util, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/212, 0xd4}], 0x2}, 0x2000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0x8) close(0x3) 1.364809017s ago: executing program 3 (id=7545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x42) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x400000}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0x80000002, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x1782, r2}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f04, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000100000000b8f9000007000000070705ac1414aa00"], 0x18}, 0x200040c4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900100000000401a80016002000114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x844) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) 1.364537657s ago: executing program 4 (id=7546): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x5452, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40300, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x2420, 0x0, 0x0, 0xb48326eb63de6817, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d8ee"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.350154419s ago: executing program 1 (id=7556): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000002000000000000ad6f88dfe2024cfeb909f57877c1e611359dc895ec4586cee359822ec258861cbbc78c6f046b3ffbac2f7eff7ce91c71137a13450781403320bbbcbe09214058bee19e01bbe004c2dcb71981c6e54f5279dd466cf8f40b89be2aa84a0b86ee1494a47a1d623d2fe30b80447c3d83aedebeaafd437156fed9b5"], 0x0, 0x1a, 0x0, 0x1, 0x711}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x5, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0xffd1}], 0x1}, 0xc9) r3 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) recvmsg(r3, &(0x7f0000000440)={&(0x7f00000001c0)=@caif=@util, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000300)=""/212, 0xd4}], 0x2}, 0x2000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0x8) close(0x3) 1.349720389s ago: executing program 2 (id=7547): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeef) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000b40)={&(0x7f00000001c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000280)=""/104, 0x68}, {&(0x7f0000000300)=""/8, 0x8}, {&(0x7f00000004c0)=""/132, 0x84}, {&(0x7f0000000580)=""/90, 0x5a}, {&(0x7f0000000780)=""/196, 0xc4}, {&(0x7f0000000880)=""/217, 0xd9}, {&(0x7f0000000980)=""/18, 0x12}, {&(0x7f0000000a00)=""/111, 0x6f}], 0x8, &(0x7f0000000b00)}, 0x8020) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x1}, 0x1880, 0x0, 0xc2ba, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x6, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8000000000000000}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'xfrm0\x00', 0x400}) close(0x3) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10d, 0x4, 0x0, 0xf000000) 1.242600142s ago: executing program 1 (id=7548): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x23, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 795.914944ms ago: executing program 1 (id=7549): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@union={0xf, 0x4, 0x0, 0x5, 0x1, 0x200, [{0x8, 0x0, 0x1000}, {0x8, 0x4, 0x40}, {0xc, 0x3, 0x9}, {0x5, 0x3}]}]}, {0x0, [0x2e, 0x3e, 0x30, 0x30, 0x5f]}}, &(0x7f0000000300)=""/180, 0x5b, 0xb4, 0x1}, 0x28) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) write$cgroup_int(r2, &(0x7f0000000040), 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32], 0x0, 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x12, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 618.203601ms ago: executing program 0 (id=7550): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={0x0, 0x0}, 0x28) r0 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273f"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0xff4c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x79, &(0x7f0000000000), 0x8) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000340)=0x100) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x7, &(0x7f0000000540)=[{0x1000, 0xdc, 0xe2, 0x400}, {0x1, 0x3, 0xf, 0x5}, {0x3, 0x7, 0x8, 0x80000005}, {0x3ff, 0x7c, 0x5f, 0x6}, {0x2, 0x0, 0xe, 0x1}, {0xfff8, 0x4, 0x78, 0x7}, {0x3, 0x1, 0xf8, 0xfffffff8}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6e, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4f", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x6}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x71ab}, 0x11300, 0xd3e, 0x0, 0x0, 0xfffffffffff7bbfe, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 570.628902ms ago: executing program 4 (id=7551): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES8=r0], 0x0, 0x2d}, 0x28) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000880010001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000240), 0x0, 0x0, 0x27, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=r3, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8004) socketpair(0x15, 0x2, 0x1000000, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000200)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x8, 0xc}, 0x50) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f0000000400000006000000070000", @ANYRES32, @ANYBLOB="000000000000000000800000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) 504.998495ms ago: executing program 1 (id=7552): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/16], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x48000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x108ea5, 0xc78, 0x0, 0x0, 0x0, 0x0, 0xae7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x5452, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40300, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000001}, 0x2420, 0x0, 0x0, 0xb48326eb63de6817, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d8ee"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 187.744681ms ago: executing program 2 (id=7553): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x9, 0x6, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfdef) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40000) 87.398132ms ago: executing program 3 (id=7555): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x0, 0x8, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0xa, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x300, 0x1, 0x0, 0x0, 0x0, 0x3}, [], {0x95, 0x0, 0x300}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x804, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000001a00)={0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000711132000000000085100000020000008500000000000000950000000000000095008a0500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x38}, 0x200040c4) 20.504555ms ago: executing program 4 (id=7557): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x88) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) r4 = socket$kcm(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000019000000760000000000000027000000000800009500000000000000667f0c7ee76ae58cc18062bce3975ba022fb733e72b1f275f5083d567b4ad780d7664fe81ef35f0b0bec1128d351df080aaab6a7f1356be8408e34a4e722c145d8219bca1ac6a9e3da3565043c4294b2246562c9f623a0739bb9217fecce9cef022d82c783"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$kcm(r4, &(0x7f0000003180)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e23, @remote}, 0x4, 0x0, 0x3, 0x2}}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@union={0x6, 0x1, 0x0, 0x5, 0x0, 0xfb, [{0x6, 0x3, 0xa}]}, @func={0x9, 0x0, 0x0, 0xc, 0x1}, @fwd={0xe}]}, {0x0, [0x61, 0x61, 0x5f, 0x61, 0x30, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000b00)=""/105, 0x52, 0x69, 0x0, 0x0, 0x10000, @value=r3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x42}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) 0s ago: executing program 0 (id=7558): socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x84010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_config_ext={0xffff, 0x80}, 0x100c, 0x7, 0x1, 0x9, 0xfff, 0x7, 0x2}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) kernel console output (not intermixed with test programs): : hci3: command 0x041b tx timeout [ 951.090800][T20010] device team_slave_1 left promiscuous mode [ 951.100204][T20010] team0 (unregistering): Port device team_slave_1 removed [ 951.139450][T20010] device C left promiscuous mode [ 951.145634][T20010] team0 (unregistering): Port device C removed [ 951.183770][T20010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.223937][T20010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.262313][T20010] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 951.476517][T20010] bond0 (unregistering): Released all slaves [ 951.584032][T23795] __nla_validate_parse: 8 callbacks suppressed [ 951.584065][T23795] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.6235'. [ 951.637288][T23795] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6235'. [ 952.065100][T23812] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.6242'. [ 952.125529][T23812] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6242'. [ 952.857757][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 954.918469][T23842] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6245'. [ 954.937617][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 955.043745][T23842] validate_nla: 9 callbacks suppressed [ 955.043844][T23842] netlink: 'syz.0.6245': attribute type 2 has an invalid length. [ 955.087969][T23842] netlink: 'syz.0.6245': attribute type 1 has an invalid length. [ 955.137706][T23842] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6245'. [ 955.569285][T23664] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 955.598392][T23664] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 955.620319][T23664] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 955.650117][T23664] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 955.862203][T23664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.972892][T20011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 955.996962][T20011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 956.055146][T23664] 8021q: adding VLAN 0 to HW filter on device team0 [ 956.142648][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 956.163599][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 956.194472][ T8057] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.201755][ T8057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 956.262532][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 956.306829][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 956.344530][ T8057] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.351805][ T8057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 956.394659][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 956.453235][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 956.488358][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 956.531486][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 956.588121][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 956.671735][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 956.692815][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 956.735237][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 956.750922][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 956.766757][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 956.775970][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 956.796543][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 956.815611][T23664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 957.562559][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 957.572315][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 957.591767][T23664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.502044][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 958.514645][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 958.560172][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 958.590030][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 958.613073][T23664] device veth0_vlan entered promiscuous mode [ 958.623402][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 958.642217][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 958.671624][T23664] device veth1_vlan entered promiscuous mode [ 958.706021][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 958.716745][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 958.727329][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 958.742237][ T8057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 958.757408][T23664] device veth0_macvtap entered promiscuous mode [ 958.773020][T23664] device veth1_macvtap entered promiscuous mode [ 958.808422][T23664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.816076][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 958.863360][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 958.889841][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 958.908853][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 958.931430][T23664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.941970][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 958.952709][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 958.966615][T23664] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.978144][T23664] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.991260][T23664] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.003490][T23664] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.151158][ T8057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.173918][ T8057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.217756][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 959.246771][ T8059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.270202][ T8059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.301364][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 959.671511][T23966] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6270'. [ 960.545505][T21961] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 960.559413][T21961] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 960.567368][T21961] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 960.578754][T21961] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 960.588881][T21961] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 960.597751][T21961] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 960.654502][ T8057] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.842956][ T8057] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.024244][ T8057] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.104676][T24013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.118707][T24013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.145185][T24013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.173275][T24013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.744965][ T8057] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.062125][ T8057] device .*! left promiscuous mode [ 962.108813][T23995] chnl_net:caif_netlink_parms(): no params data found [ 962.576598][T24054] device macvlan0 entered promiscuous mode [ 962.681833][T23995] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.699203][T21961] Bluetooth: hci1: command 0x0409 tx timeout [ 962.742597][T23995] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.785017][T23995] device bridge_slave_0 entered promiscuous mode [ 962.939245][T23995] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.956798][T23995] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.977024][T23995] device bridge_slave_1 entered promiscuous mode [ 963.173861][T23995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.209823][T23995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 963.385793][T23995] team0: Port device team_slave_0 added [ 963.405067][T23995] team0: Port device team_slave_1 added [ 963.503432][T23995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.523075][T23995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.590170][T23995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 963.618810][T23995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 963.633778][T23995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.693746][T23995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.926513][T23995] device hsr_slave_0 entered promiscuous mode [ 963.968418][T23995] device hsr_slave_1 entered promiscuous mode [ 964.280699][T23995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 964.315953][T23995] Cannot create hsr debugfs directory [ 964.825824][T21961] Bluetooth: hci1: command 0x041b tx timeout [ 966.857784][T21961] Bluetooth: hci1: command 0x040f tx timeout [ 968.943472][T21961] Bluetooth: hci1: command 0x0419 tx timeout [ 968.980112][ T8057] device hsr_slave_0 left promiscuous mode [ 968.996810][ T8057] device hsr_slave_1 left promiscuous mode [ 969.055684][ T8057] device veth0_macvtap left promiscuous mode [ 969.067950][ T8057] device veth1_vlan left promiscuous mode [ 969.603617][ T8057] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 969.662373][ T8057] team0 (unregistering): Port device vlan0 removed [ 969.936580][ T8057] device team_slave_1 left promiscuous mode [ 969.945675][ T8057] team0 (unregistering): Port device team_slave_1 removed [ 969.985329][ T8057] device team_slave_0 left promiscuous mode [ 969.993643][ T8057] team0 (unregistering): Port device team_slave_0 removed [ 970.031789][ T8057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.072205][ T8057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.283158][ T8057] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 970.331790][ T8057] bond0 (unregistering): Released all slaves [ 970.383337][T24190] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6323'. [ 970.442642][T24190] team0: Port device team_slave_0 removed [ 970.457686][T24190] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 970.731427][T23995] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 970.773224][T23995] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 970.804165][T23995] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 972.297659][T21961] Bluetooth: hci2: command 0x0406 tx timeout [ 973.766562][T23995] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 974.016830][T23995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.121458][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 974.135526][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 974.152756][T23995] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.174165][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 974.185877][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 974.196442][T20008] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.203752][T20008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.254253][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 974.272600][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 974.307387][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 974.317742][T20008] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.324884][T20008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.344563][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 974.363091][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 974.393844][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 974.406844][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 974.425685][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 974.436869][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 974.450828][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 974.460996][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 974.484730][T23995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 974.510613][T23995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 974.526005][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 974.539273][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 974.559920][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 974.795616][T24255] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6340'. [ 974.845585][T24261] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6343'. [ 974.955570][T24261] netlink: 'syz.0.6343': attribute type 2 has an invalid length. [ 974.970820][T24261] netlink: 'syz.0.6343': attribute type 1 has an invalid length. [ 974.983761][T24261] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6343'. [ 975.049817][T20010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 975.057774][T20010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 975.084386][T23995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.130054][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 975.141728][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 975.175481][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 975.186576][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 975.217347][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 975.235686][T20008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 975.247157][T23995] device veth0_vlan entered promiscuous mode [ 975.304266][T23995] device veth1_vlan entered promiscuous mode [ 975.429317][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 975.439211][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 975.448028][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 975.456840][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 975.480231][T23995] device veth0_macvtap entered promiscuous mode [ 975.494254][T23995] device veth1_macvtap entered promiscuous mode [ 975.536923][T23995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.545855][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 975.565026][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 975.580276][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 975.617799][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 975.653821][T23995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.671917][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 975.688211][ T8054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 975.733045][T23995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.743386][T23995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.763089][T23995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.778473][T23995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.965380][ T8059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.046176][ T8059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.152281][T24284] netlink: 'syz.4.6350': attribute type 10 has an invalid length. [ 976.292080][T24284] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 976.305688][T24294] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6354'. [ 976.319925][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 976.379947][T24301] device syzkaller0 entered promiscuous mode [ 976.390274][ T8036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 976.400329][ T8036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 978.555480][ T8059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 978.649769][T24315] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.6369'. [ 978.731703][T24315] netlink: 'syz.2.6369': attribute type 2 has an invalid length. [ 978.775197][T24315] netlink: 'syz.2.6369': attribute type 1 has an invalid length. [ 978.795550][T24315] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6369'. [ 979.384312][T24345] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6366'. [ 980.261140][T24372] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.6377'. [ 980.332094][T24372] netlink: 'syz.3.6377': attribute type 2 has an invalid length. [ 980.377202][T24372] netlink: 'syz.3.6377': attribute type 1 has an invalid length. [ 980.404316][T24372] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6377'. [ 980.514529][T24382] FAULT_INJECTION: forcing a failure. [ 980.514529][T24382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.535214][T24382] CPU: 1 PID: 24382 Comm: syz.0.6382 Not tainted syzkaller #0 [ 980.542724][T24382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 980.552796][T24382] Call Trace: [ 980.556086][T24382] [ 980.559032][T24382] dump_stack_lvl+0x188/0x24e [ 980.563735][T24382] ? show_regs_print_info+0x12/0x12 [ 980.568954][T24382] ? load_image+0x410/0x410 [ 980.573486][T24382] ? __lock_acquire+0x7c40/0x7c40 [ 980.578552][T24382] should_fail_ex+0x390/0x4c0 [ 980.583258][T24382] _copy_to_user+0x2c/0x130 [ 980.587780][T24382] bpf_test_finish+0x266/0x600 [ 980.592575][T24382] ? convert_skb_to___skb+0x420/0x420 [ 980.597974][T24382] ? bpf_test_init+0x119/0x140 [ 980.602760][T24382] bpf_prog_test_run_xdp+0x827/0xf80 [ 980.608068][T24382] ? __lock_acquire+0x7c40/0x7c40 [ 980.613117][T24382] ? dev_put+0x80/0x80 [ 980.617225][T24382] ? dev_put+0x80/0x80 [ 980.621302][T24382] bpf_prog_test_run+0x31c/0x390 [ 980.626249][T24382] __sys_bpf+0x62b/0x780 [ 980.630514][T24382] ? bpf_link_show_fdinfo+0x380/0x380 [ 980.635919][T24382] ? lock_chain_count+0x20/0x20 [ 980.640793][T24382] __x64_sys_bpf+0x78/0x90 [ 980.645223][T24382] do_syscall_64+0x4c/0xa0 [ 980.649628][T24382] ? clear_bhb_loop+0x60/0xb0 [ 980.654293][T24382] ? clear_bhb_loop+0x60/0xb0 [ 980.658979][T24382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 980.664868][T24382] RIP: 0033:0x7f408bf9e159 [ 980.669276][T24382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.688880][T24382] RSP: 002b:00007f408ce87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 980.697290][T24382] RAX: ffffffffffffffda RBX: 00007f408c225fa0 RCX: 00007f408bf9e159 [ 980.705258][T24382] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 980.713219][T24382] RBP: 00007f408ce87090 R08: 0000000000000000 R09: 0000000000000000 [ 980.721185][T24382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 980.729152][T24382] R13: 00007f408c226038 R14: 00007f408c225fa0 R15: 00007ffdba901508 [ 980.737124][T24382] [ 980.789889][T24386] netlink: 'syz.4.6385': attribute type 23 has an invalid length. [ 980.810937][T24385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6384'. [ 980.942363][T24390] device syzkaller0 entered promiscuous mode [ 980.963036][T24390] FAULT_INJECTION: forcing a failure. [ 980.963036][T24390] name failslab, interval 1, probability 0, space 0, times 0 [ 981.008721][T24390] CPU: 1 PID: 24390 Comm: syz.2.6387 Not tainted syzkaller #0 [ 981.016246][T24390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 981.026322][T24390] Call Trace: [ 981.029621][T24390] [ 981.032562][T24390] dump_stack_lvl+0x188/0x24e [ 981.037263][T24390] ? show_regs_print_info+0x12/0x12 [ 981.042473][T24390] ? load_image+0x410/0x410 [ 981.046991][T24390] ? __might_sleep+0xd0/0xd0 [ 981.051603][T24390] ? __lock_acquire+0x7c40/0x7c40 [ 981.056652][T24390] ? widen_string+0x3b/0x2b0 [ 981.061269][T24390] should_fail_ex+0x390/0x4c0 [ 981.065975][T24390] should_failslab+0x5/0x20 [ 981.070496][T24390] slab_pre_alloc_hook+0x59/0x300 [ 981.075549][T24390] ? __register_sysctl_table+0xee/0xed0 [ 981.081133][T24390] __kmem_cache_alloc_node+0x4f/0x270 [ 981.086536][T24390] ? __register_sysctl_table+0xee/0xed0 [ 981.092104][T24390] __kmalloc+0xa3/0x240 [ 981.096296][T24390] __register_sysctl_table+0xee/0xed0 [ 981.101693][T24390] ? register_net_sysctl+0x303/0x370 [ 981.107043][T24390] neigh_sysctl_register+0x9a2/0xa80 [ 981.112446][T24390] ? neigh_proc_dointvec_ms_jiffies+0x50/0x50 [ 981.118543][T24390] addrconf_sysctl_register+0xac/0x1b0 [ 981.124006][T24390] ipv6_add_dev+0xbd4/0x1110 [ 981.128602][T24390] addrconf_notify+0x71c/0xf60 [ 981.133365][T24390] ? ip6mr_device_event+0x1dd/0x200 [ 981.138567][T24390] raw_notifier_call_chain+0xcb/0x160 [ 981.143940][T24390] dev_set_mtu_ext+0x45f/0x680 [ 981.148705][T24390] ? dev_validate_mtu+0x170/0x170 [ 981.153751][T24390] ? __mutex_trylock_common+0x15c/0x260 [ 981.159292][T24390] ? trace_raw_output_contention_end+0xd0/0xd0 [ 981.165446][T24390] dev_set_mtu+0x41/0xc0 [ 981.169689][T24390] dev_ifsioc+0x443/0xd50 [ 981.174027][T24390] ? dev_ioctl+0xe80/0xe80 [ 981.178464][T24390] ? apparmor_capable+0x12c/0x190 [ 981.183484][T24390] ? full_name_hash+0x8e/0xe0 [ 981.188169][T24390] ? dev_load+0x1d/0x1e0 [ 981.192402][T24390] ? dev_load+0x1d/0x1e0 [ 981.196636][T24390] dev_ioctl+0x55e/0xe80 [ 981.200878][T24390] sock_do_ioctl+0x245/0x320 [ 981.205466][T24390] ? sock_show_fdinfo+0xb0/0xb0 [ 981.210321][T24390] sock_ioctl+0x48a/0x700 [ 981.214644][T24390] ? sock_poll+0x420/0x420 [ 981.219058][T24390] ? bpf_lsm_file_ioctl+0x5/0x10 [ 981.223993][T24390] ? security_file_ioctl+0x7c/0xa0 [ 981.229107][T24390] ? sock_poll+0x420/0x420 [ 981.233525][T24390] __se_sys_ioctl+0xfa/0x170 [ 981.238119][T24390] do_syscall_64+0x4c/0xa0 [ 981.242528][T24390] ? clear_bhb_loop+0x60/0xb0 [ 981.247193][T24390] ? clear_bhb_loop+0x60/0xb0 [ 981.251860][T24390] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 981.257755][T24390] RIP: 0033:0x7ff4d4d9e159 [ 981.262165][T24390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.281764][T24390] RSP: 002b:00007ff4d5caf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 981.290187][T24390] RAX: ffffffffffffffda RBX: 00007ff4d5025fa0 RCX: 00007ff4d4d9e159 [ 981.298150][T24390] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000004 [ 981.306114][T24390] RBP: 00007ff4d5caf090 R08: 0000000000000000 R09: 0000000000000000 [ 981.314073][T24390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 981.322043][T24390] R13: 00007ff4d5026038 R14: 00007ff4d5025fa0 R15: 00007fff903fc308 [ 981.330019][T24390] [ 981.359505][T24397] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6390'. [ 981.451896][T24397] team0: Port device team_slave_0 removed [ 981.464167][T24397] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 981.537088][T24406] device syzkaller0 entered promiscuous mode [ 981.734986][T24419] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.6395'. [ 981.841787][T24419] netlink: 'syz.2.6395': attribute type 2 has an invalid length. [ 981.857064][T24419] netlink: 'syz.2.6395': attribute type 1 has an invalid length. [ 981.865805][T24419] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6395'. [ 981.877305][T24423] netlink: 'syz.1.6399': attribute type 27 has an invalid length. [ 981.887037][T24423] netlink: 'syz.1.6399': attribute type 4 has an invalid length. [ 981.912263][T24423] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6399'. [ 982.123290][T24434] device syzkaller0 entered promiscuous mode [ 982.287939][T24438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.317990][T24438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.357912][T24438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.365396][T24438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.739925][T24463] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6411'. [ 982.799671][T24463] netlink: 'syz.0.6411': attribute type 2 has an invalid length. [ 982.814649][T24463] netlink: 'syz.0.6411': attribute type 1 has an invalid length. [ 982.824228][T24463] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6411'. [ 983.024386][T24469] netlink: 'syz.3.6412': attribute type 2 has an invalid length. [ 983.052874][T24469] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6412'. [ 983.680537][T24494] FAULT_INJECTION: forcing a failure. [ 983.680537][T24494] name failslab, interval 1, probability 0, space 0, times 0 [ 983.694227][T24494] CPU: 0 PID: 24494 Comm: syz.3.6420 Not tainted syzkaller #0 [ 983.701719][T24494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 983.711770][T24494] Call Trace: [ 983.715042][T24494] [ 983.718054][T24494] dump_stack_lvl+0x188/0x24e [ 983.722818][T24494] ? show_regs_print_info+0x12/0x12 [ 983.728006][T24494] ? load_image+0x410/0x410 [ 983.732507][T24494] should_fail_ex+0x390/0x4c0 [ 983.737190][T24494] should_failslab+0x5/0x20 [ 983.741707][T24494] slab_pre_alloc_hook+0x59/0x300 [ 983.746741][T24494] kmem_cache_alloc+0x56/0x2f0 [ 983.751530][T24494] ? skb_clone+0x1e7/0x370 [ 983.755986][T24494] skb_clone+0x1e7/0x370 [ 983.760247][T24494] bpf_clone_redirect+0x169/0x4a0 [ 983.765293][T24494] bpf_prog_ef4ac361e44d514c+0x19/0x1d [ 983.770763][T24494] bpf_test_run+0x2b6/0x830 [ 983.775296][T24494] ? dst_hold+0xb0/0xb0 [ 983.779462][T24494] ? __skb_checksum+0x6fc/0x7a0 [ 983.784339][T24494] ? eth_get_headlen+0x200/0x200 [ 983.789288][T24494] ? __build_skb+0x24b/0x3b0 [ 983.793903][T24494] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 983.799306][T24494] ? cpu_online+0xa0/0xa0 [ 983.803644][T24494] bpf_prog_test_run+0x31c/0x390 [ 983.808593][T24494] __sys_bpf+0x62b/0x780 [ 983.812844][T24494] ? bpf_link_show_fdinfo+0x380/0x380 [ 983.818234][T24494] ? lock_chain_count+0x20/0x20 [ 983.823103][T24494] __x64_sys_bpf+0x78/0x90 [ 983.827540][T24494] do_syscall_64+0x4c/0xa0 [ 983.831962][T24494] ? clear_bhb_loop+0x60/0xb0 [ 983.836653][T24494] ? clear_bhb_loop+0x60/0xb0 [ 983.841336][T24494] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 983.847235][T24494] RIP: 0033:0x7f45d559e159 [ 983.851656][T24494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.871269][T24494] RSP: 002b:00007f45d63d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 983.879688][T24494] RAX: ffffffffffffffda RBX: 00007f45d5825fa0 RCX: 00007f45d559e159 [ 983.887661][T24494] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 983.895634][T24494] RBP: 00007f45d63d2090 R08: 0000000000000000 R09: 0000000000000000 [ 983.903607][T24494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 983.911598][T24494] R13: 00007f45d5826038 R14: 00007f45d5825fa0 R15: 00007ffdbd3c2a18 [ 983.919586][T24494] [ 983.942791][T24497] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6422'. [ 983.995193][T24497] device macvlan0 left promiscuous mode [ 984.058599][T24497] team0: Port device macvlan0 added [ 984.070247][T24496] delete_channel: no stack [ 984.165963][T24506] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.6425'. [ 984.212974][T24506] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6425'. [ 984.349011][T24513] FAULT_INJECTION: forcing a failure. [ 984.349011][T24513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.382735][T24513] CPU: 0 PID: 24513 Comm: syz.4.6428 Not tainted syzkaller #0 [ 984.390282][T24513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 984.400350][T24513] Call Trace: [ 984.403637][T24513] [ 984.406566][T24513] dump_stack_lvl+0x188/0x24e [ 984.411260][T24513] ? show_regs_print_info+0x12/0x12 [ 984.416473][T24513] ? load_image+0x410/0x410 [ 984.420981][T24513] ? __lock_acquire+0x7c40/0x7c40 [ 984.426009][T24513] ? snprintf+0xe5/0x140 [ 984.430254][T24513] should_fail_ex+0x390/0x4c0 [ 984.434943][T24513] _copy_to_user+0x2c/0x130 [ 984.439453][T24513] simple_read_from_buffer+0xe3/0x150 [ 984.444927][T24513] proc_fail_nth_read+0x1a6/0x220 [ 984.449955][T24513] ? proc_fault_inject_write+0x310/0x310 [ 984.455587][T24513] ? fsnotify_perm+0x248/0x550 [ 984.460348][T24513] ? proc_fault_inject_write+0x310/0x310 [ 984.465971][T24513] vfs_read+0x2db/0x960 [ 984.470131][T24513] ? kernel_read+0x1e0/0x1e0 [ 984.474724][T24513] ? __fget_files+0x28/0x460 [ 984.479312][T24513] ? __fget_files+0x3fc/0x460 [ 984.483992][T24513] ? __fdget_pos+0x2ae/0x360 [ 984.488575][T24513] ? ksys_read+0x70/0x260 [ 984.492906][T24513] ksys_read+0x14d/0x260 [ 984.497144][T24513] ? vfs_write+0x9a0/0x9a0 [ 984.501557][T24513] ? lockdep_hardirqs_on+0x94/0x140 [ 984.506760][T24513] do_syscall_64+0x4c/0xa0 [ 984.511172][T24513] ? clear_bhb_loop+0x60/0xb0 [ 984.515842][T24513] ? clear_bhb_loop+0x60/0xb0 [ 984.520509][T24513] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 984.526403][T24513] RIP: 0033:0x7f120a55e98e [ 984.530816][T24513] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 984.550431][T24513] RSP: 002b:00007f120b43ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 984.558858][T24513] RAX: ffffffffffffffda RBX: 00007f120b4406c0 RCX: 00007f120a55e98e [ 984.566830][T24513] RDX: 000000000000000f RSI: 00007f120b4400a0 RDI: 0000000000000005 [ 984.574799][T24513] RBP: 00007f120b440090 R08: 0000000000000000 R09: 0000000000000000 [ 984.582774][T24513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.590739][T24513] R13: 00007f120a826038 R14: 00007f120a825fa0 R15: 00007ffd42437f98 [ 984.598728][T24513] [ 985.400498][T24558] FAULT_INJECTION: forcing a failure. [ 985.400498][T24558] name failslab, interval 1, probability 0, space 0, times 0 [ 985.415771][T24558] CPU: 1 PID: 24558 Comm: syz.0.6446 Not tainted syzkaller #0 [ 985.423276][T24558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 985.433351][T24558] Call Trace: [ 985.434978][T24557] validate_nla: 7 callbacks suppressed [ 985.435013][T24557] netlink: 'syz.3.6444': attribute type 29 has an invalid length. [ 985.436627][T24558] [ 985.436638][T24558] dump_stack_lvl+0x188/0x24e [ 985.436667][T24558] ? show_regs_print_info+0x12/0x12 [ 985.436687][T24558] ? load_image+0x410/0x410 [ 985.454832][T24557] netlink: 'syz.3.6444': attribute type 29 has an invalid length. [ 985.457574][T24558] ? verify_lock_unused+0x140/0x140 [ 985.457613][T24558] should_fail_ex+0x390/0x4c0 [ 985.457642][T24558] should_failslab+0x5/0x20 [ 985.457658][T24558] slab_pre_alloc_hook+0x59/0x300 [ 985.457685][T24558] kmem_cache_alloc+0x56/0x2f0 [ 985.457702][T24558] ? skb_clone+0x1e7/0x370 [ 985.457726][T24558] skb_clone+0x1e7/0x370 [ 985.457746][T24558] __netlink_deliver_tap+0x3e4/0x7e0 [ 985.457777][T24558] ? netlink_deliver_tap+0x2e/0x1b0 [ 985.457798][T24558] netlink_deliver_tap+0x19c/0x1b0 [ 985.457818][T24558] netlink_unicast+0x777/0x920 [ 985.457846][T24558] netlink_sendmsg+0x8ad/0xbd0 [ 985.457874][T24558] ? netlink_getsockopt+0x550/0x550 [ 985.457896][T24558] ? apparmor_socket_sendmsg+0x8a/0x330 [ 985.457921][T24558] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 985.457939][T24558] ? security_socket_sendmsg+0x7c/0xa0 [ 985.554577][T24558] ? netlink_getsockopt+0x550/0x550 [ 985.559784][T24558] ____sys_sendmsg+0x5ed/0x9a0 [ 985.564567][T24558] ? __sys_sendmsg_sock+0x30/0x30 [ 985.569595][T24558] ? __import_iovec+0x306/0x510 [ 985.574455][T24558] ? import_iovec+0x6f/0xa0 [ 985.578971][T24558] ___sys_sendmsg+0x2a2/0x360 [ 985.583667][T24558] ? __sys_sendmsg+0x2a0/0x2a0 [ 985.588500][T24558] __se_sys_sendmsg+0x1c3/0x2b0 [ 985.593350][T24558] ? perf_trace_preemptirq_template+0x268/0x320 [ 985.599592][T24558] ? __x64_sys_sendmsg+0x80/0x80 [ 985.604535][T24558] ? lockdep_hardirqs_on+0x94/0x140 [ 985.609737][T24558] do_syscall_64+0x4c/0xa0 [ 985.614150][T24558] ? clear_bhb_loop+0x60/0xb0 [ 985.618827][T24558] ? clear_bhb_loop+0x60/0xb0 [ 985.623583][T24558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 985.629474][T24558] RIP: 0033:0x7f408bf9e159 [ 985.633885][T24558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.653485][T24558] RSP: 002b:00007f408ce87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.661892][T24558] RAX: ffffffffffffffda RBX: 00007f408c225fa0 RCX: 00007f408bf9e159 [ 985.669854][T24558] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 985.677815][T24558] RBP: 00007f408ce87090 R08: 0000000000000000 R09: 0000000000000000 [ 985.685777][T24558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.693758][T24558] R13: 00007f408c226038 R14: 00007f408c225fa0 R15: 00007ffdba901508 [ 985.701736][T24558] [ 985.716316][T24557] netlink: 'syz.3.6444': attribute type 29 has an invalid length. [ 986.217012][T24587] netlink: 'syz.3.6455': attribute type 2 has an invalid length. [ 986.235686][T24587] netlink: 'syz.3.6455': attribute type 1 has an invalid length. [ 986.351533][T24593] netlink: 'syz.3.6457': attribute type 27 has an invalid length. [ 986.383359][T24593] netlink: 'syz.3.6457': attribute type 3 has an invalid length. [ 986.430012][T24593] delete_channel: no stack [ 986.434899][T24593] delete_channel: no stack [ 986.480490][T24599] netlink: 'syz.2.6459': attribute type 21 has an invalid length. [ 986.494419][T24599] netlink: 'syz.2.6459': attribute type 5 has an invalid length. [ 986.504701][T24599] __nla_validate_parse: 9 callbacks suppressed [ 986.504717][T24599] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6459'. [ 986.527096][T24601] netlink: 'syz.0.6460': attribute type 21 has an invalid length. [ 986.537618][T24601] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6460'. [ 987.064647][T24624] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.6467'. [ 987.084608][T24623] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6465'. [ 987.155574][T24624] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6467'. [ 987.963379][T24644] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6475'. [ 988.102080][T24655] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.6478'. [ 988.150231][T24655] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6478'. [ 989.593072][T24693] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.6489'. [ 989.617796][T24693] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.6489'. [ 989.619207][T24695] FAULT_INJECTION: forcing a failure. [ 989.619207][T24695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.680703][T24695] CPU: 1 PID: 24695 Comm: syz.3.6490 Not tainted syzkaller #0 [ 989.688247][T24695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 989.698355][T24695] Call Trace: [ 989.701667][T24695] [ 989.704614][T24695] dump_stack_lvl+0x188/0x24e [ 989.709327][T24695] ? show_regs_print_info+0x12/0x12 [ 989.714551][T24695] ? load_image+0x410/0x410 [ 989.719091][T24695] ? __lock_acquire+0x7c40/0x7c40 [ 989.724155][T24695] should_fail_ex+0x390/0x4c0 [ 989.728867][T24695] _copy_from_user+0x2c/0x170 [ 989.733576][T24695] iovec_from_user+0x143/0x360 [ 989.738370][T24695] __import_iovec+0x6c/0x510 [ 989.742993][T24695] import_iovec+0x6f/0xa0 [ 989.747360][T24695] ___sys_sendmsg+0x252/0x360 [ 989.752065][T24695] ? __sys_sendmsg+0x2a0/0x2a0 [ 989.756875][T24695] ? __lock_acquire+0x7c40/0x7c40 [ 989.761954][T24695] __se_sys_sendmsg+0x1c3/0x2b0 [ 989.766825][T24695] ? __x64_sys_sendmsg+0x80/0x80 [ 989.771800][T24695] ? lockdep_hardirqs_on+0x94/0x140 [ 989.777032][T24695] do_syscall_64+0x4c/0xa0 [ 989.781468][T24695] ? clear_bhb_loop+0x60/0xb0 [ 989.786162][T24695] ? clear_bhb_loop+0x60/0xb0 [ 989.790865][T24695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 989.796781][T24695] RIP: 0033:0x7f45d559e159 [ 989.801211][T24695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.820836][T24695] RSP: 002b:00007f45d63d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.829279][T24695] RAX: ffffffffffffffda RBX: 00007f45d5825fa0 RCX: 00007f45d559e159 [ 989.837369][T24695] RDX: 00000000000012cd RSI: 0000200000000040 RDI: 0000000000000003 [ 989.845361][T24695] RBP: 00007f45d63d2090 R08: 0000000000000000 R09: 0000000000000000 [ 989.853356][T24695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.861363][T24695] R13: 00007f45d5826038 R14: 00007f45d5825fa0 R15: 00007ffdbd3c2a18 [ 989.869383][T24695] [ 990.478203][T24724] validate_nla: 13 callbacks suppressed [ 990.478443][T24724] netlink: 'syz.3.6502': attribute type 2 has an invalid length. [ 990.492417][T24724] netlink: 'syz.3.6502': attribute type 1 has an invalid length. [ 990.653877][T24732] FAULT_INJECTION: forcing a failure. [ 990.653877][T24732] name failslab, interval 1, probability 0, space 0, times 0 [ 990.721332][T24732] CPU: 0 PID: 24732 Comm: syz.0.6505 Not tainted syzkaller #0 [ 990.728871][T24732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 990.738961][T24732] Call Trace: [ 990.742263][T24732] [ 990.745220][T24732] dump_stack_lvl+0x188/0x24e [ 990.749936][T24732] ? show_regs_print_info+0x12/0x12 [ 990.755168][T24732] ? load_image+0x410/0x410 [ 990.759730][T24732] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 990.765498][T24732] should_fail_ex+0x390/0x4c0 [ 990.770208][T24732] should_failslab+0x5/0x20 [ 990.774719][T24732] slab_pre_alloc_hook+0x59/0x300 [ 990.779770][T24732] kmem_cache_alloc_node+0x5a/0x310 [ 990.785002][T24732] ? __alloc_skb+0xf9/0x7d0 [ 990.789529][T24732] __alloc_skb+0xf9/0x7d0 [ 990.793859][T24732] __pskb_copy_fclone+0xaa/0x1130 [ 990.798880][T24732] ? __lock_acquire+0x7c40/0x7c40 [ 990.803897][T24732] ? kasan_set_track+0x60/0x70 [ 990.808659][T24732] tipc_clone_to_loopback+0x102/0x4b0 [ 990.814035][T24732] ? net_generic+0x1e/0x240 [ 990.818538][T24732] tipc_node_xmit+0xdda/0xfc0 [ 990.823215][T24732] ? tipc_node_get_linkname+0x190/0x190 [ 990.828812][T24732] ? tipc_msg_create+0x46/0x4b0 [ 990.833718][T24732] tipc_node_xmit_skb+0x11b/0x190 [ 990.838782][T24732] ? __skb_queue_purge+0x160/0x160 [ 990.843950][T24732] ? tipc_sk_send_ack+0x101/0x580 [ 990.849009][T24732] ? tipc_sk_send_ack+0x303/0x580 [ 990.854080][T24732] tipc_recvstream+0x804/0xe60 [ 990.858908][T24732] ? tipc_sendstream+0x70/0x70 [ 990.863711][T24732] ____sys_recvmsg+0x2c8/0x5b0 [ 990.868526][T24732] ? __sys_recvmsg_sock+0x40/0x40 [ 990.873613][T24732] ? import_iovec+0x6f/0xa0 [ 990.878168][T24732] ___sys_recvmsg+0x210/0x590 [ 990.882890][T24732] ? __sys_recvmsg+0x2a0/0x2a0 [ 990.887714][T24732] ? common_file_perm+0x171/0x1c0 [ 990.892803][T24732] ? __fget_files+0x3fc/0x460 [ 990.897530][T24732] __x64_sys_recvmsg+0x20d/0x2e0 [ 990.902502][T24732] ? ___sys_recvmsg+0x590/0x590 [ 990.907410][T24732] ? lockdep_hardirqs_on+0x94/0x140 [ 990.912644][T24732] do_syscall_64+0x4c/0xa0 [ 990.917088][T24732] ? clear_bhb_loop+0x60/0xb0 [ 990.921785][T24732] ? clear_bhb_loop+0x60/0xb0 [ 990.926493][T24732] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 990.932422][T24732] RIP: 0033:0x7f408bf9e159 [ 990.936874][T24732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.956513][T24732] RSP: 002b:00007f408ce87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 990.964956][T24732] RAX: ffffffffffffffda RBX: 00007f408c225fa0 RCX: 00007f408bf9e159 [ 990.972951][T24732] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 990.980957][T24732] RBP: 00007f408ce87090 R08: 0000000000000000 R09: 0000000000000000 [ 990.988958][T24732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.997041][T24732] R13: 00007f408c226038 R14: 00007f408c225fa0 R15: 00007ffdba901508 [ 991.005060][T24732] [ 991.219264][T24740] netlink: 'syz.4.6508': attribute type 10 has an invalid length. [ 991.268207][T24740] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.275706][T24740] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.355529][T24740] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.362964][T24740] bridge0: port 2(bridge_slave_1) entered listening state [ 991.371907][T24740] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.379115][T24740] bridge0: port 1(bridge_slave_0) entered listening state [ 991.456847][T24740] team0: Port device bridge0 added [ 991.681719][T24755] __nla_validate_parse: 4 callbacks suppressed [ 991.681758][T24755] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6514'. [ 991.739810][T24755] netlink: 'syz.0.6514': attribute type 2 has an invalid length. [ 991.757280][T24755] netlink: 'syz.0.6514': attribute type 1 has an invalid length. [ 991.774970][T24755] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6514'. [ 995.210681][T24792] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.218067][T24792] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.294723][T24796] device bridge_slave_1 left promiscuous mode [ 995.303351][T24796] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.319604][T24796] device bridge_slave_0 left promiscuous mode [ 995.325902][T24796] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.348065][T24810] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.6530'. [ 995.386694][T24810] netlink: 'syz.2.6530': attribute type 2 has an invalid length. [ 995.395213][T24810] netlink: 'syz.2.6530': attribute type 1 has an invalid length. [ 995.403354][T24810] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6530'. [ 995.755345][T24820] device macvlan0 entered promiscuous mode [ 995.819869][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.826282][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.023006][T24831] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.6538'. [ 996.072383][T24831] netlink: 'syz.1.6538': attribute type 2 has an invalid length. [ 996.082614][T24831] netlink: 'syz.1.6538': attribute type 1 has an invalid length. [ 996.092374][T24831] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6538'. [ 997.897738][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 999.343766][T24862] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.6547'. [ 999.370003][T24862] netlink: 'syz.1.6547': attribute type 2 has an invalid length. [ 999.379182][T24862] netlink: 'syz.1.6547': attribute type 1 has an invalid length. [ 999.387063][T24862] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6547'. [ 999.810399][T24890] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.6555'. [ 999.931416][T24890] netlink: 'syz.4.6555': attribute type 2 has an invalid length. [ 999.949689][T24890] netlink: 'syz.4.6555': attribute type 1 has an invalid length. [ 999.966529][T24890] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.6555'. [ 1000.363021][T24909] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1003.310502][T24935] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.6569'. [ 1003.341511][T24935] netlink: 'syz.1.6569': attribute type 2 has an invalid length. [ 1003.365220][T24935] netlink: 'syz.1.6569': attribute type 1 has an invalid length. [ 1003.378122][T24935] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6569'. [ 1003.693946][T24948] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.6574'. [ 1003.791578][T24948] netlink: 'syz.3.6574': attribute type 2 has an invalid length. [ 1003.818131][T24948] netlink: 'syz.3.6574': attribute type 1 has an invalid length. [ 1003.835364][T24948] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6574'. [ 1004.039896][T24963] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1004.283094][T24975] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6583'. [ 1004.310571][T24975] netlink: 'syz.0.6583': attribute type 2 has an invalid length. [ 1004.327854][T24975] netlink: 'syz.0.6583': attribute type 1 has an invalid length. [ 1004.349142][T24975] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6583'. [ 1005.101384][T24999] delete_channel: no stack [ 1005.304430][T25017] netlink: 'syz.2.6596': attribute type 2 has an invalid length. [ 1005.319007][T25017] netlink: 'syz.2.6596': attribute type 1 has an invalid length. [ 1005.370317][T25017] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6596'. [ 1006.028026][T25052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.035280][T25052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.154667][T25052] device bridge_slave_1 left promiscuous mode [ 1006.179946][T25052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.261475][T25052] device bridge_slave_0 left promiscuous mode [ 1006.282922][T25052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.334630][T25064] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1006.340885][T25052] team0: Port device bridge0 removed [ 1006.405402][T25068] netlink: 'syz.3.6613': attribute type 2 has an invalid length. [ 1006.425288][T25068] netlink: 'syz.3.6613': attribute type 1 has an invalid length. [ 1006.434553][T25068] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6613'. [ 1006.912584][T25084] FAULT_INJECTION: forcing a failure. [ 1006.912584][T25084] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.983050][T25084] CPU: 1 PID: 25084 Comm: syz.0.6619 Not tainted syzkaller #0 [ 1006.990576][T25084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1007.000651][T25084] Call Trace: [ 1007.003949][T25084] [ 1007.006892][T25084] dump_stack_lvl+0x188/0x24e [ 1007.011630][T25084] ? show_regs_print_info+0x12/0x12 [ 1007.016851][T25084] ? load_image+0x410/0x410 [ 1007.021382][T25084] ? __might_sleep+0xd0/0xd0 [ 1007.025990][T25084] ? __lock_acquire+0x7c40/0x7c40 [ 1007.031041][T25084] should_fail_ex+0x390/0x4c0 [ 1007.035748][T25084] should_failslab+0x5/0x20 [ 1007.040274][T25084] slab_pre_alloc_hook+0x59/0x300 [ 1007.045319][T25084] ? tomoyo_encode+0x28a/0x550 [ 1007.050136][T25084] __kmem_cache_alloc_node+0x4f/0x270 [ 1007.055518][T25084] ? tomoyo_encode+0x28a/0x550 [ 1007.060285][T25084] __kmalloc+0xa3/0x240 [ 1007.064451][T25084] tomoyo_encode+0x28a/0x550 [ 1007.069083][T25084] tomoyo_realpath_from_path+0x578/0x5c0 [ 1007.074716][T25084] ? tomoyo_domain+0xd2/0x120 [ 1007.079391][T25084] ? tomoyo_path_number_perm+0x205/0x650 [ 1007.085019][T25084] tomoyo_path_number_perm+0x22f/0x650 [ 1007.090476][T25084] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1007.095933][T25084] ? ktime_get+0x7b/0x270 [ 1007.100276][T25084] ? __fget_files+0x28/0x460 [ 1007.104869][T25084] security_file_ioctl+0x6c/0xa0 [ 1007.109801][T25084] __se_sys_ioctl+0x48/0x170 [ 1007.114396][T25084] do_syscall_64+0x4c/0xa0 [ 1007.118804][T25084] ? clear_bhb_loop+0x60/0xb0 [ 1007.123472][T25084] ? clear_bhb_loop+0x60/0xb0 [ 1007.128140][T25084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1007.134026][T25084] RIP: 0033:0x7f408bf9e159 [ 1007.138433][T25084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.158031][T25084] RSP: 002b:00007f408ce87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1007.166438][T25084] RAX: ffffffffffffffda RBX: 00007f408c225fa0 RCX: 00007f408bf9e159 [ 1007.174404][T25084] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 0000000000000008 [ 1007.182368][T25084] RBP: 00007f408ce87090 R08: 0000000000000000 R09: 0000000000000000 [ 1007.190333][T25084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1007.198294][T25084] R13: 00007f408c226038 R14: 00007f408c225fa0 R15: 00007ffdba901508 [ 1007.206271][T25084] [ 1007.317912][T25084] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1007.639124][T25107] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6627'. [ 1008.477200][T21961] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 1008.955619][T25152] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.6642'. [ 1008.988080][T25152] validate_nla: 2 callbacks suppressed [ 1008.988182][T25152] netlink: 'syz.3.6642': attribute type 2 has an invalid length. [ 1009.022027][T25152] netlink: 'syz.3.6642': attribute type 1 has an invalid length. [ 1009.030799][T25152] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6642'. [ 1009.667984][T25180] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.6655'. [ 1009.701876][T25180] netlink: 'syz.4.6655': attribute type 2 has an invalid length. [ 1009.718033][T25180] netlink: 'syz.4.6655': attribute type 1 has an invalid length. [ 1009.735283][T25180] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.6655'. [ 1010.029640][T25206] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1010.753023][T25230] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.6668'. [ 1010.807755][T25230] netlink: 'syz.2.6668': attribute type 2 has an invalid length. [ 1010.816691][T25230] netlink: 'syz.2.6668': attribute type 1 has an invalid length. [ 1010.837868][T25230] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6668'. [ 1011.742054][T25269] netlink: 'syz.1.6680': attribute type 10 has an invalid length. [ 1011.811647][T25269] team0: Device vxcan1 is of different type [ 1011.852490][T25274] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6682'. [ 1011.940252][T25274] netlink: 'syz.0.6682': attribute type 2 has an invalid length. [ 1011.953751][T25274] netlink: 'syz.0.6682': attribute type 1 has an invalid length. [ 1011.966792][T25274] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6682'. [ 1012.083718][T25276] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1012.278094][T25290] netlink: 'syz.4.6685': attribute type 20 has an invalid length. [ 1012.519704][T25290] device syzkaller0 entered promiscuous mode [ 1014.652598][T25325] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.6697'. [ 1014.836293][T25325] validate_nla: 7 callbacks suppressed [ 1014.836330][T25325] netlink: 'syz.1.6697': attribute type 2 has an invalid length. [ 1014.853087][T25325] netlink: 'syz.1.6697': attribute type 1 has an invalid length. [ 1014.863776][T25325] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6697'. [ 1015.456609][T25352] device syzkaller0 entered promiscuous mode [ 1015.479266][T25352] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1016.139204][T25377] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.6713'. [ 1016.267495][T25377] netlink: 'syz.2.6713': attribute type 2 has an invalid length. [ 1016.277583][T25377] netlink: 'syz.2.6713': attribute type 1 has an invalid length. [ 1016.292095][T25377] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6713'. [ 1016.478736][T25387] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1016.918655][T25397] netlink: 'syz.0.6719': attribute type 2 has an invalid length. [ 1016.928612][T25397] netlink: 'syz.0.6719': attribute type 2 has an invalid length. [ 1016.937392][T25397] netlink: 198388 bytes leftover after parsing attributes in process `syz.0.6719'. [ 1017.168761][T21961] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 1017.292493][T25415] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1017.474336][T25424] netlink: 'syz.2.6729': attribute type 2 has an invalid length. [ 1017.502221][T25424] netlink: 'syz.2.6729': attribute type 1 has an invalid length. [ 1017.528815][T25424] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6729'. [ 1017.760360][T21961] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 1017.773603][T25437] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1018.066675][T25448] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1021.173030][T25469] netlink: 'syz.2.6742': attribute type 2 has an invalid length. [ 1021.182450][T25469] netlink: 'syz.2.6742': attribute type 1 has an invalid length. [ 1021.191247][T25469] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6742'. [ 1022.374880][T25523] netlink: 'syz.4.6758': attribute type 2 has an invalid length. [ 1022.399034][T25523] netlink: 'syz.4.6758': attribute type 1 has an invalid length. [ 1022.468449][T25523] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.6758'. [ 1022.537865][T25527] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1023.436850][T25566] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6772'. [ 1023.500698][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 1023.671173][T25566] netlink: 'syz.0.6772': attribute type 2 has an invalid length. [ 1023.695635][T25566] netlink: 'syz.0.6772': attribute type 1 has an invalid length. [ 1023.706728][T25566] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6772'. [ 1024.275384][T25606] FAULT_INJECTION: forcing a failure. [ 1024.275384][T25606] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.303825][T25606] CPU: 0 PID: 25606 Comm: syz.0.6785 Not tainted syzkaller #0 [ 1024.311343][T25606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1024.321761][T25606] Call Trace: [ 1024.325057][T25606] [ 1024.328000][T25606] dump_stack_lvl+0x188/0x24e [ 1024.332704][T25606] ? show_regs_print_info+0x12/0x12 [ 1024.337933][T25606] ? load_image+0x410/0x410 [ 1024.342465][T25606] ? __might_sleep+0xd0/0xd0 [ 1024.347080][T25606] ? __lock_acquire+0x7c40/0x7c40 [ 1024.352159][T25606] should_fail_ex+0x390/0x4c0 [ 1024.356875][T25606] should_failslab+0x5/0x20 [ 1024.361403][T25606] slab_pre_alloc_hook+0x59/0x300 [ 1024.366471][T25606] kmem_cache_alloc_node+0x5a/0x310 [ 1024.371698][T25606] ? __alloc_skb+0xf9/0x7d0 [ 1024.376230][T25606] __alloc_skb+0xf9/0x7d0 [ 1024.380579][T25606] tcp_stream_alloc_skb+0x3e/0x330 [ 1024.385715][T25606] tcp_sendmsg_locked+0xca4/0x39e0 [ 1024.390877][T25606] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1024.396895][T25606] ? tcp_set_state+0x520/0x520 [ 1024.401794][T25606] tcp_sendmsg+0x2b/0x40 [ 1024.406065][T25606] ? inet_send_prepare+0x250/0x250 [ 1024.411197][T25606] ____sys_sendmsg+0x5ed/0x9a0 [ 1024.415995][T25606] ? __sys_sendmsg_sock+0x30/0x30 [ 1024.421053][T25606] ? __import_iovec+0x306/0x510 [ 1024.425941][T25606] ? import_iovec+0x6f/0xa0 [ 1024.430470][T25606] ___sys_sendmsg+0x2a2/0x360 [ 1024.435169][T25606] ? __sys_sendmsg+0x2a0/0x2a0 [ 1024.439953][T25606] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1024.445703][T25606] __se_sys_sendmsg+0x1c3/0x2b0 [ 1024.450577][T25606] ? __x64_sys_sendmsg+0x80/0x80 [ 1024.455535][T25606] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1024.461447][T25606] do_syscall_64+0x4c/0xa0 [ 1024.465877][T25606] ? clear_bhb_loop+0x60/0xb0 [ 1024.470554][T25606] ? clear_bhb_loop+0x60/0xb0 [ 1024.475233][T25606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1024.481159][T25606] RIP: 0033:0x7f408bf9e159 [ 1024.485570][T25606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.505173][T25606] RSP: 002b:00007f408ce87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.513860][T25606] RAX: ffffffffffffffda RBX: 00007f408c225fa0 RCX: 00007f408bf9e159 [ 1024.521828][T25606] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000007 [ 1024.529797][T25606] RBP: 00007f408ce87090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.537762][T25606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.545731][T25606] R13: 00007f408c226038 R14: 00007f408c225fa0 R15: 00007ffdba901508 [ 1024.553716][T25606] [ 1024.798766][T25626] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.6790'. [ 1024.880616][T25607] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1025.102678][T25626] netlink: 'syz.2.6790': attribute type 2 has an invalid length. [ 1025.114870][T25626] netlink: 'syz.2.6790': attribute type 1 has an invalid length. [ 1025.124261][T25626] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6790'. [ 1025.948193][T21961] Bluetooth: hci4: ISO packet for unknown connection handle 15 [ 1026.107974][T25663] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.6801'. [ 1026.164572][T25663] netlink: 'syz.2.6801': attribute type 2 has an invalid length. [ 1026.195941][T25663] netlink: 'syz.2.6801': attribute type 1 has an invalid length. [ 1026.229497][T25663] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6801'. [ 1027.966900][T25695] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1028.582703][T25716] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6815'. [ 1028.704140][T25716] netlink: 'syz.0.6815': attribute type 2 has an invalid length. [ 1028.720720][T25716] netlink: 'syz.0.6815': attribute type 1 has an invalid length. [ 1028.738835][T25716] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6815'. [ 1028.834614][T25719] netlink: 'syz.3.6816': attribute type 15 has an invalid length. [ 1028.867707][T25719] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6816'. [ 1029.840824][T25755] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1029.943206][T25768] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.6831'. [ 1030.331329][T25768] netlink: 'syz.1.6831': attribute type 2 has an invalid length. [ 1030.351051][T25768] netlink: 'syz.1.6831': attribute type 1 has an invalid length. [ 1030.361044][T25768] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6831'. [ 1031.396446][T25816] FAULT_INJECTION: forcing a failure. [ 1031.396446][T25816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.420001][T25817] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.6848'. [ 1031.426502][T25816] CPU: 1 PID: 25816 Comm: syz.2.6847 Not tainted syzkaller #0 [ 1031.436742][T25816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1031.446957][T25816] Call Trace: [ 1031.450272][T25816] [ 1031.453238][T25816] dump_stack_lvl+0x188/0x24e [ 1031.457980][T25816] ? show_regs_print_info+0x12/0x12 [ 1031.463230][T25816] ? load_image+0x410/0x410 [ 1031.467786][T25816] ? __lock_acquire+0x7c40/0x7c40 [ 1031.472882][T25816] should_fail_ex+0x390/0x4c0 [ 1031.477628][T25816] _copy_from_user+0x2c/0x170 [ 1031.482355][T25816] ___sys_sendmsg+0x1c3/0x360 [ 1031.487092][T25816] ? __sys_sendmsg+0x2a0/0x2a0 [ 1031.491988][T25816] ? __lock_acquire+0x7c40/0x7c40 [ 1031.497132][T25816] __se_sys_sendmsg+0x1c3/0x2b0 [ 1031.502040][T25816] ? __x64_sys_sendmsg+0x80/0x80 [ 1031.507061][T25816] ? lockdep_hardirqs_on+0x94/0x140 [ 1031.512329][T25816] do_syscall_64+0x4c/0xa0 [ 1031.516777][T25816] ? clear_bhb_loop+0x60/0xb0 [ 1031.521484][T25816] ? clear_bhb_loop+0x60/0xb0 [ 1031.526722][T25816] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1031.532745][T25816] RIP: 0033:0x7ff4d4d9e159 [ 1031.537194][T25816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.537681][T25817] netlink: 'syz.0.6848': attribute type 2 has an invalid length. [ 1031.556818][T25816] RSP: 002b:00007ff4d5caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.556851][T25816] RAX: ffffffffffffffda RBX: 00007ff4d5025fa0 RCX: 00007ff4d4d9e159 [ 1031.556864][T25816] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1031.556885][T25816] RBP: 00007ff4d5caf090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.556898][T25816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.556910][T25816] R13: 00007ff4d5026038 R14: 00007ff4d5025fa0 R15: 00007fff903fc308 [ 1031.556965][T25816] [ 1031.640613][T25817] netlink: 'syz.0.6848': attribute type 1 has an invalid length. [ 1031.650443][T25817] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6848'. [ 1032.261804][T25842] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1032.657303][T25859] netlink: 'syz.0.6860': attribute type 3 has an invalid length. [ 1032.680979][T25859] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.6860'. [ 1033.102213][T25872] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.6864'. [ 1033.278935][T25872] netlink: 'syz.1.6864': attribute type 2 has an invalid length. [ 1033.330929][T25872] netlink: 'syz.1.6864': attribute type 1 has an invalid length. [ 1033.398135][T25872] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6864'. [ 1034.431241][T25912] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1034.763435][T25922] netlink: 'syz.4.6880': attribute type 2 has an invalid length. [ 1034.800686][T25922] netlink: 'syz.4.6880': attribute type 1 has an invalid length. [ 1034.884434][T25922] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.6880'. [ 1035.209132][T25943] FAULT_INJECTION: forcing a failure. [ 1035.209132][T25943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.242912][T25943] CPU: 1 PID: 25943 Comm: syz.1.6887 Not tainted syzkaller #0 [ 1035.250493][T25943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1035.260573][T25943] Call Trace: [ 1035.263873][T25943] [ 1035.266819][T25943] dump_stack_lvl+0x188/0x24e [ 1035.271524][T25943] ? show_regs_print_info+0x12/0x12 [ 1035.276748][T25943] ? load_image+0x410/0x410 [ 1035.281282][T25943] ? __lock_acquire+0x7c40/0x7c40 [ 1035.286341][T25943] should_fail_ex+0x390/0x4c0 [ 1035.291050][T25943] _copy_from_user+0x2c/0x170 [ 1035.295752][T25943] ___sys_sendmsg+0x1c3/0x360 [ 1035.300460][T25943] ? __sys_sendmsg+0x2a0/0x2a0 [ 1035.305261][T25943] ? __lock_acquire+0x7c40/0x7c40 [ 1035.310336][T25943] __se_sys_sendmsg+0x1c3/0x2b0 [ 1035.315218][T25943] ? __x64_sys_sendmsg+0x80/0x80 [ 1035.320196][T25943] ? lockdep_hardirqs_on+0x94/0x140 [ 1035.325421][T25943] do_syscall_64+0x4c/0xa0 [ 1035.329859][T25943] ? clear_bhb_loop+0x60/0xb0 [ 1035.334549][T25943] ? clear_bhb_loop+0x60/0xb0 [ 1035.339241][T25943] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1035.345155][T25943] RIP: 0033:0x7f3d75f9e159 [ 1035.349584][T25943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.369207][T25943] RSP: 002b:00007f3d741f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1035.377647][T25943] RAX: ffffffffffffffda RBX: 00007f3d76225fa0 RCX: 00007f3d75f9e159 [ 1035.385642][T25943] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1035.393635][T25943] RBP: 00007f3d741f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.401628][T25943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.409622][T25943] R13: 00007f3d76226038 R14: 00007f3d76225fa0 R15: 00007ffc52756d58 [ 1035.417648][T25943] [ 1036.134236][T25976] netlink: 'syz.3.6897': attribute type 2 has an invalid length. [ 1036.162046][T25976] netlink: 'syz.3.6897': attribute type 1 has an invalid length. [ 1036.173083][T25976] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6897'. [ 1036.232679][T25979] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1037.442027][T26018] netlink: 'syz.4.6912': attribute type 3 has an invalid length. [ 1037.508645][T26018] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6912'. [ 1037.639127][T26020] netlink: 'syz.2.6911': attribute type 2 has an invalid length. [ 1037.663252][T26020] netlink: 'syz.2.6911': attribute type 1 has an invalid length. [ 1037.680104][T26020] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6911'. [ 1038.285393][T26051] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1039.745082][T26080] FAULT_INJECTION: forcing a failure. [ 1039.745082][T26080] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.777565][T26080] CPU: 1 PID: 26080 Comm: syz.4.6930 Not tainted syzkaller #0 [ 1039.785088][T26080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1039.795166][T26080] Call Trace: [ 1039.798448][T26080] [ 1039.801398][T26080] dump_stack_lvl+0x188/0x24e [ 1039.806076][T26080] ? show_regs_print_info+0x12/0x12 [ 1039.811278][T26080] ? load_image+0x410/0x410 [ 1039.815803][T26080] ? __might_sleep+0xd0/0xd0 [ 1039.820389][T26080] ? __lock_acquire+0x7c40/0x7c40 [ 1039.825423][T26080] should_fail_ex+0x390/0x4c0 [ 1039.830106][T26080] should_failslab+0x5/0x20 [ 1039.834606][T26080] slab_pre_alloc_hook+0x59/0x300 [ 1039.839645][T26080] ? sk_prot_alloc+0xe7/0x210 [ 1039.844324][T26080] __kmem_cache_alloc_node+0x4f/0x270 [ 1039.849697][T26080] ? sk_prot_alloc+0xe7/0x210 [ 1039.854374][T26080] __kmalloc+0xa3/0x240 [ 1039.858537][T26080] sk_prot_alloc+0xe7/0x210 [ 1039.863032][T26080] ? sk_alloc+0x20/0x330 [ 1039.867270][T26080] sk_alloc+0x36/0x330 [ 1039.871331][T26080] ? bpf_ctx_init+0x154/0x190 [ 1039.876004][T26080] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1039.881370][T26080] ? __fget_files+0x28/0x460 [ 1039.885977][T26080] ? __fget_files+0x3fc/0x460 [ 1039.890659][T26080] ? cpu_online+0xa0/0xa0 [ 1039.894986][T26080] bpf_prog_test_run+0x31c/0x390 [ 1039.899931][T26080] __sys_bpf+0x62b/0x780 [ 1039.904180][T26080] ? bpf_link_show_fdinfo+0x380/0x380 [ 1039.909560][T26080] ? lock_chain_count+0x20/0x20 [ 1039.914414][T26080] __x64_sys_bpf+0x78/0x90 [ 1039.918828][T26080] do_syscall_64+0x4c/0xa0 [ 1039.923238][T26080] ? clear_bhb_loop+0x60/0xb0 [ 1039.927906][T26080] ? clear_bhb_loop+0x60/0xb0 [ 1039.932577][T26080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1039.938471][T26080] RIP: 0033:0x7f120a59e159 [ 1039.942881][T26080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.962484][T26080] RSP: 002b:00007f120b440028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1039.970896][T26080] RAX: ffffffffffffffda RBX: 00007f120a825fa0 RCX: 00007f120a59e159 [ 1039.978862][T26080] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1039.986826][T26080] RBP: 00007f120b440090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.994788][T26080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.002856][T26080] R13: 00007f120a826038 R14: 00007f120a825fa0 R15: 00007ffd42437f98 [ 1040.010840][T26080] [ 1040.037293][T26076] netlink: 'syz.2.6927': attribute type 2 has an invalid length. [ 1040.039581][T26084] FAULT_INJECTION: forcing a failure. [ 1040.039581][T26084] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.056442][T26076] netlink: 'syz.2.6927': attribute type 1 has an invalid length. [ 1040.066867][T26084] CPU: 0 PID: 26084 Comm: syz.3.6929 Not tainted syzkaller #0 [ 1040.069262][T26076] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6927'. [ 1040.075899][T26084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1040.075913][T26084] Call Trace: [ 1040.075920][T26084] [ 1040.075928][T26084] dump_stack_lvl+0x188/0x24e [ 1040.075953][T26084] ? inet_diag_bc_sk+0x10c0/0x10c0 [ 1040.075979][T26084] ? show_regs_print_info+0x12/0x12 [ 1040.075998][T26084] ? load_image+0x410/0x410 [ 1040.076026][T26084] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1040.076054][T26084] should_fail_ex+0x390/0x4c0 [ 1040.076084][T26084] should_failslab+0x5/0x20 [ 1040.076101][T26084] slab_pre_alloc_hook+0x59/0x300 [ 1040.076128][T26084] kmem_cache_alloc+0x56/0x2f0 [ 1040.076145][T26084] ? skb_clone+0x1e7/0x370 [ 1040.076169][T26084] skb_clone+0x1e7/0x370 [ 1040.154549][T26084] __netlink_deliver_tap+0x3e4/0x7e0 [ 1040.159873][T26084] ? netlink_deliver_tap+0x2e/0x1b0 [ 1040.165085][T26084] netlink_deliver_tap+0x19c/0x1b0 [ 1040.170206][T26084] netlink_dump+0x80f/0xcd0 [ 1040.174747][T26084] ? netlink_lookup+0x200/0x200 [ 1040.179623][T26084] ? __inet_diag_dump_start+0x805/0x970 [ 1040.185208][T26084] __netlink_dump_start+0x52c/0x6f0 [ 1040.190429][T26084] inet_diag_rcv_msg_compat+0x207/0x420 [ 1040.196001][T26084] ? __inet_diag_dump+0x380/0x380 [ 1040.201091][T26084] ? sock_diag_rcv_msg+0x137/0x5e0 [ 1040.206230][T26084] ? inet_diag_rcv_msg_compat+0x420/0x420 [ 1040.211977][T26084] ? inet_diag_dump_start_compat+0x20/0x20 [ 1040.217813][T26084] ? inet_diag_dump+0x50/0x50 [ 1040.222524][T26084] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1040.228720][T26084] ? __inet_diag_dump+0x380/0x380 [ 1040.233774][T26084] sock_diag_rcv_msg+0x3c7/0x5e0 [ 1040.238734][T26084] netlink_rcv_skb+0x1ef/0x440 [ 1040.243524][T26084] ? sock_diag_bind+0xa0/0xa0 [ 1040.248220][T26084] ? netlink_ack+0x1160/0x1160 [ 1040.253018][T26084] ? netlink_deliver_tap+0x2e/0x1b0 [ 1040.258242][T26084] sock_diag_rcv+0x26/0x40 [ 1040.262683][T26084] netlink_unicast+0x7ad/0x920 [ 1040.267484][T26084] netlink_sendmsg+0x8ad/0xbd0 [ 1040.272282][T26084] ? netlink_getsockopt+0x550/0x550 [ 1040.277542][T26084] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1040.283106][T26084] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1040.288381][T26084] ? security_socket_sendmsg+0x7c/0xa0 [ 1040.293831][T26084] ? netlink_getsockopt+0x550/0x550 [ 1040.299045][T26084] ____sys_sendmsg+0x5ed/0x9a0 [ 1040.303817][T26084] ? __sys_sendmsg_sock+0x30/0x30 [ 1040.308841][T26084] ? __import_iovec+0x306/0x510 [ 1040.313721][T26084] ? import_iovec+0x6f/0xa0 [ 1040.318238][T26084] ___sys_sendmsg+0x2a2/0x360 [ 1040.322909][T26084] ? __sys_sendmsg+0x2a0/0x2a0 [ 1040.327688][T26084] ? __lock_acquire+0x7c40/0x7c40 [ 1040.332764][T26084] __se_sys_sendmsg+0x1c3/0x2b0 [ 1040.337647][T26084] ? ct_nmi_exit+0x145/0x1c0 [ 1040.342270][T26084] ? __x64_sys_sendmsg+0x80/0x80 [ 1040.347248][T26084] ? lockdep_hardirqs_on+0x94/0x140 [ 1040.352484][T26084] do_syscall_64+0x4c/0xa0 [ 1040.356923][T26084] ? clear_bhb_loop+0x60/0xb0 [ 1040.361622][T26084] ? clear_bhb_loop+0x60/0xb0 [ 1040.366337][T26084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1040.372258][T26084] RIP: 0033:0x7f45d559e159 [ 1040.376699][T26084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.396415][T26084] RSP: 002b:00007f45d63d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1040.404858][T26084] RAX: ffffffffffffffda RBX: 00007f45d5825fa0 RCX: 00007f45d559e159 [ 1040.412858][T26084] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1040.420870][T26084] RBP: 00007f45d63d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.428867][T26084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1040.436869][T26084] R13: 00007f45d5826038 R14: 00007f45d5825fa0 R15: 00007ffdbd3c2a18 [ 1040.444880][T26084] [ 1040.633005][T26104] FAULT_INJECTION: forcing a failure. [ 1040.633005][T26104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1040.657955][T26104] CPU: 0 PID: 26104 Comm: syz.4.6936 Not tainted syzkaller #0 [ 1040.665487][T26104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1040.675570][T26104] Call Trace: [ 1040.678869][T26104] [ 1040.681829][T26104] dump_stack_lvl+0x188/0x24e [ 1040.686601][T26104] ? show_regs_print_info+0x12/0x12 [ 1040.691828][T26104] ? load_image+0x410/0x410 [ 1040.696370][T26104] ? __lock_acquire+0x7c40/0x7c40 [ 1040.701434][T26104] should_fail_ex+0x390/0x4c0 [ 1040.706146][T26104] _copy_from_user+0x2c/0x170 [ 1040.710849][T26104] __copy_msghdr+0x384/0x560 [ 1040.715464][T26104] ___sys_sendmsg+0x210/0x360 [ 1040.720163][T26104] ? __sys_sendmsg+0x2a0/0x2a0 [ 1040.724940][T26104] ? __lock_acquire+0x7c40/0x7c40 [ 1040.729981][T26104] __se_sys_sendmsg+0x1c3/0x2b0 [ 1040.734831][T26104] ? __x64_sys_sendmsg+0x80/0x80 [ 1040.739774][T26104] ? lockdep_hardirqs_on+0x94/0x140 [ 1040.744969][T26104] do_syscall_64+0x4c/0xa0 [ 1040.749380][T26104] ? clear_bhb_loop+0x60/0xb0 [ 1040.754054][T26104] ? clear_bhb_loop+0x60/0xb0 [ 1040.758750][T26104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1040.764644][T26104] RIP: 0033:0x7f120a59e159 [ 1040.769056][T26104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.788657][T26104] RSP: 002b:00007f120b440028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1040.797064][T26104] RAX: ffffffffffffffda RBX: 00007f120a825fa0 RCX: 00007f120a59e159 [ 1040.805028][T26104] RDX: 000000000004c810 RSI: 0000200000001280 RDI: 0000000000000003 [ 1040.812992][T26104] RBP: 00007f120b440090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.820958][T26104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.828922][T26104] R13: 00007f120a826038 R14: 00007f120a825fa0 R15: 00007ffd42437f98 [ 1040.836899][T26104] [ 1041.254536][T26127] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1041.266955][T26124] netlink: 'syz.0.6942': attribute type 2 has an invalid length. [ 1041.276510][T26124] netlink: 'syz.0.6942': attribute type 1 has an invalid length. [ 1041.295104][T26124] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6942'. [ 1042.240365][T26173] netlink: 'syz.0.6956': attribute type 2 has an invalid length. [ 1042.258652][T26173] netlink: 'syz.0.6956': attribute type 1 has an invalid length. [ 1042.267804][T26173] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6956'. [ 1043.022486][T26201] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6967'. [ 1043.146535][T26205] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1045.506878][T26201] bond0: (slave bond_slave_0): Releasing backup interface [ 1045.571639][T26201] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1045.954138][T26220] netlink: 'syz.1.6973': attribute type 2 has an invalid length. [ 1045.974621][T26220] netlink: 'syz.1.6973': attribute type 1 has an invalid length. [ 1046.016451][T26220] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.6973'. [ 1046.896245][T26254] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1047.058968][T26268] FAULT_INJECTION: forcing a failure. [ 1047.058968][T26268] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.087042][T26268] CPU: 1 PID: 26268 Comm: syz.1.6989 Not tainted syzkaller #0 [ 1047.094575][T26268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1047.104648][T26268] Call Trace: [ 1047.107954][T26268] [ 1047.110902][T26268] dump_stack_lvl+0x188/0x24e [ 1047.115603][T26268] ? show_regs_print_info+0x12/0x12 [ 1047.120821][T26268] ? load_image+0x410/0x410 [ 1047.125350][T26268] ? __might_sleep+0xd0/0xd0 [ 1047.129956][T26268] ? __lock_acquire+0x7c40/0x7c40 [ 1047.135005][T26268] should_fail_ex+0x390/0x4c0 [ 1047.139708][T26268] should_failslab+0x5/0x20 [ 1047.144219][T26268] slab_pre_alloc_hook+0x59/0x300 [ 1047.146305][T26261] netlink: 'syz.0.6987': attribute type 2 has an invalid length. [ 1047.149254][T26268] kmem_cache_alloc+0x56/0x2f0 [ 1047.149311][T26268] ? security_inode_alloc+0x30/0x110 [ 1047.149336][T26268] security_inode_alloc+0x30/0x110 [ 1047.149356][T26268] inode_init_always+0x910/0xc90 [ 1047.149381][T26268] new_inode_pseudo+0x91/0x1c0 [ 1047.149401][T26268] ? __ns_get_path+0x2c/0x650 [ 1047.149432][T26268] __ns_get_path+0x252/0x650 [ 1047.149459][T26268] ns_get_path+0x50/0x90 [ 1047.149482][T26268] proc_ns_get_link+0x168/0x290 [ 1047.149508][T26268] ? proc_ns_instantiate+0xf0/0xf0 [ 1047.149533][T26268] ? trace_event_raw_event_lock+0x230/0x230 [ 1047.149556][T26268] ? pick_link+0x10f/0xe20 [ 1047.149576][T26268] ? bpf_lsm_inode_follow_link+0x5/0x10 [ 1047.149599][T26268] ? security_inode_follow_link+0xb3/0x100 [ 1047.149620][T26268] ? proc_ns_instantiate+0xf0/0xf0 [ 1047.149644][T26268] pick_link+0x6ad/0xe20 [ 1047.149675][T26268] step_into+0xc14/0xee0 [ 1047.149699][T26268] ? rcu_read_lock_any_held+0xb0/0x130 [ 1047.149722][T26268] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 1047.149743][T26268] ? set_root+0x3a0/0x3a0 [ 1047.149762][T26268] ? d_splice_alias+0x110/0x320 [ 1047.149790][T26268] path_openat+0x15dd/0x2f10 [ 1047.149840][T26268] ? do_filp_open+0x420/0x420 [ 1047.149880][T26268] do_filp_open+0x1ee/0x420 [ 1047.149905][T26268] ? vfs_tmpfile+0x470/0x470 [ 1047.149947][T26268] ? _raw_spin_unlock+0x24/0x40 [ 1047.162800][T26261] netlink: 'syz.0.6987': attribute type 1 has an invalid length. [ 1047.167688][T26268] ? alloc_fd+0x590/0x640 [ 1047.167726][T26268] do_sys_openat2+0x14b/0x4f0 [ 1047.167747][T26268] ? ct_nmi_exit+0x145/0x1c0 [ 1047.167769][T26268] ? do_sys_open+0xe0/0xe0 [ 1047.167790][T26268] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1047.167819][T26268] ? lock_chain_count+0x20/0x20 [ 1047.167847][T26268] __x64_sys_openat+0x135/0x160 [ 1047.167883][T26268] do_syscall_64+0x4c/0xa0 [ 1047.167901][T26268] ? clear_bhb_loop+0x60/0xb0 [ 1047.167919][T26268] ? clear_bhb_loop+0x60/0xb0 [ 1047.167937][T26268] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1047.167962][T26268] RIP: 0033:0x7f3d75f5e98e [ 1047.167982][T26268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1047.167997][T26268] RSP: 002b:00007f3d741f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1047.168019][T26268] RAX: ffffffffffffffda RBX: 00007f3d741f66c0 RCX: 00007f3d75f5e98e [ 1047.168032][T26268] RDX: 0000000000000002 RSI: 00007f3d741f5f90 RDI: ffffffffffffff9c [ 1047.168045][T26268] RBP: 00007f3d741f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1047.168063][T26268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1047.168074][T26268] R13: 00007f3d76226038 R14: 00007f3d76225fa0 R15: 00007ffc52756d58 [ 1047.168104][T26268] [ 1047.494094][T26261] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.6987'. [ 1047.708205][T26281] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1049.265739][T26322] netlink: 'syz.0.7007': attribute type 3 has an invalid length. [ 1049.348529][T26325] netlink: 'syz.1.7004': attribute type 2 has an invalid length. [ 1049.356421][T26325] netlink: 'syz.1.7004': attribute type 1 has an invalid length. [ 1049.366371][T26322] netlink: 'syz.0.7007': attribute type 1 has an invalid length. [ 1049.375032][T26322] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.7007'. [ 1049.483957][T26325] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7004'. [ 1049.555215][T26328] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1050.220474][T26322] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7007'. [ 1050.878586][T26368] netlink: 'syz.0.7018': attribute type 2 has an invalid length. [ 1050.908074][T26368] netlink: 'syz.0.7018': attribute type 8 has an invalid length. [ 1050.917761][T26368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7018'. [ 1051.139167][T26375] netlink: 'syz.0.7021': attribute type 2 has an invalid length. [ 1051.149453][T26375] netlink: 'syz.0.7021': attribute type 1 has an invalid length. [ 1051.159145][T26375] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7021'. [ 1051.450990][T26395] FAULT_INJECTION: forcing a failure. [ 1051.450990][T26395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1051.466120][T26395] CPU: 1 PID: 26395 Comm: syz.0.7028 Not tainted syzkaller #0 [ 1051.473612][T26395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1051.483678][T26395] Call Trace: [ 1051.486963][T26395] [ 1051.489901][T26395] dump_stack_lvl+0x188/0x24e [ 1051.494610][T26395] ? show_regs_print_info+0x12/0x12 [ 1051.499819][T26395] ? load_image+0x410/0x410 [ 1051.504340][T26395] ? __lock_acquire+0x7c40/0x7c40 [ 1051.509398][T26395] should_fail_ex+0x390/0x4c0 [ 1051.514095][T26395] _copy_from_user+0x2c/0x170 [ 1051.518787][T26395] __sys_bpf+0x2ea/0x780 [ 1051.523044][T26395] ? bpf_link_show_fdinfo+0x380/0x380 [ 1051.528443][T26395] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1051.534623][T26395] __x64_sys_bpf+0x78/0x90 [ 1051.539089][T26395] do_syscall_64+0x4c/0xa0 [ 1051.543512][T26395] ? clear_bhb_loop+0x60/0xb0 [ 1051.548197][T26395] ? clear_bhb_loop+0x60/0xb0 [ 1051.552882][T26395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1051.558791][T26395] RIP: 0033:0x7f408bf9e159 [ 1051.563216][T26395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.582837][T26395] RSP: 002b:00007f408ce87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1051.591266][T26395] RAX: ffffffffffffffda RBX: 00007f408c225fa0 RCX: 00007f408bf9e159 [ 1051.599251][T26395] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 1051.607231][T26395] RBP: 00007f408ce87090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.615199][T26395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.623163][T26395] R13: 00007f408c226038 R14: 00007f408c225fa0 R15: 00007ffdba901508 [ 1051.631144][T26395] [ 1051.758257][T26396] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1052.464028][T26419] netlink: 'syz.4.7035': attribute type 21 has an invalid length. [ 1052.601055][T26427] FAULT_INJECTION: forcing a failure. [ 1052.601055][T26427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.644630][T26424] netlink: 'syz.2.7037': attribute type 2 has an invalid length. [ 1052.711759][T26424] netlink: 'syz.2.7037': attribute type 1 has an invalid length. [ 1052.747760][T26427] CPU: 0 PID: 26427 Comm: syz.3.7038 Not tainted syzkaller #0 [ 1052.754228][T26424] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7037'. [ 1052.755259][T26427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1052.755274][T26427] Call Trace: [ 1052.755281][T26427] [ 1052.755289][T26427] dump_stack_lvl+0x188/0x24e [ 1052.755317][T26427] ? show_regs_print_info+0x12/0x12 [ 1052.755337][T26427] ? load_image+0x410/0x410 [ 1052.755363][T26427] ? __lock_acquire+0x7c40/0x7c40 [ 1052.755389][T26427] ? snprintf+0xe5/0x140 [ 1052.755414][T26427] should_fail_ex+0x390/0x4c0 [ 1052.755444][T26427] _copy_to_user+0x2c/0x130 [ 1052.813765][T26427] simple_read_from_buffer+0xe3/0x150 [ 1052.819166][T26427] proc_fail_nth_read+0x1a6/0x220 [ 1052.824208][T26427] ? proc_fault_inject_write+0x310/0x310 [ 1052.829856][T26427] ? fsnotify_perm+0x248/0x550 [ 1052.834643][T26427] ? proc_fault_inject_write+0x310/0x310 [ 1052.840290][T26427] vfs_read+0x2db/0x960 [ 1052.844472][T26427] ? kernel_read+0x1e0/0x1e0 [ 1052.849080][T26427] ? __fget_files+0x28/0x460 [ 1052.853689][T26427] ? __fget_files+0x3fc/0x460 [ 1052.858392][T26427] ? __fdget_pos+0x2ae/0x360 [ 1052.862976][T26427] ? ksys_read+0x70/0x260 [ 1052.867294][T26427] ksys_read+0x14d/0x260 [ 1052.871535][T26427] ? vfs_write+0x9a0/0x9a0 [ 1052.875942][T26427] ? lockdep_hardirqs_on+0x94/0x140 [ 1052.881130][T26427] do_syscall_64+0x4c/0xa0 [ 1052.885534][T26427] ? clear_bhb_loop+0x60/0xb0 [ 1052.890199][T26427] ? clear_bhb_loop+0x60/0xb0 [ 1052.894875][T26427] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1052.900770][T26427] RIP: 0033:0x7f45d555e98e [ 1052.905194][T26427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1052.924818][T26427] RSP: 002b:00007f45d63d1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1052.933262][T26427] RAX: ffffffffffffffda RBX: 00007f45d63d26c0 RCX: 00007f45d555e98e [ 1052.941258][T26427] RDX: 000000000000000f RSI: 00007f45d63d20a0 RDI: 0000000000000007 [ 1052.949245][T26427] RBP: 00007f45d63d2090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.957235][T26427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.965240][T26427] R13: 00007f45d5826038 R14: 00007f45d5825fa0 R15: 00007ffdbd3c2a18 [ 1052.973247][T26427] [ 1053.759409][T26471] netlink: 'syz.2.7050': attribute type 3 has an invalid length. [ 1053.767209][T26471] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7050'. [ 1054.190040][T26488] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1054.329217][T26481] netlink: 'syz.1.7051': attribute type 2 has an invalid length. [ 1054.360176][T26481] netlink: 'syz.1.7051': attribute type 1 has an invalid length. [ 1054.393790][T26481] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7051'. [ 1054.666707][T26498] device syzkaller0 entered promiscuous mode [ 1056.772609][T26530] netlink: 'syz.4.7067': attribute type 2 has an invalid length. [ 1056.799907][T26530] netlink: 'syz.4.7067': attribute type 1 has an invalid length. [ 1056.829117][T26530] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7067'. [ 1057.022421][T26536] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1057.206166][T26556] netlink: 'syz.1.7073': attribute type 9 has an invalid length. [ 1057.223831][T26556] netlink: 90128 bytes leftover after parsing attributes in process `syz.1.7073'. [ 1057.259947][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1057.266359][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.031806][T26591] netlink: 'syz.0.7082': attribute type 2 has an invalid length. [ 1058.055565][T26591] netlink: 'syz.0.7082': attribute type 1 has an invalid length. [ 1058.068119][T26591] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7082'. [ 1058.903746][T26623] FAULT_INJECTION: forcing a failure. [ 1058.903746][T26623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.954235][T26623] CPU: 1 PID: 26623 Comm: syz.0.7093 Not tainted syzkaller #0 [ 1058.961763][T26623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1058.971915][T26623] Call Trace: [ 1058.975199][T26623] [ 1058.978137][T26623] dump_stack_lvl+0x188/0x24e [ 1058.982832][T26623] ? show_regs_print_info+0x12/0x12 [ 1058.988047][T26623] ? load_image+0x410/0x410 [ 1058.992582][T26623] ? __lock_acquire+0x7c40/0x7c40 [ 1058.997633][T26623] should_fail_ex+0x390/0x4c0 [ 1059.002343][T26623] _copy_from_user+0x2c/0x170 [ 1059.007042][T26623] ___sys_sendmsg+0x1c3/0x360 [ 1059.011743][T26623] ? __sys_sendmsg+0x2a0/0x2a0 [ 1059.016568][T26623] __se_sys_sendmsg+0x1c3/0x2b0 [ 1059.021432][T26623] ? perf_trace_preemptirq_template+0x268/0x320 [ 1059.027697][T26623] ? __x64_sys_sendmsg+0x80/0x80 [ 1059.032665][T26623] ? lockdep_hardirqs_on+0x94/0x140 [ 1059.037881][T26623] do_syscall_64+0x4c/0xa0 [ 1059.042309][T26623] ? clear_bhb_loop+0x60/0xb0 [ 1059.047006][T26623] ? clear_bhb_loop+0x60/0xb0 [ 1059.051695][T26623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1059.057609][T26623] RIP: 0033:0x7f408bf9e159 [ 1059.062036][T26623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.081748][T26623] RSP: 002b:00007f408ce87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1059.090181][T26623] RAX: ffffffffffffffda RBX: 00007f408c225fa0 RCX: 00007f408bf9e159 [ 1059.098167][T26623] RDX: 0000000004000000 RSI: 0000200000000380 RDI: 0000000000000007 [ 1059.106150][T26623] RBP: 00007f408ce87090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.114132][T26623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.122121][T26623] R13: 00007f408c226038 R14: 00007f408c225fa0 R15: 00007ffdba901508 [ 1059.130292][T26623] [ 1059.611361][T26640] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1059.993096][T26644] netlink: 'syz.4.7097': attribute type 2 has an invalid length. [ 1060.010456][T26644] netlink: 'syz.4.7097': attribute type 1 has an invalid length. [ 1060.031634][T26644] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7097'. [ 1060.934497][T26700] netlink: 'syz.3.7113': attribute type 3 has an invalid length. [ 1060.944147][T26700] netlink: 'syz.3.7113': attribute type 1 has an invalid length. [ 1060.956772][T26700] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.7113'. [ 1061.087762][T26708] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1061.567083][T26711] netlink: 'syz.2.7114': attribute type 2 has an invalid length. [ 1061.577087][T26711] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7114'. [ 1062.016211][T26735] validate_nla: 1 callbacks suppressed [ 1062.016231][T26735] netlink: 'syz.4.7122': attribute type 2 has an invalid length. [ 1062.076623][T26735] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.7122'. [ 1062.106703][T26734] device syzkaller0 entered promiscuous mode [ 1062.943664][T26762] FAULT_INJECTION: forcing a failure. [ 1062.943664][T26762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.963273][T26762] CPU: 1 PID: 26762 Comm: syz.0.7129 Not tainted syzkaller #0 [ 1062.970789][T26762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1062.980853][T26762] Call Trace: [ 1062.984139][T26762] [ 1062.987097][T26762] dump_stack_lvl+0x188/0x24e [ 1062.991796][T26762] ? show_regs_print_info+0x12/0x12 [ 1062.997002][T26762] ? load_image+0x410/0x410 [ 1063.001517][T26762] ? __lock_acquire+0x7c40/0x7c40 [ 1063.006551][T26762] ? snprintf+0xe5/0x140 [ 1063.010813][T26762] should_fail_ex+0x390/0x4c0 [ 1063.015519][T26762] _copy_to_user+0x2c/0x130 [ 1063.020048][T26762] simple_read_from_buffer+0xe3/0x150 [ 1063.025456][T26762] proc_fail_nth_read+0x1a6/0x220 [ 1063.030507][T26762] ? proc_fault_inject_write+0x310/0x310 [ 1063.036156][T26762] ? fsnotify_perm+0x248/0x550 [ 1063.040938][T26762] ? proc_fault_inject_write+0x310/0x310 [ 1063.046592][T26762] vfs_read+0x2db/0x960 [ 1063.050779][T26762] ? kernel_read+0x1e0/0x1e0 [ 1063.055391][T26762] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1063.061570][T26762] ? lockdep_hardirqs_on+0x94/0x140 [ 1063.066795][T26762] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1063.072986][T26762] ksys_read+0x14d/0x260 [ 1063.077257][T26762] ? vfs_write+0x9a0/0x9a0 [ 1063.081785][T26762] ? lockdep_hardirqs_on+0x94/0x140 [ 1063.087004][T26762] do_syscall_64+0x4c/0xa0 [ 1063.088433][T26766] netlink: 'syz.4.7131': attribute type 2 has an invalid length. [ 1063.091455][T26762] ? clear_bhb_loop+0x60/0xb0 [ 1063.091478][T26762] ? clear_bhb_loop+0x60/0xb0 [ 1063.091495][T26762] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1063.109113][T26766] netlink: 'syz.4.7131': attribute type 1 has an invalid length. [ 1063.114447][T26762] RIP: 0033:0x7f408bf5e98e [ 1063.114473][T26762] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1063.114486][T26762] RSP: 002b:00007f408ce65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1063.114506][T26762] RAX: ffffffffffffffda RBX: 00007f408ce666c0 RCX: 00007f408bf5e98e [ 1063.114519][T26762] RDX: 000000000000000f RSI: 00007f408ce660a0 RDI: 0000000000000005 [ 1063.114530][T26762] RBP: 00007f408ce66090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.114542][T26762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1063.114552][T26762] R13: 00007f408c226128 R14: 00007f408c226090 R15: 00007ffdba901508 [ 1063.114577][T26762] [ 1063.151961][T26766] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7131'. [ 1063.584031][T26781] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1063.663208][T26787] netlink: 'syz.4.7137': attribute type 6 has an invalid length. [ 1063.688347][T26787] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7137'. [ 1064.000833][T26787] netlink: 16046 bytes leftover after parsing attributes in process `syz.4.7137'. [ 1064.489485][T26802] FAULT_INJECTION: forcing a failure. [ 1064.489485][T26802] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.503418][T26802] CPU: 1 PID: 26802 Comm: syz.1.7140 Not tainted syzkaller #0 [ 1064.510926][T26802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1064.520999][T26802] Call Trace: [ 1064.524306][T26802] [ 1064.527250][T26802] dump_stack_lvl+0x188/0x24e [ 1064.531968][T26802] ? show_regs_print_info+0x12/0x12 [ 1064.537191][T26802] ? load_image+0x410/0x410 [ 1064.541808][T26802] ? perf_trace_lock+0xf8/0x390 [ 1064.546691][T26802] ? verify_lock_unused+0x140/0x140 [ 1064.551917][T26802] ? perf_trace_lock+0xf8/0x390 [ 1064.556794][T26802] should_fail_ex+0x390/0x4c0 [ 1064.561504][T26802] should_failslab+0x5/0x20 [ 1064.566025][T26802] slab_pre_alloc_hook+0x59/0x300 [ 1064.571070][T26802] kmem_cache_alloc+0x56/0x2f0 [ 1064.575848][T26802] ? skb_clone+0x1e7/0x370 [ 1064.580301][T26802] skb_clone+0x1e7/0x370 [ 1064.584570][T26802] __netlink_deliver_tap+0x3e4/0x7e0 [ 1064.589887][T26802] ? netlink_deliver_tap+0x2e/0x1b0 [ 1064.595108][T26802] netlink_deliver_tap+0x19c/0x1b0 [ 1064.600251][T26802] netlink_unicast+0x777/0x920 [ 1064.605049][T26802] netlink_sendmsg+0x8ad/0xbd0 [ 1064.609929][T26802] ? netlink_getsockopt+0x550/0x550 [ 1064.615185][T26802] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1064.620760][T26802] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1064.626067][T26802] ? security_socket_sendmsg+0x7c/0xa0 [ 1064.631548][T26802] ? netlink_getsockopt+0x550/0x550 [ 1064.636763][T26802] ____sys_sendmsg+0x5ed/0x9a0 [ 1064.641724][T26802] ? __sys_sendmsg_sock+0x30/0x30 [ 1064.646785][T26802] ? __import_iovec+0x306/0x510 [ 1064.651683][T26802] ? import_iovec+0x6f/0xa0 [ 1064.656225][T26802] ___sys_sendmsg+0x2a2/0x360 [ 1064.660940][T26802] ? __sys_sendmsg+0x2a0/0x2a0 [ 1064.665751][T26802] ? __lock_acquire+0x7c40/0x7c40 [ 1064.670841][T26802] __se_sys_sendmsg+0x1c3/0x2b0 [ 1064.675722][T26802] ? ct_nmi_exit+0x145/0x1c0 [ 1064.680443][T26802] ? __x64_sys_sendmsg+0x80/0x80 [ 1064.685415][T26802] ? lockdep_hardirqs_on+0x94/0x140 [ 1064.690647][T26802] do_syscall_64+0x4c/0xa0 [ 1064.695086][T26802] ? clear_bhb_loop+0x60/0xb0 [ 1064.699795][T26802] ? clear_bhb_loop+0x60/0xb0 [ 1064.704502][T26802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1064.710602][T26802] RIP: 0033:0x7f3d75f9e159 [ 1064.715045][T26802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.734681][T26802] RSP: 002b:00007f3d741f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.743128][T26802] RAX: ffffffffffffffda RBX: 00007f3d76225fa0 RCX: 00007f3d75f9e159 [ 1064.751130][T26802] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1064.759129][T26802] RBP: 00007f3d741f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.767122][T26802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.775117][T26802] R13: 00007f3d76226038 R14: 00007f3d76225fa0 R15: 00007ffc52756d58 [ 1064.783144][T26802] [ 1065.020873][T26810] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7144'. [ 1065.279494][T26821] netlink: 'syz.0.7145': attribute type 2 has an invalid length. [ 1065.308098][T26821] netlink: 'syz.0.7145': attribute type 1 has an invalid length. [ 1065.318043][T26821] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7145'. [ 1065.648622][T26840] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7149'. [ 1065.662821][T26840] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1065.684379][T26840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1066.109865][T26850] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1066.860377][T26877] netlink: 'syz.2.7161': attribute type 2 has an invalid length. [ 1066.877233][T26877] netlink: 'syz.2.7161': attribute type 1 has an invalid length. [ 1066.898465][T26877] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7161'. [ 1067.137151][T26884] netlink: 'syz.3.7165': attribute type 21 has an invalid length. [ 1067.184700][T26884] netlink: 'syz.3.7165': attribute type 1 has an invalid length. [ 1067.201705][T26884] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7165'. [ 1067.643429][T26916] FAULT_INJECTION: forcing a failure. [ 1067.643429][T26916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1067.679971][T26916] CPU: 1 PID: 26916 Comm: syz.4.7173 Not tainted syzkaller #0 [ 1067.687507][T26916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1067.697602][T26916] Call Trace: [ 1067.700899][T26916] [ 1067.703848][T26916] dump_stack_lvl+0x188/0x24e [ 1067.708556][T26916] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1067.714735][T26916] ? show_regs_print_info+0x12/0x12 [ 1067.719949][T26916] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1067.726136][T26916] should_fail_ex+0x390/0x4c0 [ 1067.730851][T26916] _copy_to_user+0x2c/0x130 [ 1067.735379][T26916] simple_read_from_buffer+0xe3/0x150 [ 1067.740778][T26916] proc_fail_nth_read+0x1a6/0x220 [ 1067.745833][T26916] ? proc_fault_inject_write+0x310/0x310 [ 1067.751493][T26916] ? fsnotify_perm+0x248/0x550 [ 1067.756282][T26916] ? proc_fault_inject_write+0x310/0x310 [ 1067.761932][T26916] vfs_read+0x2db/0x960 [ 1067.766219][T26916] ? kernel_read+0x1e0/0x1e0 [ 1067.770840][T26916] ? __fget_files+0x28/0x460 [ 1067.775456][T26916] ? __fget_files+0x3fc/0x460 [ 1067.780166][T26916] ? __fdget_pos+0x2ae/0x360 [ 1067.784780][T26916] ? ksys_read+0x70/0x260 [ 1067.789138][T26916] ksys_read+0x14d/0x260 [ 1067.793408][T26916] ? vfs_write+0x9a0/0x9a0 [ 1067.797858][T26916] do_syscall_64+0x4c/0xa0 [ 1067.802294][T26916] ? clear_bhb_loop+0x60/0xb0 [ 1067.806989][T26916] ? clear_bhb_loop+0x60/0xb0 [ 1067.811689][T26916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1067.817608][T26916] RIP: 0033:0x7f120a55e98e [ 1067.822043][T26916] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1067.841674][T26916] RSP: 002b:00007f120b43ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1067.850200][T26916] RAX: ffffffffffffffda RBX: 00007f120b4406c0 RCX: 00007f120a55e98e [ 1067.858190][T26916] RDX: 000000000000000f RSI: 00007f120b4400a0 RDI: 0000000000000005 [ 1067.866180][T26916] RBP: 00007f120b440090 R08: 0000000000000000 R09: 0000000000000000 [ 1067.874176][T26916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1067.882166][T26916] R13: 00007f120a826038 R14: 00007f120a825fa0 R15: 00007ffd42437f98 [ 1067.890260][T26916] [ 1068.051920][T26917] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1068.419161][T26929] netlink: 'syz.0.7177': attribute type 2 has an invalid length. [ 1068.508113][T26929] netlink: 'syz.0.7177': attribute type 1 has an invalid length. [ 1068.516079][T26929] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7177'. [ 1069.587719][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 1070.191110][T26978] netlink: 'syz.0.7193': attribute type 2 has an invalid length. [ 1070.201086][T26978] netlink: 'syz.0.7193': attribute type 1 has an invalid length. [ 1070.209871][T26978] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7193'. [ 1070.356832][T26980] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1071.584143][T27033] netlink: 'syz.3.7209': attribute type 2 has an invalid length. [ 1071.628818][T27033] netlink: 'syz.3.7209': attribute type 1 has an invalid length. [ 1071.673694][T27033] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7209'. [ 1072.769545][T27082] netlink: 'syz.2.7225': attribute type 2 has an invalid length. [ 1072.785931][T27082] netlink: 'syz.2.7225': attribute type 1 has an invalid length. [ 1072.806537][T27082] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7225'. [ 1073.534016][T27121] netlink: 'syz.0.7233': attribute type 10 has an invalid length. [ 1074.066356][T27136] netlink: 'syz.2.7238': attribute type 2 has an invalid length. [ 1074.079560][T27136] netlink: 'syz.2.7238': attribute type 1 has an invalid length. [ 1074.096817][T27136] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7238'. [ 1075.236425][T27171] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1075.373487][T27170] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7248'. [ 1075.398140][T27170] bridge_slave_1: default FDB implementation only supports local addresses [ 1075.513952][T27183] netlink: 'syz.3.7253': attribute type 2 has an invalid length. [ 1075.525029][T27183] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.7253'. [ 1075.534994][T27184] netlink: 'syz.3.7253': attribute type 2 has an invalid length. [ 1075.549520][T27184] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.7253'. [ 1075.616182][T27184] netlink: 'syz.3.7253': attribute type 21 has an invalid length. [ 1075.865907][T27203] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.7261'. [ 1075.896101][T27203] openvswitch: netlink: Flow actions attr not present in new flow. [ 1076.011994][T27207] netlink: 'syz.4.7262': attribute type 2 has an invalid length. [ 1076.022477][T27207] netlink: 'syz.4.7262': attribute type 1 has an invalid length. [ 1076.031662][T27207] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7262'. [ 1077.552481][T27251] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7278'. [ 1078.276318][T27284] validate_nla: 2 callbacks suppressed [ 1078.276336][T27284] netlink: 'syz.2.7288': attribute type 3 has an invalid length. [ 1078.299648][T27284] netlink: 'syz.2.7288': attribute type 1 has an invalid length. [ 1078.315428][T27284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7288'. [ 1078.437940][T27292] tipc: Started in network mode [ 1078.478010][T27292] tipc: Node identity 9215a268, cluster identity 4711 [ 1078.500041][T27292] tipc: Node number set to 2450891368 [ 1078.728608][T27290] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1078.770027][T27296] netlink: 'syz.1.7291': attribute type 2 has an invalid length. [ 1078.787012][T27296] netlink: 'syz.1.7291': attribute type 1 has an invalid length. [ 1078.797869][T27296] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7291'. [ 1079.097595][T27315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7296'. [ 1079.115307][T27315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7296'. [ 1079.126907][T27315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7296'. [ 1079.146176][T27315] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7296'. [ 1079.156136][T27319] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7296'. [ 1079.632638][T27339] IPv6: pim6reg1: Disabled Multicast RS [ 1080.042894][T27345] netlink: 'syz.0.7306': attribute type 2 has an invalid length. [ 1080.064851][T27345] netlink: 'syz.0.7306': attribute type 1 has an invalid length. [ 1080.080327][T27345] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7306'. [ 1080.158117][T27352] netlink: 'syz.2.7309': attribute type 3 has an invalid length. [ 1080.215718][T27352] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7309'. [ 1080.588369][T27364] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1080.733975][T27368] FAULT_INJECTION: forcing a failure. [ 1080.733975][T27368] name failslab, interval 1, probability 0, space 0, times 0 [ 1080.748308][T27368] CPU: 0 PID: 27368 Comm: syz.1.7312 Not tainted syzkaller #0 [ 1080.755838][T27368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1080.765936][T27368] Call Trace: [ 1080.769250][T27368] [ 1080.772218][T27368] dump_stack_lvl+0x188/0x24e [ 1080.776948][T27368] ? show_regs_print_info+0x12/0x12 [ 1080.782189][T27368] ? load_image+0x410/0x410 [ 1080.786748][T27368] ? __might_sleep+0xd0/0xd0 [ 1080.791382][T27368] ? __lock_acquire+0x7c40/0x7c40 [ 1080.796466][T27368] should_fail_ex+0x390/0x4c0 [ 1080.801207][T27368] should_failslab+0x5/0x20 [ 1080.805744][T27368] slab_pre_alloc_hook+0x59/0x300 [ 1080.810818][T27368] ? __lock_acquire+0x138a/0x7c40 [ 1080.815891][T27368] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1080.821667][T27368] __kmem_cache_alloc_node+0x4f/0x270 [ 1080.827097][T27368] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 1080.832916][T27368] __kmalloc+0xa3/0x240 [ 1080.837145][T27368] tomoyo_realpath_from_path+0xe2/0x5c0 [ 1080.842737][T27368] ? tomoyo_domain+0xd2/0x120 [ 1080.847474][T27368] ? tomoyo_path_number_perm+0x205/0x650 [ 1080.853136][T27368] tomoyo_path_number_perm+0x22f/0x650 [ 1080.858648][T27368] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1080.864165][T27368] ? common_file_perm+0x171/0x1c0 [ 1080.869333][T27368] ? __fget_files+0x28/0x460 [ 1080.874014][T27368] security_file_ioctl+0x6c/0xa0 [ 1080.878993][T27368] __se_sys_ioctl+0x48/0x170 [ 1080.883618][T27368] do_syscall_64+0x4c/0xa0 [ 1080.888064][T27368] ? clear_bhb_loop+0x60/0xb0 [ 1080.892771][T27368] ? clear_bhb_loop+0x60/0xb0 [ 1080.897522][T27368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1080.903447][T27368] RIP: 0033:0x7f3d75f9e159 [ 1080.907889][T27368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.927522][T27368] RSP: 002b:00007f3d741f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1080.935959][T27368] RAX: ffffffffffffffda RBX: 00007f3d76225fa0 RCX: 00007f3d75f9e159 [ 1080.943960][T27368] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 000000000000000e [ 1080.951959][T27368] RBP: 00007f3d741f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.959954][T27368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.967959][T27368] R13: 00007f3d76226038 R14: 00007f3d76225fa0 R15: 00007ffc52756d58 [ 1080.975998][T27368] [ 1081.034882][T27368] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1081.767048][T27396] netlink: 'syz.0.7321': attribute type 2 has an invalid length. [ 1081.798212][T27396] netlink: 'syz.0.7321': attribute type 1 has an invalid length. [ 1084.012631][T27472] FAULT_INJECTION: forcing a failure. [ 1084.012631][T27472] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.098335][T27472] CPU: 1 PID: 27472 Comm: syz.2.7343 Not tainted syzkaller #0 [ 1084.105868][T27472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1084.115957][T27472] Call Trace: [ 1084.119259][T27472] [ 1084.122224][T27472] dump_stack_lvl+0x188/0x24e [ 1084.126930][T27472] ? show_regs_print_info+0x12/0x12 [ 1084.132142][T27472] ? load_image+0x410/0x410 [ 1084.136636][T27472] ? __might_sleep+0xd0/0xd0 [ 1084.141226][T27472] ? __lock_acquire+0x7c40/0x7c40 [ 1084.146315][T27472] should_fail_ex+0x390/0x4c0 [ 1084.151022][T27472] should_failslab+0x5/0x20 [ 1084.155546][T27472] slab_pre_alloc_hook+0x59/0x300 [ 1084.160598][T27472] ? tomoyo_encode+0x28a/0x550 [ 1084.165394][T27472] __kmem_cache_alloc_node+0x4f/0x270 [ 1084.170798][T27472] ? tomoyo_encode+0x28a/0x550 [ 1084.175590][T27472] __kmalloc+0xa3/0x240 [ 1084.179780][T27472] tomoyo_encode+0x28a/0x550 [ 1084.184410][T27472] tomoyo_realpath_from_path+0x578/0x5c0 [ 1084.190084][T27472] ? tomoyo_domain+0xd2/0x120 [ 1084.194794][T27472] ? tomoyo_path_number_perm+0x205/0x650 [ 1084.200455][T27472] tomoyo_path_number_perm+0x22f/0x650 [ 1084.205921][T27472] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1084.211376][T27472] ? ksys_write+0x1ce/0x260 [ 1084.215883][T27472] ? common_file_perm+0x171/0x1c0 [ 1084.220941][T27472] ? __fget_files+0x28/0x460 [ 1084.225546][T27472] security_file_ioctl+0x6c/0xa0 [ 1084.230482][T27472] __se_sys_ioctl+0x48/0x170 [ 1084.235079][T27472] do_syscall_64+0x4c/0xa0 [ 1084.239492][T27472] ? clear_bhb_loop+0x60/0xb0 [ 1084.244163][T27472] ? clear_bhb_loop+0x60/0xb0 [ 1084.248837][T27472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1084.254731][T27472] RIP: 0033:0x7ff4d4d9e159 [ 1084.259148][T27472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.278784][T27472] RSP: 002b:00007ff4d5caf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1084.287193][T27472] RAX: ffffffffffffffda RBX: 00007ff4d5025fa0 RCX: 00007ff4d4d9e159 [ 1084.295161][T27472] RDX: 0000000000000000 RSI: 0000000080044944 RDI: 0000000000000003 [ 1084.303126][T27472] RBP: 00007ff4d5caf090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.311092][T27472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.319064][T27472] R13: 00007ff4d5026038 R14: 00007ff4d5025fa0 R15: 00007fff903fc308 [ 1084.327047][T27472] [ 1084.337642][T27472] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1084.538488][T27477] netlink: 'syz.0.7345': attribute type 2 has an invalid length. [ 1084.552465][T27477] netlink: 'syz.0.7345': attribute type 1 has an invalid length. [ 1084.565439][T27477] __nla_validate_parse: 2 callbacks suppressed [ 1084.565487][T27477] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7345'. [ 1085.017851][T21961] Bluetooth: hci1: command 0x0406 tx timeout [ 1085.199593][T27507] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1085.572927][T27515] FAULT_INJECTION: forcing a failure. [ 1085.572927][T27515] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.594829][T27515] CPU: 1 PID: 27515 Comm: syz.0.7356 Not tainted syzkaller #0 [ 1085.602357][T27515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1085.612443][T27515] Call Trace: [ 1085.615785][T27515] [ 1085.618734][T27515] dump_stack_lvl+0x188/0x24e [ 1085.623429][T27515] ? show_regs_print_info+0x12/0x12 [ 1085.628639][T27515] ? load_image+0x410/0x410 [ 1085.633154][T27515] ? __might_sleep+0xd0/0xd0 [ 1085.637743][T27515] ? __lock_acquire+0x7c40/0x7c40 [ 1085.642769][T27515] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1085.649105][T27515] should_fail_ex+0x390/0x4c0 [ 1085.653802][T27515] should_failslab+0x5/0x20 [ 1085.658309][T27515] slab_pre_alloc_hook+0x59/0x300 [ 1085.663341][T27515] ? sk_prot_alloc+0xe7/0x210 [ 1085.668032][T27515] __kmem_cache_alloc_node+0x4f/0x270 [ 1085.673412][T27515] ? sk_prot_alloc+0xe7/0x210 [ 1085.678090][T27515] __kmalloc+0xa3/0x240 [ 1085.682258][T27515] sk_prot_alloc+0xe7/0x210 [ 1085.686761][T27515] ? sk_alloc+0x20/0x330 [ 1085.691003][T27515] sk_alloc+0x36/0x330 [ 1085.695069][T27515] ? bpf_ctx_init+0x154/0x190 [ 1085.699745][T27515] bpf_prog_test_run_skb+0x36d/0x18e0 [ 1085.705209][T27515] ? __fget_files+0x28/0x460 [ 1085.709803][T27515] ? __fget_files+0x3fc/0x460 [ 1085.714496][T27515] ? cpu_online+0xa0/0xa0 [ 1085.718833][T27515] bpf_prog_test_run+0x31c/0x390 [ 1085.723862][T27515] __sys_bpf+0x62b/0x780 [ 1085.728104][T27515] ? bpf_link_show_fdinfo+0x380/0x380 [ 1085.733483][T27515] ? lock_chain_count+0x20/0x20 [ 1085.738332][T27515] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1085.744318][T27515] __x64_sys_bpf+0x78/0x90 [ 1085.748737][T27515] do_syscall_64+0x4c/0xa0 [ 1085.753151][T27515] ? clear_bhb_loop+0x60/0xb0 [ 1085.757822][T27515] ? clear_bhb_loop+0x60/0xb0 [ 1085.762496][T27515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.768397][T27515] RIP: 0033:0x7f408bf9e159 [ 1085.772812][T27515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.792418][T27515] RSP: 002b:00007f408ce87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1085.800881][T27515] RAX: ffffffffffffffda RBX: 00007f408c225fa0 RCX: 00007f408bf9e159 [ 1085.808849][T27515] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1085.816815][T27515] RBP: 00007f408ce87090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.824783][T27515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.832748][T27515] R13: 00007f408c226038 R14: 00007f408c225fa0 R15: 00007ffdba901508 [ 1085.840728][T27515] [ 1086.005077][T27518] netlink: 'syz.2.7358': attribute type 2 has an invalid length. [ 1086.036309][T27518] netlink: 'syz.2.7358': attribute type 1 has an invalid length. [ 1086.066873][T27518] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7358'. [ 1087.544922][T27575] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1089.844481][T27579] netlink: 'syz.0.7374': attribute type 2 has an invalid length. [ 1089.864583][T27579] netlink: 'syz.0.7374': attribute type 1 has an invalid length. [ 1089.874526][T27579] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7374'. [ 1090.399716][T27611] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.7385'. [ 1090.460851][T27611] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.7385'. [ 1090.829593][T27623] netlink: 'syz.4.7389': attribute type 2 has an invalid length. [ 1090.847896][T27623] netlink: 'syz.4.7389': attribute type 1 has an invalid length. [ 1090.877595][T27623] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7389'. [ 1091.061162][T27639] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1091.260226][T27638] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7393'. [ 1091.951124][T27663] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7401'. [ 1092.282261][T27669] netlink: 'syz.1.7403': attribute type 2 has an invalid length. [ 1092.299678][T27669] netlink: 'syz.1.7403': attribute type 1 has an invalid length. [ 1092.309787][T27669] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7403'. [ 1093.199677][T27696] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1093.339354][T27701] netlink: 'syz.4.7416': attribute type 27 has an invalid length. [ 1093.340677][T27699] FAULT_INJECTION: forcing a failure. [ 1093.340677][T27699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.347531][T27701] netlink: 'syz.4.7416': attribute type 4 has an invalid length. [ 1093.376240][T27701] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7416'. [ 1093.410198][T27699] CPU: 0 PID: 27699 Comm: syz.0.7414 Not tainted syzkaller #0 [ 1093.417709][T27699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1093.427780][T27699] Call Trace: [ 1093.431074][T27699] [ 1093.434021][T27699] dump_stack_lvl+0x188/0x24e [ 1093.438732][T27699] ? show_regs_print_info+0x12/0x12 [ 1093.443959][T27699] ? load_image+0x410/0x410 [ 1093.448491][T27699] ? __lock_acquire+0x7c40/0x7c40 [ 1093.453541][T27699] ? security_capable+0x7e/0xb0 [ 1093.458423][T27699] should_fail_ex+0x390/0x4c0 [ 1093.463130][T27699] _copy_from_user+0x2c/0x170 [ 1093.467837][T27699] __sys_bpf+0x2ea/0x780 [ 1093.472108][T27699] ? bpf_link_show_fdinfo+0x380/0x380 [ 1093.477536][T27699] ? lock_chain_count+0x20/0x20 [ 1093.482415][T27699] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1093.488427][T27699] __x64_sys_bpf+0x78/0x90 [ 1093.492869][T27699] do_syscall_64+0x4c/0xa0 [ 1093.497305][T27699] ? clear_bhb_loop+0x60/0xb0 [ 1093.502000][T27699] ? clear_bhb_loop+0x60/0xb0 [ 1093.506698][T27699] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1093.512616][T27699] RIP: 0033:0x7f408bf9e159 [ 1093.517152][T27699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.536787][T27699] RSP: 002b:00007f408ce87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1093.545231][T27699] RAX: ffffffffffffffda RBX: 00007f408c225fa0 RCX: 00007f408bf9e159 [ 1093.553230][T27699] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1093.561230][T27699] RBP: 00007f408ce87090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.569225][T27699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.577214][T27699] R13: 00007f408c226038 R14: 00007f408c225fa0 R15: 00007ffdba901508 [ 1093.585224][T27699] [ 1093.700185][T27706] netlink: 'syz.2.7417': attribute type 2 has an invalid length. [ 1093.712121][T27706] netlink: 'syz.2.7417': attribute type 1 has an invalid length. [ 1093.721703][T27706] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7417'. [ 1094.673647][T27743] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7425'. [ 1095.045108][T27762] validate_nla: 2 callbacks suppressed [ 1095.045126][T27762] netlink: 'syz.3.7433': attribute type 27 has an invalid length. [ 1095.108668][T27762] netlink: 'syz.3.7433': attribute type 4 has an invalid length. [ 1095.155950][T27762] __nla_validate_parse: 1 callbacks suppressed [ 1095.155969][T27762] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7433'. [ 1095.288665][T27773] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1095.382865][T27777] netlink: 'syz.2.7436': attribute type 16 has an invalid length. [ 1095.408960][T27777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7436'. [ 1095.433545][T27777] netlink: 'syz.2.7436': attribute type 10 has an invalid length. [ 1095.454507][T27777] device macvlan0 left promiscuous mode [ 1095.505144][T27777] team0: Port device macvlan0 added [ 1095.532846][T27776] delete_channel: no stack [ 1096.200403][T27800] netlink: 'syz.4.7443': attribute type 2 has an invalid length. [ 1096.208831][T27800] netlink: 'syz.4.7443': attribute type 1 has an invalid length. [ 1096.216633][T27800] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7443'. [ 1096.759301][T27820] netlink: 'syz.3.7453': attribute type 16 has an invalid length. [ 1096.767320][T27820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7453'. [ 1096.782693][T27820] netlink: 'syz.3.7453': attribute type 10 has an invalid length. [ 1096.796446][T27820] device macvlan0 left promiscuous mode [ 1096.839702][T27824] netlink: 'syz.2.7452': attribute type 27 has an invalid length. [ 1096.853639][T27819] delete_channel: no stack [ 1096.854762][T27824] netlink: 'syz.2.7452': attribute type 4 has an invalid length. [ 1096.873366][T27824] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7452'. [ 1097.147360][T27830] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1097.420571][T27849] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7459'. [ 1098.133680][T27871] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1098.242344][T27881] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7468'. [ 1098.259987][T27881] device macvlan0 left promiscuous mode [ 1098.299702][T27881] bond0: (slave macvlan0): Releasing backup interface [ 1098.358711][T27881] team0: Port device macvlan0 added [ 1098.411824][T27878] delete_channel: no stack [ 1098.869299][T27907] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7476'. [ 1099.466859][T27930] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7486'. [ 1099.491886][T27930] device macvlan0 left promiscuous mode [ 1099.581413][T27930] team0: Port device macvlan0 added [ 1099.610886][T27929] delete_channel: no stack [ 1100.110299][T27960] validate_nla: 15 callbacks suppressed [ 1100.110318][T27960] netlink: 'syz.0.7494': attribute type 2 has an invalid length. [ 1100.149713][T27960] netlink: 'syz.0.7494': attribute type 1 has an invalid length. [ 1100.157664][T27960] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7494'. [ 1100.209194][T27967] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1101.514597][T27963] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7493'. [ 1101.537197][T27977] netlink: 'syz.2.7495': attribute type 16 has an invalid length. [ 1101.794606][T27994] netlink: 'syz.0.7500': attribute type 29 has an invalid length. [ 1101.805394][T27994] netlink: 'syz.0.7500': attribute type 29 has an invalid length. [ 1101.825224][T27994] netlink: 'syz.0.7500': attribute type 29 has an invalid length. [ 1102.366527][T28012] netlink: 'syz.4.7507': attribute type 2 has an invalid length. [ 1102.399713][T28012] netlink: 'syz.4.7507': attribute type 1 has an invalid length. [ 1102.425412][T28012] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7507'. [ 1102.588133][T28019] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1102.945871][T28031] netlink: 'syz.2.7512': attribute type 10 has an invalid length. [ 1104.041002][T28041] netlink: 'syz.0.7514': attribute type 16 has an invalid length. [ 1104.385891][T28061] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1104.759087][T28066] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7520'. [ 1105.629553][T28096] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1105.758927][T28102] validate_nla: 5 callbacks suppressed [ 1105.758969][T28102] netlink: 'syz.4.7528': attribute type 16 has an invalid length. [ 1105.903523][T28108] netlink: 'syz.0.7529': attribute type 10 has an invalid length. [ 1106.779389][T28132] netlink: 'syz.1.7534': attribute type 10 has an invalid length. [ 1106.843841][T28132] device macvlan0 entered promiscuous mode [ 1106.905675][T28132] team0: Port device macvlan0 removed [ 1106.942891][T28132] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1107.244449][T28137] netlink: 'syz.3.7539': attribute type 2 has an invalid length. [ 1107.279630][T28137] netlink: 'syz.3.7539': attribute type 1 has an invalid length. [ 1107.293430][T28137] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7539'. [ 1107.423821][T28148] netlink: 'syz.2.7554': attribute type 2 has an invalid length. [ 1107.447759][T28148] netlink: 'syz.2.7554': attribute type 1 has an invalid length. [ 1107.455640][T28148] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7554'. [ 1107.566417][T28154] netlink: 'syz.1.7556': attribute type 2 has an invalid length. [ 1107.575011][T28154] netlink: 'syz.1.7556': attribute type 1 has an invalid length. [ 1107.592401][T28154] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7556'. [ 1107.973184][T28165] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1108.152651][T28160] netlink: 'syz.3.7545': attribute type 16 has an invalid length. [ 1109.008908][ C0] [ 1109.008918][ C0] ================================ [ 1109.009004][ C0] WARNING: inconsistent lock state [ 1109.009070][ C0] syzkaller #0 Not tainted [ 1109.009079][ C0] -------------------------------- [ 1109.009084][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1109.009091][ C0] syz.2.7553/28185 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1109.009109][ C0] ffffffff8cc844b8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x84/0xd60 [ 1109.009164][ C0] {INITIAL USE} state was registered at: [ 1109.009170][ C0] lock_acquire+0x1bb/0x4a0 [ 1109.009192][ C0] _raw_spin_lock_irq+0xab/0xf0 [ 1109.009213][ C0] kernfs_rename_ns+0x55d/0x990 [ 1109.009230][ C0] sysfs_rename_link_ns+0x171/0x1b0 [ 1109.009250][ C0] device_rename+0x11c/0x1a0 [ 1109.009273][ C0] dev_change_name+0x37b/0x910 [ 1109.009289][ C0] do_setlink+0x967/0x29c0 [ 1109.009304][ C0] rtnl_newlink+0x16e4/0x1f90 [ 1109.009317][ C0] rtnetlink_rcv_msg+0x863/0xfb0 [ 1109.009331][ C0] netlink_rcv_skb+0x1ef/0x440 [ 1109.009347][ C0] netlink_unicast+0x7ad/0x920 [ 1109.009360][ C0] netlink_sendmsg+0x8ad/0xbd0 [ 1109.009374][ C0] __sys_sendto+0x497/0x650 [ 1109.009387][ C0] __x64_sys_sendto+0xda/0xf0 [ 1109.009400][ C0] do_syscall_64+0x4c/0xa0 [ 1109.009415][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1109.009463][ C0] irq event stamp: 12084 [ 1109.009470][ C0] hardirqs last enabled at (12083): [] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1109.009490][ C0] hardirqs last disabled at (12084): [] exc_debug+0x6e/0x130 [ 1109.009508][ C0] softirqs last enabled at (12080): [] netlink_insert+0x101d/0x13b0 [ 1109.009525][ C0] softirqs last disabled at (12078): [] release_sock+0x2b/0x1b0 [ 1109.009547][ C0] [ 1109.009547][ C0] other info that might help us debug this: [ 1109.009552][ C0] Possible unsafe locking scenario: [ 1109.009552][ C0] [ 1109.009556][ C0] CPU0 [ 1109.009559][ C0] ---- [ 1109.009562][ C0] lock(kernfs_rename_lock); [ 1109.009573][ C0] [ 1109.009576][ C0] lock(kernfs_rename_lock); [ 1109.009585][ C0] [ 1109.009585][ C0] *** DEADLOCK *** [ 1109.009585][ C0] [ 1109.009588][ C0] no locks held by syz.2.7553/28185. [ 1109.009595][ C0] [ 1109.009595][ C0] stack backtrace: [ 1109.009600][ C0] CPU: 0 PID: 28185 Comm: syz.2.7553 Not tainted syzkaller #0 [ 1109.009615][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1109.009624][ C0] Call Trace: [ 1109.009631][ C0] <#DB> [ 1109.009647][ C0] dump_stack_lvl+0x188/0x24e [ 1109.009669][ C0] ? show_regs_print_info+0x12/0x12 [ 1109.009693][ C0] ? print_usage_bug+0x42a/0x690 [ 1109.009716][ C0] ? verify_lock_unused+0x15/0x140 [ 1109.009741][ C0] lock_acquire+0x2df/0x4a0 [ 1109.009761][ C0] ? perf_trace_lock_acquire+0x342/0x3f0 [ 1109.009784][ C0] ? kernfs_path_from_node+0x84/0xd60 [ 1109.009804][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1109.009827][ C0] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1109.009849][ C0] ? look_up_lock_class+0x75/0x140 [ 1109.009874][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 1109.009931][ C0] ? kernfs_path_from_node+0x84/0xd60 [ 1109.009950][ C0] ? _raw_spin_lock+0x40/0x40 [ 1109.009970][ C0] ? rcu_is_watching+0x11/0xa0 [ 1109.009994][ C0] ? lock_release+0xcf/0x920 [ 1109.010016][ C0] ? percpu_ref_tryget+0x15/0x180 [ 1109.010042][ C0] kernfs_path_from_node+0x84/0xd60 [ 1109.010062][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 1109.010089][ C0] ? kernfs_name+0x140/0x140 [ 1109.010108][ C0] ? get_mem_cgroup_from_mm+0x34/0x290 [ 1109.010157][ C0] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 1109.010179][ C0] get_mm_memcg_path+0xb9/0x360 [ 1109.010206][ C0] __mmap_lock_do_trace_acquire_returned+0xe7/0x390 [ 1109.010234][ C0] ? get_mm_memcg_path+0x360/0x360 [ 1109.010279][ C0] ? __init_rwsem+0x160/0x160 [ 1109.010308][ C0] stack_map_get_build_id_offset+0x699/0x9d0 [ 1109.010333][ C0] ? pcpu_freelist_pop+0x126/0x180 [ 1109.010356][ C0] ? __pcpu_freelist_pop+0x850/0x850 [ 1109.010379][ C0] ? __bpf_get_stackid+0x920/0x920 [ 1109.010406][ C0] __bpf_get_stackid+0x55d/0x920 [ 1109.010434][ C0] bpf_prog_12712c88fd19bd5b+0x21/0x25 [ 1109.010452][ C0] bpf_overflow_handler+0x50b/0x790 [ 1109.010476][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 1109.010494][ C0] ? perf_swevent_overflow+0x230/0x230 [ 1109.010520][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 1109.010547][ C0] __perf_event_overflow+0x457/0x630 [ 1109.010577][ C0] perf_swevent_event+0x315/0x570 [ 1109.010603][ C0] ? perf_tp_event+0xc10/0xc10 [ 1109.010631][ C0] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1109.010665][ C0] perf_bp_event+0x311/0x3f0 [ 1109.010687][ C0] ? perf_trace_lock_acquire+0x342/0x3f0 [ 1109.010705][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 1109.010755][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1109.010776][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1109.010803][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 1109.010830][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 1109.010848][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 1109.010869][ C0] notify_die+0x141/0x1a0 [ 1109.010888][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 1109.010926][ C0] notify_debug+0x20/0x30 [ 1109.010946][ C0] exc_debug+0xd9/0x130 [ 1109.010967][ C0] asm_exc_debug+0x1a/0x40 [ 1109.010981][ C0] RIP: 0010:copy_user_short_string+0xd/0x40 [ 1109.011000][ C0] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1109.011014][ C0] RSP: 0018:ffffc90003b1f788 EFLAGS: 00040207 [ 1109.011028][ C0] RAX: ffffffff84143201 RBX: 000000000000002e RCX: 0000000000000005 [ 1109.011039][ C0] RDX: 0000000000000006 RSI: 0000200000000300 RDI: ffff88801925d000 [ 1109.011050][ C0] RBP: 0000000000000000 R08: 888100100000002e R09: 1ffff1100324ba05 [ 1109.011062][ C0] R10: dffffc0000000000 R11: ffffed100324ba06 R12: 00007fffffffefd2 [ 1109.011073][ C0] R13: 0000000000000000 R14: 0000200000000300 R15: ffff88801925d000 [ 1109.011092][ C0] ? _copy_from_iter+0x1111/0x1130 [ 1109.011122][ C0] [ 1109.011127][ C0] [ 1109.011140][ C0] copyin+0xe7/0x120 [ 1109.011163][ C0] _copy_from_iter+0x447/0x1130 [ 1109.011191][ C0] ? copyout_mc+0x110/0x110 [ 1109.011211][ C0] ? __virt_addr_valid+0x188/0x540 [ 1109.011234][ C0] ? __virt_addr_valid+0x188/0x540 [ 1109.011256][ C0] ? __virt_addr_valid+0x467/0x540 [ 1109.011278][ C0] ? __phys_addr_symbol+0x2b/0x70 [ 1109.011299][ C0] ? __check_object_size+0x4f6/0xa70 [ 1109.011321][ C0] netlink_sendmsg+0x755/0xbd0 [ 1109.011348][ C0] ? netlink_getsockopt+0x550/0x550 [ 1109.011368][ C0] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1109.011394][ C0] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1109.011411][ C0] ? security_socket_sendmsg+0x7c/0xa0 [ 1109.011432][ C0] ? netlink_getsockopt+0x550/0x550 [ 1109.011451][ C0] ____sys_sendmsg+0x5ed/0x9a0 [ 1109.011477][ C0] ? __sys_sendmsg_sock+0x30/0x30 [ 1109.011492][ C0] ? __import_iovec+0x306/0x510 [ 1109.011522][ C0] ? import_iovec+0x6f/0xa0 [ 1109.011549][ C0] ___sys_sendmsg+0x2a2/0x360 [ 1109.011571][ C0] ? __sys_sendmsg+0x2a0/0x2a0 [ 1109.011607][ C0] ? ktime_get+0x7b/0x270 [ 1109.011649][ C0] __se_sys_sendmsg+0x1c3/0x2b0 [ 1109.011674][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 1109.011702][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1109.011723][ C0] do_syscall_64+0x4c/0xa0 [ 1109.011738][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1109.011753][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1109.011771][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1109.011795][ C0] RIP: 0033:0x7ff4d4d9e159 [ 1109.011818][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.011831][ C0] RSP: 002b:00007ff4d5caf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1109.011847][ C0] RAX: ffffffffffffffda RBX: 00007ff4d5025fa0 RCX: 00007ff4d4d9e159 [ 1109.011859][ C0] RDX: 0000000000040000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1109.011869][ C0] RBP: 00007ff4d4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1109.011879][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.011889][ C0] R13: 00007ff4d5026038 R14: 00007ff4d5025fa0 R15: 00007fff903fc308 [ 1109.011916][ C0] [ 1110.617050][T28185] device macvlan0 entered promiscuous mode [ 1110.629604][T28185] team0: Port device macvlan0 removed [ 1110.636600][T28185] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1118.709046][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.715374][ T1281] ieee802154 phy1 wpan1: encryption failed: -22