last executing test programs: 12.812038142s ago: executing program 0 (id=4024): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000494ae7cefc84e79b000000000200"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000000)="81cb022441423fa6bc4ada4e9d98907aed4e16a8a1ac1a", &(0x7f0000000040)=""/244}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r4, &(0x7f0000000340), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 11.202691443s ago: executing program 0 (id=4027): r0 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000840)={&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f0000000440)=[{&(0x7f0000000100)=""/51, 0x33}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000340)=""/242, 0xf2}], 0x3, &(0x7f0000000680)=""/227, 0xe3}, 0x2000) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000001d40)=ANY=[@ANYBLOB="1800000000000000000000000000000061114d000000000095000000399caff47360ff003a1c5cb99f14aacf00000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x70) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) close(0x3) r2 = socket$kcm(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3, 0x0, 0x0, 0x8, 0x1}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x46}, 0x28) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, r4, 0xf2}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001600)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000001d00)={&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001bc0)=[{&(0x7f00000016c0)=""/80, 0x50}, {&(0x7f0000001740)=""/65, 0x41}, {&(0x7f00000017c0)=""/51, 0x33}, {&(0x7f0000001800)=""/28, 0x1c}, {&(0x7f0000001840)=""/237, 0xed}, {0xfffffffffffffffc}, {&(0x7f0000001940)=""/111, 0x6f}, {&(0x7f00000019c0)=""/34, 0x22}, {&(0x7f0000001a00)=""/165, 0xa5}, {&(0x7f0000001ac0)=""/194, 0xc2}], 0xa, &(0x7f0000001c80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x80}, 0x100) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110c300000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)='%pS \x00'}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0xfffffffffffffeae, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000280), &(0x7f0000000140)=r7}, 0x22) sendmsg$inet(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x4000) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000015c0)={&(0x7f0000001200)="6321008aa6d59d927f03c35b60235a40dc9baa6b294da6e8b7c2a0e0bd3543b328ceb42d373275ea7b2483c7442a655b087617bd0406bc35c3eb59222e1677b3dc92180adeb91842277c4c6fe0d641657613ff9751", &(0x7f0000001280)=""/94, &(0x7f0000001300)="22b58345ee0f05ab8c1dccdeb32b40e76d0a3a8fd659443489d2489baaa39a07c2206b58d284ce0d2f4018e9fb7d5cc1fb11a694704ad6129ffefb85a5c8e0bfb7550bfacebf90b83ecffa3b4002f497c56cf908eb024decf914e3d5b9ce98e66e2cdf6482e2e09a8b2f485469699f757b402539788afd8b9bf705cc980e2f24d17c5bdc2b99d4ae1198e9e2a036859ddd232dc1d6da8421e07b7776ebbddc8e19fa45662c5745c899d194287a2240cb7ea9adfc78cfe2c99b97b60b0f85976170857c72e2ae2e0840d901", &(0x7f0000001400)="01eceb1ffd23235086acfdeae551fc0e22ca5e509a17c065be643614aa7c155c92255b7c1e1dbd829787e1a06ac70ae4a31c16efce31a4bf562f90757301dc73ca12d0e95e2a26ac744ba0fdb9d74edf207a4d9eb12f5630d49e6e0519da6ad4fd36968903decfb363ad79d1f7c3f95d58ea960ff0ee1ae98fae59ad6ba5f149bdab73c6881235be9c386e23992c58dd6d4cd9d53e62667a85db2e1f6343da30e83ade2b77e7135b4555455385d0ab1b72070b304003464f1505277b5d7ed015d7c6a92b6eb47d35ed8dcdc2a1e81e", 0x3ff, r6, 0x4}, 0x38) close(0x3) 11.135882596s ago: executing program 2 (id=4028): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001300)={0x1b, 0x0, 0x0, 0x200, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x58, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa0000883e"], 0xcfa4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x11, &(0x7f0000001380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001440)='syzkaller\x00', 0x7, 0x78, &(0x7f0000001480)=""/120, 0x41000, 0x1, '\x00', r1, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0)={0x4, 0xd, 0x5, 0x8}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000001600)=[{0x0, 0x4, 0xb, 0x8}, {0x3, 0x4, 0x1, 0x4}, {0x4, 0x1, 0x1, 0x8}, {0x4, 0x5, 0xd, 0xb}, {0x5, 0x1, 0x10, 0xc}, {0x0, 0x3, 0xf, 0xb}, {0x1, 0x1, 0x8}, {0x0, 0x3, 0x7, 0xc}, {0x1, 0x1, 0x8, 0x5}, {0x5, 0x1, 0x5, 0xd}], 0x10, 0x4}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x1, 0x6}, 0x1080, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r4 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) (async) sendmsg$kcm(r4, &(0x7f0000006440)={0x0, 0x0, &(0x7f00000061c0)=[{0x0}, {&(0x7f0000004040)="9f0c4f632d57514c991a1ca12f10a2d4b6d319d8c2df9b25361d90b036b500f6293935910bdc2dd1adb338ce6fa59b9eda0bc19715ca8c81300dff6fa2814327aeb76d6560549b50d26f1d9adba76ed5910587a4e8831160e818c51a48d83ba07ab65a7d2584f466d3393a76eaf34e8cf9ce92dfb314812922516a3e18297ac49c850d6f3542fb6b17de6a7634", 0x8d}, {&(0x7f0000004100)="9400858a488a4c0e02c8a69f747853af553d31b788eb997c40f27e3e118c251d8720323276fff45a39e8e372b465d2d633bc4a89633ecbc0f5c818e15d90e782e7d16f10", 0x44}, {&(0x7f0000004180)="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", 0xce7}, {&(0x7f0000005180)="60663d145a35", 0x6}, {&(0x7f00000051c0)="89dce7d78ef5c37a53b4c6784d488735b90778e3bcb1b132720b182f1d8bd704e1730fd2a84dfea96f65e686aa5289d99161a875dabdcb8a184eb87d0e383a5097e735bb4a4f3378ff4aed56b3e289a61a8f1ea27159a14302c4be909121dc15a2ce5c79ed60718e0a8c79140897122132e40bd9b035f61e56ad0960b20b460b60f674ea21c680dba0e031a605d0bd743339b97f210e2938a6a2280f7b0a46f1ddc3bde0e0abfb656fd09e7b4595394d41e3ffe641024fee0259d5a4a3d75b3c7740bef502b62921aecb16ed4392fd441397847fb51c2100cd7d955684b930496e2c2e2014c37577fc1f548d0f5e0afd56dd5fd7bb9881ff5d35883e9ac08884bb74d6c23dca5295116b6b0662f551e4d8efe4eb0de9fa58878e87487b9dfb65a79589e3a348e500fe9ec8cb33cf9846edd440af2c9d1df0e5f21e19863e1a49ae0e34351ce39f09e4b8efcc4d3abbb1b50c971cddb143f6eafbbfd8c0dd655f9efb2249d052fcd4a07d608ba42c45c05da004bae7d987868b46962d200c85e98c79c983db30834c9b7594dfaacc0cc3e0256f482d8d2e6497a9faaa3de4333ad8c958616ea7ed2e5f979a0ec31fdc89e8d1401d5d1c80037a0b95a39847ac46abb0edcfe7318f777c0f30204c6a82afa507e5ad90cbe0eabea9ff42f6f01f6f1c25e849d4f6a56b03ef578943a4293e4b000ca7662703872ccdf65231f9c097392c0b81260c7e17ba5d3174800e5a1818326c32f4d1aee0b76a23502a1c737d2e19a105df8eb50b0a68e9d13bd45601252da5a112891a9436c2200de3818e651ff7a4bc99c57b9e441a95c7f8e47cc9674d9595f323430646f913243519d2458d9de42511a02b96abb0730c2048121f6616dedffa82846fdfb9ad7d167c3027346d73ad08e583f7eb72cc407faae6164b35efa440a7ba9c9a54f2a218e51ca4aa16e0ba9761052daf8400ae8cc78b4dcaf76cc9bb10eaeff31e272c2fa0347f57444a2d7dceaa8b90f41f9d3aab69df2bb78a9d05de4fe6248670e32c9276e3a619f2067310a681cbef4f0512b36453a9d5a40a58fd2f4c0d2cfed3938995060108e1ec53628c7357ca483ce76b47017b39124c8375fb81719002d44cdb4ad158d7286fe81ef35daccd5866e328608715b3985622008e8288a0be6e8b6b1dc52e534eb965870116b38b502f6bee7fe5437ecf60551ac5d9d3cd5930878169373d3e10d25f46b85572b2ff751a87feaa347288f10f0bf9b32533f8efa91caebab4f0fa8128df82820da884e04daec31efb751ca04a25d668e90a8b537f99f394257f6b0b87e0b09e558a2040dcd396d2b04132be6bda57ef296e5cc18bf2262948ed403c1bb7e58b6d53a9cb587561921f5bff3107055435d1272140aabf95f559f53b65cd892beb5bb8651aaf3855570916621f94a1753e2ac59a8dea46ee3d1c013613b1452c8ee3a83ac2f270127ed741253e08d366077fed6de18494b2f3b16808fa7e13ec7791a2b14e3fcf8bf0d93d84b83ac908b106ac0f4e5702977dacfefd6d4dc76c9271df290213b4aa68c63afbb4e1690e2de3aadd82292b86b9114e00f56dd4327f370541d93ee19a816aa97005a40e276fbf95032a918e052dc4d6786780c417031b0e0434c3001ed3e75a910c0b4274b9452db56861dc14e2169f31b565c6c41b827fd18438fb635ae2ba145e2ecbe7f69868af565aaf19246f9467445f977103a09c7a7d099d118c4027cd3abea026c4441ad1bf47899c9500920908178afc40a79e68a1ea91d5e02b48997c0d8725c5404e5a7d00cbddff6dead0f98099ce24c22b7426547593b83488cbf2239c351fac0ad46a6227ef69c3226ea20cb25ff7fb9e8ba88ced73ddaa3b050ed8cef911fe0185dde0b5b3320acb44f7c9e14ad4a155b22202bc5541525108556b7c1379bf70b3bd8ba9baab70a7274e176edc66f72ce7c5ed712d01f2239b836b6855a31039d98eb589b3f25893195923976bd43c18fce652f2151ae05d2d9a680f479fa4da7d909fe0c64c263513f7940d582845965d2156e1c15761e5ff87d02b9f98e8dbaf5905a133a098f38d74a5e62059a997decadd58594e96f8867650584a9736998b249ab758c67c3aa9f51a4123336cc9fb1f6e0aa8970b1c32532eedf2e64a33f2e73bdd25fa5f9653215dbd267a50618e3751979e8d41a0a93cd4d889f7921fecff187a9fdca675c5e6a90828a37356d62ddfc4ba0fc5c25375a861e8311e1ddf366721e3ccd3e6a1d39703b955ca631c3516360cbc486cead8993f1f759a3be39c68f0f972438964ba9b970bf621f932a52e9e2792ed95e62f227e755b54650d6b59a064df69fb1e199758e0e646c188195d407a8c30dd4c53222c4871804b6653e8ea6fc218ddca7a61d5a2b97fcedc90444a498c8622eaf460a33a3cd32218864ddc9ad2a662db6c5b02abd69e2ab4ee3ba0229e4a09f83182cc55e0efacc27058e3861e240e60063b675c66a53acd4f24b88a3f200e46b4388ffb696122315cfb83edbe363dd19819f20875651cb72ae39e3808b574f582ed44b4bee2ffb7e9e66bbb0d22a8e408d346db2a940d9df59d2a07df0473b08487d0cd6dbd44161eb77b59baa1cecb6b00a5a290cf86bec9c73d020e156d62af5abcc9f9a425e11c00f3357aa618666b726863e2a00e623812fba92efa0e7b8857d0b6b801f66394cd1d08ebb45c38f3e2827571fadf0d9a59cc7e0f1a6f09f6e89069dee8cc9e69ce1073845775d515356d00eac7326d69103e2bc213213335f7744e6129328b6839fff5ba34ad7102623c0a3268bae806f87ade8df641e646d5b0a6bb1077b96978ee927b3164621cc8eea092f8ec9214626efd677c51a8c9158306004023ca6d30ea04b0753405dbc191b840ffbe43883ebdda4fa436c4a2c3b98bf1511575bdcb173fd0fb42e99a680d9e5d56c1c9954140b95106a81f34611edd11c3203137acf5f1831aad69cbc6aa043a36b86485295f1265d6d422f958f28becc3c26ef9a7ed3862a4688ebf6c81371a5a325c33b39f81771a4f553b44fc60f6018d0d7bb2b1d84fa3c0f525917f73290ed7244359872cceae08d2e154cbb3938fd91575bc3c9951f6bc42a0faa1e633420401b49fdbccbbf1424e6e5454e39a25aacfd65909b06e4c78dbcecd026b705b5cd8b9066192e3501add9380d8985e98762641a65d594888145b7d9eb597ec7c989116aaf27bc3597db78548115f21de5f407bfed231154446cc0a9eb73c86cf1db40fb779778bd36028657efccd8b6318459165d99080b27fa31fa46e8f291c0604b15deeb589daf4746c67beee8e0a18312278c85fdd6066af5a9cbd84834c916f56f0363512916062a15ac113655d68155f08171e49a2a86c3cec6168f0087bec5298dff5edd799eb7b04213f1a19121b439e6faca31ffe5828821f26f4039f82aba5ba90dcc354447cf55fec316e24f6dcbeb342ce9d7973d286f65b831a4da3ddb3be4aaebe596b9d5dc49b8a58232101a8d55573d457aec1d6b83684a988e2e1d10238ab7cc800329e83ba6c67bff0a5d70f4c4740890dc016f54a933ea5107f0e246d74b7920b430e08947fb91a0260261d77d3392e93ecf349fb26544cc850b929954437787cc37eed1966b85a85ee0fad34ab3944628ba2882e36464b1f3d0b436687c298c578d04a2aa0a1d56f7ca0f06ae6ee3d103c5a0851e67b9d2c9490762fdb2e092fc4dda2bec5a717ff9f41f5e7ab46973c233313021324a0f0541de267c280674a30f57853b9067e38b869d7aff130c0345489a37f96dbe3a85d8357c1b34c3f33b9476031ea1535d62ea1973daa892d1f0a26fa9922ead2a91f3bd11818a3bf72ccc511e31f4589474acaeb21ef174d19d81e94def6bdb556d5a1294c6fc32993f2bd36ae3811b7039592aa51dc6b71ed92b212adc9448c02492d04ddfb50126a628bc989d96d541bcdbca7766331fa3206e5f43bd684bacfa13bf3d96816879de841d7e421d12322215a6a97e1bd124649c6e95d75c290148c50a19184c516d8e3643be7c6ad6d8dc59b658bee9c1e15642e6837a63932ec1a6f1bb3c364a5c2594eb9292f46bc182b67c18c7422fb13ce7c1a288de25b27b719b880ba0c6ffcbb20009e652c6a31552dad6319412387ef9f85a170bf0a2f96a61e618ae5a42c9b13773289ae0c062125e2342119fb99cf77cce37d7c858cc764d6a9cf0bebce79cc3a60f68b0032b1375a1bbbc110fb5e2e2d02ec9a31dbdf2abfd9f88902c91dfa5eaef809d9f8f4444dcd6c6e1b521511e42bb2d79362a84f23871530b0ede3f19e431ced3a68c1fc6fd37a74c3e5f058e74ca4271031cf8b065634bc9d9890ca817f94f9a5bc78779167adc0c44974a0785b8da9b404f324931514aabd45e5cd8156c534b336eb9b9de8d10dd2d6eed9aece256cbeec9bea08da4380a762236cc2e8f1c13b931238e6eeedf2f892b6a249e07d7b0e0cd254fc06c3ec9fbe91bb9681e1e8684a36654d63b9fe6ffb9f444f37e5b14ba83d99933526b1079c583ac92543452f86cf8610054fc7f5e186a3645ead27dba1969754be632b49c0777235918a957b24cdbc4b82ef66480f028dce4d84977b544f949e1d9b220c40f1d681e6086ad3e944b6dab10ab8bd5652c179f48adcb1367c4b050019aba1d5997543cf41e8aec203408dce10424fba14dd8bc12dee975aa49315887639e690aa013c06912d6e5bfbbbadf66e82d576b725a8773c49507a5da1c3012ad654b606aa4fb06d44ac4a979e766f81869750f7f77b4a9a5137fd63f0789838e4773461b762883b79888ba843616b0b3db3ad4818a8996cab91ddce06114f04758fe0d48e866bb1a19d30673cecdec3d532e8857b190b4372fcf49ad7f6d229d0d7525fda2b15e5533e1143a32482d144c76bcbc072705e763149f6eb3ad46af58a4f2f40cd93a4693f06085823c8e05e3e173d929bc374e6bc323e863d068e5f630330032c3479efc9d181fdf8b75ebfaafbe07678f1a5139a699063186496afe4586acaf403a297e2d25c5f80271a1545714c6559c04bc6747526dae95dd9fc11c9874e3d824c2d214991feaed049863545bed80428a1c3084e86ba94a57f704bf37015d4a181154245beab6e3070462869c8ebd6028801a7559aba258ba031737b41953b9738d5baf9fad2c3f20cfcc9688d480406af4caa5717af999628a9d64477c9973c9311670954606ebf10c9be03814cea141566a69154fa520088811b18b606d2de40f7a8e89037c0c8dffca7c52b0ea85182a33fd9fc4c7d670378a7ead88ea9633299094482dcd927c6628740f179214b0eb376115a045fe6b57f1dd0d3d3137cacdd30f2978ceaf705fd5a02477f3a11e5c498076a15321e69665c0235aa9bbc37d59969f0a168672b8c916bfcce28a12a7e38796ab11de45364d5bce382f7e455c6eb4232725cd9c3210c1356559cc219c88271de2f1b4af356c7261c40be0d9275ad4c05606b9f5d3cc79db5ea095e7d324cbe91c4ac88db111bc2df0bba17ea36c3aa95278836cdf0ec8858cc576986d02f5e8c105a392cf38c746ac94f95331ea8a612c4a60718fd1f8d692041d385e38cc4ab17619895647fc5aed1fd5758c1b03e2fca6ad48720d1120f32516c3077f50bd808cff8ac5731097d8e97e4ca0a2ee81d5db788a5b726ef038027150ec376d84b942cde9c56435bce78e5d2ecabe4dd4e47e323bce768a24cecde57efa9d2cac98e5e13c7dc50badc73941f6424d6dcaa8f980363", 0x1000}], 0x6}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x2}, 0x12, 0x0, 0x0, 0x7, 0x1, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x800000}, r5, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) (async) socket$kcm(0x10, 0x100000000002, 0x4) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r8 = socket$kcm(0xa, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 10.842919195s ago: executing program 2 (id=4031): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x84901, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000380)={0x2, &(0x7f0000000240)=[{0x0, 0x2, 0x2a, 0x8}, {0x4, 0x50, 0xda, 0x2}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2, @perf_bp={&(0x7f00000001c0), 0xa}, 0x4021, 0x80, 0x9183, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[], 0xfe33) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x400}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffdd) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r1, 0x8) socket$kcm(0x2b, 0x1, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000100)=r8, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xcf0b3d870c70741a) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 10.303835492s ago: executing program 0 (id=4035): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xdd}, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x9e, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0x2, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x5, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x1, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x200, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) perf_event_open(&(0x7f0000000100)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf6b8, 0x40000}, 0x0, 0x8000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x425bda72b310a0cd, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00d09b6c099ff0157d2d260e"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x828, 0x0, 0x8, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x3, r2, 0x0) 7.093430554s ago: executing program 4 (id=4042): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x44022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x0, 0x0, 0x2, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000020000"], 0x18}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030038000b12d25a80648c2594f90424fc605865000002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000240)=@generic, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/87, 0x57}], 0x1, &(0x7f0000000500)=""/200, 0xc8}, 0x10000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f96724fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, 0x0, 0x0) 5.375183249s ago: executing program 4 (id=4045): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(0x3) (async) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0xff04}], 0x1, &(0x7f0000000040)=[@ip_retopts={{0x20, 0x84, 0x2}}], 0x20}, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) (async, rerun: 64) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socket$kcm(0x2, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x32}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 5.374985239s ago: executing program 0 (id=4046): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000200000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18088b61155c2aaab16e0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r6) recvmsg$unix(r7, &(0x7f0000001740)={&(0x7f0000001680), 0x6e, &(0x7f0000001700)=[{&(0x7f0000001600)=""/18, 0x12}], 0x1, &(0x7f0000001880)}, 0x40) socketpair(0x1e, 0x0, 0x0, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) 5.374379789s ago: executing program 2 (id=4048): perf_event_open(0x0, 0x0, 0xffffc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x22, 0x80000, 0x26, &(0x7f00000006c0)) 5.116590307s ago: executing program 4 (id=4050): perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x6, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600200ff0f040b067c55a1bc000900080006990300000015000500fe8081780d0015000d6f1da44af5ffa0030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad96067e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000080)="1b1f30d80ce10b533421d4734b3f6f3bf24ad609110e3997f1839cc1f33f6e6df57d1ddd6f91d44ed515dda47cfe5901162c0c98c826b2ca18ac73145ffabc9108ca472295afc1347204288ede5e3fa92a19b0cc60828d591f86dd3d37dd888549ef9a8db2f9259b6b8a13460e5720d6b70560ba1a4845f2284b8b6c0185a8b4879a4112bb15e47c4e47819e36167ee31c98bfa992a1a4732a7b00", &(0x7f0000000200)=""/57, &(0x7f0000000240)="55bf23012669105f8f0443d56654d97bf8ff753fb04a53ff179d0d6d2806aa41946032ce0c8c08e367c1347c8e46a135f9372468b7388dd5fd630d2a395e282493e49a2b23ac86342d07e110ef15", &(0x7f0000000300)="f4527e3e326382c498e39c1a", 0x10001, r2}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)="bb", 0x0, 0x40, 0x0, 0x44, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.251960047s ago: executing program 4 (id=4052): r0 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000300)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0xffffffffffffff2f, &(0x7f0000000b00)=[{&(0x7f0000001980)="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", 0xd49}, {&(0x7f0000000700)='z?r)', 0x4}], 0x2, 0x0, 0x0, 0x41024}, 0x18) setsockopt$sock_attach_bpf(r0, 0x84, 0x21, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1e00000001000000010000000300000000040000", @ANYRES32=r2, @ANYBLOB="631700"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0300000001000000020000000a0000020200"/28], 0x50) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@dgm={0x25, 0x9, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000840)='O', 0x1}], 0x1}, 0x4008000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000000)=0x8) (async) ioctl$SIOCSIFHWADDR(r4, 0x40305829, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) (async) write$cgroup_subtree(r4, &(0x7f0000000040)={[{0x2d, 'devices'}, {0x2d, 'net_prio'}, {0x2d, 'rlimit'}]}, 0x1b) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@can, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/205, 0xcd}, {&(0x7f0000000200)=""/30, 0x1e}], 0x2, &(0x7f0000000280)=""/32, 0x20}, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10002, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x2805, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x55, 0x88, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) 3.191412348s ago: executing program 2 (id=4054): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x72, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4a, &(0x7f0000000100), 0x120) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8905, 0x0, 0x0, 0x1, 0x8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) r2 = bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r2], 0x28}, 0x4044454) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xc, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4cf6dd15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x17, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000002000000000000000000000018120000ac638b761318cacd1956ad2904fca51e7ce8a994ca5eb81f86fe9d7a308076f5a75b77d5d34dad3a765dbb5544655097f3b61543bf2fc0ff5d585c2a2610e7ab9a5dc9ccb1a812666ef4cddae814560fe9bb3a90f20acbec3eba8332e70b8f06d787ad4323b3f65000aebb7820727b74c17aa26abf747e2e820f761c2433e1e65de35dded168ecf46d9d930b52d2790051915d8fe6c89fcd22ba35252eeabaaccdc18bc6ace4aee1f97c92dbaf8b", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000004000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) 3.024128184s ago: executing program 4 (id=4055): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000001000)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="30000000000000000000000007000000890704a81414bb8917920a"], 0x30}, 0x0) (fail_nth: 6) 3.023824704s ago: executing program 0 (id=4056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xc8ae}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x79}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x0, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="1700000014006b81566463cc7a43a9280a5f768e7e0000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.020822264s ago: executing program 1 (id=4057): r0 = socket$kcm(0xf, 0x3, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000000000000791040"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@caif, 0x80, 0x0, 0x0, &(0x7f0000001cc0)}, 0x12) socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x14, &(0x7f0000000440), 0x3d) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, &(0x7f00000000c0), 0xb9) sendmsg(r4, &(0x7f0000000e80)={&(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x651, 0x1}}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000001c0)}, {&(0x7f0000000340)="4b53e05abc6931e60d0bc92897cb0a", 0xf}, {0x0}, {&(0x7f0000000ac0)="b766aa4fc11a0605c75fbec311d1d2b2bac27ffda0c3d48d6f71dfc187d693d0460f90aa1f20451cd2bac71c3cf33544fa53d0dbb30f96d5164c39b94ccc096458cec7814a861855b92c6aa810e00c25b5d71bac02c91b7bc2af3af51d62844ec1ef784badf6afd0a0881d", 0x6b}, {&(0x7f0000000b40)="b30c1c072c0de028fe5b9909bf564044035e329e0837ef28970ce4f1139d019395d17494dac1", 0x26}], 0x5, &(0x7f0000000d00)=[{0x48, 0x0, 0x10001, "33eea5da8c0115070e75392f03ded51c33a41aa624c2f23c0ec5db60280eab5e219cc78eb4bb4f924c86ae776e4d3d51c45302"}, {0x60, 0x101, 0xf, "bdaf54534061c7b592fd70eb0a785034d0d18f8c18f1381424c8cd4e8fba2cc90643978cb3488549d46b23738df00169f68670e07ce5c3b3ff20d519276599cad2a5b6eab2adfd4aa233382cbfdde9ec"}], 0xa8}, 0x20040000) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa4}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0xffff7fff, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xcab5}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000006c0)="02f5060102000000e4a17c4505", 0xd}, {&(0x7f0000000540)="96ccb7", 0x3}], 0x2}, 0x54) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000002c0)={0x0, 0x4, [@multicast, @multicast, @multicast, @dev]}) 2.665015865s ago: executing program 0 (id=4059): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4, 0x1000000}, 0x20) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002c000b35d25a806f8c6394f90124fc60", 0x14}], 0x1}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) 2.583938448s ago: executing program 4 (id=4060): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x114433, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x30480, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x61, 0x8, 0x0, 0xfffffffc}]}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r3, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x758, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.251240178s ago: executing program 2 (id=4062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x200008c0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1c}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xfffffffb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000840), &(0x7f0000000340)}, 0x20) (async, rerun: 32) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}, [@call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000480)='GPL\x00'}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async, rerun: 64) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r9}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x1000, r9}, 0x38) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) (async) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) 1.803984403s ago: executing program 2 (id=4063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.801811463s ago: executing program 1 (id=4064): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async) socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000180)) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) socketpair(0x8, 0x800, 0x4, &(0x7f0000000100)) (async) close(r1) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r1, 0x40047440, 0x0) (async) r2 = socket$kcm(0x11, 0x3, 0x0) (async) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x891a, &(0x7f0000000440)={r2, r3}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r1, 0xf, 0x1, 0xcc, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0]}, 0x40) 1.538507321s ago: executing program 3 (id=4066): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x0, 0xac5d, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x5}, 0x0, 0x0, 0xc2ba, 0x9, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x3}}, 0x80, 0x0}, 0x0) 1.460143323s ago: executing program 1 (id=4067): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="11"], 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x97, &(0x7f0000000300)=""/151, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="11"], 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x97, &(0x7f0000000300)=""/151, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0xa) (async) 1.284003449s ago: executing program 1 (id=4068): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xc4d}, [@map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5dc4}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41000, 0x5}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x1, 0x0, 0x0, 0x1, 0x5, 0x20, 0x0, 0x0, 0xf3b8f362ca66eff5}]}}, 0x0, 0x2a}, 0x28) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@map_idx={0x18, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x3b, &(0x7f00000001c0)=""/59, 0x41000, 0x30, '\x00', r6, @sk_skb, r7, 0x8, &(0x7f0000000340)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r4, 0xa, &(0x7f0000000380)=[r2, r3], &(0x7f00000003c0)=[{0x4, 0x5, 0xd, 0x4}, {0x1, 0x1, 0x1, 0xc}, {0x4, 0x3, 0xd, 0x4}, {0x1, 0x4, 0x5, 0x7}, {0x0, 0x5, 0xc, 0x7}, {0x3, 0x2, 0x5, 0xf}, {0x0, 0x2, 0xc, 0x5}, {0x1, 0x2, 0x9, 0x8}, {0x3, 0x4, 0x3, 0x4}, {0x3, 0x4, 0x8, 0xb}], 0x10, 0xb62}, 0x94) 1.283293929s ago: executing program 3 (id=4069): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000001000)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYBLOB="30290000000000000000000007000000890704a81414bb8917920a"], 0x30}, 0x0) 1.218406482s ago: executing program 3 (id=4070): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317"], 0xfdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7008, 0x0, @perf_bp={0x0}, 0x800, 0xca, 0x200002, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x3) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000500)=ANY=[@ANYRES8=r0, @ANYBLOB='\"\x00\n'], 0x9a) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 434.427076ms ago: executing program 3 (id=4071): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000640)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$kcm(0xa, 0x2, 0x3a) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000040)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = socket$kcm(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 32) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/51, 0xfdef}], 0x1}, 0x80) (async, rerun: 32) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0xfdef) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x4788, 0x37}, 0x80, 0x0}, 0x4000080) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, &(0x7f00000001c0), &(0x7f0000000200)='%-5lx \x00'}, 0x20) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f0000000240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) 307.90376ms ago: executing program 1 (id=4072): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5f, 0xffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bf9600000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x90, &(0x7f00000001c0)=""/144, 0x0, 0x29}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="b702000026000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643c4e8d41cdb7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a09000000f110026e6d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b0a341a2d7cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6659f28d9961b626c57c2691208173656d60a17e3c184b751c51160fbcbbdb5b1e7be6148ba532e60a0ac346dfebd31a08060000000200000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86acac1223331f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08ab1e1ad828267d4eadd3964663e88535c133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0182babc190ae2ebf8aad34732181feb215139f15ea7e8cb0bae7c34d5ac5e7c805210600000000000000c3dec04b25dfc17975238345d4f71ab158c36657b7218baa0700f781c0a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d0175b989b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4effcf7462710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2000034837d365e63845f3c1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000000000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edeeeba72205beff7771bcb293747b88486cacee403000000a2919a4bff2ed893f2c814679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289ce2ad779ce71d4dc30cbb2cc4289d2f884d66cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2e152cb2cf06f8edb30177fead735a952ffce676a93110904d5ee2abdab2ef3ff84c4d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976699b6c0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d2503a3ea376721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e6712824a85eb9ee0a3b68c9e209756623adf685dd715d68ed11e4b4d5502f5124948f8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b6c16bd94d2da66059de81abfa15eeeb88b6ae5882ad341032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f553573c48104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7862f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7afe8a1f8cde79b7a6c5aafe954b8ba37818e40c14b37c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1db99c2cf2735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b3b5fb3832ee68e2b53d44bd84bf6770157e96bbb96b5e1f165c87e7a9a7d53c281d88ebb175a4dbb82130e6870982947913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf36b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c5896514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e2a79b55daa1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb22e76678bbfc1e3865d17d128306d1b81884a934cb00000000000000000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44d715ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f51a973a6c238e545b28211a92000000001501aed80000010000000000e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a67385fea04220423f52ad8178b9f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000300)="76389e14754e83ddd0569ba56a888e", 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 251.912062ms ago: executing program 3 (id=4073): r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x1, 0x4, 0x7, 0x0, 0x7, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x1ff, 0xa}, 0x100400, 0x1, 0x45, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f00000006c0)=""/91, 0x5b, 0x0, &(0x7f0000000740)=""/6, 0x6}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0x15, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfff}, {}, {}, [@call={0x85, 0x0, 0x0, 0x5a}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='syzkaller\x00', 0x18, 0xe4, &(0x7f0000000900)=""/228, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0x5, 0x20, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000a40)=[0xffffffffffffffff], &(0x7f0000000a80)=[{0x1, 0x5, 0xb, 0x7}, {0x3, 0x4, 0x4, 0xe}, {0x1, 0x5, 0x7}, {0x5, 0x2, 0x3}], 0x10, 0x6}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)='%-010d \x00'}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x644, 0x5}, 0x50) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d00)=@o_path={&(0x7f0000000cc0)='./file0\x00', 0x0, 0x10, r0}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@o_path={&(0x7f0000000e80)='./file0\x00', 0x0, 0x10, r0}, 0x18) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xc, 0x13, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x53d2, 0x34, &(0x7f00000002c0)=""/52, 0x41000, 0x20, '\x00', r3, @fallback=0x20, r4, 0x8, &(0x7f0000000640)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x10, 0x2, 0xd5a}, 0x10, r5, r6, 0x0, &(0x7f0000000fc0)=[r7, r8, 0x1, r9, r10, r11, r12, r13, r14], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0xb, 0xe, &(0x7f00000010c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @call={0x85, 0x0, 0x0, 0xc8}], &(0x7f0000001140)='GPL\x00', 0x4, 0xdb, &(0x7f0000001180)=""/219, 0x41000, 0x40, '\x00', r3, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x5, 0xc, 0x9, 0x6f}, 0x10, r5, r15, 0x1, &(0x7f0000001300)=[r7, r9, r2, r12], &(0x7f0000001340)=[{0x5, 0x3, 0x7, 0x3}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001540)={@cgroup=r6, 0x2f, 0x1, 0xfffffa41, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001480)=[0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r16 = gettid() perf_event_open(&(0x7f0000001580)={0x3, 0x80, 0x6, 0x2, 0x6, 0xf, 0x0, 0x800, 0x800, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0x2, 0x80}, 0x2000, 0x3, 0x9, 0x0, 0x2, 0xff, 0xfffc, 0x0, 0xa0, 0x0, 0x4}, r16, 0x9, r0, 0x8) sendmsg$kcm(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001600)="9268c543987c5269e02beabca5259ddc246e96988d51706803d148b986820a3e26919f1ae16b4b67642032ce2a3d1664658eff829946df8849b4ef48c19237728dbf561aa12caf4c0a9147e23afc29a45804e12e0d904286e16648ad2f0c3bc650a059a05accc3313fbd42dc47cf1913ea33543cdb3926b718e94786782a6373609f336ec77765bf227ff787e704a641bb0fb060cabc28a661cb0bfca7ca85a94a6607e1bd7bde2a7e0ae0f35242658f29a65e83c37ff0be2048e6ad8991", 0xbe}, {&(0x7f00000016c0)="e1cb5a8af0818a20efb46b5e70be13a6772733be2cdb644634550b2dfe9cb6943a0064ca59fb65b345140097c236b682a6ea739bf213b915ecf75b15953b5baef16a5e64b37640749b3a33e347375938df283b16d663e200035233d82ffaf57516b01f58512016c90fc548d32b834a91aff2b75d45", 0x75}, {&(0x7f0000001740)="348a7f1d3a28e7ec2cd2cd494e5ac828847d76bea7b9c752498aa1c8607584b2eb7bc41c3c0250d1ec7d5a19fa6f566d25a4629cfe73c40f25ae", 0x3a}], 0x3, &(0x7f00000017c0)}, 0x20040000) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x6ec39675df7d493, 0x0) ioctl$TUNGETVNETBE(r17, 0x800454df, &(0x7f0000001880)) r18 = bpf$ITER_CREATE(0x21, &(0x7f00000018c0), 0x8) write$cgroup_pid(r18, &(0x7f0000001900)=r16, 0x12) write$cgroup_pid(r11, &(0x7f0000001940)=r16, 0x12) setsockopt$sock_attach_bpf(r18, 0x1, 0x32, &(0x7f0000001980)=r15, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x17, 0x29, &(0x7f00000019c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf86}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x8, 0x1, 0x0, r11}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001b40)='syzkaller\x00', 0x2, 0x2c, &(0x7f0000001b80)=""/44, 0x41000, 0x8, '\x00', r3, @cgroup_sysctl, r4, 0x8, &(0x7f0000001bc0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001c00)={0x5, 0x7, 0x1, 0x7}, 0x10, 0xffffffffffffffff, r15, 0x0, &(0x7f0000001cc0)=[r11, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) 132.789626ms ago: executing program 3 (id=4074): perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x0, 0x10003, 0x9e4, 0x5, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000004000000000000000000000300000000030000000100000000000000000000000000000d00000000020000000100000f02000000020000000000000001000100392300000000bf9f1a2d5272b733fbc87ef72a2ceda90000000f02000000921c00006100"], &(0x7f00000006c0)=""/196, 0x68, 0xc4, 0x1}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) r2 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fbd2b9ed", 0x4}, {&(0x7f0000000000)="660f829e3add48b0", 0x7}, {&(0x7f0000000800)="ad8c9ca6cf1b", 0x1c}], 0x3}, 0x0) r3 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x4) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x101a0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e97030000000000000000000000003341000000", 0xd8}], 0x1}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000740)={r1}, 0x8) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r10 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_procs(r11, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r12, &(0x7f00000005c0)=r10, 0x12) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="18bbeca62401a516cf6a161d7019282782e73bf8ac78d05a90864c74644de71c2e0e3c9e4a7122ebe37badf383e83f2d75741d856759f44457eede6f34e3ee1028e2971dd6167cc0de2be6c39a860355dffeca2afe1b98a71a1b71ecf1154e144b542c5098bcb2a4ac70d467e820433357876a38ea19142bcd03b0182828a4614a23dfffac0988ae9352902b6503d054ffafe8e5b6", 0x95}], 0x1, &(0x7f00000009c0)=[@rights={{0x20, 0x1, 0x1, [r7, r1, r7, r5]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, 0xffffffffffffffff, r8]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r4, r1, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, r3, r1, r7]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [r3, r7, r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r8, r6, r3, r5, r9, r3]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff, 0xee01}}}], 0x140, 0x20000000}, 0x8000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 0s ago: executing program 1 (id=4075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0xd, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916630000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) recvmsg$kcm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [T13688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.659639][T13688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.732246][T13688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.762856][T13688] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.854148][T13688] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.913257][T13688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.948231][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 559.957683][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 559.990506][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 560.040445][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 560.062580][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 560.072127][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 560.088746][T14005] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2894'. [ 560.175429][T13688] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.200622][T13688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.236637][T13688] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.327500][T13688] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.422195][T14026] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2902'. [ 560.795859][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.813940][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.848990][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 560.926058][T11294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.949999][T11294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.006294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 561.186373][T14034] device syzkaller0 entered promiscuous mode [ 561.505523][T14048] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2906'. [ 562.795465][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.801900][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.519229][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 564.551454][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 564.570251][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 564.588735][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 564.596504][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 564.604031][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 565.670877][T14113] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2920'. [ 565.895350][T14121] netlink: 'syz.3.2923': attribute type 21 has an invalid length. [ 565.945729][T14121] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2923'. [ 566.079378][T11283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.127101][T14130] netlink: 'syz.0.2926': attribute type 3 has an invalid length. [ 566.144972][T14130] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.2926'. [ 566.265755][T11283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.448894][T11283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.499271][T14116] chnl_net:caif_netlink_parms(): no params data found [ 566.589192][T11283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.676294][T14160] device syzkaller0 entered promiscuous mode [ 566.703031][T14163] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2935'. [ 566.713159][ T4281] Bluetooth: hci4: command 0x0409 tx timeout [ 566.781972][T14163] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2935'. [ 566.810650][T14163] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 566.968504][T14116] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.994998][T14116] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.033597][T14116] device bridge_slave_0 entered promiscuous mode [ 567.063437][T14116] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.077731][T14116] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.087712][T14116] device bridge_slave_1 entered promiscuous mode [ 568.791281][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 570.880998][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 572.030846][T14180] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.2938'. [ 572.055196][T14116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.140853][T11283] device 0 left promiscuous mode [ 572.183775][T14116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.241289][T14202] IPv6: Can't replace route, no match found [ 572.370937][T11283] tipc: Left network mode [ 572.475889][T14116] team0: Port device team_slave_0 added [ 572.643186][T14204] netlink: 'syz.1.2944': attribute type 21 has an invalid length. [ 572.665628][T14204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2944'. [ 572.682924][T14116] team0: Port device team_slave_1 added [ 572.779377][T14116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.793576][T14116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.825902][T14116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.870097][T14116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.893070][T14116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.950898][ T4281] Bluetooth: hci4: command 0x0419 tx timeout [ 572.961247][T14116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.004158][T14232] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2949'. [ 573.090202][T14116] device hsr_slave_0 entered promiscuous mode [ 573.103849][T14116] device hsr_slave_1 entered promiscuous mode [ 573.134831][T14116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.165788][T14116] Cannot create hsr debugfs directory [ 573.343654][T14243] device syzkaller0 entered promiscuous mode [ 573.413683][T14245] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2952'. [ 573.440105][T14248] netlink: 'syz.3.2951': attribute type 29 has an invalid length. [ 573.483247][T14248] netlink: 'syz.3.2951': attribute type 29 has an invalid length. [ 573.513040][T14243] netlink: 'syz.3.2951': attribute type 29 has an invalid length. [ 573.548155][T14251] netlink: 'syz.3.2951': attribute type 29 has an invalid length. [ 573.757744][T14257] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2955'. [ 576.348630][T14304] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2966'. [ 576.417987][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.443494][T11283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.470277][T11283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.493796][T11283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.524768][T11283] device bridge_slave_1 left promiscuous mode [ 576.531712][T11283] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.540353][T11283] device bridge_slave_0 left promiscuous mode [ 576.547093][T11283] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.570820][T11283] device veth1_macvtap left promiscuous mode [ 576.577036][T11283] device veth0_macvtap left promiscuous mode [ 577.387428][T11283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.426718][T11283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.646125][T11283] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 577.669962][T11283] bond0 (unregistering): Released all slaves [ 577.906249][T14116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 577.939255][T14116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 578.060006][T14348] device syzkaller0 entered promiscuous mode [ 578.144876][T14116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 578.183511][T14116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 578.218124][T14355] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.2976'. [ 581.708097][T14373] netlink: 'syz.1.2980': attribute type 10 has an invalid length. [ 581.740737][T14373] team0: Device wg1 is of different type [ 581.893960][T14116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.972388][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 581.986880][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 582.029170][T14116] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.045528][T14407] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2982'. [ 582.074577][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 582.093417][T14409] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2985'. [ 582.109330][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 582.148572][T11281] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.155772][T11281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.231817][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 582.244661][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 582.293889][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 582.325200][T11294] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.332388][T11294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.381421][T14409] netlink: 'syz.4.2985': attribute type 21 has an invalid length. [ 582.389991][T14409] netlink: 'syz.4.2985': attribute type 1 has an invalid length. [ 582.406347][T14409] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.2985'. [ 582.437131][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 582.448722][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 582.470040][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 582.494676][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 582.507654][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 582.575305][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 582.602954][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 582.634890][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 582.676437][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 582.705935][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 582.730946][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 582.776212][T14116] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 583.090862][T14461] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2995'. [ 583.299527][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 583.315570][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 583.340074][T14116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.399646][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 583.409572][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 583.444868][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 583.455049][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 583.466486][T14116] device veth0_vlan entered promiscuous mode [ 583.474064][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 583.482988][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 583.518714][T14116] device veth1_vlan entered promiscuous mode [ 583.581288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 583.590176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 583.598780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 583.609103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 583.752447][T14477] device syzkaller0 entered promiscuous mode [ 583.765447][T14116] device veth0_macvtap entered promiscuous mode [ 584.105517][T14491] sock: sock_set_timeout: `syz.4.3003' (pid 14491) tries to set negative timeout [ 585.698875][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 585.714065][T14116] device veth1_macvtap entered promiscuous mode [ 587.433784][T14491] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3003'. [ 587.510347][T14116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.569838][T14116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.650899][T14116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.673098][T14116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.713208][T14116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.733038][T11276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 587.762399][T11276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 587.786299][T14116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.799839][T14116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.836172][T14116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.864186][T14116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.897176][T14116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.916439][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 587.927271][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 587.954006][T14116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.963525][T14116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.973718][T14116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.990159][T14116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.213731][T11281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.251761][T11281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.356170][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 588.377102][T11281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.389814][T11281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.409757][T11276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 589.026309][T14568] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3026'. [ 589.337617][T14576] netlink: 'syz.2.3028': attribute type 29 has an invalid length. [ 589.381865][T14576] netlink: 'syz.2.3028': attribute type 3 has an invalid length. [ 589.404664][T14576] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3028'. [ 589.643012][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 589.668167][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 589.677468][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 589.711111][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 589.739703][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 589.760537][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 589.960603][T14569] delete_channel: no stack [ 591.748403][T11283] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.805901][T14612] netlink: 'syz.4.3035': attribute type 10 has an invalid length. [ 591.901723][T11283] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.989826][T14577] chnl_net:caif_netlink_parms(): no params data found [ 592.075394][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 592.126319][T11283] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.309074][T11283] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.528200][T14577] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.581407][T14577] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.589604][T14577] device bridge_slave_0 entered promiscuous mode [ 592.634076][T14577] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.647702][T14577] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.674917][T14577] device bridge_slave_1 entered promiscuous mode [ 592.787286][T11283] device 0 left promiscuous mode [ 593.085724][T14577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.124041][T14577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.205226][T14577] team0: Port device team_slave_0 added [ 593.217718][T14577] team0: Port device team_slave_1 added [ 593.257559][T14577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.266495][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.301720][T14577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.322592][T14577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.330489][T14577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.365475][T14577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.594987][T14577] device hsr_slave_0 entered promiscuous mode [ 593.646430][T14577] device hsr_slave_1 entered promiscuous mode [ 593.681402][T14577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.708555][T14577] Cannot create hsr debugfs directory [ 594.151291][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 595.179759][T14673] device lo entered promiscuous mode [ 595.186243][T14673] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 595.708073][T14693] netlink: 'syz.3.3054': attribute type 3 has an invalid length. [ 595.728571][T14693] netlink: 'syz.3.3054': attribute type 1 has an invalid length. [ 595.749306][T14693] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3054'. [ 595.938097][T14705] netlink: 'syz.2.3056': attribute type 21 has an invalid length. [ 596.240818][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 596.411645][T14577] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 596.498094][T14577] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 596.590570][T14577] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 596.613637][T14577] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 596.836561][T14727] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3060'. [ 597.469053][T14721] delete_channel: no stack [ 598.311158][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 599.952611][T11283] team0: Port device wlan1 removed [ 600.067542][T14577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.146087][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 600.168645][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.463155][T14577] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.543886][T14777] netlink: 'syz.0.3068': attribute type 2 has an invalid length. [ 600.581307][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 600.609343][T14777] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.3068'. [ 600.634039][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.661574][T11281] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.668750][T11281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.696168][T11283] device veth0_to_team left promiscuous mode [ 600.703362][T11283] Ÿë: port 1(veth0_to_team) entered disabled state [ 601.128424][T14797] netlink: 'syz.2.3074': attribute type 3 has an invalid length. [ 601.186180][T14797] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3074'. [ 601.368767][T11283] device hsr_slave_0 left promiscuous mode [ 601.386582][T11283] device bridge_slave_0 left promiscuous mode [ 601.393338][T11283] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.424566][T11283] device veth1_macvtap left promiscuous mode [ 601.431207][T11283] device veth0_macvtap left promiscuous mode [ 601.885850][T11283] team0 (unregistering): Port device team_slave_1 removed [ 601.920052][T11283] team0 (unregistering): Port device team_slave_0 removed [ 601.960928][T11283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.999526][T11283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.039372][T11283] team0 (unregistering): Port device bridge_slave_1 removed [ 602.218382][T11283] team0 (unregistering): Port device bond0 removed [ 602.245949][T11283] bond0 (unregistering): Released all slaves [ 602.357627][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 602.366650][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 602.393288][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 602.431344][T11281] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.438493][T11281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.461219][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 602.528190][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 602.537954][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 602.557818][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 602.569404][T14809] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3076'. [ 602.590531][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 602.600193][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 602.726436][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 602.743645][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 602.762036][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 602.778767][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 602.811434][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 602.848201][T14577] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 602.867823][T14813] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3076'. [ 603.738327][T14840] netlink: 'syz.4.3079': attribute type 21 has an invalid length. [ 603.764327][T14840] netlink: 'syz.4.3079': attribute type 5 has an invalid length. [ 603.797086][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 603.818903][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 603.871254][T14577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.956027][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 603.978364][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 604.059049][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 604.072939][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 604.116202][T14577] device veth0_vlan entered promiscuous mode [ 604.127624][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 604.142499][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 604.281137][T14850] device syzkaller0 entered promiscuous mode [ 604.298911][T14577] device veth1_vlan entered promiscuous mode [ 604.349611][T14855] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3085'. [ 604.500967][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 604.509169][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 604.542095][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 604.575699][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 606.403210][T14577] device veth0_macvtap entered promiscuous mode [ 606.434476][T11283] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 606.465178][T14577] device veth1_macvtap entered promiscuous mode [ 606.513816][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.546795][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.559499][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.574952][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.585635][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.598565][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.616563][T14577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.632591][T14890] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3091'. [ 606.655309][T14886] netlink: 'syz.3.3089': attribute type 10 has an invalid length. [ 606.676021][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 606.696283][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 606.745599][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.767691][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.791211][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.830834][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.861241][T14577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.880913][T14577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.921026][T14577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.950580][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 606.972375][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 606.990199][T14577] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.012417][T14577] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.039748][T14577] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.049299][T14577] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.227305][T11294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.258661][T11294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.308422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 607.351586][T14910] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3106'. [ 607.383328][T11294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.400854][T11294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.408454][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 607.485336][T14912] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3096'. [ 607.675285][T14923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3024'. [ 607.710570][T14923] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3024'. [ 607.739053][T14923] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 608.677306][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 608.702110][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 608.710281][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 608.724193][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 608.746014][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 608.754375][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 608.894380][T11281] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.943847][T14956] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3108'. [ 609.052402][T14958] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 609.060375][T14958] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 609.077959][T11281] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.258009][T11281] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.296136][T14964] netlink: 'syz.3.3112': attribute type 19 has an invalid length. [ 609.367937][T11281] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.657619][T14948] chnl_net:caif_netlink_parms(): no params data found [ 610.063547][T11281] device 0 left promiscuous mode [ 610.136635][T14948] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.144423][T14948] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.180008][T14948] device bridge_slave_0 entered promiscuous mode [ 610.212941][T11281] device .*! left promiscuous mode [ 610.301088][T14948] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.308236][T14948] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.352525][T14948] device bridge_slave_1 entered promiscuous mode [ 610.387120][T11281] device 0 left promiscuous mode [ 610.482925][T15010] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3127'. [ 610.801201][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 610.956770][T14948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.113235][T14948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.299874][T14948] team0: Port device team_slave_0 added [ 611.492893][T15038] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3131'. [ 611.503543][T14948] team0: Port device team_slave_1 added [ 611.545749][T15038] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 611.555957][T15038] CPU: 1 PID: 15038 Comm: syz.0.3131 Not tainted syzkaller #0 [ 611.563472][T15038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 611.573569][T15038] Call Trace: [ 611.576889][T15038] [ 611.579872][T15038] dump_stack_lvl+0x188/0x24e [ 611.584603][T15038] ? show_regs_print_info+0x12/0x12 [ 611.589851][T15038] ? load_image+0x400/0x400 [ 611.594421][T15038] sysfs_warn_dup+0x8a/0xa0 [ 611.598971][T15038] sysfs_do_create_link_sd+0xc0/0x110 [ 611.604394][T15038] device_add+0x7ed/0xfb0 [ 611.608785][T15038] wiphy_register+0x1d9f/0x2ac0 [ 611.613708][T15038] ? cfg80211_event_work+0x40/0x40 [ 611.618882][T15038] ? minstrel_ht_alloc+0x894/0xa20 [ 611.624058][T15038] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 611.630180][T15038] ieee80211_register_hw+0x2d00/0x39f0 [ 611.635709][T15038] ? ieee80211_register_hw+0xe71/0x39f0 [ 611.641311][T15038] ? ieee80211_register_hw+0xe71/0x39f0 [ 611.646932][T15038] ? ieee80211_tasklet_handler+0x20/0x20 [ 611.652663][T15038] ? memset+0x1e/0x40 [ 611.656693][T15038] ? __hrtimer_init+0x186/0x270 [ 611.661589][T15038] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 611.667393][T15038] hwsim_new_radio_nl+0xafa/0xce0 [ 611.672495][T15038] genl_family_rcv_msg_doit+0x22a/0x330 [ 611.678083][T15038] ? end_current_label_crit_section+0x170/0x170 [ 611.684375][T15038] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 611.690331][T15038] ? bpf_lsm_capable+0x5/0x10 [ 611.695056][T15038] ? security_capable+0x85/0xb0 [ 611.699965][T15038] genl_rcv_msg+0x604/0x790 [ 611.704542][T15038] ? genl_bind+0x360/0x360 [ 611.709005][T15038] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 611.715405][T15038] netlink_rcv_skb+0x1fb/0x450 [ 611.720213][T15038] ? genl_bind+0x360/0x360 [ 611.724694][T15038] ? netlink_ack+0x1170/0x1170 [ 611.729523][T15038] ? down_read+0x1a8/0x2d0 [ 611.733984][T15038] genl_rcv+0x24/0x40 [ 611.737994][T15038] netlink_unicast+0x74d/0x8d0 [ 611.742808][T15038] netlink_sendmsg+0x8ad/0xbd0 [ 611.747627][T15038] ? netlink_getsockopt+0x550/0x550 [ 611.752870][T15038] ? aa_sock_msg_perm+0x94/0x150 [ 611.757852][T15038] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 611.763175][T15038] ? security_socket_sendmsg+0x7c/0xa0 [ 611.768683][T15038] ? netlink_getsockopt+0x550/0x550 [ 611.773934][T15038] ____sys_sendmsg+0x5be/0x970 [ 611.778760][T15038] ? __sys_sendmsg_sock+0x30/0x30 [ 611.783833][T15038] ? __import_iovec+0x315/0x500 [ 611.788728][T15038] ? import_iovec+0x6f/0xa0 [ 611.793273][T15038] ___sys_sendmsg+0x2a2/0x360 [ 611.797997][T15038] ? try_to_wake_up+0x67c/0x1080 [ 611.803071][T15038] ? __sys_sendmsg+0x290/0x290 [ 611.807953][T15038] __se_sys_sendmsg+0x1bb/0x2a0 [ 611.812859][T15038] ? __x64_sys_sendmsg+0x80/0x80 [ 611.817866][T15038] ? lockdep_hardirqs_on+0x94/0x140 [ 611.823138][T15038] do_syscall_64+0x4c/0xa0 [ 611.827605][T15038] ? clear_bhb_loop+0x60/0xb0 [ 611.832336][T15038] ? clear_bhb_loop+0x60/0xb0 [ 611.837076][T15038] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 611.843026][T15038] RIP: 0033:0x7fa899b9ce59 [ 611.847492][T15038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.867145][T15038] RSP: 002b:00007fa89a9a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.875616][T15038] RAX: ffffffffffffffda RBX: 00007fa899e15fa0 RCX: 00007fa899b9ce59 [ 611.883639][T15038] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 611.891656][T15038] RBP: 00007fa899c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 611.899673][T15038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.907701][T15038] R13: 00007fa899e16038 R14: 00007fa899e15fa0 R15: 00007ffeae880478 [ 611.915737][T15038] [ 612.423177][T15060] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.3136'. [ 612.433382][T14948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.450855][T14948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.510144][T14948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.566182][T15063] IPv6: Can't replace route, no match found [ 612.573841][T15058] netlink: 'syz.3.3135': attribute type 13 has an invalid length. [ 612.593954][T15058] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3135'. [ 612.610359][T15058] erspan0: refused to change device tx_queue_len [ 612.617798][T15058] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 612.701368][T14948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.713849][T14948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.740433][T14948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.871077][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 613.147545][T14948] device hsr_slave_0 entered promiscuous mode [ 613.174439][T14948] device hsr_slave_1 entered promiscuous mode [ 613.202237][T14948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.236308][T14948] Cannot create hsr debugfs directory [ 614.960473][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 615.055903][T11281] device hsr_slave_0 left promiscuous mode [ 615.112957][T11281] device hsr_slave_1 left promiscuous mode [ 615.165375][T11281] device veth1_macvtap left promiscuous mode [ 615.186656][T11281] device veth0_macvtap left promiscuous mode [ 616.234944][T11281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.330707][T11281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.653900][T11281] bond0 (unregistering): Released all slaves [ 616.739274][T15142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3152'. [ 617.040883][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 617.117194][T14948] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 617.347735][T14948] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 617.358795][T14948] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 617.374202][T14948] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 617.682092][T14948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.846184][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 617.860004][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 617.871444][T15191] netlink: 'syz.2.3162': attribute type 3 has an invalid length. [ 617.883686][T14948] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.901511][T15191] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3162'. [ 617.933771][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 617.943386][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 617.953106][T11288] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.960252][T11288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.968278][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 617.993418][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 618.002616][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 618.011616][T11288] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.018778][T11288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.070653][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 618.154547][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 618.183383][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 618.218855][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 618.246111][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 618.273706][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 618.294995][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 618.324699][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 618.346197][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 618.547688][T14948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 618.580188][T14948] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 618.624500][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 618.639687][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 618.804505][T15213] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3168'. [ 619.061551][T15237] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3173'. [ 619.237333][T15241] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3174'. [ 619.443815][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 619.471058][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 619.497780][T14948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.777546][T15263] device wlan1 entered promiscuous mode [ 619.875684][T15263] netlink: 'syz.1.3180': attribute type 3 has an invalid length. [ 619.917953][T15263] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.3180'. [ 620.632225][T15301] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3184'. [ 620.725912][T15298] device syzkaller0 entered promiscuous mode [ 620.762091][T15271] delete_channel: no stack [ 620.950897][T15313] netlink: 'syz.1.3187': attribute type 21 has an invalid length. [ 620.971007][T15310] netlink: 'syz.1.3187': attribute type 21 has an invalid length. [ 621.232175][T15325] netlink: 'syz.2.3190': attribute type 29 has an invalid length. [ 622.989244][T15325] netlink: 'syz.2.3190': attribute type 29 has an invalid length. [ 622.997458][T15332] tap0: tun_chr_ioctl cmd 1074812117 [ 623.008674][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 623.051464][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 623.109089][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 623.122447][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 623.163077][T14948] device veth0_vlan entered promiscuous mode [ 623.171452][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 623.189781][T11290] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 623.233559][T14948] device veth1_vlan entered promiscuous mode [ 623.441268][T15355] device sit0 entered promiscuous mode [ 623.640780][T15354] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3195'. [ 624.127650][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 624.147336][T11288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 624.170580][T15370] netlink: 'syz.2.3199': attribute type 2 has an invalid length. [ 624.187547][T15371] netlink: 'syz.1.3198': attribute type 17 has an invalid length. [ 624.202093][T15370] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3199'. [ 624.215433][T15371] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3198'. [ 624.228710][T15371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.255514][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.261909][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.273389][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 624.306915][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 624.329829][T14948] device veth0_macvtap entered promiscuous mode [ 624.382532][T14948] device veth1_macvtap entered promiscuous mode [ 624.412317][T15376] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3200'. [ 624.467718][T14948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.510303][T14948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.545997][T14948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.565946][T14948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.590826][T14948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.621821][T14948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.676392][T14948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.700554][T14948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.724130][T14948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.739292][T15376] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 624.752780][T15376] CPU: 0 PID: 15376 Comm: syz.0.3200 Not tainted syzkaller #0 [ 624.760287][T15376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.770370][T15376] Call Trace: [ 624.773680][T15376] [ 624.776644][T15376] dump_stack_lvl+0x188/0x24e [ 624.781364][T15376] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 624.787564][T15376] ? show_regs_print_info+0x12/0x12 [ 624.792810][T15376] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 624.799016][T15376] sysfs_warn_dup+0x8a/0xa0 [ 624.803560][T15376] sysfs_do_create_link_sd+0xc0/0x110 [ 624.808978][T15376] device_add+0x7ed/0xfb0 [ 624.813362][T15376] wiphy_register+0x1d9f/0x2ac0 [ 624.818263][T15376] ? __rtnl_unlock+0x14/0xe0 [ 624.822980][T15376] ? cfg80211_event_work+0x40/0x40 [ 624.828132][T15376] ? minstrel_ht_alloc+0x894/0xa20 [ 624.833291][T15376] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 624.839401][T15376] ieee80211_register_hw+0x2d00/0x39f0 [ 624.844914][T15376] ? ieee80211_register_hw+0xe71/0x39f0 [ 624.850502][T15376] ? ieee80211_register_hw+0xe71/0x39f0 [ 624.856113][T15376] ? ieee80211_tasklet_handler+0x20/0x20 [ 624.861802][T15376] ? memset+0x1e/0x40 [ 624.865815][T15376] ? __hrtimer_init+0x186/0x270 [ 624.870703][T15376] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 624.876496][T15376] hwsim_new_radio_nl+0xafa/0xce0 [ 624.881598][T15376] genl_family_rcv_msg_doit+0x22a/0x330 [ 624.887192][T15376] ? end_current_label_crit_section+0x170/0x170 [ 624.893479][T15376] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 624.899420][T15376] ? bpf_lsm_capable+0x5/0x10 [ 624.904147][T15376] ? security_capable+0x85/0xb0 [ 624.909049][T15376] genl_rcv_msg+0x604/0x790 [ 624.913610][T15376] ? genl_bind+0x360/0x360 [ 624.918065][T15376] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 624.924473][T15376] netlink_rcv_skb+0x1fb/0x450 [ 624.929287][T15376] ? genl_bind+0x360/0x360 [ 624.933741][T15376] ? netlink_ack+0x1170/0x1170 [ 624.938584][T15376] ? down_read+0x1a8/0x2d0 [ 624.943059][T15376] genl_rcv+0x24/0x40 [ 624.947086][T15376] netlink_unicast+0x74d/0x8d0 [ 624.951911][T15376] netlink_sendmsg+0x8ad/0xbd0 [ 624.956762][T15376] ? netlink_getsockopt+0x550/0x550 [ 624.962014][T15376] ? aa_sock_msg_perm+0x94/0x150 [ 624.966989][T15376] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 624.972318][T15376] ? security_socket_sendmsg+0x7c/0xa0 [ 624.977826][T15376] ? netlink_getsockopt+0x550/0x550 [ 624.983071][T15376] ____sys_sendmsg+0x5be/0x970 [ 624.987890][T15376] ? __sys_sendmsg_sock+0x30/0x30 [ 624.992959][T15376] ? __import_iovec+0x315/0x500 [ 624.997866][T15376] ? import_iovec+0x6f/0xa0 [ 625.002495][T15376] ___sys_sendmsg+0x2a2/0x360 [ 625.007231][T15376] ? __sys_sendmsg+0x290/0x290 [ 625.012066][T15376] ? ktime_get_real_ts64+0x440/0x440 [ 625.017419][T15376] __se_sys_sendmsg+0x1bb/0x2a0 [ 625.022321][T15376] ? __x64_sys_sendmsg+0x80/0x80 [ 625.027306][T15376] ? lockdep_hardirqs_on+0x94/0x140 [ 625.032532][T15376] do_syscall_64+0x4c/0xa0 [ 625.036975][T15376] ? clear_bhb_loop+0x60/0xb0 [ 625.041674][T15376] ? clear_bhb_loop+0x60/0xb0 [ 625.046384][T15376] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.052310][T15376] RIP: 0033:0x7fa899b9ce59 [ 625.056740][T15376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.076369][T15376] RSP: 002b:00007fa89a983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.084798][T15376] RAX: ffffffffffffffda RBX: 00007fa899e16090 RCX: 00007fa899b9ce59 [ 625.092782][T15376] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 625.100771][T15376] RBP: 00007fa899c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 625.108755][T15376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.116736][T15376] R13: 00007fa899e16128 R14: 00007fa899e16090 R15: 00007ffeae880478 [ 625.124738][T15376] [ 625.162393][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 625.181628][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 625.198477][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 625.242393][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 625.257179][T14948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.296640][T14948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.318720][T14948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.337140][T14948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.357705][T14948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.375680][T14948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.387538][T14948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.414725][T14948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.439739][T14948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.471063][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 625.500121][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 625.528551][T14948] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.545770][T14948] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.554970][T14948] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.578936][T14948] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.382405][T15404] device veth0_to_bond entered promiscuous mode [ 626.425822][T11286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.446141][T11286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.472808][T15407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3208'. [ 626.484107][T15407] tc_dump_action: action bad kind [ 626.489323][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 626.510971][T11294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.539650][T11294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.579926][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 627.029559][T15419] device syzkaller0 entered promiscuous mode [ 627.549770][T15437] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3215'. [ 627.583856][T15437] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 627.597492][T15444] netlink: 'syz.0.3218': attribute type 3 has an invalid length. [ 627.652665][T15444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3218'. [ 628.361448][T15438] delete_channel: no stack [ 630.366735][T15472] device syzkaller0 entered promiscuous mode [ 631.013016][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 631.032183][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 631.040561][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 631.065094][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 631.081832][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 631.089117][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.517179][T11276] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.630428][T15499] netlink: 'syz.0.3228': attribute type 3 has an invalid length. [ 632.649822][T15499] netlink: 'syz.0.3228': attribute type 181 has an invalid length. [ 632.730475][T11276] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.770520][T15503] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3229'. [ 632.861049][T15509] netlink: 'syz.1.3229': attribute type 2 has an invalid length. [ 632.869159][T15509] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3229'. [ 633.020580][T15514] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3230'. [ 633.036337][T15514] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 633.208552][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 633.557757][T11276] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.674865][T11276] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.782124][T15493] chnl_net:caif_netlink_parms(): no params data found [ 633.891138][T15532] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3236'. [ 634.098296][T15493] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.125989][T15493] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.149849][T15493] device bridge_slave_0 entered promiscuous mode [ 634.179315][T15493] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.197856][T15493] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.213967][T15493] device bridge_slave_1 entered promiscuous mode [ 634.225870][T15539] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3237'. [ 634.274503][T15493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.296664][T15493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.347027][T15493] team0: Port device team_slave_0 added [ 634.362570][T15493] team0: Port device team_slave_1 added [ 634.386215][T15541] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3237'. [ 634.418561][T15493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.419885][ T4281] Bluetooth: hci2: unexpected subevent 0x0a length: 11 < 30 [ 634.433347][T15493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.548286][T15493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.585756][T15493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.605034][T15493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.648764][T15493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.769264][T15493] device hsr_slave_0 entered promiscuous mode [ 634.828318][T15493] device hsr_slave_1 entered promiscuous mode [ 634.878914][T15493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.920862][T15493] Cannot create hsr debugfs directory [ 635.205406][T11276] device 0 left promiscuous mode [ 635.271842][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 635.341579][T11276] tipc: Left network mode [ 635.776516][T15570] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.3245'. [ 635.802007][T15570] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 635.846902][T15579] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3248'. [ 635.860193][T15579] netlink: 'syz.4.3248': attribute type 2 has an invalid length. [ 635.871943][T15579] netlink: 'syz.4.3248': attribute type 8 has an invalid length. [ 635.880249][T15579] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3248'. [ 636.327414][T15493] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 636.459332][T15493] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 636.545827][T15493] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 636.565147][T15493] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 636.919872][T15493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.971958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 636.983033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 637.088292][T15493] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.162207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 637.194566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 637.215423][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.222579][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.293906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 637.305833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 637.319107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 637.338120][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.345268][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.353513][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 637.441250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 637.476498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 637.506871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 637.525761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 637.538335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 637.561000][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 637.580283][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 637.646144][T15644] netlink: 'syz.2.3264': attribute type 10 has an invalid length. [ 637.847479][T15644] team0 (unregistering): Port device team_slave_0 removed [ 637.885078][T15644] team0 (unregistering): Port device team_slave_1 removed [ 637.941775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 637.950357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 637.970198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 637.993561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 638.044759][T15493] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 638.094076][T15665] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3269'. [ 638.139952][T15665] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 638.168910][T15665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 638.813181][T11276] device vlan0 left promiscuous mode [ 638.836184][T11276] @: port 1(vlan0) entered disabled state [ 638.913347][T11276] device hsr_slave_0 left promiscuous mode [ 638.964143][T11276] device hsr_slave_1 left promiscuous mode [ 638.980686][T11276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.025140][T11276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.059565][T11276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.086269][T11276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.168689][T11276] device veth1_macvtap left promiscuous mode [ 639.208376][T11276] device veth0_macvtap left promiscuous mode [ 639.240652][T11276] device veth0_vlan left promiscuous mode [ 639.431370][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 640.957188][T11276] team0 (unregistering): Port device team_slave_1 removed [ 641.006649][T11276] team0 (unregistering): Port device C removed [ 641.053415][T11276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.104240][T11276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.383909][T11276] team0 (unregistering): Port device bond0 removed [ 641.412307][T11276] bond0 (unregistering): Released all slaves [ 641.470922][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 641.478655][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 641.488612][T15707] netlink: 'syz.4.3278': attribute type 5 has an invalid length. [ 641.524637][T15493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.623359][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 641.653997][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 641.680070][T15715] nla_validate_range_unsigned: 23 callbacks suppressed [ 641.680087][T15715] netlink: 'syz.2.3280': attribute type 11 has an invalid length. [ 641.716130][T15715] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3280'. [ 641.722794][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 641.735258][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 641.756054][T15493] device veth0_vlan entered promiscuous mode [ 641.772386][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 641.785885][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 641.857868][T15493] device veth1_vlan entered promiscuous mode [ 641.970544][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 641.985038][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 642.014850][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 642.046215][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 644.788635][T15493] device veth0_macvtap entered promiscuous mode [ 644.816806][T11281] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 644.825766][T15714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.863241][T15493] device veth1_macvtap entered promiscuous mode [ 644.908286][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.958592][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.974755][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.985665][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.995994][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.006887][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.017070][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.041999][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.058910][T15493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.079925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 645.098672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 645.119029][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.150832][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.160669][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.186732][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.210896][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.228007][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.260760][T15493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.277437][T15493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.308473][T15493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.354058][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 645.370036][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 645.392191][T15493] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.402932][T15493] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.420863][T15493] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.430437][T15493] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.526076][T15752] netlink: 'syz.2.3289': attribute type 10 has an invalid length. [ 645.674002][T15765] netlink: 'syz.4.3291': attribute type 21 has an invalid length. [ 645.773610][T11283] tipc: Subscription rejected, illegal request [ 645.825769][T15769] netlink: 'syz.0.3293': attribute type 15 has an invalid length. [ 645.861271][T15769] netlink: 'syz.0.3293': attribute type 7 has an invalid length. [ 645.951370][T11286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.959258][T11286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.024004][T11294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 646.080898][T15770] netlink: 'syz.0.3293': attribute type 39 has an invalid length. [ 646.264987][T11283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.297990][T11283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.325949][T11276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 647.137170][T15818] netlink: 'syz.2.3307': attribute type 15 has an invalid length. [ 647.176060][T15818] netlink: 'syz.2.3307': attribute type 7 has an invalid length. [ 647.261324][T15818] netlink: 'syz.2.3307': attribute type 39 has an invalid length. [ 647.435016][T15840] FAULT_INJECTION: forcing a failure. [ 647.435016][T15840] name failslab, interval 1, probability 0, space 0, times 0 [ 647.462550][T15826] netlink: 'syz.4.3309': attribute type 21 has an invalid length. [ 647.472866][T15840] CPU: 0 PID: 15840 Comm: syz.1.3314 Not tainted syzkaller #0 [ 647.480380][T15840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 647.490461][T15840] Call Trace: [ 647.493759][T15840] [ 647.496708][T15840] dump_stack_lvl+0x188/0x24e [ 647.501429][T15840] ? show_regs_print_info+0x12/0x12 [ 647.506666][T15840] ? load_image+0x400/0x400 [ 647.511208][T15840] ? __might_sleep+0xd0/0xd0 [ 647.515828][T15840] ? __lock_acquire+0x7d10/0x7d10 [ 647.520890][T15840] should_fail_ex+0x399/0x4d0 [ 647.525613][T15840] should_failslab+0x5/0x20 [ 647.530216][T15840] slab_pre_alloc_hook+0x59/0x310 [ 647.535325][T15840] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 647.541146][T15840] __kmem_cache_alloc_node+0x4f/0x260 [ 647.546580][T15840] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 647.552348][T15840] __kmalloc+0xa0/0x240 [ 647.556588][T15840] tomoyo_realpath_from_path+0xdf/0x5d0 [ 647.562187][T15840] ? tomoyo_path_number_perm+0x205/0x650 [ 647.567848][T15840] tomoyo_path_number_perm+0x22f/0x650 [ 647.573339][T15840] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 647.578867][T15840] ? __fget_files+0x28/0x4b0 [ 647.583495][T15840] ? __fget_files+0x28/0x4b0 [ 647.588118][T15840] security_file_ioctl+0x6c/0xa0 [ 647.593080][T15840] __se_sys_ioctl+0x48/0x170 [ 647.597748][T15840] do_syscall_64+0x4c/0xa0 [ 647.602186][T15840] ? clear_bhb_loop+0x60/0xb0 [ 647.606894][T15840] ? clear_bhb_loop+0x60/0xb0 [ 647.611602][T15840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.617516][T15840] RIP: 0033:0x7fef71b9ce59 [ 647.621947][T15840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.641567][T15840] RSP: 002b:00007fef72b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.649993][T15840] RAX: ffffffffffffffda RBX: 00007fef71e15fa0 RCX: 00007fef71b9ce59 [ 647.657995][T15840] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000007 [ 647.665996][T15840] RBP: 00007fef72b0a090 R08: 0000000000000000 R09: 0000000000000000 [ 647.673988][T15840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.681973][T15840] R13: 00007fef71e16038 R14: 00007fef71e15fa0 R15: 00007ffe314f4968 [ 647.689976][T15840] [ 647.703599][T15835] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3309'. [ 647.730065][T15840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 648.395814][T15862] netlink: 'syz.4.3319': attribute type 21 has an invalid length. [ 648.578886][T15864] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3322'. [ 649.249245][T15863] delete_channel: no stack [ 649.507611][T15877] FAULT_INJECTION: forcing a failure. [ 649.507611][T15877] name failslab, interval 1, probability 0, space 0, times 0 [ 649.576467][T15877] CPU: 0 PID: 15877 Comm: syz.2.3325 Not tainted syzkaller #0 [ 649.584008][T15877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 649.594101][T15877] Call Trace: [ 649.597411][T15877] [ 649.600376][T15877] dump_stack_lvl+0x188/0x24e [ 649.605108][T15877] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 649.611331][T15877] ? show_regs_print_info+0x12/0x12 [ 649.616572][T15877] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 649.622780][T15877] should_fail_ex+0x399/0x4d0 [ 649.627498][T15877] should_failslab+0x5/0x20 [ 649.632035][T15877] slab_pre_alloc_hook+0x59/0x310 [ 649.637097][T15877] ? tomoyo_encode+0x27e/0x540 [ 649.641899][T15877] __kmem_cache_alloc_node+0x4f/0x260 [ 649.647326][T15877] ? tomoyo_encode+0x27e/0x540 [ 649.652151][T15877] __kmalloc+0xa0/0x240 [ 649.656344][T15877] tomoyo_encode+0x27e/0x540 [ 649.660976][T15877] tomoyo_realpath_from_path+0x58e/0x5d0 [ 649.666646][T15877] ? tomoyo_path_number_perm+0x205/0x650 [ 649.672294][T15877] tomoyo_path_number_perm+0x22f/0x650 [ 649.677772][T15877] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 649.683274][T15877] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 649.689323][T15877] ? __fget_files+0x28/0x4b0 [ 649.693945][T15877] ? __fget_files+0x28/0x4b0 [ 649.698574][T15877] security_file_ioctl+0x6c/0xa0 [ 649.703542][T15877] __se_sys_ioctl+0x48/0x170 [ 649.708166][T15877] do_syscall_64+0x4c/0xa0 [ 649.712618][T15877] ? clear_bhb_loop+0x60/0xb0 [ 649.717328][T15877] ? clear_bhb_loop+0x60/0xb0 [ 649.722038][T15877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 649.727957][T15877] RIP: 0033:0x7fb52299ce59 [ 649.732400][T15877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.752024][T15877] RSP: 002b:00007fb5237b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 649.760455][T15877] RAX: ffffffffffffffda RBX: 00007fb522c15fa0 RCX: 00007fb52299ce59 [ 649.768445][T15877] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000007 [ 649.776439][T15877] RBP: 00007fb5237b5090 R08: 0000000000000000 R09: 0000000000000000 [ 649.784431][T15877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.792418][T15877] R13: 00007fb522c16038 R14: 00007fb522c15fa0 R15: 00007ffc984822c8 [ 649.800422][T15877] [ 649.817920][T15877] ERROR: Out of memory at tomoyo_realpath_from_path. [ 649.874788][T15873] delete_channel: no stack [ 650.439636][T15904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3334'. [ 650.495120][T15904] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3334'. [ 650.533895][T15906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3334'. [ 650.662108][T15909] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3334'. [ 650.740641][T15919] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3337'. [ 650.791841][T15919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.830487][T15919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.873399][T15919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.891751][T15919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.906040][T15919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.918736][T15919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.930541][T15924] FAULT_INJECTION: forcing a failure. [ 650.930541][T15924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.937007][T15919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.962012][T15919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.977034][T15919] device batadv_slave_1 entered promiscuous mode [ 650.984886][T15924] CPU: 0 PID: 15924 Comm: syz.4.3339 Not tainted syzkaller #0 [ 650.992389][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 651.002469][T15924] Call Trace: [ 651.005765][T15924] [ 651.008720][T15924] dump_stack_lvl+0x188/0x24e [ 651.013440][T15924] ? show_regs_print_info+0x12/0x12 [ 651.018679][T15924] ? load_image+0x400/0x400 [ 651.023220][T15924] ? __lock_acquire+0x7d10/0x7d10 [ 651.028290][T15924] should_fail_ex+0x399/0x4d0 [ 651.033012][T15924] _copy_from_user+0x2c/0x170 [ 651.037727][T15924] get_user_ifreq+0x67/0x170 [ 651.042353][T15924] sock_ioctl+0x637/0x710 [ 651.046727][T15924] ? sock_poll+0x410/0x410 [ 651.051189][T15924] ? bpf_lsm_file_ioctl+0x5/0x10 [ 651.056158][T15924] ? security_file_ioctl+0x7c/0xa0 [ 651.061307][T15924] ? sock_poll+0x410/0x410 [ 651.065750][T15924] __se_sys_ioctl+0xfa/0x170 [ 651.070376][T15924] do_syscall_64+0x4c/0xa0 [ 651.074830][T15924] ? clear_bhb_loop+0x60/0xb0 [ 651.079526][T15924] ? clear_bhb_loop+0x60/0xb0 [ 651.084223][T15924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.090145][T15924] RIP: 0033:0x7f4d45f9ce59 [ 651.094573][T15924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.114198][T15924] RSP: 002b:00007f4d46e7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.122628][T15924] RAX: ffffffffffffffda RBX: 00007f4d46215fa0 RCX: 00007f4d45f9ce59 [ 651.130621][T15924] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000007 [ 651.138626][T15924] RBP: 00007f4d46e7b090 R08: 0000000000000000 R09: 0000000000000000 [ 651.146621][T15924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.154606][T15924] R13: 00007f4d46216038 R14: 00007f4d46215fa0 R15: 00007fff985b74b8 [ 651.162599][T15924] [ 652.299850][T15951] validate_nla: 3 callbacks suppressed [ 652.299866][T15951] netlink: 'syz.2.3348': attribute type 3 has an invalid length. [ 652.356933][T15951] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3348'. [ 652.650155][T15962] netlink: 'syz.4.3352': attribute type 3 has an invalid length. [ 652.720855][T15962] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.3352'. [ 652.971971][T15968] FAULT_INJECTION: forcing a failure. [ 652.971971][T15968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 652.991734][T15968] CPU: 0 PID: 15968 Comm: syz.1.3354 Not tainted syzkaller #0 [ 652.999231][T15968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 653.009307][T15968] Call Trace: [ 653.012612][T15968] [ 653.015571][T15968] dump_stack_lvl+0x188/0x24e [ 653.020286][T15968] ? show_regs_print_info+0x12/0x12 [ 653.025519][T15968] ? load_image+0x400/0x400 [ 653.030061][T15968] ? __lock_acquire+0x7d10/0x7d10 [ 653.035130][T15968] should_fail_ex+0x399/0x4d0 [ 653.039837][T15968] _copy_from_user+0x2c/0x170 [ 653.044552][T15968] br_dev_siocdevprivate+0x115/0x17a0 [ 653.049980][T15968] ? br_handle_local_finish+0x20/0x20 [ 653.055382][T15968] ? __mutex_trylock_common+0x155/0x260 [ 653.060968][T15968] ? trace_raw_output_contention_end+0xd0/0xd0 [ 653.067157][T15968] ? rcu_is_watching+0x11/0xa0 [ 653.072045][T15968] ? trace_contention_end+0x5f/0x170 [ 653.077352][T15968] ? full_name_hash+0x8e/0xe0 [ 653.082053][T15968] dev_ifsioc+0xa4a/0xd40 [ 653.086467][T15968] ? dev_ioctl+0xe80/0xe80 [ 653.090906][T15968] ? dev_get_by_name_rcu+0x13/0x120 [ 653.096151][T15968] ? full_name_hash+0x8e/0xe0 [ 653.100847][T15968] ? dev_load+0x1d/0x1e0 [ 653.105102][T15968] ? dev_load+0x1d/0x1e0 [ 653.109354][T15968] dev_ioctl+0x5f8/0xe80 [ 653.113619][T15968] ? get_user_ifreq+0xc7/0x170 [ 653.118400][T15968] sock_ioctl+0x691/0x710 [ 653.122741][T15968] ? sock_poll+0x410/0x410 [ 653.127175][T15968] ? bpf_lsm_file_ioctl+0x5/0x10 [ 653.132136][T15968] ? security_file_ioctl+0x7c/0xa0 [ 653.137268][T15968] ? sock_poll+0x410/0x410 [ 653.141696][T15968] __se_sys_ioctl+0xfa/0x170 [ 653.146321][T15968] do_syscall_64+0x4c/0xa0 [ 653.150760][T15968] ? clear_bhb_loop+0x60/0xb0 [ 653.155460][T15968] ? clear_bhb_loop+0x60/0xb0 [ 653.160161][T15968] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.166071][T15968] RIP: 0033:0x7fef71b9ce59 [ 653.170505][T15968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.190129][T15968] RSP: 002b:00007fef72b0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 653.198568][T15968] RAX: ffffffffffffffda RBX: 00007fef71e15fa0 RCX: 00007fef71b9ce59 [ 653.206550][T15968] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000007 [ 653.214557][T15968] RBP: 00007fef72b0a090 R08: 0000000000000000 R09: 0000000000000000 [ 653.222541][T15968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.230524][T15968] R13: 00007fef71e16038 R14: 00007fef71e15fa0 R15: 00007ffe314f4968 [ 653.238530][T15968] [ 653.571118][T15974] FAULT_INJECTION: forcing a failure. [ 653.571118][T15974] name failslab, interval 1, probability 0, space 0, times 0 [ 653.585190][T15974] CPU: 0 PID: 15974 Comm: syz.2.3367 Not tainted syzkaller #0 [ 653.592698][T15974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 653.602790][T15974] Call Trace: [ 653.606099][T15974] [ 653.609056][T15974] dump_stack_lvl+0x188/0x24e [ 653.613794][T15974] ? show_regs_print_info+0x12/0x12 [ 653.619040][T15974] ? load_image+0x400/0x400 [ 653.623585][T15974] ? lockdep_hardirqs_on+0x94/0x140 [ 653.628832][T15974] ? __lock_acquire+0x7d10/0x7d10 [ 653.633902][T15974] should_fail_ex+0x399/0x4d0 [ 653.638625][T15974] should_failslab+0x5/0x20 [ 653.643175][T15974] slab_pre_alloc_hook+0x59/0x310 [ 653.648249][T15974] ? br_get_link_af_size_filtered+0xb2a/0xc20 [ 653.654457][T15974] kmem_cache_alloc_node+0x5a/0x320 [ 653.659681][T15974] ? __alloc_skb+0xfc/0x7e0 [ 653.664228][T15974] __alloc_skb+0xfc/0x7e0 [ 653.668592][T15974] br_info_notify+0x101/0x240 [ 653.673302][T15974] br_dev_siocdevprivate+0xe11/0x17a0 [ 653.678709][T15974] ? br_handle_local_finish+0x20/0x20 [ 653.684131][T15974] ? __mutex_lock+0x806/0xaf0 [ 653.688852][T15974] ? __lock_acquire+0x7d10/0x7d10 [ 653.693916][T15974] ? do_raw_spin_lock+0x128/0x2f0 [ 653.698967][T15974] ? __rwlock_init+0x140/0x140 [ 653.703753][T15974] ? do_raw_spin_unlock+0x11d/0x230 [ 653.708967][T15974] ? full_name_hash+0x8e/0xe0 [ 653.713678][T15974] dev_ifsioc+0xa4a/0xd40 [ 653.718038][T15974] ? dev_ioctl+0xe80/0xe80 [ 653.722473][T15974] ? full_name_hash+0x8e/0xe0 [ 653.727169][T15974] ? dev_load+0x1d/0x1e0 [ 653.731429][T15974] ? dev_load+0x1d/0x1e0 [ 653.735700][T15974] dev_ioctl+0x5f8/0xe80 [ 653.739965][T15974] ? get_user_ifreq+0xc7/0x170 [ 653.744747][T15974] sock_ioctl+0x691/0x710 [ 653.749104][T15974] ? sock_poll+0x410/0x410 [ 653.753539][T15974] ? bpf_lsm_file_ioctl+0x5/0x10 [ 653.758496][T15974] ? security_file_ioctl+0x7c/0xa0 [ 653.763642][T15974] ? sock_poll+0x410/0x410 [ 653.768076][T15974] __se_sys_ioctl+0xfa/0x170 [ 653.772694][T15974] do_syscall_64+0x4c/0xa0 [ 653.777135][T15974] ? clear_bhb_loop+0x60/0xb0 [ 653.781832][T15974] ? clear_bhb_loop+0x60/0xb0 [ 653.786530][T15974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.792439][T15974] RIP: 0033:0x7fb52299ce59 [ 653.796865][T15974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.816492][T15974] RSP: 002b:00007fb5237b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 653.824918][T15974] RAX: ffffffffffffffda RBX: 00007fb522c15fa0 RCX: 00007fb52299ce59 [ 653.832904][T15974] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000007 [ 653.840889][T15974] RBP: 00007fb5237b5090 R08: 0000000000000000 R09: 0000000000000000 [ 653.848893][T15974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.856889][T15974] R13: 00007fb522c16038 R14: 00007fb522c15fa0 R15: 00007ffc984822c8 [ 653.864888][T15974] [ 654.237881][T15987] IPv6: …: Disabled Multicast RS [ 654.363354][T16001] netlink: 'syz.0.3364': attribute type 27 has an invalid length. [ 654.772038][T16008] delete_channel: no stack [ 654.889416][T16014] IPv6: pim6reg1: Disabled Multicast RS [ 654.978850][T16011] device wlan1 entered promiscuous mode [ 655.067721][T16016] bridge_slave_0: mtu less than device minimum [ 655.638485][ T4281] Bluetooth: hci1: ISO packet for unknown connection handle 48 [ 656.024125][T16063] FAULT_INJECTION: forcing a failure. [ 656.024125][T16063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.080995][T16063] CPU: 1 PID: 16063 Comm: syz.4.3386 Not tainted syzkaller #0 [ 656.088527][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 656.098619][T16063] Call Trace: [ 656.101939][T16063] [ 656.104906][T16063] dump_stack_lvl+0x188/0x24e [ 656.109627][T16063] ? show_regs_print_info+0x12/0x12 [ 656.114876][T16063] ? load_image+0x400/0x400 [ 656.119422][T16063] ? __lock_acquire+0x7d10/0x7d10 [ 656.124486][T16063] ? full_name_hash+0x8e/0xe0 [ 656.129204][T16063] should_fail_ex+0x399/0x4d0 [ 656.133911][T16063] _copy_to_user+0x2c/0x130 [ 656.138450][T16063] put_user_ifreq+0x74/0xb0 [ 656.142993][T16063] sock_ioctl+0x6c0/0x710 [ 656.147356][T16063] ? sock_poll+0x410/0x410 [ 656.151816][T16063] ? bpf_lsm_file_ioctl+0x5/0x10 [ 656.156789][T16063] ? security_file_ioctl+0x7c/0xa0 [ 656.161948][T16063] ? sock_poll+0x410/0x410 [ 656.166397][T16063] __se_sys_ioctl+0xfa/0x170 [ 656.171030][T16063] do_syscall_64+0x4c/0xa0 [ 656.175484][T16063] ? clear_bhb_loop+0x60/0xb0 [ 656.180208][T16063] ? clear_bhb_loop+0x60/0xb0 [ 656.184923][T16063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.190847][T16063] RIP: 0033:0x7f4d45f9ce59 [ 656.195289][T16063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.214925][T16063] RSP: 002b:00007f4d46e7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.223370][T16063] RAX: ffffffffffffffda RBX: 00007f4d46215fa0 RCX: 00007f4d45f9ce59 [ 656.231384][T16063] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000007 [ 656.239384][T16063] RBP: 00007f4d46e7b090 R08: 0000000000000000 R09: 0000000000000000 [ 656.247437][T16063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.255457][T16063] R13: 00007f4d46216038 R14: 00007f4d46215fa0 R15: 00007fff985b74b8 [ 656.263480][T16063] [ 656.457258][T16073] netlink: 'syz.2.3389': attribute type 11 has an invalid length. [ 656.475564][T16073] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3389'. [ 656.878328][T16088] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3394'. [ 658.598473][T16088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.671258][T16088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.751345][T16088] bond0 (unregistering): Released all slaves [ 658.883234][T16117] netlink: 'syz.4.3403': attribute type 2 has an invalid length. [ 658.901635][T16117] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3403'. [ 659.180501][T16128] FAULT_INJECTION: forcing a failure. [ 659.180501][T16128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.225218][T16128] CPU: 1 PID: 16128 Comm: syz.3.3407 Not tainted syzkaller #0 [ 659.232757][T16128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 659.242844][T16128] Call Trace: [ 659.246147][T16128] [ 659.249103][T16128] dump_stack_lvl+0x188/0x24e [ 659.253823][T16128] ? show_regs_print_info+0x12/0x12 [ 659.259067][T16128] ? load_image+0x400/0x400 [ 659.263607][T16128] ? __lock_acquire+0x7d10/0x7d10 [ 659.268680][T16128] ? lockdep_hardirqs_on+0x94/0x140 [ 659.273922][T16128] should_fail_ex+0x399/0x4d0 [ 659.278634][T16128] _copy_to_user+0x2c/0x130 [ 659.283191][T16128] simple_read_from_buffer+0xe3/0x150 [ 659.288615][T16128] proc_fail_nth_read+0x1a6/0x220 [ 659.293689][T16128] ? proc_fault_inject_write+0x310/0x310 [ 659.299361][T16128] ? fsnotify_perm+0x248/0x550 [ 659.304159][T16128] ? proc_fault_inject_write+0x310/0x310 [ 659.309824][T16128] vfs_read+0x2de/0xa00 [ 659.314029][T16128] ? kernel_read+0x1e0/0x1e0 [ 659.318658][T16128] ? __fget_files+0x28/0x4b0 [ 659.323282][T16128] ? __fget_files+0x28/0x4b0 [ 659.327912][T16128] ? __fget_files+0x43d/0x4b0 [ 659.332640][T16128] ? __fdget_pos+0x2ae/0x360 [ 659.337269][T16128] ? ksys_read+0x71/0x250 [ 659.341641][T16128] ksys_read+0x14c/0x250 [ 659.345926][T16128] ? vfs_write+0xa30/0xa30 [ 659.350382][T16128] ? lockdep_hardirqs_on+0x94/0x140 [ 659.355626][T16128] do_syscall_64+0x4c/0xa0 [ 659.360076][T16128] ? clear_bhb_loop+0x60/0xb0 [ 659.364789][T16128] ? clear_bhb_loop+0x60/0xb0 [ 659.369499][T16128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 659.375417][T16128] RIP: 0033:0x7efe2875d68e [ 659.379845][T16128] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 659.399471][T16128] RSP: 002b:00007efe29595fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 659.407917][T16128] RAX: ffffffffffffffda RBX: 00007efe295966c0 RCX: 00007efe2875d68e [ 659.415906][T16128] RDX: 000000000000000f RSI: 00007efe295960a0 RDI: 0000000000000008 [ 659.423902][T16128] RBP: 00007efe29596090 R08: 0000000000000000 R09: 0000000000000000 [ 659.431910][T16128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.439911][T16128] R13: 00007efe28a16038 R14: 00007efe28a15fa0 R15: 00007ffd14f10198 [ 659.447932][T16128] [ 659.678760][T16135] netlink: 'syz.4.3409': attribute type 2 has an invalid length. [ 659.710527][T16135] netlink: 'syz.4.3409': attribute type 8 has an invalid length. [ 659.739715][T16135] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3409'. [ 659.953762][T16145] netlink: 'syz.1.3412': attribute type 21 has an invalid length. [ 659.990834][T16145] IPv6: NLM_F_CREATE should be specified when creating new route [ 659.998712][T16145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 660.006042][T16145] IPv6: NLM_F_CREATE should be set when creating new route [ 660.013341][T16145] IPv6: NLM_F_CREATE should be set when creating new route [ 660.020652][T16145] IPv6: NLM_F_CREATE should be set when creating new route [ 660.398919][T16150] netlink: 'syz.3.3414': attribute type 3 has an invalid length. [ 660.450474][T16150] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3414'. [ 660.709419][T16162] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3417'. [ 660.777939][T16153] netlink: 'syz.4.3415': attribute type 2 has an invalid length. [ 660.801047][T16153] netlink: 'syz.4.3415': attribute type 8 has an invalid length. [ 660.830957][T16153] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3415'. [ 660.945592][T16168] device pim6reg1 entered promiscuous mode [ 661.141715][T16180] netlink: 'syz.1.3420': attribute type 10 has an invalid length. [ 661.199811][T16180] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 661.209356][T16185] netlink: 'syz.0.3424': attribute type 2 has an invalid length. [ 661.224005][T16185] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3424'. [ 661.259554][T16180] netlink: 'syz.1.3420': attribute type 10 has an invalid length. [ 661.416111][T16183] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3420'. [ 661.430057][T16183] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3420'. [ 661.450113][T16183] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3420'. [ 661.566910][T16188] delete_channel: no stack [ 664.377822][T16229] validate_nla: 1 callbacks suppressed [ 664.377837][T16229] netlink: 'syz.0.3438': attribute type 10 has an invalid length. [ 665.158078][T16229] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.165594][T16229] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.197805][T16229] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.205191][T16229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.213340][T16229] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.220474][T16229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.271398][T16229] team0: Port device bridge0 added [ 665.481914][T16231] delete_channel: no stack [ 665.586007][T16242] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3444'. [ 665.653399][T16247] netlink: 'syz.1.3446': attribute type 2 has an invalid length. [ 665.694870][T16247] netlink: 'syz.1.3446': attribute type 8 has an invalid length. [ 665.703620][T16247] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3446'. [ 665.719643][T16249] netlink: 'syz.2.3445': attribute type 13 has an invalid length. [ 665.737948][T16249] netlink: 'syz.2.3445': attribute type 14 has an invalid length. [ 665.760318][T16249] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3445'. [ 665.789949][T16247] netlink: 'syz.1.3446': attribute type 30 has an invalid length. [ 665.812631][T16249] netlink: 'syz.2.3445': attribute type 3 has an invalid length. [ 665.835664][T16249] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3445'. [ 665.977595][T16264] netlink: 'syz.3.3449': attribute type 21 has an invalid length. [ 666.016660][T16264] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3449'. [ 666.047986][T16268] netlink: 'syz.1.3450': attribute type 16 has an invalid length. [ 666.051824][T16265] netlink: 'syz.4.3448': attribute type 27 has an invalid length. [ 666.068052][T16264] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3449'. [ 666.086512][T16268] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3450'. [ 666.101518][T16265] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3448'. [ 666.126023][T16273] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3451'. [ 666.182279][T16273] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.3451'. [ 667.554847][T16315] device syzkaller0 entered promiscuous mode [ 670.921415][T16341] __nla_validate_parse: 1 callbacks suppressed [ 670.921431][T16341] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3472'. [ 671.129234][T16357] validate_nla: 3 callbacks suppressed [ 671.129266][T16357] netlink: 'syz.2.3477': attribute type 27 has an invalid length. [ 671.145126][T16357] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3477'. [ 671.397869][T16369] device bond_slave_1 entered promiscuous mode [ 671.493818][T16371] netlink: 'syz.1.3482': attribute type 2 has an invalid length. [ 671.704435][T16378] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3485'. [ 671.754528][T16376] netlink: 'syz.4.3484': attribute type 33 has an invalid length. [ 671.776950][T16376] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3484'. [ 672.081502][T16393] device syzkaller0 entered promiscuous mode [ 672.390915][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 674.239874][T16419] netlink: 'syz.2.3495': attribute type 13 has an invalid length. [ 674.254723][T16419] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3495'. [ 674.266425][T16419] syz_tun: refused to change device tx_queue_len [ 674.273214][T16419] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 674.304875][T16434] netlink: 'syz.1.3497': attribute type 1 has an invalid length. [ 674.320881][T16434] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.3497'. [ 674.519992][T16440] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3499'. [ 674.649652][T16443] netlink: 'syz.3.3500': attribute type 10 has an invalid length. [ 674.679324][T16443] batman_adv: batadv0: Adding interface: netdevsim0 [ 674.696670][T16443] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.725420][T16443] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 674.770498][T16448] tap0: tun_chr_ioctl cmd 1074025677 [ 674.793704][T16448] tap0: linktype set to 774 [ 674.833557][T16455] netlink: 'syz.0.3502': attribute type 10 has an invalid length. [ 674.944017][T16461] netlink: 'syz.4.3504': attribute type 29 has an invalid length. [ 674.955574][T16455] team0: Device veth1_macvtap failed to register rx_handler [ 675.050919][T16461] netlink: 'syz.4.3504': attribute type 29 has an invalid length. [ 676.325420][T16459] netlink: 'syz.4.3504': attribute type 29 has an invalid length. [ 676.351510][T16468] device bond_slave_1 entered promiscuous mode [ 676.359482][T11286] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 676.575444][T16476] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3509'. [ 676.611665][T16473] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.3508'. [ 676.649179][T16473] netlink: 'syz.3.3508': attribute type 1 has an invalid length. [ 676.657688][T16473] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.3508'. [ 678.557533][T16521] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3520'. [ 678.590587][T16524] device syzkaller0 entered promiscuous mode [ 678.608210][T16521] netlink: zone id is out of range [ 678.624553][T16521] netlink: zone id is out of range [ 678.650108][T16521] netlink: zone id is out of range [ 678.658374][T16521] netlink: zone id is out of range [ 678.666910][T16521] netlink: zone id is out of range [ 678.674028][T16521] netlink: zone id is out of range [ 678.701147][T16521] netlink: zone id is out of range [ 678.718046][T16521] netlink: zone id is out of range [ 678.736540][T16521] netlink: zone id is out of range [ 683.560036][T16561] netlink: 'syz.4.3533': attribute type 46 has an invalid length. [ 683.574620][T16562] netlink: 'syz.4.3533': attribute type 46 has an invalid length. [ 683.815346][T16584] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3537'. [ 684.201896][T16600] device wlan1 entered promiscuous mode [ 684.272001][T16600] netlink: 'syz.3.3540': attribute type 3 has an invalid length. [ 684.279815][T16600] netlink: 114680 bytes leftover after parsing attributes in process `syz.3.3540'. [ 684.557707][T16611] tipc: Started in network mode [ 684.570000][T16611] tipc: Node identity 9215a268, cluster identity 4711 [ 684.596308][T16611] tipc: Node number set to 2450891368 [ 684.643123][T16620] netlink: 'syz.4.3547': attribute type 10 has an invalid length. [ 684.705377][T16623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3548'. [ 685.097026][T16639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3552'. [ 685.153079][T16639] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3552'. [ 685.235035][T16642] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3552'. [ 685.636605][T16651] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3552'. [ 685.685543][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.693256][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.933880][T16673] netlink: 'syz.3.3559': attribute type 3 has an invalid length. [ 685.971219][T16677] netlink: 'syz.2.3560': attribute type 29 has an invalid length. [ 685.980864][T16673] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3559'. [ 686.007427][T16677] netlink: 'syz.2.3560': attribute type 3 has an invalid length. [ 686.045107][T16677] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3560'. [ 686.329151][T16683] netlink: 'syz.0.3561': attribute type 19 has an invalid length. [ 686.360815][T16683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3561'. [ 687.562875][T16729] net_ratelimit: 97 callbacks suppressed [ 687.562892][T16729] netlink: zone id is out of range [ 687.582391][T16729] netlink: zone id is out of range [ 687.588085][T16729] netlink: zone id is out of range [ 687.608959][T16729] netlink: zone id is out of range [ 687.616357][T16735] netlink: 'syz.2.3575': attribute type 2 has an invalid length. [ 687.632591][T16729] netlink: zone id is out of range [ 687.638603][T16729] netlink: zone id is out of range [ 687.656172][T16729] netlink: zone id is out of range [ 687.670318][T16729] netlink: zone id is out of range [ 687.690339][T16729] netlink: zone id is out of range [ 687.703551][T16729] netlink: zone id is out of range [ 687.752145][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 688.352425][T16762] netlink: 'syz.0.3585': attribute type 4 has an invalid length. [ 688.619798][T16779] validate_nla: 2 callbacks suppressed [ 688.619814][T16779] netlink: 'syz.3.3589': attribute type 3 has an invalid length. [ 688.649155][T16779] netlink: 'syz.3.3589': attribute type 3 has an invalid length. [ 688.667858][T16779] netlink: 'syz.3.3589': attribute type 3 has an invalid length. [ 688.839377][T16792] netlink: 'syz.0.3593': attribute type 3 has an invalid length. [ 689.948631][T16831] netlink: 'syz.2.3603': attribute type 23 has an invalid length. [ 690.317120][T16837] delete_channel: no stack [ 690.779327][T16854] __nla_validate_parse: 9 callbacks suppressed [ 690.779341][T16854] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3611'. [ 691.341013][T16867] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3616'. [ 691.371233][T16867] device hsr_slave_0 left promiscuous mode [ 691.384607][T16867] device hsr_slave_1 left promiscuous mode [ 691.596073][T16882] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 691.615825][T16882] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 691.634797][T16882] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 692.485566][T16916] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3627'. [ 692.841429][T16930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3629'. [ 693.213273][T16941] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3633'. [ 693.796787][T16963] netlink: 'syz.3.3638': attribute type 6 has an invalid length. [ 693.916662][T16963] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3638'. [ 694.902322][T16987] netlink: 3291 bytes leftover after parsing attributes in process `syz.1.3642'. [ 696.266682][T17037] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3656'. [ 696.350926][T17037] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.3656'. [ 697.136472][T17052] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3659'. [ 697.714293][T17073] netlink: 'syz.1.3665': attribute type 29 has an invalid length. [ 697.798992][T17073] netlink: 'syz.1.3665': attribute type 29 has an invalid length. [ 697.878950][T17078] netlink: 'syz.2.3667': attribute type 2 has an invalid length. [ 697.941245][T17078] netlink: 'syz.2.3667': attribute type 9 has an invalid length. [ 697.979861][T17078] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3667'. [ 698.467778][ T48] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 700.550799][ T48] Bluetooth: hci5: command 0x2016 tx timeout [ 700.703507][T17154] netlink: 'syz.4.3687': attribute type 3 has an invalid length. [ 700.727497][T17154] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3687'. [ 700.850333][T17158] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3687'. [ 700.898308][T17158] bond0: (slave bond_slave_0): Releasing backup interface [ 700.942864][T17158] net_ratelimit: 3544 callbacks suppressed [ 700.942881][T17158] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 701.063067][T17160] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3688'. [ 701.090953][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3688'. [ 701.193074][T17164] netlink: 'syz.0.3688': attribute type 13 has an invalid length. [ 701.210814][T17164] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3688'. [ 701.233605][T17164] syz_tun: refused to change device tx_queue_len [ 701.246579][T17164] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 701.374567][T17167] netlink: 'syz.1.3691': attribute type 3 has an invalid length. [ 701.944103][T17181] netlink: 'syz.4.3695': attribute type 1 has an invalid length. [ 701.960821][T17181] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.3695'. [ 702.185631][T17187] netlink: 'syz.3.3698': attribute type 3 has an invalid length. [ 702.237864][T17187] netlink: 'syz.3.3698': attribute type 1 has an invalid length. [ 702.276649][T17187] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3698'. [ 702.547524][T17187] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3698'. [ 702.577466][T17193] netlink: 'syz.0.3700': attribute type 10 has an invalid length. [ 702.727594][T17193] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.799729][T17193] device bridge_slave_1 left promiscuous mode [ 702.823640][T17193] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.040518][T17193] team0: Port device bridge_slave_1 added [ 703.398727][T17206] netlink: 'syz.2.3704': attribute type 16 has an invalid length. [ 703.406955][T17206] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3704'. [ 703.610508][T17228] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3707'. [ 703.980821][T17241] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 703.988890][T17241] syzkaller1: linktype set to 825 [ 705.409660][T17259] delete_channel: no stack [ 705.443801][T17259] delete_channel: no stack [ 705.821409][T17280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3723'. [ 705.921194][T17280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3723'. [ 705.974972][T17288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3723'. [ 706.171909][T17294] netlink: 'syz.4.3724': attribute type 8 has an invalid length. [ 706.180568][T17294] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3724'. [ 707.038671][T17311] netlink: 'syz.2.3731': attribute type 3 has an invalid length. [ 707.058259][T17313] netlink: 'syz.4.3732': attribute type 3 has an invalid length. [ 707.076254][T17311] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.3731'. [ 707.089595][T17313] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3732'. [ 708.761416][T17374] netlink: 'syz.4.3749': attribute type 10 has an invalid length. [ 708.761993][T17373] netlink: 'syz.1.3751': attribute type 2 has an invalid length. [ 708.812533][T17374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3749'. [ 708.884289][T17374] batman_adv: batadv0: Adding interface: vlan1 [ 708.950305][T17374] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.085655][T17374] batman_adv: batadv0: Interface activated: vlan1 [ 709.131420][T17388] netlink: 'syz.2.3754': attribute type 25 has an invalid length. [ 709.151141][T17388] netlink: 'syz.2.3754': attribute type 9 has an invalid length. [ 709.923598][T17413] device wg2 entered promiscuous mode [ 709.961699][T17420] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.3762'. [ 709.979163][T17420] netlink: zone id is out of range [ 710.166708][T17430] netlink: 'syz.0.3765': attribute type 4 has an invalid length. [ 711.002433][ T4281] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 711.973440][T17470] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3778'. [ 712.139518][T17475] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.3779'. [ 712.467750][T17484] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3782'. [ 713.233944][T17509] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3790'. [ 713.350967][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 716.260696][ T4281] Bluetooth: hci2: ISO packet for unknown connection handle 3084 [ 716.319669][T17523] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.3794'. [ 716.350628][T17527] netlink: 'syz.3.3796': attribute type 27 has an invalid length. [ 716.988215][T17537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3798'. [ 718.402874][T17571] ÿ: renamed from bond_slave_0 [ 718.869776][T17573] netlink: 'syz.4.3806': attribute type 2 has an invalid length. [ 718.890742][T17573] netlink: 'syz.4.3806': attribute type 11 has an invalid length. [ 718.898634][T17573] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3806'. [ 719.158136][T17580] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3810'. [ 719.444302][T17598] netlink: 'syz.0.3814': attribute type 29 has an invalid length. [ 719.454522][T17598] netlink: 'syz.0.3814': attribute type 29 has an invalid length. [ 719.471812][T17598] netlink: 'syz.0.3814': attribute type 29 has an invalid length. [ 719.691585][ T4281] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 719.918314][T17607] netlink: 'syz.3.3817': attribute type 28 has an invalid length. [ 720.188719][T17617] netlink: 'syz.2.3819': attribute type 2 has an invalid length. [ 720.204169][T17609] device syzkaller0 entered promiscuous mode [ 720.297952][T17617] device 0 entered promiscuous mode [ 720.436563][T17626] netlink: 'syz.4.3822': attribute type 3 has an invalid length. [ 720.467203][T17626] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3822'. [ 721.096527][T17645] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3829'. [ 723.196070][T17629] netlink: 'syz.2.3823': attribute type 10 has an invalid length. [ 723.388717][T17659] netlink: 'syz.2.3832': attribute type 19 has an invalid length. [ 723.405297][T17659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3832'. [ 724.655650][T17697] device syzkaller0 entered promiscuous mode [ 724.795369][T17707] netlink: 87536 bytes leftover after parsing attributes in process `syz.2.3845'. [ 727.775289][T17714] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3847'. [ 727.811208][T17723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 727.818516][T17723] IPv6: NLM_F_CREATE should be set when creating new route [ 727.825837][T17723] IPv6: NLM_F_CREATE should be set when creating new route [ 727.833104][T17723] IPv6: NLM_F_CREATE should be set when creating new route [ 728.750656][T17747] netlink: 'syz.0.3853': attribute type 3 has an invalid length. [ 728.775132][T17747] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3853'. [ 729.159070][T17761] netlink: 'syz.4.3858': attribute type 3 has an invalid length. [ 729.179107][T17761] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3858'. [ 729.203442][T17760] netlink: 'syz.4.3858': attribute type 3 has an invalid length. [ 729.219062][T17760] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3858'. [ 730.864537][T17764] netlink: 'syz.4.3858': attribute type 39 has an invalid length. [ 730.891829][T17764] device veth0_macvtap left promiscuous mode [ 731.126706][T17777] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3862'. [ 731.432786][T17786] netlink: 'syz.3.3865': attribute type 21 has an invalid length. [ 731.452933][T17786] netlink: 'syz.3.3865': attribute type 12 has an invalid length. [ 731.468624][T17786] netlink: 'syz.3.3865': attribute type 13 has an invalid length. [ 731.485838][T17786] netlink: 'syz.3.3865': attribute type 14 has an invalid length. [ 731.529736][T17786] netlink: 'syz.3.3865': attribute type 15 has an invalid length. [ 731.539854][T17786] netlink: 'syz.3.3865': attribute type 16 has an invalid length. [ 731.560992][T17786] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.3865'. [ 731.800548][T17809] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3871'. [ 731.991547][T17815] device syzkaller0 entered promiscuous mode [ 732.687901][T17852] delete_channel: no stack [ 732.697738][T17852] delete_channel: no stack [ 733.840861][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 734.687788][T17830] device 0 entered promiscuous mode [ 734.698859][T17859] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3885'. [ 735.047552][T17898] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 735.057953][T17898] dvmrp1: linktype set to 768 [ 735.160263][T17906] validate_nla: 8 callbacks suppressed [ 735.160299][T17906] netlink: 'syz.4.3898': attribute type 3 has an invalid length. [ 735.184936][T17906] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3898'. [ 735.728896][T17918] netlink: 'syz.1.3901': attribute type 21 has an invalid length. [ 735.830518][T17918] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3901'. [ 738.975863][T17943] netlink: 'syz.4.3907': attribute type 10 has an invalid length. [ 739.004348][T17943] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3907'. [ 739.044946][T17943] device macvlan1 entered promiscuous mode [ 739.062965][T17943] batman_adv: batadv0: Adding interface: macvlan1 [ 739.074215][T17943] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.118003][T17943] batman_adv: batadv0: Interface activated: macvlan1 [ 739.130735][T17939] bridge0: port 3(ip6gretap0) entered blocking state [ 739.146969][T17939] bridge0: port 3(ip6gretap0) entered disabled state [ 739.195236][T17939] device ip6gretap0 entered promiscuous mode [ 739.266488][T17939] bridge0: port 3(ip6gretap0) entered blocking state [ 739.273669][T17939] bridge0: port 3(ip6gretap0) entered forwarding state [ 739.454925][T17956] netlink: 'syz.4.3910': attribute type 4 has an invalid length. [ 739.464973][T17956] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3910'. [ 739.575849][T17956] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 739.634348][T17961] netlink: 'syz.3.3912': attribute type 21 has an invalid length. [ 739.650870][T17961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3912'. [ 739.921111][T17966] netlink: 'syz.4.3915': attribute type 10 has an invalid length. [ 740.242567][T17974] device syzkaller0 entered promiscuous mode [ 740.292811][T17975] netlink: 'syz.1.3914': attribute type 17 has an invalid length. [ 740.339339][T17975] netlink: 'syz.1.3914': attribute type 16 has an invalid length. [ 740.403732][T17975] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3914'. [ 740.459122][T17986] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3919'. [ 740.775587][T17990] can: request_module (can-proto-0) failed. [ 741.194060][T18004] netlink: 'syz.2.3924': attribute type 2 has an invalid length. [ 741.204725][T18004] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3924'. [ 741.219321][T18004] netlink: 'syz.2.3924': attribute type 2 has an invalid length. [ 743.045487][T17994] netlink: 'syz.3.3921': attribute type 21 has an invalid length. [ 743.053637][T17994] netlink: 'syz.3.3921': attribute type 20 has an invalid length. [ 743.061845][T17999] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3921'. [ 743.107987][T18002] bridge0: port 3(ip6gretap0) entered blocking state [ 743.115161][T18002] bridge0: port 3(ip6gretap0) entered disabled state [ 743.123148][T18002] device ip6gretap0 entered promiscuous mode [ 743.129560][T18002] bridge0: port 3(ip6gretap0) entered blocking state [ 743.136381][T18002] bridge0: port 3(ip6gretap0) entered forwarding state [ 743.470982][T18017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.501874][T18017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.530611][T18017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.560959][T18017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.086350][T18039] device syzkaller0 entered promiscuous mode [ 747.123930][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.130379][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.165668][T18054] bridge0: port 3(ip6gretap0) entered blocking state [ 747.176249][T18054] bridge0: port 3(ip6gretap0) entered disabled state [ 747.184765][T18054] device ip6gretap0 entered promiscuous mode [ 747.192028][T18054] bridge0: port 3(ip6gretap0) entered blocking state [ 747.198800][T18054] bridge0: port 3(ip6gretap0) entered forwarding state [ 747.225673][T18056] device sit0 left promiscuous mode [ 747.286735][T18059] device sit0 entered promiscuous mode [ 747.797165][T18108] netlink: 'syz.0.3958': attribute type 21 has an invalid length. [ 747.871707][T18108] netlink: 'syz.0.3958': attribute type 1 has an invalid length. [ 747.880566][T18109] netlink: 'syz.0.3958': attribute type 5 has an invalid length. [ 747.888488][T18109] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3958'. [ 748.035794][T18119] dvmrp1: tun_chr_ioctl cmd 35108 [ 748.060285][T18119] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 748.070503][T18119] dvmrp1: ignored: set checksum disabled [ 748.446516][T18126] device syzkaller0 entered promiscuous mode [ 748.481368][T18144] netlink: 'syz.4.3968': attribute type 17 has an invalid length. [ 748.657097][T18150] netlink: 'syz.3.3970': attribute type 29 has an invalid length. [ 753.383053][T18150] netlink: 'syz.3.3970': attribute type 29 has an invalid length. [ 753.393550][T18171] netlink: 'syz.2.3973': attribute type 21 has an invalid length. [ 753.402588][T18171] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3973'. [ 753.415265][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3975'. [ 754.058356][T18204] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3983'. [ 754.256490][T18208] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3983'. [ 754.314536][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 754.324509][T18208] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 755.158607][T18233] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3989'. [ 755.172939][T18233] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 755.263509][T18232] netlink: 'syz.1.3988': attribute type 13 has an invalid length. [ 755.309594][T18232] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.3988'. [ 755.511160][T18227] device syzkaller0 entered promiscuous mode [ 755.656760][T18266] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3994'. [ 757.934219][T18279] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3996'. [ 758.157928][T18284] netlink: 'syz.2.3998': attribute type 2 has an invalid length. [ 758.465280][T18299] netlink: 'syz.3.4000': attribute type 3 has an invalid length. [ 758.479307][T18299] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4000'. [ 760.104393][T18284] device 1 entered promiscuous mode [ 760.192994][T18303] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4002'. [ 760.417704][T18311] netlink: 'syz.4.4005': attribute type 3 has an invalid length. [ 760.461010][T18311] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4005'. [ 760.752170][T18325] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4010'. [ 760.784868][T18321] device syzkaller0 entered promiscuous mode [ 761.044649][T18329] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4007'. [ 761.169293][T18327] netlink: 'syz.3.4010': attribute type 21 has an invalid length. [ 761.180831][T18327] netlink: 'syz.3.4010': attribute type 1 has an invalid length. [ 761.188598][T18327] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.4010'. [ 761.210860][T18331] netlink: 'syz.3.4010': attribute type 21 has an invalid length. [ 761.218731][T18331] netlink: 'syz.3.4010': attribute type 1 has an invalid length. [ 761.238724][T18331] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.4010'. [ 761.496366][T18348] netlink: 'syz.0.4015': attribute type 2 has an invalid length. [ 761.642288][T18348] device 1 entered promiscuous mode [ 761.965504][T18367] FAULT_INJECTION: forcing a failure. [ 761.965504][T18367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.997244][T18367] CPU: 1 PID: 18367 Comm: syz.0.4020 Not tainted syzkaller #0 [ 762.004754][T18367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.014837][T18367] Call Trace: [ 762.018148][T18367] [ 762.021106][T18367] dump_stack_lvl+0x188/0x24e [ 762.025835][T18367] ? show_regs_print_info+0x12/0x12 [ 762.031074][T18367] ? load_image+0x400/0x400 [ 762.035631][T18367] ? __lock_acquire+0x7d10/0x7d10 [ 762.040708][T18367] ? perf_trace_lock_acquire+0x100/0x3e0 [ 762.046403][T18367] should_fail_ex+0x399/0x4d0 [ 762.051118][T18367] _copy_from_user+0x2c/0x170 [ 762.055832][T18367] ___sys_sendmsg+0x1c3/0x360 [ 762.060546][T18367] ? __sys_sendmsg+0x290/0x290 [ 762.065342][T18367] ? __lock_acquire+0x7d10/0x7d10 [ 762.070409][T18367] __se_sys_sendmsg+0x1bb/0x2a0 [ 762.075282][T18367] ? __x64_sys_sendmsg+0x80/0x80 [ 762.080264][T18367] ? lockdep_hardirqs_on+0x94/0x140 [ 762.085475][T18367] do_syscall_64+0x4c/0xa0 [ 762.089908][T18367] ? clear_bhb_loop+0x60/0xb0 [ 762.094602][T18367] ? clear_bhb_loop+0x60/0xb0 [ 762.099295][T18367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 762.105206][T18367] RIP: 0033:0x7fa899b9ce59 [ 762.109628][T18367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.129249][T18367] RSP: 002b:00007fa89a9a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.137670][T18367] RAX: ffffffffffffffda RBX: 00007fa899e15fa0 RCX: 00007fa899b9ce59 [ 762.145654][T18367] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 762.153637][T18367] RBP: 00007fa89a9a4090 R08: 0000000000000000 R09: 0000000000000000 [ 762.161619][T18367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.169600][T18367] R13: 00007fa899e16038 R14: 00007fa899e15fa0 R15: 00007ffeae880478 [ 762.177599][T18367] [ 764.442662][T18352] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4016'. [ 764.457184][T18370] netlink: 'syz.1.4021': attribute type 33 has an invalid length. [ 764.469512][T18370] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4021'. [ 764.480138][T18364] device aaaaaaaaaaaaaaa entered promiscuous mode [ 764.776331][T18398] netlink: 'syz.1.4029': attribute type 2 has an invalid length. [ 764.815345][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4026'. [ 764.952347][T18398] device 0 entered promiscuous mode [ 765.538088][T18417] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4033'. [ 765.919106][T18430] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4036'. [ 768.779907][T18458] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.4042'. [ 768.859759][T18461] netlink: 'syz.4.4042': attribute type 3 has an invalid length. [ 768.884345][T18461] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4042'. [ 770.287795][T18440] device syzkaller0 entered promiscuous mode [ 770.296117][T18463] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4044'. [ 770.452364][T18469] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.4047'. [ 770.490332][T18469] openvswitch: netlink: Key type 386 is out of range max 32 [ 770.537301][T18471] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.4048'. [ 772.376277][T18471] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 772.400798][T18471] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 772.419253][T18471] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 772.767478][T18504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4054'. [ 772.779916][T18508] FAULT_INJECTION: forcing a failure. [ 772.779916][T18508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 772.818669][T18508] CPU: 1 PID: 18508 Comm: syz.4.4055 Not tainted syzkaller #0 [ 772.826169][T18508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 772.836257][T18508] Call Trace: [ 772.839569][T18508] [ 772.842552][T18508] dump_stack_lvl+0x188/0x24e [ 772.847281][T18508] ? show_regs_print_info+0x12/0x12 [ 772.852529][T18508] ? load_image+0x400/0x400 [ 772.857081][T18508] ? __lock_acquire+0x7d10/0x7d10 [ 772.862154][T18508] ? snprintf+0xe5/0x140 [ 772.866435][T18508] should_fail_ex+0x399/0x4d0 [ 772.871152][T18508] _copy_to_user+0x2c/0x130 [ 772.875704][T18508] simple_read_from_buffer+0xe3/0x150 [ 772.881140][T18508] proc_fail_nth_read+0x1a6/0x220 [ 772.886208][T18508] ? proc_fault_inject_write+0x310/0x310 [ 772.891883][T18508] ? fsnotify_perm+0x248/0x550 [ 772.896699][T18508] ? proc_fault_inject_write+0x310/0x310 [ 772.902372][T18508] vfs_read+0x2de/0xa00 [ 772.905830][T18504] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4054'. [ 772.915582][T18508] ? kernel_read+0x1e0/0x1e0 [ 772.915643][T18508] ? __fget_files+0x28/0x4b0 [ 772.915670][T18508] ? __fget_files+0x28/0x4b0 [ 772.915698][T18508] ? __fget_files+0x43d/0x4b0 [ 772.915734][T18508] ? __fdget_pos+0x2ae/0x360 [ 772.915778][T18508] ? ksys_read+0x71/0x250 [ 772.915811][T18508] ksys_read+0x14c/0x250 [ 772.915844][T18508] ? vfs_write+0xa30/0xa30 [ 772.915878][T18508] ? lockdep_hardirqs_on+0x94/0x140 [ 772.915906][T18508] do_syscall_64+0x4c/0xa0 [ 772.915935][T18508] ? clear_bhb_loop+0x60/0xb0 [ 772.915978][T18508] ? clear_bhb_loop+0x60/0xb0 [ 772.916005][T18508] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 772.916030][T18508] RIP: 0033:0x7f4d45f5d68e [ 772.916047][T18508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 772.916065][T18508] RSP: 002b:00007f4d46e7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 772.916087][T18508] RAX: ffffffffffffffda RBX: 00007f4d46e7b6c0 RCX: 00007f4d45f5d68e [ 772.916101][T18508] RDX: 000000000000000f RSI: 00007f4d46e7b0a0 RDI: 0000000000000004 [ 772.916114][T18508] RBP: 00007f4d46e7b090 R08: 0000000000000000 R09: 0000000000000000 [ 772.916126][T18508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 772.916138][T18508] R13: 00007f4d46216038 R14: 00007f4d46215fa0 R15: 00007fff985b74b8 [ 772.916169][T18508] [ 774.087223][T18542] can: request_module (can-proto-0) failed. [ 774.473241][T18546] device syzkaller0 entered promiscuous mode [ 775.975492][T18579] ================================================================== [ 775.983707][T18579] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 775.991550][T18579] Write of size 104 at addr ffff88807e031090 by task syz.1.4075/18579 [ 775.999731][T18579] [ 776.002084][T18579] CPU: 0 PID: 18579 Comm: syz.1.4075 Not tainted syzkaller #0 [ 776.009573][T18579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 776.019663][T18579] Call Trace: [ 776.022977][T18579] [ 776.025938][T18579] dump_stack_lvl+0x188/0x24e [ 776.030665][T18579] ? __lock_acquire+0x7d10/0x7d10 [ 776.035731][T18579] ? show_regs_print_info+0x12/0x12 [ 776.040970][T18579] ? load_image+0x400/0x400 [ 776.045524][T18579] ? __virt_addr_valid+0x465/0x540 [ 776.050785][T18579] ? __bpf_get_stackid+0x6c9/0x920 [ 776.055931][T18579] print_report+0xa8/0x210 [ 776.060386][T18579] kasan_report+0x10b/0x140 [ 776.064929][T18579] ? __bpf_get_stackid+0x6c9/0x920 [ 776.070081][T18579] kasan_check_range+0x235/0x290 [ 776.075062][T18579] ? __bpf_get_stackid+0x6c9/0x920 [ 776.080205][T18579] memcpy+0x3c/0x60 [ 776.084018][T18579] __bpf_get_stackid+0x6c9/0x920 [ 776.088966][T18579] bpf_get_stackid_pe+0x33f/0x400 [ 776.094022][T18579] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 776.099489][T18579] bpf_overflow_handler+0x522/0x7c0 [ 776.104729][T18579] ? tracing_gen_ctx_irq_test+0xc9/0x150 [ 776.110481][T18579] ? bpf_overflow_handler+0xd9/0x7c0 [ 776.115813][T18579] ? perf_swevent_overflow+0x230/0x230 [ 776.121306][T18579] ? __lock_acquire+0x12f4/0x7d10 [ 776.126388][T18579] ? __perf_event_account_interrupt+0x187/0x280 [ 776.132681][T18579] __perf_event_overflow+0x448/0x610 [ 776.138019][T18579] perf_swevent_event+0x315/0x570 [ 776.143088][T18579] ? perf_tp_event+0xc30/0xc30 [ 776.147873][T18579] ___perf_sw_event+0x49e/0x6e0 [ 776.152749][T18579] ? ___perf_sw_event+0x180/0x6e0 [ 776.157783][T18579] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 776.164207][T18579] ? __lock_acquire+0x13cf/0x7d10 [ 776.169253][T18579] ? verify_lock_unused+0x140/0x140 [ 776.174459][T18579] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 776.180453][T18579] ? lock_chain_count+0x20/0x20 [ 776.185308][T18579] __perf_sw_event+0x135/0x260 [ 776.190100][T18579] do_user_addr_fault+0xaea/0xb10 [ 776.195187][T18579] ? trace_hardirqs_off_finish+0x86/0x180 [ 776.200930][T18579] exc_page_fault+0x60/0x100 [ 776.205570][T18579] asm_exc_page_fault+0x22/0x30 [ 776.210449][T18579] RIP: 0010:copy_user_short_string+0x24/0x40 [ 776.216439][T18579] Code: 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 ca eb [ 776.236070][T18579] RSP: 0018:ffffc9000d72ef88 EFLAGS: 00050206 [ 776.242184][T18579] RAX: ffffffff84115c30 RBX: 0000000000000003 RCX: 0000000000000003 [ 776.250188][T18579] RDX: 0000000000000003 RSI: ffff8880771c866c RDI: 000020000000cf3d [ 776.258197][T18579] RBP: 0000000000000000 R08: ffff8880771c866e R09: 1ffff1100ee390cd [ 776.266209][T18579] R10: dffffc0000000000 R11: ffffed100ee390ce R12: 00007fffffffeffd [ 776.274217][T18579] R13: 0000000000000003 R14: 000020000000cf3d R15: ffff8880771c866c [ 776.282248][T18579] ? _copy_to_user+0x70/0x130 [ 776.286983][T18579] _copy_to_user+0xea/0x130 [ 776.291529][T18579] bpf_verifier_vlog+0x172/0x390 [ 776.296575][T18579] verbose+0x1f2/0x2b0 [ 776.300657][T18579] ? check_func_arg_reg_off+0x280/0x280 [ 776.306295][T18579] print_insn_state+0x125/0x1b0 [ 776.311187][T18579] do_check_common+0x5597/0xc6d0 [ 776.316193][T18579] ? push_insn+0x670/0x670 [ 776.320650][T18579] ? check_func_arg_reg_off+0x280/0x280 [ 776.326269][T18579] ? print_verifier_state+0x1fd0/0x1fd0 [ 776.331823][T18579] ? do_check_subprogs+0x345/0x390 [ 776.336959][T18579] bpf_check+0xb08f/0x10db0 [ 776.341479][T18579] ? perf_tp_event+0xaac/0xc30 [ 776.346293][T18579] ? bpf_get_btf_vmlinux+0x10/0x10 [ 776.351427][T18579] ? perf_tp_event+0xaac/0xc30 [ 776.356214][T18579] ? mark_lock+0x94/0x320 [ 776.360579][T18579] ? __lock_acquire+0x13cf/0x7d10 [ 776.365633][T18579] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 776.371369][T18579] ? verify_lock_unused+0x140/0x140 [ 776.376587][T18579] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 776.382247][T18579] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 776.388840][T18579] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 776.394505][T18579] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 776.400523][T18579] ? lock_chain_count+0x20/0x20 [ 776.405411][T18579] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 776.411682][T18579] ? lockdep_hardirqs_on+0x94/0x140 [ 776.416905][T18579] ? ktime_get_with_offset+0xff/0x320 [ 776.422297][T18579] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 776.428599][T18579] ? ktime_get_real_ts64+0x440/0x440 [ 776.433905][T18579] ? do_raw_spin_unlock+0x11d/0x230 [ 776.439129][T18579] ? __might_fault+0xc2/0x120 [ 776.443822][T18579] ? memset+0x1e/0x40 [ 776.447810][T18579] ? bpf_obj_name_cpy+0x190/0x1d0 [ 776.452919][T18579] bpf_prog_load+0x101a/0x1560 [ 776.457724][T18579] ? map_freeze+0x390/0x390 [ 776.462254][T18579] ? __might_fault+0xa6/0x120 [ 776.466975][T18579] ? __might_fault+0xa6/0x120 [ 776.471678][T18579] ? __might_fault+0xc2/0x120 [ 776.476389][T18579] ? __might_fault+0xa6/0x120 [ 776.481088][T18579] ? bpf_lsm_bpf+0x5/0x10 [ 776.485431][T18579] ? security_bpf+0x7a/0xa0 [ 776.489938][T18579] __sys_bpf+0x5b8/0x780 [ 776.494196][T18579] ? bpf_link_show_fdinfo+0x380/0x380 [ 776.499604][T18579] ? lock_chain_count+0x20/0x20 [ 776.504536][T18579] __x64_sys_bpf+0x78/0x90 [ 776.508972][T18579] do_syscall_64+0x4c/0xa0 [ 776.513398][T18579] ? clear_bhb_loop+0x60/0xb0 [ 776.518080][T18579] ? clear_bhb_loop+0x60/0xb0 [ 776.522765][T18579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.528677][T18579] RIP: 0033:0x7fef71b9ce59 [ 776.533116][T18579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.552732][T18579] RSP: 002b:00007fef72aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 776.561163][T18579] RAX: ffffffffffffffda RBX: 00007fef71e16270 RCX: 00007fef71b9ce59 [ 776.569161][T18579] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 776.577133][T18579] RBP: 00007fef71c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 776.585115][T18579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 776.593088][T18579] R13: 00007fef71e16308 R14: 00007fef71e16270 R15: 00007ffe314f4968 [ 776.601114][T18579] [ 776.604143][T18579] [ 776.606473][T18579] Allocated by task 18579: [ 776.610887][T18579] kasan_set_track+0x4b/0x70 [ 776.615483][T18579] __kasan_kmalloc+0x8e/0xa0 [ 776.620076][T18579] __kmalloc_node+0xb0/0x240 [ 776.624676][T18579] bpf_map_area_alloc+0x47/0xe0 [ 776.629552][T18579] prealloc_elems_and_freelist+0x86/0x1c0 [ 776.635271][T18579] stack_map_alloc+0x390/0x520 [ 776.640035][T18579] map_create+0x534/0x1000 [ 776.644458][T18579] __sys_bpf+0x38b/0x780 [ 776.648705][T18579] __x64_sys_bpf+0x78/0x90 [ 776.653146][T18579] do_syscall_64+0x4c/0xa0 [ 776.657575][T18579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.663476][T18579] [ 776.665830][T18579] Last potentially related work creation: [ 776.671536][T18579] kasan_save_stack+0x3a/0x60 [ 776.676218][T18579] __kasan_record_aux_stack+0xb2/0xc0 [ 776.681590][T18579] call_rcu+0x14f/0x990 [ 776.685764][T18579] __nf_register_net_hook+0x788/0x910 [ 776.691224][T18579] nf_register_net_hook+0xae/0x190 [ 776.696351][T18579] nf_register_net_hooks+0x40/0x1a0 [ 776.701571][T18579] nf_ct_netns_do_get+0x3bc/0x5b0 [ 776.706656][T18579] nf_ct_netns_inet_get+0x1f/0x150 [ 776.711770][T18579] nf_conncount_init+0x123/0x380 [ 776.716750][T18579] ovs_ct_init+0x312/0x480 [ 776.721210][T18579] ovs_init_net+0x1e2/0x240 [ 776.725711][T18579] ops_init+0x355/0x5f0 [ 776.729873][T18579] setup_net+0x4f2/0xbd0 [ 776.734116][T18579] copy_net_ns+0x348/0x5b0 [ 776.738535][T18579] create_new_namespaces+0x3d3/0x6f0 [ 776.743818][T18579] copy_namespaces+0x3b0/0x410 [ 776.748586][T18579] copy_process+0x19c2/0x4030 [ 776.753297][T18579] kernel_clone+0x24b/0x900 [ 776.757802][T18579] __x64_sys_clone+0x1a7/0x220 [ 776.762565][T18579] do_syscall_64+0x4c/0xa0 [ 776.766989][T18579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.772882][T18579] [ 776.775201][T18579] Second to last potentially related work creation: [ 776.781805][T18579] kasan_save_stack+0x3a/0x60 [ 776.786504][T18579] __kasan_record_aux_stack+0xb2/0xc0 [ 776.791895][T18579] call_rcu+0x14f/0x990 [ 776.796055][T18579] __nf_register_net_hook+0x788/0x910 [ 776.801432][T18579] nf_register_net_hook+0xae/0x190 [ 776.806549][T18579] nf_register_net_hooks+0x40/0x1a0 [ 776.811743][T18579] ebt_register_table+0xc97/0x1020 [ 776.816911][T18579] find_inlist_lock_noload+0x178/0x260 [ 776.822375][T18579] do_ebt_get_ctl+0x2c7/0x1cf0 [ 776.827158][T18579] nf_getsockopt+0x25e/0x280 [ 776.831753][T18579] ip_getsockopt+0x19b/0x230 [ 776.836367][T18579] __sys_getsockopt+0x1b0/0x230 [ 776.841249][T18579] __x64_sys_getsockopt+0xb1/0xc0 [ 776.846301][T18579] do_syscall_64+0x4c/0xa0 [ 776.850733][T18579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 776.856647][T18579] [ 776.858969][T18579] The buggy address belongs to the object at ffff88807e031080 [ 776.858969][T18579] which belongs to the cache kmalloc-cg-64 of size 64 [ 776.873104][T18579] The buggy address is located 16 bytes inside of [ 776.873104][T18579] 64-byte region [ffff88807e031080, ffff88807e0310c0) [ 776.886204][T18579] [ 776.888522][T18579] The buggy address belongs to the physical page: [ 776.894933][T18579] page:ffffea0001f80c40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e031 [ 776.905079][T18579] memcg:ffff88802c577001 [ 776.909348][T18579] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 776.916931][T18579] raw: 00fff00000000200 ffffea000065b9c0 dead000000000004 ffff888017442780 [ 776.925518][T18579] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802c577001 [ 776.934122][T18579] page dumped because: kasan: bad access detected [ 776.940577][T18579] page_owner tracks the page as allocated [ 776.946291][T18579] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 13140, tgid 13138 (syz.1.2680), ts 522037603363, free_ts 521961193207 [ 776.966177][T18579] post_alloc_hook+0x173/0x1a0 [ 776.970962][T18579] get_page_from_freelist+0x1a1e/0x1ab0 [ 776.976516][T18579] __alloc_pages+0x1ec/0x4f0 [ 776.981133][T18579] alloc_slab_page+0x5d/0x160 [ 776.985823][T18579] new_slab+0x87/0x2c0 [ 776.989909][T18579] ___slab_alloc+0xbc6/0x1240 [ 776.994594][T18579] __kmem_cache_alloc_node+0x1a0/0x260 [ 777.000053][T18579] __kmalloc_node+0xa0/0x240 [ 777.004663][T18579] bpf_map_kmalloc_node+0xb8/0x1a0 [ 777.009821][T18579] trie_update_elem+0x163/0xe80 [ 777.014751][T18579] bpf_map_update_value+0x59e/0x670 [ 777.019956][T18579] generic_map_update_batch+0x54b/0x810 [ 777.025503][T18579] bpf_map_do_batch+0x466/0x600 [ 777.030360][T18579] __sys_bpf+0x6f7/0x780 [ 777.034603][T18579] __x64_sys_bpf+0x78/0x90 [ 777.039026][T18579] do_syscall_64+0x4c/0xa0 [ 777.043462][T18579] page last free stack trace: [ 777.048152][T18579] free_unref_page_prepare+0x8b4/0x9a0 [ 777.053618][T18579] free_unref_page_list+0xbb/0x8e0 [ 777.058730][T18579] release_pages+0x1fa6/0x2220 [ 777.063570][T18579] tlb_flush_mmu+0x105/0x220 [ 777.068163][T18579] tlb_finish_mmu+0xf5/0x220 [ 777.072756][T18579] exit_mmap+0x384/0x960 [ 777.076997][T18579] __mmput+0x118/0x3c0 [ 777.081073][T18579] exit_mm+0x25a/0x360 [ 777.085205][T18579] do_exit+0x905/0x2480 [ 777.089365][T18579] do_group_exit+0x217/0x2d0 [ 777.093986][T18579] __x64_sys_exit_group+0x3b/0x40 [ 777.099023][T18579] do_syscall_64+0x4c/0xa0 [ 777.103444][T18579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 777.109341][T18579] [ 777.111664][T18579] Memory state around the buggy address: [ 777.117303][T18579] ffff88807e030f80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 777.125381][T18579] ffff88807e031000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 777.133442][T18579] >ffff88807e031080: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 777.141504][T18579] ^ [ 777.146874][T18579] ffff88807e031100: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 777.154933][T18579] ffff88807e031180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 777.163004][T18579] ================================================================== [ 777.171089][T18579] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 777.178281][T18579] CPU: 0 PID: 18579 Comm: syz.1.4075 Not tainted syzkaller #0 [ 777.185734][T18579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 777.195790][T18579] Call Trace: [ 777.199074][T18579] [ 777.202033][T18579] dump_stack_lvl+0x188/0x24e [ 777.206724][T18579] ? memcpy+0x3c/0x60 [ 777.210715][T18579] ? show_regs_print_info+0x12/0x12 [ 777.215939][T18579] ? load_image+0x400/0x400 [ 777.220451][T18579] panic+0x2e5/0x730 [ 777.224349][T18579] ? bpf_jit_dump+0xd0/0xd0 [ 777.228853][T18579] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 777.234746][T18579] ? _raw_spin_unlock+0x40/0x40 [ 777.239595][T18579] ? print_memory_metadata+0x314/0x400 [ 777.245064][T18579] check_panic_on_warn+0x80/0xa0 [ 777.250009][T18579] ? __bpf_get_stackid+0x6c9/0x920 [ 777.255136][T18579] end_report+0x66/0x110 [ 777.259406][T18579] kasan_report+0x118/0x140 [ 777.263930][T18579] ? __bpf_get_stackid+0x6c9/0x920 [ 777.269060][T18579] kasan_check_range+0x235/0x290 [ 777.274003][T18579] ? __bpf_get_stackid+0x6c9/0x920 [ 777.279119][T18579] memcpy+0x3c/0x60 [ 777.282928][T18579] __bpf_get_stackid+0x6c9/0x920 [ 777.287873][T18579] bpf_get_stackid_pe+0x33f/0x400 [ 777.292901][T18579] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 777.298359][T18579] bpf_overflow_handler+0x522/0x7c0 [ 777.303558][T18579] ? tracing_gen_ctx_irq_test+0xc9/0x150 [ 777.309193][T18579] ? bpf_overflow_handler+0xd9/0x7c0 [ 777.314481][T18579] ? perf_swevent_overflow+0x230/0x230 [ 777.319943][T18579] ? __lock_acquire+0x12f4/0x7d10 [ 777.324976][T18579] ? __perf_event_account_interrupt+0x187/0x280 [ 777.331248][T18579] __perf_event_overflow+0x448/0x610 [ 777.336546][T18579] perf_swevent_event+0x315/0x570 [ 777.341578][T18579] ? perf_tp_event+0xc30/0xc30 [ 777.346351][T18579] ___perf_sw_event+0x49e/0x6e0 [ 777.351207][T18579] ? ___perf_sw_event+0x180/0x6e0 [ 777.356237][T18579] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 777.362659][T18579] ? __lock_acquire+0x13cf/0x7d10 [ 777.367712][T18579] ? verify_lock_unused+0x140/0x140 [ 777.372912][T18579] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 777.378894][T18579] ? lock_chain_count+0x20/0x20 [ 777.383746][T18579] __perf_sw_event+0x135/0x260 [ 777.388518][T18579] do_user_addr_fault+0xaea/0xb10 [ 777.393551][T18579] ? trace_hardirqs_off_finish+0x86/0x180 [ 777.399276][T18579] exc_page_fault+0x60/0x100 [ 777.403868][T18579] asm_exc_page_fault+0x22/0x30 [ 777.408717][T18579] RIP: 0010:copy_user_short_string+0x24/0x40 [ 777.414719][T18579] Code: 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 ca eb [ 777.434350][T18579] RSP: 0018:ffffc9000d72ef88 EFLAGS: 00050206 [ 777.440441][T18579] RAX: ffffffff84115c30 RBX: 0000000000000003 RCX: 0000000000000003 [ 777.448439][T18579] RDX: 0000000000000003 RSI: ffff8880771c866c RDI: 000020000000cf3d [ 777.456440][T18579] RBP: 0000000000000000 R08: ffff8880771c866e R09: 1ffff1100ee390cd [ 777.464412][T18579] R10: dffffc0000000000 R11: ffffed100ee390ce R12: 00007fffffffeffd [ 777.472382][T18579] R13: 0000000000000003 R14: 000020000000cf3d R15: ffff8880771c866c [ 777.480358][T18579] ? _copy_to_user+0x70/0x130 [ 777.485048][T18579] _copy_to_user+0xea/0x130 [ 777.489559][T18579] bpf_verifier_vlog+0x172/0x390 [ 777.494504][T18579] verbose+0x1f2/0x2b0 [ 777.498574][T18579] ? check_func_arg_reg_off+0x280/0x280 [ 777.504127][T18579] print_insn_state+0x125/0x1b0 [ 777.508983][T18579] do_check_common+0x5597/0xc6d0 [ 777.513967][T18579] ? push_insn+0x670/0x670 [ 777.518383][T18579] ? check_func_arg_reg_off+0x280/0x280 [ 777.523927][T18579] ? print_verifier_state+0x1fd0/0x1fd0 [ 777.529472][T18579] ? do_check_subprogs+0x345/0x390 [ 777.534603][T18579] bpf_check+0xb08f/0x10db0 [ 777.539122][T18579] ? perf_tp_event+0xaac/0xc30 [ 777.543898][T18579] ? bpf_get_btf_vmlinux+0x10/0x10 [ 777.549008][T18579] ? perf_tp_event+0xaac/0xc30 [ 777.553808][T18579] ? mark_lock+0x94/0x320 [ 777.558151][T18579] ? __lock_acquire+0x13cf/0x7d10 [ 777.563188][T18579] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 777.568945][T18579] ? verify_lock_unused+0x140/0x140 [ 777.574173][T18579] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 777.579831][T18579] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 777.586421][T18579] ? perf_trace_lock_acquire+0x33f/0x3e0 [ 777.592079][T18579] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 777.598073][T18579] ? lock_chain_count+0x20/0x20 [ 777.602935][T18579] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 777.609212][T18579] ? lockdep_hardirqs_on+0x94/0x140 [ 777.614418][T18579] ? ktime_get_with_offset+0xff/0x320 [ 777.619796][T18579] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 777.626124][T18579] ? ktime_get_real_ts64+0x440/0x440 [ 777.631414][T18579] ? do_raw_spin_unlock+0x11d/0x230 [ 777.636614][T18579] ? __might_fault+0xc2/0x120 [ 777.641314][T18579] ? memset+0x1e/0x40 [ 777.645506][T18579] ? bpf_obj_name_cpy+0x190/0x1d0 [ 777.650544][T18579] bpf_prog_load+0x101a/0x1560 [ 777.655345][T18579] ? map_freeze+0x390/0x390 [ 777.659863][T18579] ? __might_fault+0xa6/0x120 [ 777.664574][T18579] ? __might_fault+0xa6/0x120 [ 777.669252][T18579] ? __might_fault+0xc2/0x120 [ 777.673939][T18579] ? __might_fault+0xa6/0x120 [ 777.678641][T18579] ? bpf_lsm_bpf+0x5/0x10 [ 777.682975][T18579] ? security_bpf+0x7a/0xa0 [ 777.687483][T18579] __sys_bpf+0x5b8/0x780 [ 777.691736][T18579] ? bpf_link_show_fdinfo+0x380/0x380 [ 777.697122][T18579] ? lock_chain_count+0x20/0x20 [ 777.701982][T18579] __x64_sys_bpf+0x78/0x90 [ 777.706427][T18579] do_syscall_64+0x4c/0xa0 [ 777.710858][T18579] ? clear_bhb_loop+0x60/0xb0 [ 777.715568][T18579] ? clear_bhb_loop+0x60/0xb0 [ 777.720258][T18579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 777.726163][T18579] RIP: 0033:0x7fef71b9ce59 [ 777.730587][T18579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.750194][T18579] RSP: 002b:00007fef72aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 777.758614][T18579] RAX: ffffffffffffffda RBX: 00007fef71e16270 RCX: 00007fef71b9ce59 [ 777.766587][T18579] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000005 [ 777.774575][T18579] RBP: 00007fef71c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 777.782547][T18579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.790517][T18579] R13: 00007fef71e16308 R14: 00007fef71e16270 R15: 00007ffe314f4968 [ 777.798493][T18579] [ 777.802122][T18579] Kernel Offset: disabled [ 777.806463][T18579] Rebooting in 86400 seconds..