last executing test programs: 2.317592745s ago: executing program 3 (id=2260): r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x55ca, 0x4000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x44b4, 0x2, 0x0, 0x3, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x19, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r3, &(0x7f00000016c0)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000540)="83ac6f4b", 0x4}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000003b0000009c000000000000002500ffff000000009500000d00000000c8c14c0a2743130c9d7c1c28d529f0533d99a1b26368a28eeebfc66428b27f912b5b24a637b20cb7daaf9fed00c6cf62f59b7b0d02d2dc2de6507b4765d37de2b55a084e77f3ce3fa592de75cdb2627770aed93d5026a073fb52dd66b74b9ec9d0178169fb79c5241f25433d1b560dcf9368aa528dca43a10d00000000000000ef"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c}, 0x3f) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000000c1f922f8532d1a69ffa8b2f9da7a4c4c09e75cd65c57c95170eac0b93c040692d25e9856ab1103cd8e497c7d36e48cb69fcc426f53cd6d5ddbbf37fdbc9b1c68aec7cf56537387018007b4b20aad44efdde5ed49932582e931ba04f2a2a2391a8f641d2350873ac48bbe8575b7ed7439c4ec17c88c4b2be96d82b8d213a48ba9d9ba032088e60b", @ANYRES8=r6, @ANYRES8=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r8, 0x0, 0x22, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000008007e227f3ad7a91ba78c185431cb8329614f78c7e6", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000200000000000000000850000006100000085000000050000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x3, 0x1014, &(0x7f00000026c0)=""/4116}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r9, 0x27, 0xe, 0x0, &(0x7f0000000300)="f897adf9fffcd92f4c931e8188a8", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, &(0x7f0000000240)=""/90, 0x5a}, 0x123) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xffffffffffff7fff) r10 = perf_event_open$cgroup(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x1, 0x39, 0x50, 0x0, 0x57, 0x800, 0x16, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x1}, 0x68b72eb510f6926f, 0x21, 0x6, 0x2, 0xffffffffffffff0c, 0x5, 0x5, 0x0, 0x800, 0x0, 0xe}, r2, 0xffffffffffffffff, r0, 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r10, 0x2401, 0x3) ioctl$TUNGETVNETLE(r5, 0x40047459, &(0x7f0000001200)) 1.88805993s ago: executing program 3 (id=2266): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x8, 0x6, 0x7, 0x0, 0x1, 0x28400, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x1ff}, 0x2080, 0x1, 0x80, 0x7, 0x8, 0x3, 0xfff, 0x0, 0xfffffe00, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x4, 0x0, 0xf000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xf, 0x5}, 0x10010, 0xc78, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711042000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.882499241s ago: executing program 0 (id=2267): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000000000000000000000000000050400000000"], &(0x7f0000000240)=""/252, 0x37, 0xfc, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0xf9, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x14, &(0x7f00000000c0)={0x0, 0x11}, 0x1, 0x10, &(0x7f0000000000), 0xa, 0x0, 0xffffffffffffffff, 0x4c}, 0x70) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1e00000007000000020000000600000022040400", @ANYRES32, @ANYBLOB='L\x00'/20, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0500000005000000020000000d00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7a63631b}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.746469598s ago: executing program 0 (id=2270): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r1, r0}) socket$kcm(0xa, 0x2, 0x88) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa8600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x84) socket$kcm(0x11, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7fffffff, 0x20000}, 0x4001, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x80044942, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)='G', 0x1}], 0x1}, 0x20000000) 1.670601193s ago: executing program 4 (id=2271): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0xffdd) r1 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000999700008500000082000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r6 = getpid() r7 = perf_event_open(&(0x7f00000010c0)={0x2, 0xfffffdd3, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x1d721, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bf53ffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r6, r7, 0x0, 0x3, &(0x7f0000000280)='\\{\x00'}, 0x30) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r9 = socket$kcm(0x2a, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8916, 0x0) r10 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) 1.669843773s ago: executing program 3 (id=2272): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07006f000400000018000000", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe25) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000803", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xec0) 1.581420708s ago: executing program 1 (id=2273): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="ebeb63", 0x1080}], 0x1}, 0x14000800) (fail_nth: 2) 1.580107908s ago: executing program 2 (id=2283): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x2}, 0xf8c0, 0x0, 0x80000000, 0x4, 0xfffffd, 0x81, 0xfffe, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000002000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000fb1f00007b3100000000000000000053d90b9bba70aa3ece283cf34bd48281b75d70441356a8a0dd492ba64ceb399bb4b27fd5b05bebf49630d9d6d1d9354df2f52f8ce043", @ANYRES32, @ANYBLOB='\x00'/24], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)}, 0x4000000) r2 = socket$kcm(0x10, 0xd, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x100400, 0x2, 0x0, 0x0, 0x0, 0x4, 0xf, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000140)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x1) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2539000020000ff2f507f62aa6172f7881"], 0x33fe0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$cgroup_ro(r7, &(0x7f00000000c0)='cpuset.memory_pressure\x00', 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.251234857s ago: executing program 3 (id=2274): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0xb, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x420}) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x3}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="6204", 0x2}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}, {&(0x7f00000002c0)="1b2b9f11602bdaf0", 0x8}, {&(0x7f0000000380)="8805a591a828a57efa89afd36ddea186da883b30a18f2012561327ba0bf3af43760a1dfe1aa7bbb659d62587da49eb52541e147b1955fffe828735286556ee65c816608a326bdbffce", 0x49}, {&(0x7f0000003380)="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", 0x101a}, {&(0x7f0000000580)="d8b94208c8263ae486fa43485bde9623960380fd4350be5ff2db39e338ec375735b0d99aed12018f828d918aae1414a1ee8e2402d6d33f28da03e4e73f5ed72763c3a4d05d28ab8d68720dbfa44a369ab4b5c80bf7d0c9346d39d261010296f5dc3026872df10bec02291fecc77cfc4873cb9e79bc", 0x75}, {&(0x7f0000000600)="ddc567745d5442f577642e5429e53c3bb4d45e40b2f9a077a7d2210d56cd007191402533fcb0cf42bac776cf51ef7bee588ecc54eeeb0de9e0c42bfc60c7fd58158be2b538f2607e682712ba433fe10edf183773cb626eb209c13a9193a72b64310c29688d8615338eb23231bf4ac7f2c7e970ea2690e19147d449330b6297e2435b1fbf076aea9073f4e518e570ae9d799c14919caa1c31aabb9f8cf8", 0x9d}, {&(0x7f0000000700)="a6a59624a483e3a78933271a0763616f8569f75f82f4a165c9144b229a8c3ccfa46bacad57ff21d3f81ecd5f183c3216810f3a6c43e5f51dd5ff9f770c428de46d9a9271653e9cb0d9de0386727cd0e5abf6e34453a76c63b7667b58c70913c5eeed", 0x62}], 0x7}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000180)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e00130010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x200000000}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext, 0x0, 0x2, 0x2, 0x2, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x60, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r9], 0x18}, 0x0) close(r9) 1.250878167s ago: executing program 4 (id=2275): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e", 0x19}], 0x1}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00005e"], 0xfe33) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x891c, &(0x7f0000000000)={'wg2\x00', @random="0200ff7fffff"}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r6, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_config_ext={0x0, 0x7fff}, 0x11400, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, r7, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x40000000009, r7, 0x0) r8 = socket$kcm(0xa, 0x6, 0x0) close(r8) 1.233740198s ago: executing program 1 (id=2276): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x22, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5e, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x8, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200000000000000"], 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={r8, 0x39, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xf, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a654, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_ext={0x1c, 0x3, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000980)='syzkaller\x00', 0x4, 0xb5, &(0x7f0000000c80)=""/181, 0x1e00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x7, 0x3, 0x1}, 0x10, 0x1f00b, 0xffffffffffffffff, 0x7, &(0x7f0000000d80)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x1, 0x1, 0x9, 0x1}, {0x3, 0x4, 0xa, 0x7}, {0x1, 0x3, 0x0, 0x3}, {0x0, 0x2, 0xd, 0x4}, {0x1, 0x2, 0xe, 0x7}, {0x3, 0x1, 0x4, 0x1}, {0x5, 0x4, 0xe, 0x1}], 0x10, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1f, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5ae}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x199, 0xc4, &(0x7f0000000500)=""/196, 0x81e00, 0x0, '\x00', r4, @fallback=0xef6e42ec3adac7d4, r5, 0x8, &(0x7f0000000880)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x3, 0x1ff, 0x9}, 0x10, r9, r10, 0x2, 0x0, &(0x7f0000000f40)=[{0x4, 0x3, 0x8, 0xa}, {0x5, 0x5, 0xd}], 0x10, 0x6}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r9, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r11) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) 1.231797688s ago: executing program 2 (id=2277): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0xfffffffffffffd91) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="ebeb6396dfa326541fb565a257d0654e188a772f217331fd9ed0c50e3562c43c48578de1f5f9dff8645b3bc03c9d2d450a3a205aa69f55b7b07ca41519fd19e758f37d12367d6358747a85ccd5f085c01eaf31b45e56424eb4ab9cfe76d07bfa3291a2beb28644bbe1d4d06fdf58301bc8cdf3a13b0c5c78a330a42c670958f176fb3bd42a3cb8e0da89160f568626ed8438f8e21b455c82c429c8cfa6ae7d8c62cbc03af7aefd5724121b4dac233444174ee7778a3f8211ccdc9a7e42a7cb5efcc6bd9f2aa5cbb01b865fb64603d9dea66b4ea6847e68810f1c78b739fa1fa729d968aeb12c17d8a02a015d7db57b546f6f8a70370000", 0xf7}], 0x1}, 0x14000800) 1.099690946s ago: executing program 2 (id=2278): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x8, 0x6, 0x7, 0x0, 0x1, 0x28400, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x1ff}, 0x2080, 0x1, 0x80, 0x7, 0x8, 0x3, 0xfff, 0x0, 0xfffffe00, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x4, 0x0, 0xf000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xf, 0x5}, 0x10010, 0xc78, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711042000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 964.801954ms ago: executing program 4 (id=2279): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x41014, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x7618c2a8ac8e3b65) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 854.8122ms ago: executing program 1 (id=2280): r0 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x8, 0x0, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000401}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006110740000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r1}, &(0x7f0000001e40), &(0x7f0000001e80)=r2}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x3e, 0x5f, 0x52, 0x0, 0x61, 0x61, 0x61]}}, &(0x7f00000002c0)=""/109, 0x2d, 0x6d, 0x0, 0x101, 0x10000}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1, 0x8, 0x1, 0x200, r1, 0x6, '\x00', 0x0, r3, 0x0, 0x1, 0x4, 0xb}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000a"], 0x48) r7 = socket$kcm(0xa, 0x6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, 0x0, 0x24}, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x2f, &(0x7f0000000100), 0x120) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 771.678695ms ago: executing program 2 (id=2281): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, r1, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xa, 0x2, 0x9, 0xe4, 0x0, 0x3, 0x64, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x10001, 0x93b0}, 0x100d0, 0xb77e, 0x4, 0x3, 0x9, 0xaf7, 0x7ff, 0x0, 0xffffffff, 0x0, 0x3}, r1, 0x10, r0, 0x9) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00014008041000025865009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x4, 0x0, 0x0, 0x504}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000580)={0x4, 0x80, 0x8, 0x7, 0x68, 0x5, 0x0, 0x4, 0x4a401, 0xd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xcf, 0x1, @perf_config_ext={0x9, 0x7}, 0x100008, 0xfffffffffffffffc, 0xd7, 0x6, 0x6, 0xffff, 0xe2, 0x0, 0x3b, 0x0, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_int(r0, &(0x7f0000000240)=0x1, 0x12) r5 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48440, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x1}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, @perf_bp={&(0x7f0000000400), 0x5}, 0x100e64, 0xc78, 0x0, 0x9, 0xb52b}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f0000000a40)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r2, @ANYRESDEC=0x0], 0x10}, 0x4048004) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 714.302689ms ago: executing program 0 (id=2282): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) close(0x3) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001300)=r0, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x8, 0x0, 0x800, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x2, 0x73) recvmsg$kcm(r3, &(0x7f0000001f00)={0x0, 0x34, 0x0}, 0x40000040) setsockopt$sock_attach_bpf(r2, 0x10f, 0x85, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000700)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/216, 0xd8}, {&(0x7f0000003980)=""/4059, 0xfdb}, {&(0x7f00000006c0)=""/203, 0xcb}, {&(0x7f0000000b00)=""/200, 0xc8}, {&(0x7f0000001100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000540)=""/171, 0xab}, {&(0x7f0000000c00)=""/201, 0xc9}, {&(0x7f0000000140)=""/99, 0x63}], 0xa}, 0x40012100) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xe00}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x37}}, @ip_tos_u8={{0x11, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 622.218034ms ago: executing program 4 (id=2284): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x40, 0x8, 0x6, 0x7, 0x0, 0x1, 0x28400, 0x7, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x1ff}, 0x2080, 0x1, 0x80, 0x7, 0x8, 0x3, 0xfff, 0x0, 0xfffffe00, 0x0, 0x4}, 0x0, 0xe, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0x4, 0x0, 0xf000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xf, 0x5}, 0x10010, 0xc78, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000000711042000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 621.172794ms ago: executing program 1 (id=2285): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07006f000400000018000000", @ANYRES32, @ANYBLOB="010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe25) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000803", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081", 0x7}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xec0) 620.889994ms ago: executing program 3 (id=2286): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140), 0x1}, 0xc54) 518.84285ms ago: executing program 3 (id=2287): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x80, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000540)={0x2, &(0x7f0000000080)=[{0xb1, 0xb, 0x4, 0xfffff028}, {0x6, 0x4, 0x10}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x3, 0x7b, 0x65, 0xe, 0x0, 0x0, 0x0, 0x2000, 0xbf281, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000a, 0x0, @perf_bp={0x0, 0x2}, 0x1075, 0x4, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffe}, 0x0, 0x8000000000009, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000180), &(0x7f0000000000)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000d49d80007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r6}, 0xc) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000f2ff80000000000000", @ANYRES32, @ANYBLOB="018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x200, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 481.442263ms ago: executing program 0 (id=2288): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x0, 0x1a}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000780), 0x0, 0xc001000000000000}, 0x20) 405.749497ms ago: executing program 4 (id=2289): r0 = socket$kcm(0xa, 0x6, 0x0) close(r0) 358.41325ms ago: executing program 0 (id=2290): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e", 0x19}], 0x1}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00005e"], 0xfe33) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x891c, &(0x7f0000000000)={'wg2\x00', @random="0200ff7fffff"}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r6, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_config_ext={0x0, 0x7fff}, 0x11400, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, r7, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x40000000009, r7, 0x0) r8 = socket$kcm(0xa, 0x6, 0x0) close(r8) 357.68763ms ago: executing program 1 (id=2291): r0 = perf_event_open(&(0x7f0000001240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="2e0400001c008104e00f80ecdb4cb9f207c804a6a8211c25132e6082c6b8ab63c55d43a00d000000880802fb0a00", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x10) socket$kcm(0x10, 0x2, 0x0) 345.33598ms ago: executing program 4 (id=2292): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x100090a0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xdac}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000003c0)={0x1, 0x80, 0x80, 0xd9, 0x5f, 0x9, 0x0, 0x34c8, 0x1814d, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x401, 0x0, @perf_config_ext={0x2, 0x9}, 0x10804, 0x822, 0x0, 0x7, 0x1, 0xfffffffa, 0xad33, 0x0, 0x10001, 0x0, 0xff}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c00000000000000000000000700000044150503"], 0x30}, 0x40880) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 176.06319ms ago: executing program 0 (id=2293): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r1, r0}) socket$kcm(0xa, 0x2, 0x88) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa8600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x84) socket$kcm(0x11, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7fffffff, 0x20000}, 0x4001, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x80044942, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)='G', 0x1}], 0x1}, 0x20000000) 103.105224ms ago: executing program 2 (id=2294): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x5) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x41014, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x4, 0xffffffffffffffff, 0x7618c2a8ac8e3b65) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 74.972166ms ago: executing program 1 (id=2295): socket$kcm(0x11, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907"], 0xfdef) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x5, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r0, &(0x7f00000005c0), &(0x7f0000000600)=""/59}, 0x20) socket$kcm(0x2, 0x5, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$unix(r5, &(0x7f0000000580)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000000c0)="3ada409fdc840999d1bbd7dcd005758a823d", 0x12}, {&(0x7f0000000200)="b50f750f0d336bb5b03ed790dcab688c73f4c8495d6625108b09373bb58bba265f8b090964c3ae62924e5d296db2f9953644e4ca3e1783b335ab09b2a3b845744073a59fc617b566b179c947f1741ef9ac72ab1b0d2d5755cab7cdbd7c91920bc6d711542a1b9a2c0a49931a626b4c851a939bdd6d180ef89b2a67ff1e3a2dff2d1706c8a0b63d0181eede4af5f9357b2a3a28eebe20942371f2dfcba59b0788b2523b", 0xa3}, {&(0x7f0000000340)="fe731986d1662efb0e5ebaea65f6923d1df06162198d24e2b26acc07eec90d0ea3939b58f574", 0x26}, {&(0x7f0000000380)="2d65054c1bf4a759f2d76613cfe1e2e79d3dfacfbcf22583b26ddafabf4d9875de0726ae69cd0a07111da25523db24afc5ee771b08b2c6a115d610925bff765c58ead0b8c9a0a1dfffafdf", 0x4b}, {&(0x7f0000000400)="8828aed1065ace055dfd1737f506d48650085652fa575cd49663be99b12a3d279b8b9dbce9348f18ca9eaa99f9d6cdbcb741522cfcd0111bf5fe77255808ca7cb18ea6e0c928db619afbe32bf02a3eb41c006ee11dfc7e3c2413f4ed77c3f1f5f2eb04ba9deef708dcb1b7940bff9a38c1d1427ddeb4137da1b6a8697d1b4306cfc2669987fcdfbf032488a6130ac69b237305eb962e82fb6a54d0a94366e82e1147eb88524dcdfecde559e120655581b7cd9097650a8ab49c15ff615d1d008cbb24aa42a2e27b965c62209a88c4edd9", 0xd0}], 0x5, 0x0, 0x0, 0x48810}, 0x40001) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) 0s ago: executing program 2 (id=2296): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x800}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x9, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x3, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x800d080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xdc}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x4, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) write$cgroup_subtree(r3, &(0x7f0000000000), 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709d"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r7}, &(0x7f00000007c0), &(0x7f0000000640)=r6}, 0x20) r8 = socket$kcm(0x2, 0x7, 0x84) close(r8) syz_clone(0x1000000, &(0x7f0000000180)="5e6948038e99fb8d0ce76780c620b3cd1bc9c0f3b1402d536ab1ed40750cbf0f09d95a869cb13fe7fe9f3a32f561368ad37054ea08ceef49dce0af9328bfda2b1ac8ca5168794b40f71bd7de27f3c7b6e74452eb", 0x54, &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000340)="d8ab2a4d6f599fa5b3db9bbacaea537fccc25322ddc9379a63ca6c93") socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r7, &(0x7f00000004c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, 0x0, &(0x7f0000000580)=r6}, 0x20) kernel console output (not intermixed with test programs): 'syz.2.1107': attribute type 1 has an invalid length. [ 149.677137][ T7111] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.1107'. [ 149.887054][ T7118] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.1110'. [ 149.932139][ T7125] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1112'. [ 150.202221][ T7139] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1115'. [ 150.359034][ T7147] FAULT_INJECTION: forcing a failure. [ 150.359034][ T7147] name failslab, interval 1, probability 0, space 0, times 0 [ 150.402054][ T7147] CPU: 1 PID: 7147 Comm: syz.3.1120 Not tainted syzkaller #0 [ 150.409488][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.419564][ T7147] Call Trace: [ 150.422867][ T7147] [ 150.425817][ T7147] dump_stack_lvl+0x188/0x250 [ 150.430528][ T7147] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 150.436274][ T7147] ? show_regs_print_info+0x20/0x20 [ 150.441497][ T7147] ? load_image+0x400/0x400 [ 150.446050][ T7147] should_fail+0x38c/0x4c0 [ 150.450503][ T7147] should_failslab+0x5/0x20 [ 150.455026][ T7147] slab_pre_alloc_hook+0x51/0xc0 [ 150.459995][ T7147] ? skb_clone+0x1bd/0x350 [ 150.464434][ T7147] kmem_cache_alloc+0x3d/0x290 [ 150.469225][ T7147] skb_clone+0x1bd/0x350 [ 150.473491][ T7147] __netlink_deliver_tap+0x3cd/0x7c0 [ 150.478823][ T7147] netlink_deliver_tap+0x16c/0x180 [ 150.483949][ T7147] netlink_unicast+0x74f/0x920 [ 150.488749][ T7147] netlink_sendmsg+0x8ba/0xbe0 [ 150.493550][ T7147] ? netlink_getsockopt+0x570/0x570 [ 150.498767][ T7147] ? aa_sock_msg_perm+0x94/0x150 [ 150.503722][ T7147] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 150.509023][ T7147] ? security_socket_sendmsg+0x7c/0xa0 [ 150.514502][ T7147] ? netlink_getsockopt+0x570/0x570 [ 150.519754][ T7147] ____sys_sendmsg+0x5b7/0x8f0 [ 150.524559][ T7147] ? __sys_sendmsg_sock+0x30/0x30 [ 150.529624][ T7147] ? import_iovec+0x6f/0xa0 [ 150.534152][ T7147] ___sys_sendmsg+0x236/0x2e0 [ 150.538863][ T7147] ? __sys_sendmsg+0x2a0/0x2a0 [ 150.543674][ T7147] ? trace_event_raw_event_lock+0x270/0x270 [ 150.549591][ T7147] ? vfs_write+0x8b2/0xd60 [ 150.554067][ T7147] __se_sys_sendmsg+0x1af/0x290 [ 150.558947][ T7147] ? __x64_sys_sendmsg+0x80/0x80 [ 150.563896][ T7147] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 150.569917][ T7147] ? lockdep_hardirqs_on+0x94/0x140 [ 150.575133][ T7147] do_syscall_64+0x4c/0xa0 [ 150.579555][ T7147] ? clear_bhb_loop+0x30/0x80 [ 150.584235][ T7147] ? clear_bhb_loop+0x30/0x80 [ 150.588921][ T7147] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.594818][ T7147] RIP: 0033:0x7f85daa3ceb9 [ 150.599239][ T7147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.618854][ T7147] RSP: 002b:00007f85d8c98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.627409][ T7147] RAX: ffffffffffffffda RBX: 00007f85dacb7fa0 RCX: 00007f85daa3ceb9 [ 150.635406][ T7147] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 150.643397][ T7147] RBP: 00007f85d8c98090 R08: 0000000000000000 R09: 0000000000000000 [ 150.651389][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.659377][ T7147] R13: 00007f85dacb8038 R14: 00007f85dacb7fa0 R15: 00007ffe0b21ad68 [ 150.667395][ T7147] [ 151.385008][ T7184] validate_nla: 7 callbacks suppressed [ 151.385026][ T7184] netlink: 'syz.1.1133': attribute type 9 has an invalid length. [ 151.820824][ T7198] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 152.495187][ T7229] netlink: 'syz.3.1150': attribute type 9 has an invalid length. [ 152.993933][ T7248] netlink: 'syz.3.1158': attribute type 10 has an invalid length. [ 153.019278][ T7248] device bond0 entered promiscuous mode [ 153.037465][ T7248] device bond_slave_0 entered promiscuous mode [ 153.054322][ T7248] device bond_slave_1 entered promiscuous mode [ 153.068622][ T7252] FAULT_INJECTION: forcing a failure. [ 153.068622][ T7252] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 153.076966][ T7248] device batadv_slave_0 entered promiscuous mode [ 153.093154][ T7252] CPU: 1 PID: 7252 Comm: syz.0.1159 Not tainted syzkaller #0 [ 153.100666][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.110731][ T7252] Call Trace: [ 153.114023][ T7252] [ 153.116964][ T7252] dump_stack_lvl+0x188/0x250 [ 153.121658][ T7252] ? show_regs_print_info+0x20/0x20 [ 153.123647][ T7248] bridge0: port 4(bond0) entered blocking state [ 153.126868][ T7252] ? load_image+0x400/0x400 [ 153.126895][ T7252] ? __lock_acquire+0x7d10/0x7d10 [ 153.126922][ T7252] should_fail+0x38c/0x4c0 [ 153.126946][ T7252] _copy_from_user+0x2e/0x170 [ 153.126967][ T7252] iovec_from_user+0x142/0x370 [ 153.126991][ T7252] __import_iovec+0x70/0x490 [ 153.127018][ T7252] import_iovec+0x6f/0xa0 [ 153.127040][ T7252] ___sys_recvmsg+0x4e9/0x5c0 [ 153.127066][ T7252] ? __sys_recvmsg+0x280/0x280 [ 153.127090][ T7252] ? __lock_acquire+0x7d10/0x7d10 [ 153.127135][ T7252] __x64_sys_recvmsg+0x1f9/0x2c0 [ 153.127157][ T7252] ? ___sys_recvmsg+0x5c0/0x5c0 [ 153.127173][ T7252] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 153.127204][ T7252] ? lockdep_hardirqs_on+0x94/0x140 [ 153.127226][ T7252] do_syscall_64+0x4c/0xa0 [ 153.127240][ T7252] ? clear_bhb_loop+0x30/0x80 [ 153.127255][ T7252] ? clear_bhb_loop+0x30/0x80 [ 153.127272][ T7252] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.127288][ T7252] RIP: 0033:0x7f5d2a1e1eb9 [ 153.127307][ T7252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.127320][ T7252] RSP: 002b:00007f5d2841c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 153.127340][ T7252] RAX: ffffffffffffffda RBX: 00007f5d2a45d090 RCX: 00007f5d2a1e1eb9 [ 153.127352][ T7252] RDX: 0000000040000100 RSI: 0000200000000500 RDI: 0000000000000004 [ 153.127364][ T7252] RBP: 00007f5d2841c090 R08: 0000000000000000 R09: 0000000000000000 [ 153.127374][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.127385][ T7252] R13: 00007f5d2a45d128 R14: 00007f5d2a45d090 R15: 00007fff2ca2b938 [ 153.127412][ T7252] [ 153.448873][ T7248] bridge0: port 4(bond0) entered disabled state [ 153.475928][ T7248] bridge0: port 4(bond0) entered blocking state [ 153.482527][ T7248] bridge0: port 4(bond0) entered forwarding state [ 153.599175][ T7256] __nla_validate_parse: 6 callbacks suppressed [ 153.599191][ T7256] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1161'. [ 153.997946][ T7274] netlink: 'syz.3.1169': attribute type 41 has an invalid length. [ 154.040878][ T7281] netlink: 'syz.0.1170': attribute type 1 has an invalid length. [ 154.080834][ T7281] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.1170'. [ 154.099683][ T7286] netlink: 'syz.4.1171': attribute type 4 has an invalid length. [ 154.192001][ T7263] device syzkaller0 entered promiscuous mode [ 154.211056][ T7286] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1171'. [ 154.900345][ T7318] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1182'. [ 155.125915][ T7328] netlink: 'syz.2.1185': attribute type 9 has an invalid length. [ 155.142664][ T7327] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 155.150910][ T7328] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1185'. [ 155.179446][ T7327] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.1186'. [ 155.336486][ T7333] netlink: 'syz.3.1187': attribute type 5 has an invalid length. [ 155.742290][ T7346] FAULT_INJECTION: forcing a failure. [ 155.742290][ T7346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.796456][ T7346] CPU: 0 PID: 7346 Comm: syz.1.1193 Not tainted syzkaller #0 [ 155.803884][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.813952][ T7346] Call Trace: [ 155.817248][ T7346] [ 155.820196][ T7346] dump_stack_lvl+0x188/0x250 [ 155.824899][ T7346] ? show_regs_print_info+0x20/0x20 [ 155.830118][ T7346] ? load_image+0x400/0x400 [ 155.834641][ T7346] ? __lock_acquire+0x7d10/0x7d10 [ 155.839688][ T7346] should_fail+0x38c/0x4c0 [ 155.844137][ T7346] _copy_from_user+0x2e/0x170 [ 155.848830][ T7346] __sys_bpf+0x26d/0x6f0 [ 155.853088][ T7346] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 155.859347][ T7346] ? bpf_link_show_fdinfo+0x380/0x380 [ 155.864733][ T7346] ? rcu_nmi_exit+0x6f/0xf0 [ 155.869270][ T7346] ? vtime_user_exit+0x2c8/0x3e0 [ 155.874235][ T7346] __x64_sys_bpf+0x78/0x90 [ 155.878694][ T7346] do_syscall_64+0x4c/0xa0 [ 155.883132][ T7346] ? clear_bhb_loop+0x30/0x80 [ 155.887826][ T7346] ? clear_bhb_loop+0x30/0x80 [ 155.892527][ T7346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 155.898440][ T7346] RIP: 0033:0x7fedcb50feb9 [ 155.902871][ T7346] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.922607][ T7346] RSP: 002b:00007fedc976b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.931039][ T7346] RAX: ffffffffffffffda RBX: 00007fedcb78afa0 RCX: 00007fedcb50feb9 [ 155.939033][ T7346] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 155.947025][ T7346] RBP: 00007fedc976b090 R08: 0000000000000000 R09: 0000000000000000 [ 155.955014][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.963001][ T7346] R13: 00007fedcb78b038 R14: 00007fedcb78afa0 R15: 00007ffc70317cf8 [ 155.971027][ T7346] [ 156.121879][ T7355] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1196'. [ 156.238452][ T7364] netlink: 'syz.0.1200': attribute type 9 has an invalid length. [ 156.263356][ T7364] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1200'. [ 156.484268][ T7370] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1212'. [ 156.521966][ T7373] netlink: 'syz.4.1202': attribute type 5 has an invalid length. [ 157.370139][ T7410] netlink: 'syz.1.1214': attribute type 10 has an invalid length. [ 157.429522][ T7410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1214'. [ 157.468104][ T7410] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 157.505778][ T7410] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.592086][ T7410] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 157.612727][ T7417] netlink: 'syz.3.1219': attribute type 21 has an invalid length. [ 158.225207][ T7434] netlink: 'syz.1.1226': attribute type 10 has an invalid length. [ 159.023238][ T7467] __nla_validate_parse: 3 callbacks suppressed [ 159.023256][ T7467] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1237'. [ 159.563149][ T7476] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1239'. [ 159.734266][ T7478] netlink: 'syz.4.1239': attribute type 39 has an invalid length. [ 159.824667][ T7486] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1242'. [ 159.865467][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1243'. [ 159.896157][ T7490] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1245'. [ 160.193180][ T7499] netlink: 'syz.0.1248': attribute type 21 has an invalid length. [ 160.404736][ T7504] team0: Port device team_slave_0 removed [ 160.451072][ T7504] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 160.484504][ T7508] netlink: 'syz.4.1253': attribute type 9 has an invalid length. [ 160.493789][ T7508] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1253'. [ 160.720250][ T7512] netlink: 'syz.3.1255': attribute type 1 has an invalid length. [ 160.738434][ T7512] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.1255'. [ 160.757795][ T7515] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1258'. [ 160.773622][ T7512] netlink: 'syz.3.1255': attribute type 46 has an invalid length. [ 160.796178][ T7516] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1256'. [ 160.830193][ T7512] netlink: 'syz.3.1255': attribute type 3 has an invalid length. [ 160.855571][ T7512] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1255'. [ 161.666396][ T7540] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 162.001840][ T7547] FAULT_INJECTION: forcing a failure. [ 162.001840][ T7547] name failslab, interval 1, probability 0, space 0, times 0 [ 162.080026][ T7547] CPU: 0 PID: 7547 Comm: syz.3.1270 Not tainted syzkaller #0 [ 162.087468][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 162.097560][ T7547] Call Trace: [ 162.100863][ T7547] [ 162.103820][ T7547] dump_stack_lvl+0x188/0x250 [ 162.108641][ T7547] ? show_regs_print_info+0x20/0x20 [ 162.113879][ T7547] ? load_image+0x400/0x400 [ 162.118422][ T7547] ? __might_sleep+0xf0/0xf0 [ 162.123062][ T7547] ? __lock_acquire+0x7d10/0x7d10 [ 162.128137][ T7547] should_fail+0x38c/0x4c0 [ 162.132616][ T7547] should_failslab+0x5/0x20 [ 162.137141][ T7547] slab_pre_alloc_hook+0x51/0xc0 [ 162.142119][ T7547] __kmalloc_node+0x6e/0x3b0 [ 162.146738][ T7547] ? kvmalloc_node+0x84/0x130 [ 162.151456][ T7547] kvmalloc_node+0x84/0x130 [ 162.155994][ T7547] generic_map_lookup_batch+0x3f8/0xbc0 [ 162.161612][ T7547] ? bpf_map_update_value+0x650/0x650 [ 162.167032][ T7547] ? __fdget+0x18b/0x210 [ 162.171325][ T7547] ? bpf_map_update_value+0x650/0x650 [ 162.176724][ T7547] bpf_map_do_batch+0x2c8/0x600 [ 162.181606][ T7547] ? bpf_lsm_bpf+0x5/0x10 [ 162.185970][ T7547] ? security_bpf+0x7a/0xa0 [ 162.190525][ T7547] __sys_bpf+0x671/0x6f0 [ 162.194802][ T7547] ? bpf_link_show_fdinfo+0x380/0x380 [ 162.200231][ T7547] ? vtime_user_exit+0x2c8/0x3e0 [ 162.205499][ T7547] __x64_sys_bpf+0x78/0x90 [ 162.209945][ T7547] do_syscall_64+0x4c/0xa0 [ 162.214383][ T7547] ? clear_bhb_loop+0x30/0x80 [ 162.219074][ T7547] ? clear_bhb_loop+0x30/0x80 [ 162.223776][ T7547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.229703][ T7547] RIP: 0033:0x7f85daa3ceb9 [ 162.234151][ T7547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.253782][ T7547] RSP: 002b:00007f85d8c98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.262238][ T7547] RAX: ffffffffffffffda RBX: 00007f85dacb7fa0 RCX: 00007f85daa3ceb9 [ 162.270240][ T7547] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 162.278243][ T7547] RBP: 00007f85d8c98090 R08: 0000000000000000 R09: 0000000000000000 [ 162.286238][ T7547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.294237][ T7547] R13: 00007f85dacb8038 R14: 00007f85dacb7fa0 R15: 00007ffe0b21ad68 [ 162.297818][ T7550] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 162.302412][ T7547] [ 163.235273][ T7578] netlink: 'syz.2.1279': attribute type 9 has an invalid length. [ 164.188195][ T7603] __nla_validate_parse: 4 callbacks suppressed [ 164.188212][ T7603] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1288'. [ 164.786940][ T7617] netlink: 'syz.2.1292': attribute type 12 has an invalid length. [ 164.842683][ T7617] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1292'. [ 164.944068][ T7624] netlink: 'syz.4.1296': attribute type 9 has an invalid length. [ 165.059025][ T7624] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1296'. [ 165.937581][ T7640] netlink: 'syz.2.1301': attribute type 6 has an invalid length. [ 166.066332][ T7640] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1301'. [ 166.732032][ T7659] À: port 1(vlan0) entered blocking state [ 166.756723][ T7659] À: port 1(vlan0) entered disabled state [ 166.827111][ T7659] device vlan0 entered promiscuous mode [ 166.953296][ T7660] À: port 1(vlan0) entered blocking state [ 166.959128][ T7660] À: port 1(vlan0) entered forwarding state [ 167.074455][ T7677] netlink: 'syz.2.1312': attribute type 9 has an invalid length. [ 167.126538][ T7677] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1312'. [ 167.590686][ T7686] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1316'. [ 167.630638][ T7686] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 167.892656][ T7696] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1319'. [ 169.138144][ T7714] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1325'. [ 169.152683][ T7712] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.1324'. [ 169.212489][ T7716] netlink: 'syz.1.1326': attribute type 1 has an invalid length. [ 169.271559][ T7716] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.1326'. [ 171.011554][ T7739] FAULT_INJECTION: forcing a failure. [ 171.011554][ T7739] name failslab, interval 1, probability 0, space 0, times 0 [ 171.078078][ T7739] CPU: 0 PID: 7739 Comm: syz.3.1334 Not tainted syzkaller #0 [ 171.085503][ T7739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.095566][ T7739] Call Trace: [ 171.098853][ T7739] [ 171.101793][ T7739] dump_stack_lvl+0x188/0x250 [ 171.106483][ T7739] ? show_regs_print_info+0x20/0x20 [ 171.111679][ T7739] ? load_image+0x400/0x400 [ 171.116189][ T7739] ? __might_sleep+0xf0/0xf0 [ 171.120785][ T7739] ? __lock_acquire+0x7d10/0x7d10 [ 171.125826][ T7739] ? __mutex_lock_common+0x1552/0x2400 [ 171.131310][ T7739] should_fail+0x38c/0x4c0 [ 171.135743][ T7739] should_failslab+0x5/0x20 [ 171.140246][ T7739] slab_pre_alloc_hook+0x51/0xc0 [ 171.145305][ T7739] kmem_cache_alloc_node+0x47/0x2d0 [ 171.150521][ T7739] ? __alloc_skb+0xf4/0x750 [ 171.155046][ T7739] __alloc_skb+0xf4/0x750 [ 171.159386][ T7739] netlink_dump+0x1e8/0xcf0 [ 171.163891][ T7739] ? __netlink_dump_start+0x11f/0x700 [ 171.169278][ T7739] ? mutex_lock_io_nested+0x60/0x60 [ 171.174491][ T7739] ? netlink_lookup+0x1d0/0x1d0 [ 171.179363][ T7739] __netlink_dump_start+0x523/0x700 [ 171.184579][ T7739] rtnetlink_rcv_msg+0xdd9/0xf30 [ 171.189528][ T7739] ? neigh_get+0xd30/0xd30 [ 171.193956][ T7739] ? rtnetlink_bind+0x80/0x80 [ 171.198655][ T7739] ? __local_bh_enable_ip+0x136/0x1c0 [ 171.204039][ T7739] ? lockdep_hardirqs_on+0x94/0x140 [ 171.209253][ T7739] ? __local_bh_enable_ip+0x136/0x1c0 [ 171.214638][ T7739] ? _local_bh_enable+0xa0/0xa0 [ 171.219508][ T7739] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 171.224723][ T7739] ? perf_trace_lock+0xe4/0x390 [ 171.229585][ T7739] ? neigh_get+0xd30/0xd30 [ 171.234006][ T7739] ? __skb_clone+0x480/0x790 [ 171.238605][ T7739] netlink_rcv_skb+0x1f5/0x440 [ 171.243375][ T7739] ? rtnetlink_bind+0x80/0x80 [ 171.248061][ T7739] ? netlink_ack+0xb50/0xb50 [ 171.252667][ T7739] netlink_unicast+0x774/0x920 [ 171.257446][ T7739] netlink_sendmsg+0x8ba/0xbe0 [ 171.262222][ T7739] ? netlink_getsockopt+0x570/0x570 [ 171.267426][ T7739] ? aa_sock_msg_perm+0x94/0x150 [ 171.272371][ T7739] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 171.277655][ T7739] ? security_socket_sendmsg+0x7c/0xa0 [ 171.283110][ T7739] ? netlink_getsockopt+0x570/0x570 [ 171.288301][ T7739] ____sys_sendmsg+0x5b7/0x8f0 [ 171.293275][ T7739] ? __sys_sendmsg_sock+0x30/0x30 [ 171.298296][ T7739] ? import_iovec+0x6f/0xa0 [ 171.302784][ T7739] ___sys_sendmsg+0x236/0x2e0 [ 171.307450][ T7739] ? __sys_sendmsg+0x2a0/0x2a0 [ 171.312220][ T7739] __se_sys_sendmsg+0x1af/0x290 [ 171.317060][ T7739] ? __x64_sys_sendmsg+0x80/0x80 [ 171.321980][ T7739] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 171.327956][ T7739] ? lockdep_hardirqs_on+0x94/0x140 [ 171.333142][ T7739] do_syscall_64+0x4c/0xa0 [ 171.337540][ T7739] ? clear_bhb_loop+0x30/0x80 [ 171.342202][ T7739] ? clear_bhb_loop+0x30/0x80 [ 171.346866][ T7739] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.352742][ T7739] RIP: 0033:0x7f85daa3ceb9 [ 171.357143][ T7739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.376734][ T7739] RSP: 002b:00007f85d8c98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.385135][ T7739] RAX: ffffffffffffffda RBX: 00007f85dacb7fa0 RCX: 00007f85daa3ceb9 [ 171.393089][ T7739] RDX: 0000000000040800 RSI: 0000200000000040 RDI: 0000000000000005 [ 171.401044][ T7739] RBP: 00007f85d8c98090 R08: 0000000000000000 R09: 0000000000000000 [ 171.408996][ T7739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.416950][ T7739] R13: 00007f85dacb8038 R14: 00007f85dacb7fa0 R15: 00007ffe0b21ad68 [ 171.424939][ T7739] [ 171.529881][ T7744] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1337'. [ 171.727658][ T7753] netlink: 'syz.0.1340': attribute type 25 has an invalid length. [ 171.821974][ T7763] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1343'. [ 172.395418][ T7796] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1353'. [ 172.415582][ T7794] netlink: 148168 bytes leftover after parsing attributes in process `syz.0.1354'. [ 172.617286][ T7803] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1357'. [ 173.695337][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 173.708156][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 173.720574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 173.732998][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 173.745592][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 173.758116][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 173.770521][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 173.783011][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 173.795450][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 173.807959][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 174.083753][ T7847] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1372'. [ 174.471560][ T7860] netlink: 'syz.2.1375': attribute type 9 has an invalid length. [ 174.493991][ T7860] netlink: 202824 bytes leftover after parsing attributes in process `syz.2.1375'. [ 174.582432][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1378'. [ 175.176107][ T7887] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1385'. [ 175.579790][ T7894] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1387'. [ 175.797165][ T1110] Bluetooth: hci0: command 0x0406 tx timeout [ 175.806897][ T1110] Bluetooth: hci1: command 0x0406 tx timeout [ 175.835221][ T7901] FAULT_INJECTION: forcing a failure. [ 175.835221][ T7901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.849630][ T1110] Bluetooth: hci3: command 0x0406 tx timeout [ 175.855674][ T1110] Bluetooth: hci2: command 0x0406 tx timeout [ 175.949420][ T1110] Bluetooth: hci4: command 0x0406 tx timeout [ 176.007242][ T7901] CPU: 1 PID: 7901 Comm: syz.0.1390 Not tainted syzkaller #0 [ 176.014669][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.024736][ T7901] Call Trace: [ 176.028024][ T7901] [ 176.030963][ T7901] dump_stack_lvl+0x188/0x250 [ 176.035662][ T7901] ? show_regs_print_info+0x20/0x20 [ 176.040871][ T7901] ? load_image+0x400/0x400 [ 176.045398][ T7901] ? __lock_acquire+0x7d10/0x7d10 [ 176.050464][ T7901] should_fail+0x38c/0x4c0 [ 176.054888][ T7901] _copy_to_user+0x2e/0x130 [ 176.059390][ T7901] simple_read_from_buffer+0xe3/0x150 [ 176.064752][ T7901] proc_fail_nth_read+0x1a6/0x220 [ 176.069765][ T7901] ? proc_fault_inject_write+0x310/0x310 [ 176.075397][ T7901] ? fsnotify_perm+0x254/0x560 [ 176.080150][ T7901] ? proc_fault_inject_write+0x310/0x310 [ 176.085786][ T7901] vfs_read+0x301/0xd60 [ 176.089937][ T7901] ? kernel_read+0x1e0/0x1e0 [ 176.094523][ T7901] ? __fget_files+0x40f/0x480 [ 176.099191][ T7901] ? mutex_lock_nested+0x17/0x20 [ 176.104116][ T7901] ? __fdget_pos+0x2bf/0x370 [ 176.108699][ T7901] ? ksys_read+0x71/0x260 [ 176.113019][ T7901] ksys_read+0x152/0x260 [ 176.117249][ T7901] ? vfs_write+0xd60/0xd60 [ 176.121653][ T7901] ? lockdep_hardirqs_on+0x94/0x140 [ 176.126850][ T7901] do_syscall_64+0x4c/0xa0 [ 176.131251][ T7901] ? clear_bhb_loop+0x30/0x80 [ 176.135916][ T7901] ? clear_bhb_loop+0x30/0x80 [ 176.140578][ T7901] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 176.146461][ T7901] RIP: 0033:0x7f5d2a1a278e [ 176.150932][ T7901] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 176.170525][ T7901] RSP: 002b:00007f5d2843cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 176.178932][ T7901] RAX: ffffffffffffffda RBX: 00007f5d2843d6c0 RCX: 00007f5d2a1a278e [ 176.186892][ T7901] RDX: 000000000000000f RSI: 00007f5d2843d0a0 RDI: 0000000000000008 [ 176.194849][ T7901] RBP: 00007f5d2843d090 R08: 0000000000000000 R09: 0000000000000000 [ 176.202805][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.210761][ T7901] R13: 00007f5d2a45d038 R14: 00007f5d2a45cfa0 R15: 00007fff2ca2b938 [ 176.218730][ T7901] [ 177.241328][ T7921] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1396'. [ 177.344758][ T7926] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1397'. [ 177.455859][ T7931] netlink: 'syz.4.1398': attribute type 10 has an invalid length. [ 177.566133][ T7931] team0: Device hsr_slave_0 failed to register rx_handler [ 177.832332][ T7944] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1402'. [ 177.910853][ T7945] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1401'. [ 178.159339][ T7958] netlink: 'syz.0.1407': attribute type 9 has an invalid length. [ 178.176306][ T7958] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1407'. [ 178.528227][ T7964] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1408'. [ 178.656247][ T7972] netlink: 'syz.0.1412': attribute type 2 has an invalid length. [ 178.699568][ C1] net_ratelimit: 4042 callbacks suppressed [ 178.699584][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 178.717966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 178.730462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 178.742984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 178.755446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 178.768061][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 178.780589][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 178.793126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 178.805837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 178.818286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 179.599351][ T7995] netlink: 'syz.1.1419': attribute type 4 has an invalid length. [ 179.766304][ T7997] __nla_validate_parse: 3 callbacks suppressed [ 179.766322][ T7997] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1420'. [ 179.872945][ T8001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1423'. [ 180.095102][ T8011] netlink: 'syz.2.1426': attribute type 1 has an invalid length. [ 180.103426][ T8009] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1425'. [ 180.176305][ T8011] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.1426'. [ 180.373739][ T8017] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1427'. [ 180.880069][ T8028] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1431'. [ 181.567388][ T8051] netlink: 'syz.4.1438': attribute type 1 has an invalid length. [ 181.669562][ T8051] netlink: 154788 bytes leftover after parsing attributes in process `syz.4.1438'. [ 182.022827][ T8059] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1440'. [ 182.156625][ T8064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1441'. [ 183.466614][ T8060] delete_channel: no stack [ 183.578064][ T8078] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1446'. [ 183.721750][ C1] net_ratelimit: 1499 callbacks suppressed [ 183.721776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 183.740983][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 183.754217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 183.767565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 183.780791][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 183.794269][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 183.807689][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 184.083898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 184.098422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 184.110956][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 184.590720][ T8099] FAULT_INJECTION: forcing a failure. [ 184.590720][ T8099] name failslab, interval 1, probability 0, space 0, times 0 [ 184.730755][ T8099] CPU: 1 PID: 8099 Comm: syz.3.1451 Not tainted syzkaller #0 [ 184.738182][ T8099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.748253][ T8099] Call Trace: [ 184.751541][ T8099] [ 184.754477][ T8099] dump_stack_lvl+0x188/0x250 [ 184.759178][ T8099] ? show_regs_print_info+0x20/0x20 [ 184.764393][ T8099] ? load_image+0x400/0x400 [ 184.768912][ T8099] ? __might_sleep+0xf0/0xf0 [ 184.773514][ T8099] ? __lock_acquire+0x7d10/0x7d10 [ 184.778813][ T8099] ? mark_lock+0x94/0x320 [ 184.783150][ T8099] should_fail+0x38c/0x4c0 [ 184.787583][ T8099] should_failslab+0x5/0x20 [ 184.792100][ T8099] slab_pre_alloc_hook+0x51/0xc0 [ 184.797050][ T8099] __kmalloc+0x6b/0x330 [ 184.801201][ T8099] ? tomoyo_realpath_from_path+0x118/0x610 [ 184.807023][ T8099] tomoyo_realpath_from_path+0x118/0x610 [ 184.812671][ T8099] tomoyo_path_number_perm+0x242/0x660 [ 184.818136][ T8099] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 184.824738][ T8099] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 184.830251][ T8099] security_file_ioctl+0x6c/0xa0 [ 184.835198][ T8099] __se_sys_ioctl+0x48/0x170 [ 184.839792][ T8099] do_syscall_64+0x4c/0xa0 [ 184.844205][ T8099] ? clear_bhb_loop+0x30/0x80 [ 184.848882][ T8099] ? clear_bhb_loop+0x30/0x80 [ 184.853554][ T8099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.859455][ T8099] RIP: 0033:0x7f85daa3ceb9 [ 184.863868][ T8099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.883468][ T8099] RSP: 002b:00007f85d8c98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.891884][ T8099] RAX: ffffffffffffffda RBX: 00007f85dacb7fa0 RCX: 00007f85daa3ceb9 [ 184.899865][ T8099] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000004 [ 184.907845][ T8099] RBP: 00007f85d8c98090 R08: 0000000000000000 R09: 0000000000000000 [ 184.915819][ T8099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.923783][ T8099] R13: 00007f85dacb8038 R14: 00007f85dacb7fa0 R15: 00007ffe0b21ad68 [ 184.931769][ T8099] [ 184.991217][ T8103] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1453'. [ 185.464692][ T8099] ERROR: Out of memory at tomoyo_realpath_from_path. [ 185.692433][ T8109] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1454'. [ 185.795496][ T8113] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1456'. [ 188.731297][ C1] net_ratelimit: 1493 callbacks suppressed [ 188.731316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.749848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 188.764813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.782498][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 188.797397][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.810078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 188.824718][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.837361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 188.852212][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 188.864936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 189.250545][ T8138] netlink: 'syz.3.1460': attribute type 9 has an invalid length. [ 189.383879][ T8138] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1460'. [ 189.867872][ T8160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1469'. [ 189.884387][ T8163] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.1470'. [ 189.961207][ T8166] FAULT_INJECTION: forcing a failure. [ 189.961207][ T8166] name failslab, interval 1, probability 0, space 0, times 0 [ 189.996763][ T8153] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1467'. [ 190.068364][ T8166] CPU: 1 PID: 8166 Comm: syz.0.1471 Not tainted syzkaller #0 [ 190.075782][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.085856][ T8166] Call Trace: [ 190.089144][ T8166] [ 190.092088][ T8166] dump_stack_lvl+0x188/0x250 [ 190.096795][ T8166] ? show_regs_print_info+0x20/0x20 [ 190.102010][ T8166] ? load_image+0x400/0x400 [ 190.106521][ T8166] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 190.112524][ T8166] ? mark_lock+0x94/0x320 [ 190.116863][ T8166] should_fail+0x38c/0x4c0 [ 190.121276][ T8166] ? bpf_skb_adjust_room+0x620/0x1ac0 [ 190.126644][ T8166] should_failslab+0x5/0x20 [ 190.131132][ T8166] slab_pre_alloc_hook+0x51/0xc0 [ 190.136056][ T8166] ? bpf_skb_adjust_room+0x620/0x1ac0 [ 190.141416][ T8166] __kmalloc_node_track_caller+0x68/0x3a0 [ 190.147124][ T8166] ? bpf_skb_adjust_room+0x620/0x1ac0 [ 190.152486][ T8166] ? bpf_skb_adjust_room+0x620/0x1ac0 [ 190.157848][ T8166] pskb_expand_head+0x127/0x10f0 [ 190.162825][ T8166] ? verify_lock_unused+0x140/0x140 [ 190.168022][ T8166] bpf_skb_adjust_room+0x620/0x1ac0 [ 190.173211][ T8166] ? verify_lock_unused+0x140/0x140 [ 190.178411][ T8166] bpf_prog_f11eb752eba4a405+0x56/0x66c [ 190.183945][ T8166] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 190.189916][ T8166] ? lock_chain_count+0x20/0x20 [ 190.194759][ T8166] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 190.200725][ T8166] ? lock_chain_count+0x20/0x20 [ 190.205564][ T8166] ? rcu_is_watching+0x11/0xa0 [ 190.210317][ T8166] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 190.216461][ T8166] ? lockdep_hardirqs_on+0x94/0x140 [ 190.221655][ T8166] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 190.227802][ T8166] ? 0xffffffffa0036994 [ 190.231945][ T8166] bpf_test_run+0x2a8/0x800 [ 190.236452][ T8166] ? convert___skb_to_skb+0x4c0/0x4c0 [ 190.241810][ T8166] ? eth_get_headlen+0x200/0x200 [ 190.246732][ T8166] ? __build_skb+0x1e2/0x2e0 [ 190.251308][ T8166] ? convert___skb_to_skb+0x3d/0x4c0 [ 190.256578][ T8166] bpf_prog_test_run_skb+0x9cc/0x1180 [ 190.261953][ T8166] ? cpu_online+0x60/0x60 [ 190.266269][ T8166] bpf_prog_test_run+0x31e/0x390 [ 190.271204][ T8166] __sys_bpf+0x5a5/0x6f0 [ 190.275436][ T8166] ? bpf_link_show_fdinfo+0x380/0x380 [ 190.280810][ T8166] __x64_sys_bpf+0x78/0x90 [ 190.285216][ T8166] do_syscall_64+0x4c/0xa0 [ 190.289618][ T8166] ? clear_bhb_loop+0x30/0x80 [ 190.294289][ T8166] ? clear_bhb_loop+0x30/0x80 [ 190.298954][ T8166] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 190.304833][ T8166] RIP: 0033:0x7f5d2a1e1eb9 [ 190.309240][ T8166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.328835][ T8166] RSP: 002b:00007f5d2843d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.337238][ T8166] RAX: ffffffffffffffda RBX: 00007f5d2a45cfa0 RCX: 00007f5d2a1e1eb9 [ 190.345198][ T8166] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 190.353154][ T8166] RBP: 00007f5d2843d090 R08: 0000000000000000 R09: 0000000000000000 [ 190.361109][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.369064][ T8166] R13: 00007f5d2a45d038 R14: 00007f5d2a45cfa0 R15: 00007fff2ca2b938 [ 190.377050][ T8166] [ 192.448720][ T8180] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1475'. [ 193.233392][ T8218] netlink: 'syz.2.1486': attribute type 9 has an invalid length. [ 193.339559][ T8218] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1486'. [ 193.769787][ C1] net_ratelimit: 2274 callbacks suppressed [ 193.769805][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 193.790957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.803654][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.816279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.828940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 193.843874][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 193.856503][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.869238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 193.881841][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 193.898013][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 194.147632][ T8227] netlink: 'syz.1.1489': attribute type 7 has an invalid length. [ 194.170506][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.176892][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.583661][ T8242] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1492'. [ 195.370238][ T8264] netlink: 'syz.0.1498': attribute type 4 has an invalid length. [ 195.652021][ T8271] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1503'. [ 196.369147][ T8279] FAULT_INJECTION: forcing a failure. [ 196.369147][ T8279] name failslab, interval 1, probability 0, space 0, times 0 [ 196.411145][ T8279] CPU: 0 PID: 8279 Comm: syz.1.1504 Not tainted syzkaller #0 [ 196.418567][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.428644][ T8279] Call Trace: [ 196.431955][ T8279] [ 196.434922][ T8279] dump_stack_lvl+0x188/0x250 [ 196.439614][ T8279] ? rcu_is_watching+0x11/0xa0 [ 196.444391][ T8279] ? show_regs_print_info+0x20/0x20 [ 196.449604][ T8279] ? load_image+0x400/0x400 [ 196.454115][ T8279] ? lockdep_hardirqs_on+0x94/0x140 [ 196.459330][ T8279] should_fail+0x38c/0x4c0 [ 196.463761][ T8279] should_failslab+0x5/0x20 [ 196.468273][ T8279] slab_pre_alloc_hook+0x51/0xc0 [ 196.473215][ T8279] ? skb_clone+0x1bd/0x350 [ 196.477635][ T8279] kmem_cache_alloc+0x3d/0x290 [ 196.482409][ T8279] skb_clone+0x1bd/0x350 [ 196.486668][ T8279] __netlink_deliver_tap+0x3cd/0x7c0 [ 196.491973][ T8279] netlink_deliver_tap+0x16c/0x180 [ 196.497100][ T8279] netlink_unicast+0x74f/0x920 [ 196.501885][ T8279] netlink_sendmsg+0x8ba/0xbe0 [ 196.506663][ T8279] ? netlink_getsockopt+0x570/0x570 [ 196.511873][ T8279] ? aa_sock_msg_perm+0x94/0x150 [ 196.516828][ T8279] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 196.522145][ T8279] ? security_socket_sendmsg+0x7c/0xa0 [ 196.527684][ T8279] ? netlink_getsockopt+0x570/0x570 [ 196.532949][ T8279] ____sys_sendmsg+0x5b7/0x8f0 [ 196.537748][ T8279] ? __sys_sendmsg_sock+0x30/0x30 [ 196.542791][ T8279] ? import_iovec+0x6f/0xa0 [ 196.547315][ T8279] ___sys_sendmsg+0x236/0x2e0 [ 196.552017][ T8279] ? __sys_sendmsg+0x2a0/0x2a0 [ 196.556881][ T8279] ? ktime_get_real_ts64+0x440/0x440 [ 196.562201][ T8279] __se_sys_sendmsg+0x1af/0x290 [ 196.567075][ T8279] ? __x64_sys_sendmsg+0x80/0x80 [ 196.572031][ T8279] ? syscall_enter_from_user_mode+0x2a/0x70 [ 196.577944][ T8279] do_syscall_64+0x4c/0xa0 [ 196.582370][ T8279] ? clear_bhb_loop+0x30/0x80 [ 196.587051][ T8279] ? clear_bhb_loop+0x30/0x80 [ 196.591730][ T8279] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 196.597643][ T8279] RIP: 0033:0x7fedcb50feb9 [ 196.602087][ T8279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.621707][ T8279] RSP: 002b:00007fedc976b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.630120][ T8279] RAX: ffffffffffffffda RBX: 00007fedcb78afa0 RCX: 00007fedcb50feb9 [ 196.638083][ T8279] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 196.646037][ T8279] RBP: 00007fedc976b090 R08: 0000000000000000 R09: 0000000000000000 [ 196.654082][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.662040][ T8279] R13: 00007fedcb78b038 R14: 00007fedcb78afa0 R15: 00007ffc70317cf8 [ 196.670035][ T8279] [ 197.618546][ T8312] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1516'. [ 198.795476][ C1] net_ratelimit: 1794 callbacks suppressed [ 198.795496][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 198.816012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.828563][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.841119][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.853785][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 198.868349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 198.880870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.893361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 198.905919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 198.921714][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 199.814760][ T8341] netlink: 'syz.2.1524': attribute type 3 has an invalid length. [ 199.866666][ T8341] netlink: 'syz.2.1524': attribute type 1 has an invalid length. [ 199.917377][ T8341] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1524'. [ 200.858525][ T8355] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1529'. [ 201.115390][ T8363] device syzkaller0 entered promiscuous mode [ 203.800285][ C1] net_ratelimit: 2572 callbacks suppressed [ 203.800305][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.818538][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.830885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.843310][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 203.857181][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.869573][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.881922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 203.894338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 203.908276][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 203.928573][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 205.301136][ T8394] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1543'. [ 205.794768][ T8415] netlink: 'syz.0.1550': attribute type 9 has an invalid length. [ 205.816127][ T8415] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1550'. [ 205.931829][ T8421] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1552'. [ 207.088739][ T8444] FAULT_INJECTION: forcing a failure. [ 207.088739][ T8444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.155231][ T8446] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1559'. [ 207.200599][ T8444] CPU: 1 PID: 8444 Comm: syz.3.1558 Not tainted syzkaller #0 [ 207.208023][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.218089][ T8444] Call Trace: [ 207.221376][ T8444] [ 207.224313][ T8444] dump_stack_lvl+0x188/0x250 [ 207.229007][ T8444] ? show_regs_print_info+0x20/0x20 [ 207.234226][ T8444] ? load_image+0x400/0x400 [ 207.238748][ T8444] ? __lock_acquire+0x7d10/0x7d10 [ 207.243785][ T8444] should_fail+0x38c/0x4c0 [ 207.248209][ T8444] _copy_from_iter+0x22e/0x1170 [ 207.253065][ T8444] ? __lock_acquire+0x7d10/0x7d10 [ 207.258102][ T8444] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 207.263488][ T8444] ? __virt_addr_valid+0x3c6/0x470 [ 207.268583][ T8444] ? __phys_addr_symbol+0x2b/0x70 [ 207.273592][ T8444] ? __check_object_size+0x30c/0x410 [ 207.278871][ T8444] netlink_sendmsg+0x758/0xbe0 [ 207.283629][ T8444] ? netlink_getsockopt+0x570/0x570 [ 207.288815][ T8444] ? aa_sock_msg_perm+0x94/0x150 [ 207.293737][ T8444] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 207.299009][ T8444] ? security_socket_sendmsg+0x7c/0xa0 [ 207.304454][ T8444] ? netlink_getsockopt+0x570/0x570 [ 207.309724][ T8444] ____sys_sendmsg+0x5b7/0x8f0 [ 207.314481][ T8444] ? __sys_sendmsg_sock+0x30/0x30 [ 207.319499][ T8444] ? import_iovec+0x6f/0xa0 [ 207.323993][ T8444] ___sys_sendmsg+0x236/0x2e0 [ 207.328661][ T8444] ? __sys_sendmsg+0x2a0/0x2a0 [ 207.333421][ T8444] ? vfs_write+0x8b2/0xd60 [ 207.337838][ T8444] __se_sys_sendmsg+0x1af/0x290 [ 207.342685][ T8444] ? __x64_sys_sendmsg+0x80/0x80 [ 207.347609][ T8444] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 207.353585][ T8444] ? lockdep_hardirqs_on+0x94/0x140 [ 207.358776][ T8444] do_syscall_64+0x4c/0xa0 [ 207.363181][ T8444] ? clear_bhb_loop+0x30/0x80 [ 207.367849][ T8444] ? clear_bhb_loop+0x30/0x80 [ 207.372519][ T8444] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 207.378396][ T8444] RIP: 0033:0x7f85daa3ceb9 [ 207.382799][ T8444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.402389][ T8444] RSP: 002b:00007f85d8c77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.410791][ T8444] RAX: ffffffffffffffda RBX: 00007f85dacb8090 RCX: 00007f85daa3ceb9 [ 207.418756][ T8444] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 207.426724][ T8444] RBP: 00007f85d8c77090 R08: 0000000000000000 R09: 0000000000000000 [ 207.434683][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.442638][ T8444] R13: 00007f85dacb8128 R14: 00007f85dacb8090 R15: 00007ffe0b21ad68 [ 207.450607][ T8444] [ 208.722647][ T8462] netlink: 'syz.1.1564': attribute type 9 has an invalid length. [ 208.730875][ T8462] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1564'. [ 208.788491][ T8459] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1565'. [ 208.809835][ C1] net_ratelimit: 2703 callbacks suppressed [ 208.809854][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.828195][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.841245][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.853650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 208.867737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.880085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.892705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 208.905171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 208.963843][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 208.976333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 209.065092][ T8470] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1569'. [ 209.084892][ T8471] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1568'. [ 212.474871][ T8501] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1577'. [ 212.717612][ T8512] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1581'. [ 212.770296][ T8509] device wg2 entered promiscuous mode [ 212.900662][ T8523] netlink: 'syz.0.1582': attribute type 9 has an invalid length. [ 212.917428][ T8523] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1582'. [ 213.091737][ T8525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1584'. [ 213.840781][ C1] net_ratelimit: 2397 callbacks suppressed [ 213.840802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.859386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.871937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.884621][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 213.899780][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.912411][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.924907][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 213.937415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 213.951389][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 213.963729][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.222207][ T8551] netlink: 'syz.2.1592': attribute type 21 has an invalid length. [ 214.266592][ T8551] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1592'. [ 214.655941][ T8559] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1594'. [ 214.666048][ T8556] device syzkaller0 entered promiscuous mode [ 214.784504][ T8561] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1595'. [ 214.967541][ T8569] netlink: 'syz.3.1597': attribute type 9 has an invalid length. [ 215.059466][ T8569] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1597'. [ 215.156330][ T8578] FAULT_INJECTION: forcing a failure. [ 215.156330][ T8578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.238447][ T8578] CPU: 0 PID: 8578 Comm: syz.4.1600 Not tainted syzkaller #0 [ 215.245872][ T8578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.255944][ T8578] Call Trace: [ 215.259256][ T8578] [ 215.262196][ T8578] dump_stack_lvl+0x188/0x250 [ 215.266888][ T8578] ? show_regs_print_info+0x20/0x20 [ 215.272100][ T8578] ? lockdep_hardirqs_on+0x94/0x140 [ 215.277311][ T8578] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 215.283501][ T8578] should_fail+0x38c/0x4c0 [ 215.287937][ T8578] _copy_to_user+0x2e/0x130 [ 215.292463][ T8578] simple_read_from_buffer+0xe3/0x150 [ 215.297851][ T8578] proc_fail_nth_read+0x1a6/0x220 [ 215.302900][ T8578] ? proc_fault_inject_write+0x310/0x310 [ 215.308547][ T8578] ? fsnotify_perm+0x254/0x560 [ 215.313324][ T8578] ? proc_fault_inject_write+0x310/0x310 [ 215.318966][ T8578] vfs_read+0x301/0xd60 [ 215.323144][ T8578] ? kernel_read+0x1e0/0x1e0 [ 215.327757][ T8578] ? __fget_files+0x40f/0x480 [ 215.332454][ T8578] ? mutex_lock_nested+0x17/0x20 [ 215.337406][ T8578] ? __fdget_pos+0x2bf/0x370 [ 215.342021][ T8578] ? ksys_read+0x71/0x260 [ 215.346370][ T8578] ksys_read+0x152/0x260 [ 215.350637][ T8578] ? vfs_write+0xd60/0xd60 [ 215.355179][ T8578] ? lockdep_hardirqs_on+0x94/0x140 [ 215.360480][ T8578] do_syscall_64+0x4c/0xa0 [ 215.364904][ T8578] ? clear_bhb_loop+0x30/0x80 [ 215.369596][ T8578] ? clear_bhb_loop+0x30/0x80 [ 215.374284][ T8578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 215.380183][ T8578] RIP: 0033:0x7fa68e71478e [ 215.384613][ T8578] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.404268][ T8578] RSP: 002b:00007fa68c9aefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.412712][ T8578] RAX: ffffffffffffffda RBX: 00007fa68c9af6c0 RCX: 00007fa68e71478e [ 215.420705][ T8578] RDX: 000000000000000f RSI: 00007fa68c9af0a0 RDI: 0000000000000008 [ 215.428690][ T8578] RBP: 00007fa68c9af090 R08: 0000000000000000 R09: 0000000000000000 [ 215.436759][ T8578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.444747][ T8578] R13: 00007fa68e9cf038 R14: 00007fa68e9cefa0 R15: 00007ffe73573f38 [ 215.452754][ T8578] [ 216.607777][ T8607] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1608'. [ 216.952019][ T8618] netlink: 'syz.1.1609': attribute type 1 has an invalid length. [ 216.992828][ T8617] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1610'. [ 217.684179][ T8621] netlink: 'syz.3.1611': attribute type 9 has an invalid length. [ 217.729363][ T8621] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1611'. [ 217.736172][ T8623] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1622'. [ 218.399992][ T8643] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1617'. [ 218.849809][ C1] net_ratelimit: 1961 callbacks suppressed [ 218.849829][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.868047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.880428][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.892993][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 218.907146][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.919548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.932013][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 218.944473][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 218.958404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 218.970760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 221.349169][ T8655] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1621'. [ 221.596846][ T8666] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1626'. [ 222.199040][ T8685] device syzkaller0 entered promiscuous mode [ 222.400079][ T8688] device wg2 entered promiscuous mode [ 223.098981][ T8704] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1639'. [ 223.351325][ T8709] netlink: 'syz.1.1640': attribute type 25 has an invalid length. [ 223.409702][ T8709] netlink: 'syz.1.1640': attribute type 29 has an invalid length. [ 223.860818][ C1] net_ratelimit: 3231 callbacks suppressed [ 223.860837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.879203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.891725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.904412][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 223.919022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.931490][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.944062][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 223.956651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 223.982793][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 223.995290][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.895126][ T8727] netlink: 'syz.1.1645': attribute type 21 has an invalid length. [ 224.955472][ T8727] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1645'. [ 225.910597][ T8741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1650'. [ 225.968994][ T8744] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1651'. [ 226.739275][ T8757] netlink: 'syz.1.1654': attribute type 9 has an invalid length. [ 226.821137][ T8757] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1654'. [ 227.122872][ T8761] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1656'. [ 227.572139][ T8772] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1662'. [ 227.894448][ T8788] netlink: 'syz.1.1665': attribute type 10 has an invalid length. [ 227.929077][ T8788] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1665'. [ 228.065395][ T8788] batman_adv: batadv0: Adding interface: virt_wifi0 [ 228.156232][ T8788] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.395796][ T8788] batman_adv: batadv0: Interface activated: virt_wifi0 [ 228.777632][ T8809] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1670'. [ 228.877476][ C1] net_ratelimit: 2163 callbacks suppressed [ 228.877509][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.897794][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.911896][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.925898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 228.951284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 228.965313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.979984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 228.993890][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 229.016338][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.029896][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 231.315707][ T8823] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1676'. [ 231.350305][ T8825] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1675'. [ 231.465838][ T8826] TCP: TCP_TX_DELAY enabled [ 231.601796][ T8831] netlink: 'syz.3.1679': attribute type 21 has an invalid length. [ 231.639712][ T8831] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1679'. [ 231.912173][ T8839] netlink: 'syz.1.1681': attribute type 153 has an invalid length. [ 232.031231][ T8839] netlink: 69544 bytes leftover after parsing attributes in process `syz.1.1681'. [ 232.189592][ T8830] device syzkaller0 entered promiscuous mode [ 232.380704][ T8846] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1682'. [ 232.463076][ T8844] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1682'. [ 233.184879][ T8883] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1687'. [ 233.460820][ T8889] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1690'. [ 233.890912][ C1] net_ratelimit: 2251 callbacks suppressed [ 233.890930][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.909237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.921699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.934317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 233.948457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 233.960919][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.973358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 233.985875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 233.999799][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.105963][ T8904] netlink: 'syz.4.1696': attribute type 10 has an invalid length. [ 234.204464][ T8904] team0 (unregistering): Port device team_slave_0 removed [ 234.216420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.322324][ T8904] team0 (unregistering): Port device team_slave_1 removed [ 234.917222][ T8912] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1700'. [ 235.591238][ T8919] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1703'. [ 235.886233][ T8934] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1709'. [ 235.989531][ T8932] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1711'. [ 236.048242][ T8942] netlink: 'syz.1.1712': attribute type 9 has an invalid length. [ 236.146739][ T8942] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1712'. [ 236.573045][ T8958] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1716'. [ 237.389222][ T8979] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1722'. [ 238.702081][ T9012] netlink: 'syz.1.1732': attribute type 2 has an invalid length. [ 238.733045][ T9012] netlink: 'syz.1.1732': attribute type 1 has an invalid length. [ 238.789784][ T9012] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1732'. [ 238.899866][ C1] net_ratelimit: 2380 callbacks suppressed [ 238.899887][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 238.920727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.926132][ T9014] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 238.933349][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.953669][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 238.966278][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 238.981053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 238.993594][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.006188][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.018883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 239.432773][ T9020] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1736'. [ 240.309557][ T9032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1741'. [ 240.357050][ T9032] netlink: 'syz.2.1741': attribute type 12 has an invalid length. [ 240.414563][ T9032] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1741'. [ 242.040992][ T9058] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1748'. [ 243.134910][ T9092] netlink: 'syz.4.1759': attribute type 10 has an invalid length. [ 243.150285][ T9092] bridge0: port 3(macsec0) entered blocking state [ 243.203729][ T9092] bridge0: port 3(macsec0) entered disabled state [ 243.246554][ T9100] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1761'. [ 243.252721][ T9092] device macsec0 entered promiscuous mode [ 243.285987][ T9092] bridge0: port 3(macsec0) entered blocking state [ 243.292587][ T9092] bridge0: port 3(macsec0) entered forwarding state [ 243.326963][ T9076] netlink: 'syz.3.1755': attribute type 39 has an invalid length. [ 243.636120][ T9105] device syzkaller0 entered promiscuous mode [ 243.912043][ C1] net_ratelimit: 1796 callbacks suppressed [ 243.912060][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.930318][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 243.944119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 243.956452][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.968827][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 243.981223][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 243.995174][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.007592][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.019925][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.032426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 244.048379][ T9103] netlink: 'syz.0.1763': attribute type 10 has an invalid length. [ 246.984144][ T9103] team0 (unregistering): Port device team_slave_1 removed [ 247.361426][ T9133] device syzkaller0 entered promiscuous mode [ 247.555412][ T9137] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1772'. [ 247.914294][ T9150] netlink: 'syz.2.1780': attribute type 2 has an invalid length. [ 247.959100][ T9150] netlink: 'syz.2.1780': attribute type 1 has an invalid length. [ 247.983995][ T9147] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1778'. [ 247.994401][ T9150] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1780'. [ 248.129522][ T9155] team0: Port device team_slave_0 removed [ 248.920542][ C1] net_ratelimit: 2262 callbacks suppressed [ 248.920561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.938839][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.951361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 248.963852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 248.977738][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 248.990045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.002510][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.017459][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 249.031527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.043954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 250.159687][ T9182] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1789'. [ 252.159537][ T9189] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1791'. [ 252.286211][ T9191] netlink: 'syz.2.1792': attribute type 10 has an invalid length. [ 252.780400][ T9191] team0 (unregistering): Port device team_slave_0 removed [ 253.145383][ T9191] team0 (unregistering): Port device team_slave_1 removed [ 253.261577][ T9191] team0 (unregistering): Port device wlan1 removed [ 253.572983][ T9208] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1798'. [ 253.708624][ T9212] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1800'. [ 253.875035][ T9219] netlink: 209592 bytes leftover after parsing attributes in process `syz.4.1802'. [ 253.930597][ C1] net_ratelimit: 1598 callbacks suppressed [ 253.930636][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 253.951559][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.966613][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 253.981503][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 254.007424][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.026703][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.039273][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.051947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 254.066734][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.079571][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.548275][ T9234] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1807'. [ 255.624773][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.631263][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.939957][ C1] net_ratelimit: 2235 callbacks suppressed [ 258.939978][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 258.958202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.962373][ T9292] netlink: 'syz.1.1821': attribute type 10 has an invalid length. [ 258.970721][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.990438][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 259.004602][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.016993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.029639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.042436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 259.056625][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.069110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.355936][ T9292] team0 (unregistering): Port device team_slave_1 removed [ 259.796989][ T9309] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1828'. [ 262.022906][ T9329] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1833'. [ 263.949527][ C1] net_ratelimit: 1678 callbacks suppressed [ 263.949548][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.967990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 263.982003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 263.994451][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.006933][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.019487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 264.033327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.045640][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.058009][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.082932][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 267.422678][ T9398] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1852'. [ 267.432265][ T9404] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1853'. [ 267.679089][ T9411] netlink: 'syz.0.1856': attribute type 10 has an invalid length. [ 268.681408][ T9443] FAULT_INJECTION: forcing a failure. [ 268.681408][ T9443] name failslab, interval 1, probability 0, space 0, times 0 [ 268.719095][ T9443] CPU: 1 PID: 9443 Comm: syz.3.1867 Not tainted syzkaller #0 [ 268.726515][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.736708][ T9443] Call Trace: [ 268.740019][ T9443] [ 268.742959][ T9443] dump_stack_lvl+0x188/0x250 [ 268.747653][ T9443] ? show_regs_print_info+0x20/0x20 [ 268.752876][ T9443] ? load_image+0x400/0x400 [ 268.757436][ T9443] ? rcu_lock_release+0x5/0x20 [ 268.762212][ T9443] should_fail+0x38c/0x4c0 [ 268.766641][ T9443] should_failslab+0x5/0x20 [ 268.771150][ T9443] slab_pre_alloc_hook+0x51/0xc0 [ 268.776090][ T9443] ? __nf_conntrack_alloc+0x99/0x380 [ 268.781380][ T9443] kmem_cache_alloc+0x3d/0x290 [ 268.786153][ T9443] __nf_conntrack_alloc+0x99/0x380 [ 268.791280][ T9443] init_conntrack+0x258/0x14d0 [ 268.796056][ T9443] ? __nf_conntrack_find_get+0x581/0x650 [ 268.801695][ T9443] ? early_drop+0x810/0x810 [ 268.806293][ T9443] ? nf_conntrack_find_get+0x670/0x670 [ 268.811763][ T9443] ? __siphash_unaligned+0x258/0x3a0 [ 268.817071][ T9443] nf_conntrack_in+0xd38/0x1730 [ 268.821947][ T9443] ? nf_ct_pernet+0x240/0x240 [ 268.826658][ T9443] ? prandom_u32+0x217/0x250 [ 268.831253][ T9443] ? ipv4_conntrack_defrag+0x284/0x590 [ 268.836733][ T9443] ? ipv4_conntrack_local+0x11f/0x200 [ 268.842125][ T9443] ? ipv4_conntrack_in+0x20/0x20 [ 268.847211][ T9443] nf_hook_slow+0xb9/0x200 [ 268.851637][ T9443] ? nf_hook+0x360/0x360 [ 268.855895][ T9443] nf_hook+0x205/0x360 [ 268.859964][ T9443] ? __ip_make_skb+0x11fb/0x18a0 [ 268.864910][ T9443] ? __ip_local_out+0x5e0/0x5e0 [ 268.869767][ T9443] ? nf_hook+0x360/0x360 [ 268.874028][ T9443] __ip_local_out+0x4b7/0x5e0 [ 268.878705][ T9443] ? nf_hook+0x360/0x360 [ 268.882954][ T9443] ip_send_skb+0x48/0x1c0 [ 268.887293][ T9443] udp_send_skb+0x94a/0x1330 [ 268.891910][ T9443] udp_sendmsg+0x1aed/0x2370 [ 268.896505][ T9443] ? release_sock+0x2b/0x1b0 [ 268.901110][ T9443] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 268.905968][ T9443] ? udp_cmsg_send+0x350/0x350 [ 268.910750][ T9443] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 268.916752][ T9443] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 268.922766][ T9443] ? __local_bh_enable_ip+0x136/0x1c0 [ 268.928151][ T9443] ? _local_bh_enable+0xa0/0xa0 [ 268.933043][ T9443] ? inet_sendmsg+0x147/0x2f0 [ 268.937745][ T9443] ? inet_sendmsg+0x147/0x2f0 [ 268.942434][ T9443] ? inet_send_prepare+0x260/0x260 [ 268.947555][ T9443] ____sys_sendmsg+0x5b7/0x8f0 [ 268.952338][ T9443] ? __sys_sendmsg_sock+0x30/0x30 [ 268.957383][ T9443] ? import_iovec+0x6f/0xa0 [ 268.961944][ T9443] ___sys_sendmsg+0x236/0x2e0 [ 268.966640][ T9443] ? __sys_sendmsg+0x2a0/0x2a0 [ 268.971424][ T9443] ? vfs_write+0x8b2/0xd60 [ 268.975870][ T9443] __se_sys_sendmsg+0x1af/0x290 [ 268.980731][ T9443] ? __x64_sys_sendmsg+0x80/0x80 [ 268.985682][ T9443] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 268.991687][ T9443] ? lockdep_hardirqs_on+0x94/0x140 [ 268.996896][ T9443] do_syscall_64+0x4c/0xa0 [ 269.001313][ T9443] ? clear_bhb_loop+0x30/0x80 [ 269.005993][ T9443] ? clear_bhb_loop+0x30/0x80 [ 269.010679][ T9443] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.016585][ T9443] RIP: 0033:0x7f85daa3ceb9 [ 269.021016][ T9443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.040632][ T9443] RSP: 002b:00007f85d8c98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.049068][ T9443] RAX: ffffffffffffffda RBX: 00007f85dacb7fa0 RCX: 00007f85daa3ceb9 [ 269.057061][ T9443] RDX: 0000000000004840 RSI: 0000200000000380 RDI: 0000000000000003 [ 269.065043][ T9443] RBP: 00007f85d8c98090 R08: 0000000000000000 R09: 0000000000000000 [ 269.073022][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.080998][ T9443] R13: 00007f85dacb8038 R14: 00007f85dacb7fa0 R15: 00007ffe0b21ad68 [ 269.089001][ T9443] [ 269.103286][ C1] net_ratelimit: 3881 callbacks suppressed [ 269.103303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.121527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.133890][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.146719][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 269.160691][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.173500][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.185848][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.198234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 269.212080][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.224420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.835104][ T9445] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1868'. [ 271.199954][ T9452] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1870'. [ 271.530969][ T9467] netlink: 'syz.2.1874': attribute type 10 has an invalid length. [ 272.389655][ T9475] FAULT_INJECTION: forcing a failure. [ 272.389655][ T9475] name failslab, interval 1, probability 0, space 0, times 0 [ 272.402714][ T9475] CPU: 0 PID: 9475 Comm: syz.4.1877 Not tainted syzkaller #0 [ 272.410120][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 272.420195][ T9475] Call Trace: [ 272.423511][ T9475] [ 272.426453][ T9475] dump_stack_lvl+0x188/0x250 [ 272.431159][ T9475] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 272.437775][ T9475] ? show_regs_print_info+0x20/0x20 [ 272.442998][ T9475] ? load_image+0x400/0x400 [ 272.447560][ T9475] should_fail+0x38c/0x4c0 [ 272.452009][ T9475] should_failslab+0x5/0x20 [ 272.456523][ T9475] slab_pre_alloc_hook+0x51/0xc0 [ 272.461459][ T9475] ? skb_clone+0x1bd/0x350 [ 272.465875][ T9475] kmem_cache_alloc+0x3d/0x290 [ 272.470636][ T9475] skb_clone+0x1bd/0x350 [ 272.474870][ T9475] ? dev_queue_xmit_nit+0x1df/0xb00 [ 272.480060][ T9475] dev_queue_xmit_nit+0x2cc/0xb00 [ 272.485084][ T9475] ? validate_xmit_skb+0x7b3/0xe40 [ 272.490190][ T9475] dev_hard_start_xmit+0x13e/0x7e0 [ 272.495314][ T9475] __dev_queue_xmit+0x1a78/0x2fd0 [ 272.500362][ T9475] ? dev_queue_xmit+0x20/0x20 [ 272.505042][ T9475] ? memcpy+0x3c/0x60 [ 272.509016][ T9475] ? __copy_skb_header+0x3ba/0x4f0 [ 272.514122][ T9475] ? __skb_clone+0x480/0x790 [ 272.518708][ T9475] ? skb_clone+0x1f1/0x350 [ 272.523119][ T9475] __netlink_deliver_tap+0x53e/0x7c0 [ 272.528420][ T9475] netlink_deliver_tap+0x16c/0x180 [ 272.533522][ T9475] netlink_unicast+0x74f/0x920 [ 272.538310][ T9475] netlink_sendmsg+0x8ba/0xbe0 [ 272.543099][ T9475] ? netlink_getsockopt+0x570/0x570 [ 272.548302][ T9475] ? aa_sock_msg_perm+0x94/0x150 [ 272.553235][ T9475] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 272.558531][ T9475] ? security_socket_sendmsg+0x7c/0xa0 [ 272.563985][ T9475] ? netlink_getsockopt+0x570/0x570 [ 272.569186][ T9475] ____sys_sendmsg+0x5b7/0x8f0 [ 272.573958][ T9475] ? __sys_sendmsg_sock+0x30/0x30 [ 272.578985][ T9475] ? import_iovec+0x6f/0xa0 [ 272.583494][ T9475] ___sys_sendmsg+0x236/0x2e0 [ 272.588178][ T9475] ? __sys_sendmsg+0x2a0/0x2a0 [ 272.592948][ T9475] ? trace_event_raw_event_lock+0x270/0x270 [ 272.598831][ T9475] ? vfs_write+0x8b2/0xd60 [ 272.603270][ T9475] __se_sys_sendmsg+0x1af/0x290 [ 272.608115][ T9475] ? __x64_sys_sendmsg+0x80/0x80 [ 272.613040][ T9475] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 272.619027][ T9475] ? lockdep_hardirqs_on+0x94/0x140 [ 272.624219][ T9475] do_syscall_64+0x4c/0xa0 [ 272.628626][ T9475] ? clear_bhb_loop+0x30/0x80 [ 272.633294][ T9475] ? clear_bhb_loop+0x30/0x80 [ 272.637964][ T9475] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 272.643847][ T9475] RIP: 0033:0x7fa68e753eb9 [ 272.648258][ T9475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.667858][ T9475] RSP: 002b:00007fa68c9af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.676270][ T9475] RAX: ffffffffffffffda RBX: 00007fa68e9cefa0 RCX: 00007fa68e753eb9 [ 272.684234][ T9475] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 272.692203][ T9475] RBP: 00007fa68c9af090 R08: 0000000000000000 R09: 0000000000000000 [ 272.700172][ T9475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.708149][ T9475] R13: 00007fa68e9cf038 R14: 00007fa68e9cefa0 R15: 00007ffe73573f38 [ 272.716316][ T9475] [ 273.422400][ T9494] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1883'. [ 273.863013][ T9515] netlink: 'syz.4.1888': attribute type 10 has an invalid length. [ 274.025668][ T9515] batman_adv: batadv0: Adding interface: netdevsim0 [ 274.110112][ C1] net_ratelimit: 3885 callbacks suppressed [ 274.110146][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 274.136373][ T9515] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.167969][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.180425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.192923][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.205694][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 274.219766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.232178][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.244711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.257325][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 274.271457][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.333026][ T9515] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 277.533601][ T9543] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1898'. [ 278.179747][ T9563] FAULT_INJECTION: forcing a failure. [ 278.179747][ T9563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.222305][ T9563] CPU: 0 PID: 9563 Comm: syz.4.1905 Not tainted syzkaller #0 [ 278.229717][ T9563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 278.239791][ T9563] Call Trace: [ 278.243079][ T9563] [ 278.246019][ T9563] dump_stack_lvl+0x188/0x250 [ 278.250712][ T9563] ? show_regs_print_info+0x20/0x20 [ 278.255921][ T9563] ? load_image+0x400/0x400 [ 278.260448][ T9563] ? __lock_acquire+0x7d10/0x7d10 [ 278.265491][ T9563] should_fail+0x38c/0x4c0 [ 278.269920][ T9563] _copy_to_iter+0x22e/0x1180 [ 278.274605][ T9563] ? __lock_acquire+0x7d10/0x7d10 [ 278.279652][ T9563] ? iov_iter_init+0x170/0x170 [ 278.284428][ T9563] ? __virt_addr_valid+0x3c6/0x470 [ 278.289556][ T9563] ? __phys_addr_symbol+0x2b/0x70 [ 278.294592][ T9563] ? __check_object_size+0x30c/0x410 [ 278.299887][ T9563] __skb_datagram_iter+0xde/0x740 [ 278.305021][ T9563] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 278.310574][ T9563] skb_copy_datagram_iter+0xad/0x1f0 [ 278.315866][ T9563] netlink_recvmsg+0x2d6/0xe20 [ 278.320628][ T9563] ? netlink_sendmsg+0xbe0/0xbe0 [ 278.325553][ T9563] ? aa_sk_perm+0x7dc/0x910 [ 278.330179][ T9563] ? aa_af_perm+0x340/0x340 [ 278.334688][ T9563] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 278.340051][ T9563] ? security_socket_recvmsg+0x85/0xb0 [ 278.345502][ T9563] ? netlink_sendmsg+0xbe0/0xbe0 [ 278.350427][ T9563] ____sys_recvmsg+0x2cd/0x5e0 [ 278.355176][ T9563] ? __might_fault+0xb3/0x110 [ 278.359845][ T9563] ? __sys_recvmsg_sock+0x40/0x40 [ 278.364951][ T9563] ? import_iovec+0x6f/0xa0 [ 278.369451][ T9563] ___sys_recvmsg+0x21a/0x5c0 [ 278.374124][ T9563] ? __sys_recvmsg+0x280/0x280 [ 278.378874][ T9563] ? __lock_acquire+0x7d10/0x7d10 [ 278.383900][ T9563] __x64_sys_recvmsg+0x1f9/0x2c0 [ 278.388823][ T9563] ? ___sys_recvmsg+0x5c0/0x5c0 [ 278.393654][ T9563] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 278.399627][ T9563] ? lockdep_hardirqs_on+0x94/0x140 [ 278.404812][ T9563] do_syscall_64+0x4c/0xa0 [ 278.409211][ T9563] ? clear_bhb_loop+0x30/0x80 [ 278.413876][ T9563] ? clear_bhb_loop+0x30/0x80 [ 278.418543][ T9563] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 278.424422][ T9563] RIP: 0033:0x7fa68e753eb9 [ 278.428823][ T9563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.448412][ T9563] RSP: 002b:00007fa68c98e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 278.456814][ T9563] RAX: ffffffffffffffda RBX: 00007fa68e9cf090 RCX: 00007fa68e753eb9 [ 278.464775][ T9563] RDX: 0000000040000100 RSI: 0000200000000500 RDI: 0000000000000004 [ 278.472728][ T9563] RBP: 00007fa68c98e090 R08: 0000000000000000 R09: 0000000000000000 [ 278.480683][ T9563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.488639][ T9563] R13: 00007fa68e9cf128 R14: 00007fa68e9cf090 R15: 00007ffe73573f38 [ 278.496610][ T9563] [ 279.120291][ C1] net_ratelimit: 1496 callbacks suppressed [ 279.120309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.138534][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.150885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.163328][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 279.237358][ T9592] netlink: 'syz.4.1916': attribute type 2 has an invalid length. [ 279.246344][ T9592] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.1916'. [ 279.273778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.286606][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.299361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.311982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 279.326883][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.339569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.740383][ T9598] device syzkaller0 entered promiscuous mode [ 279.776068][ T9598] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 279.900657][ T9598] netlink: 'syz.1.1918': attribute type 3 has an invalid length. [ 279.954174][ T9598] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1918'. [ 280.455220][ T9612] netlink: 'syz.2.1923': attribute type 8 has an invalid length. [ 280.480039][ T9612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1923'. [ 280.518113][ T9614] netlink: 'syz.4.1924': attribute type 21 has an invalid length. [ 280.539574][ T9614] netlink: 'syz.4.1924': attribute type 6 has an invalid length. [ 280.547475][ T9614] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1924'. [ 284.058713][ T9645] netlink: 'syz.2.1936': attribute type 21 has an invalid length. [ 284.067321][ T9645] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1936'. [ 284.147581][ C1] net_ratelimit: 1054 callbacks suppressed [ 284.147598][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.166041][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.178531][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.191000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 284.205167][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.217497][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.229899][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.242407][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:b9:8c:28:05:9b, vlan:0) [ 284.296574][ T9656] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1939'. [ 284.402633][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.415045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.593760][ T9664] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1941'. [ 284.966197][ T9671] device syzkaller0 entered promiscuous mode [ 285.303095][ T9689] raw_sendmsg: syz.4.1950 forgot to set AF_INET. Fix it! [ 285.331641][ T9689] netlink: 'syz.4.1950': attribute type 10 has an invalid length. [ 285.395493][ T9692] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.1950'. [ 285.462061][ T9691] bridge0: port 4(bond0) entered disabled state [ 285.468483][ T9691] bridge0: port 3(veth0_to_bridge) entered disabled state [ 285.476058][ T9691] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.483997][ T9691] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.683984][ T9687] bridge0: port 4(bond0) entered disabled state [ 285.908225][ T9687] device veth0_to_bridge left promiscuous mode [ 285.915964][ T9687] bridge0: port 3(veth0_to_bridge) entered disabled state [ 285.969011][ T9687] device bridge_slave_1 left promiscuous mode [ 285.976973][ T9687] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.043265][ T9687] device bridge_slave_0 left promiscuous mode [ 286.054728][ T9687] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.252615][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1952'. [ 286.264913][ T9700] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1953'. [ 286.388804][ T9710] netlink: 'syz.0.1956': attribute type 19 has an invalid length. [ 286.493263][ T9715] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1956'. [ 286.556797][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1960'. [ 286.619773][ T9721] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1961'. [ 286.664125][ T9719] netlink: 'syz.4.1960': attribute type 27 has an invalid length. [ 286.677348][ T9719] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1960'. [ 286.940141][ T9735] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1968'. [ 287.024310][ T9736] netlink: 'syz.1.1966': attribute type 3 has an invalid length. [ 287.115527][ T9741] netlink: 'syz.1.1966': attribute type 4 has an invalid length. [ 288.863018][ T9784] netlink: 'syz.2.1985': attribute type 4 has an invalid length. [ 289.281376][ T9797] net_ratelimit: 539 callbacks suppressed [ 289.281391][ T9797] ip6tnl0: mtu less than device minimum [ 289.534903][ T9804] netlink: 'syz.1.1989': attribute type 29 has an invalid length. [ 289.577405][ T9804] netlink: 'syz.1.1989': attribute type 29 has an invalid length. [ 289.608217][ T9804] netlink: 'syz.1.1989': attribute type 29 has an invalid length. [ 289.691010][ T9808] __nla_validate_parse: 4 callbacks suppressed [ 289.691030][ T9808] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1990'. [ 289.805188][ T9810] device syzkaller0 entered promiscuous mode [ 289.890891][ T9814] bridge0: port 3(macsec0) entered disabled state [ 289.897572][ T9814] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.905089][ T9814] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.035120][ T9819] device macsec0 left promiscuous mode [ 290.048091][ T9819] bridge0: port 3(macsec0) entered disabled state [ 290.126727][ T9819] device bridge_slave_1 left promiscuous mode [ 290.140311][ T9819] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.184786][ T9819] device bridge_slave_0 left promiscuous mode [ 290.192718][ T9819] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.406972][ T9831] ip6tnl0: mtu less than device minimum [ 290.550379][ T9838] netlink: 'syz.4.2002': attribute type 3 has an invalid length. [ 290.587814][ T9836] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2001'. [ 290.611107][ T9838] netlink: 'syz.4.2002': attribute type 4 has an invalid length. [ 290.638004][ T9838] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2002'. [ 290.671815][ T9838] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 290.891866][ T9852] FAULT_INJECTION: forcing a failure. [ 290.891866][ T9852] name failslab, interval 1, probability 0, space 0, times 0 [ 290.925917][ T9852] CPU: 0 PID: 9852 Comm: syz.0.2006 Not tainted syzkaller #0 [ 290.933334][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 290.943402][ T9852] Call Trace: [ 290.946701][ T9852] [ 290.949639][ T9852] dump_stack_lvl+0x188/0x250 [ 290.954331][ T9852] ? show_regs_print_info+0x20/0x20 [ 290.959548][ T9852] ? load_image+0x400/0x400 [ 290.964082][ T9852] ? __might_sleep+0xf0/0xf0 [ 290.968685][ T9852] ? __lock_acquire+0x7d10/0x7d10 [ 290.974246][ T9852] ? __lock_acquire+0x7d10/0x7d10 [ 290.979306][ T9852] should_fail+0x38c/0x4c0 [ 290.983741][ T9852] should_failslab+0x5/0x20 [ 290.988343][ T9852] slab_pre_alloc_hook+0x51/0xc0 [ 290.993292][ T9852] ? __sys_setsockopt+0x2bf/0x3d0 [ 290.998332][ T9852] __kmalloc_track_caller+0x69/0x330 [ 291.003635][ T9852] ? __sys_setsockopt+0x2bf/0x3d0 [ 291.008689][ T9852] sctp_setsockopt+0x7d/0xf80 [ 291.013388][ T9852] ? sock_common_recvmsg+0x1c0/0x1c0 [ 291.018692][ T9852] __sys_setsockopt+0x2bf/0x3d0 [ 291.023567][ T9852] __x64_sys_setsockopt+0xb1/0xc0 [ 291.028612][ T9852] do_syscall_64+0x4c/0xa0 [ 291.033071][ T9852] ? clear_bhb_loop+0x30/0x80 [ 291.037761][ T9852] ? clear_bhb_loop+0x30/0x80 [ 291.042459][ T9852] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.048370][ T9852] RIP: 0033:0x7f5d2a1e1eb9 [ 291.052803][ T9852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.072424][ T9852] RSP: 002b:00007f5d2843d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.080858][ T9852] RAX: ffffffffffffffda RBX: 00007f5d2a45cfa0 RCX: 00007f5d2a1e1eb9 [ 291.088843][ T9852] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 291.096831][ T9852] RBP: 00007f5d2843d090 R08: 0000000000000010 R09: 0000000000000000 [ 291.104820][ T9852] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.112808][ T9852] R13: 00007f5d2a45d038 R14: 00007f5d2a45cfa0 R15: 00007fff2ca2b938 [ 291.120814][ T9852] [ 291.126072][ T9855] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2007'. [ 291.202959][ T9855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.292581][ T9855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.318389][ T9855] bond0 (unregistering): Released all slaves [ 291.369727][ T9867] netlink: 'syz.0.2012': attribute type 21 has an invalid length. [ 291.377741][ T9867] netlink: 'syz.0.2012': attribute type 1 has an invalid length. [ 291.399455][ T9867] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2012'. [ 291.634914][ T9876] ip6tnl0: mtu less than device minimum [ 291.666656][ T9879] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2014'. [ 291.835724][ T9890] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2019'. [ 291.889594][ T9890] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 292.226374][ T9905] netlink: 'syz.2.2024': attribute type 49 has an invalid length. [ 292.269518][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2024'. [ 292.332634][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 292.374310][ T9906] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2024'. [ 292.514839][ T9910] netlink: 'syz.3.2026': attribute type 39 has an invalid length. [ 293.066081][ T9923] ip6tnl0: mtu less than device minimum [ 293.250317][ T9939] FAULT_INJECTION: forcing a failure. [ 293.250317][ T9939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.337335][ T9939] CPU: 1 PID: 9939 Comm: syz.2.2036 Not tainted syzkaller #0 [ 293.344760][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.354860][ T9939] Call Trace: [ 293.358157][ T9939] [ 293.361099][ T9939] dump_stack_lvl+0x188/0x250 [ 293.365788][ T9939] ? show_regs_print_info+0x20/0x20 [ 293.370993][ T9939] ? load_image+0x400/0x400 [ 293.375518][ T9939] ? __lock_acquire+0x7d10/0x7d10 [ 293.380577][ T9939] should_fail+0x38c/0x4c0 [ 293.385009][ T9939] _copy_from_iter+0x40d/0x1170 [ 293.389884][ T9939] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 293.395271][ T9939] ? __virt_addr_valid+0x3c6/0x470 [ 293.400388][ T9939] ? __phys_addr_symbol+0x2b/0x70 [ 293.405407][ T9939] ? __check_object_size+0x30c/0x410 [ 293.410676][ T9939] netlink_sendmsg+0x758/0xbe0 [ 293.415437][ T9939] ? netlink_getsockopt+0x570/0x570 [ 293.420739][ T9939] ? aa_sock_msg_perm+0x94/0x150 [ 293.425671][ T9939] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 293.430960][ T9939] ? security_socket_sendmsg+0x7c/0xa0 [ 293.436406][ T9939] ? netlink_getsockopt+0x570/0x570 [ 293.441587][ T9939] ____sys_sendmsg+0x5b7/0x8f0 [ 293.446345][ T9939] ? __sys_sendmsg_sock+0x30/0x30 [ 293.451362][ T9939] ? import_iovec+0x6f/0xa0 [ 293.455856][ T9939] ___sys_sendmsg+0x236/0x2e0 [ 293.460523][ T9939] ? __sys_sendmsg+0x2a0/0x2a0 [ 293.465298][ T9939] __se_sys_sendmsg+0x1af/0x290 [ 293.470139][ T9939] ? __x64_sys_sendmsg+0x80/0x80 [ 293.475066][ T9939] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 293.481043][ T9939] ? lockdep_hardirqs_on+0x94/0x140 [ 293.486234][ T9939] do_syscall_64+0x4c/0xa0 [ 293.490638][ T9939] ? clear_bhb_loop+0x30/0x80 [ 293.495300][ T9939] ? clear_bhb_loop+0x30/0x80 [ 293.499966][ T9939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.505850][ T9939] RIP: 0033:0x7f76c08b9eb9 [ 293.510257][ T9939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.529848][ T9939] RSP: 002b:00007f76beb15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.538349][ T9939] RAX: ffffffffffffffda RBX: 00007f76c0b34fa0 RCX: 00007f76c08b9eb9 [ 293.546307][ T9939] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 293.554264][ T9939] RBP: 00007f76beb15090 R08: 0000000000000000 R09: 0000000000000000 [ 293.562230][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.570186][ T9939] R13: 00007f76c0b35038 R14: 00007f76c0b34fa0 R15: 00007ffffff65c38 [ 293.578248][ T9939] [ 293.626180][ T9942] netlink: 'syz.4.2038': attribute type 6 has an invalid length. [ 294.890755][ T9975] ip6tnl0: mtu less than device minimum [ 295.445482][ T9987] __nla_validate_parse: 8 callbacks suppressed [ 295.445500][ T9987] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2054'. [ 295.700581][T10002] netlink: 'syz.0.2061': attribute type 39 has an invalid length. [ 296.301773][T10019] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2066'. [ 296.440181][T10026] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2069'. [ 296.664245][T10036] netlink: 'syz.4.2073': attribute type 19 has an invalid length. [ 296.699175][T10036] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2073'. [ 297.135573][T10060] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2083'. [ 300.487572][T10093] netlink: 'syz.0.2096': attribute type 3 has an invalid length. [ 300.536712][T10097] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2098'. [ 300.575981][T10093] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2096'. [ 300.856189][T10114] netlink: 'syz.0.2102': attribute type 1 has an invalid length. [ 300.874371][T10114] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2102'. [ 301.306103][T10129] netlink: 'syz.3.2109': attribute type 2 has an invalid length. [ 301.381044][T10129] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2109'. [ 301.395583][T10140] netlink: 'syz.1.2110': attribute type 12 has an invalid length. [ 301.425109][T10143] netlink: 'syz.0.2113': attribute type 29 has an invalid length. [ 301.437254][T10139] netlink: 'syz.4.2111': attribute type 1 has an invalid length. [ 301.456349][T10140] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2110'. [ 301.473573][T10139] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.2111'. [ 301.494882][T10139] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2111'. [ 301.518731][T10143] netlink: 'syz.0.2113': attribute type 29 has an invalid length. [ 301.547930][T10146] netlink: 'syz.0.2113': attribute type 29 has an invalid length. [ 301.667859][T10150] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2114'. [ 301.711846][T10153] netlink: 'syz.1.2116': attribute type 4 has an invalid length. [ 302.052694][T10167] netlink: 'syz.4.2121': attribute type 1 has an invalid length. [ 302.073213][T10167] netlink: 'syz.4.2121': attribute type 4 has an invalid length. [ 302.089225][T10167] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2121'. [ 302.840912][T10205] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2138'. [ 302.991137][T10211] delete_channel: no stack [ 303.354826][T10225] delete_channel: no stack [ 303.448426][T10240] openvswitch: netlink: Key 29 has unexpected len 20480 expected 0 [ 307.856291][T10286] ip6tnl0: mtu less than device minimum [ 309.172963][T10331] ip6tnl0: mtu less than device minimum [ 309.181652][T10329] __nla_validate_parse: 8 callbacks suppressed [ 309.181667][T10329] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2180'. [ 309.383700][T10350] FAULT_INJECTION: forcing a failure. [ 309.383700][T10350] name failslab, interval 1, probability 0, space 0, times 0 [ 309.431924][T10350] CPU: 1 PID: 10350 Comm: syz.3.2188 Not tainted syzkaller #0 [ 309.439431][T10350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.449578][T10350] Call Trace: [ 309.452880][T10350] [ 309.455804][T10350] dump_stack_lvl+0x188/0x250 [ 309.460508][T10350] ? show_regs_print_info+0x20/0x20 [ 309.465729][T10350] ? load_image+0x400/0x400 [ 309.470250][T10350] ? __might_sleep+0xf0/0xf0 [ 309.474832][T10350] ? __lock_acquire+0x7d10/0x7d10 [ 309.479858][T10350] should_fail+0x38c/0x4c0 [ 309.484320][T10350] should_failslab+0x5/0x20 [ 309.488818][T10350] slab_pre_alloc_hook+0x51/0xc0 [ 309.493757][T10350] __kmalloc+0x6b/0x330 [ 309.498033][T10350] ? tomoyo_encode+0x27e/0x540 [ 309.502825][T10350] tomoyo_encode+0x27e/0x540 [ 309.507428][T10350] tomoyo_realpath_from_path+0x5cd/0x610 [ 309.513075][T10350] tomoyo_path_number_perm+0x242/0x660 [ 309.518526][T10350] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 309.525206][T10350] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 309.530739][T10350] security_file_ioctl+0x6c/0xa0 [ 309.535697][T10350] __se_sys_ioctl+0x48/0x170 [ 309.540288][T10350] do_syscall_64+0x4c/0xa0 [ 309.544691][T10350] ? clear_bhb_loop+0x30/0x80 [ 309.549369][T10350] ? clear_bhb_loop+0x30/0x80 [ 309.554036][T10350] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 309.559913][T10350] RIP: 0033:0x7f85daa3ceb9 [ 309.564325][T10350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.583920][T10350] RSP: 002b:00007f85d8c98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.592332][T10350] RAX: ffffffffffffffda RBX: 00007f85dacb7fa0 RCX: 00007f85daa3ceb9 [ 309.600297][T10350] RDX: 0000200000000640 RSI: 000000000000541b RDI: 0000000000000004 [ 309.608258][T10350] RBP: 00007f85d8c98090 R08: 0000000000000000 R09: 0000000000000000 [ 309.616218][T10350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.624182][T10350] R13: 00007f85dacb8038 R14: 00007f85dacb7fa0 R15: 00007ffe0b21ad68 [ 309.632169][T10350] [ 309.756775][T10350] ERROR: Out of memory at tomoyo_realpath_from_path. [ 309.757583][T10357] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2190'. [ 309.917945][T10371] ip6tnl0: mtu less than device minimum [ 310.424392][T10382] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2196'. [ 311.257747][T10390] validate_nla: 8 callbacks suppressed [ 311.257762][T10390] netlink: 'syz.4.2200': attribute type 4 has an invalid length. [ 311.342080][T10393] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2203'. [ 311.475055][T10403] ip6tnl0: mtu less than device minimum [ 311.556484][T10392] delete_channel: no stack [ 311.601064][T10411] FAULT_INJECTION: forcing a failure. [ 311.601064][T10411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.671613][T10411] CPU: 0 PID: 10411 Comm: syz.2.2210 Not tainted syzkaller #0 [ 311.679119][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 311.689182][T10411] Call Trace: [ 311.692505][T10411] [ 311.695447][T10411] dump_stack_lvl+0x188/0x250 [ 311.700133][T10411] ? show_regs_print_info+0x20/0x20 [ 311.705335][T10411] ? load_image+0x400/0x400 [ 311.709851][T10411] ? __lock_acquire+0x7d10/0x7d10 [ 311.714889][T10411] should_fail+0x38c/0x4c0 [ 311.719308][T10411] _copy_from_user+0x2e/0x170 [ 311.723986][T10411] kstrtouint_from_user+0xd3/0x220 [ 311.729114][T10411] ? kstrtol_from_user+0x2a0/0x2a0 [ 311.734258][T10411] proc_fail_nth_write+0x8b/0x200 [ 311.739353][T10411] ? proc_fail_nth_read+0x220/0x220 [ 311.744559][T10411] ? common_file_perm+0x171/0x1c0 [ 311.749594][T10411] ? proc_fail_nth_read+0x220/0x220 [ 311.754795][T10411] vfs_write+0x30b/0xd60 [ 311.759038][T10411] ? file_end_write+0x250/0x250 [ 311.763894][T10411] ? __fget_files+0x40f/0x480 [ 311.768580][T10411] ? mutex_lock_nested+0x17/0x20 [ 311.773524][T10411] ? __fdget_pos+0x2bf/0x370 [ 311.778130][T10411] ? ksys_write+0x71/0x260 [ 311.782547][T10411] ksys_write+0x152/0x260 [ 311.786879][T10411] ? __ia32_sys_read+0x80/0x80 [ 311.791651][T10411] ? lockdep_hardirqs_on+0x94/0x140 [ 311.796854][T10411] do_syscall_64+0x4c/0xa0 [ 311.801276][T10411] ? clear_bhb_loop+0x30/0x80 [ 311.805950][T10411] ? clear_bhb_loop+0x30/0x80 [ 311.810634][T10411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 311.816522][T10411] RIP: 0033:0x7f76c087a78e [ 311.820939][T10411] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 311.840636][T10411] RSP: 002b:00007f76beb14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 311.849059][T10411] RAX: ffffffffffffffda RBX: 00007f76beb156c0 RCX: 00007f76c087a78e [ 311.857129][T10411] RDX: 0000000000000001 RSI: 00007f76beb150a0 RDI: 0000000000000008 [ 311.865113][T10411] RBP: 00007f76beb15090 R08: 0000000000000000 R09: 0000000000000000 [ 311.873095][T10411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.881071][T10411] R13: 00007f76c0b35038 R14: 00007f76c0b34fa0 R15: 00007ffffff65c38 [ 311.889062][T10411] [ 311.968065][T10420] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2213'. [ 312.723237][T10429] device wlan0 entered promiscuous mode [ 312.754492][T10427] netlink: 'syz.2.2216': attribute type 2 has an invalid length. [ 312.787913][T10427] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2216'. [ 312.803931][T10429] netlink: 'syz.0.2226': attribute type 9 has an invalid length. [ 312.828743][T10429] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2226'. [ 313.788960][T10440] netlink: 'syz.3.2219': attribute type 4 has an invalid length. [ 313.891937][T10444] ip6tnl0: mtu less than device minimum [ 313.935343][T10448] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2223'. [ 313.955819][T10448] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 314.133410][T10456] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2229'. [ 314.164122][T10457] netlink: 'syz.4.2228': attribute type 19 has an invalid length. [ 314.184580][T10457] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2228'. [ 314.518496][T10471] ip6tnl0: mtu less than device minimum [ 314.528489][T10469] device wlan0 entered promiscuous mode [ 314.590617][T10469] netlink: 'syz.3.2234': attribute type 9 has an invalid length. [ 314.634060][T10469] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2234'. [ 315.022391][T10483] netlink: 'syz.1.2237': attribute type 4 has an invalid length. [ 315.187682][T10488] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2242'. [ 315.284450][T10494] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2244'. [ 316.438031][T10526] FAULT_INJECTION: forcing a failure. [ 316.438031][T10526] name failslab, interval 1, probability 0, space 0, times 0 [ 316.456105][T10526] CPU: 1 PID: 10526 Comm: syz.4.2256 Not tainted syzkaller #0 [ 316.463613][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.473679][T10526] Call Trace: [ 316.476968][T10526] [ 316.479907][T10526] dump_stack_lvl+0x188/0x250 [ 316.484609][T10526] ? show_regs_print_info+0x20/0x20 [ 316.489816][T10526] ? load_image+0x400/0x400 [ 316.494327][T10526] ? perf_trace_lock_acquire+0xed/0x3e0 [ 316.499909][T10526] should_fail+0x38c/0x4c0 [ 316.504326][T10526] should_failslab+0x5/0x20 [ 316.508910][T10526] slab_pre_alloc_hook+0x51/0xc0 [ 316.513836][T10526] ? skb_clone+0x1bd/0x350 [ 316.518254][T10526] kmem_cache_alloc+0x3d/0x290 [ 316.523024][T10526] skb_clone+0x1bd/0x350 [ 316.527278][T10526] __netlink_deliver_tap+0x3cd/0x7c0 [ 316.532573][T10526] netlink_deliver_tap+0x16c/0x180 [ 316.537679][T10526] netlink_unicast+0x74f/0x920 [ 316.542443][T10526] netlink_sendmsg+0x8ba/0xbe0 [ 316.547209][T10526] ? netlink_getsockopt+0x570/0x570 [ 316.552395][T10526] ? aa_sock_msg_perm+0x94/0x150 [ 316.557326][T10526] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 316.562597][T10526] ? security_socket_sendmsg+0x7c/0xa0 [ 316.568053][T10526] ? netlink_getsockopt+0x570/0x570 [ 316.573498][T10526] ____sys_sendmsg+0x5b7/0x8f0 [ 316.578260][T10526] ? __sys_sendmsg_sock+0x30/0x30 [ 316.583279][T10526] ? import_iovec+0x6f/0xa0 [ 316.587775][T10526] ___sys_sendmsg+0x236/0x2e0 [ 316.592465][T10526] ? __sys_sendmsg+0x2a0/0x2a0 [ 316.597259][T10526] ? vfs_write+0x8b2/0xd60 [ 316.601695][T10526] __se_sys_sendmsg+0x1af/0x290 [ 316.606544][T10526] ? __x64_sys_sendmsg+0x80/0x80 [ 316.611470][T10526] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 316.617454][T10526] ? lockdep_hardirqs_on+0x94/0x140 [ 316.622645][T10526] do_syscall_64+0x4c/0xa0 [ 316.627053][T10526] ? clear_bhb_loop+0x30/0x80 [ 316.631719][T10526] ? clear_bhb_loop+0x30/0x80 [ 316.636391][T10526] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 316.642269][T10526] RIP: 0033:0x7fa68e753eb9 [ 316.646672][T10526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.666371][T10526] RSP: 002b:00007fa68c9af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.674785][T10526] RAX: ffffffffffffffda RBX: 00007fa68e9cefa0 RCX: 00007fa68e753eb9 [ 316.682761][T10526] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 316.690730][T10526] RBP: 00007fa68c9af090 R08: 0000000000000000 R09: 0000000000000000 [ 316.698839][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.706816][T10526] R13: 00007fa68e9cf038 R14: 00007fa68e9cefa0 R15: 00007ffe73573f38 [ 316.714804][T10526] [ 316.782229][T10533] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2257'. [ 316.825036][T10529] netlink: 'syz.2.2259': attribute type 19 has an invalid length. [ 316.886077][T10529] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2259'. [ 317.015645][T10541] netlink: 'syz.0.2262': attribute type 3 has an invalid length. [ 317.046197][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.052570][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.059794][T10541] netlink: 'syz.0.2262': attribute type 1 has an invalid length. [ 317.073690][T10541] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2262'. [ 317.156784][T10547] ip6tnl0: mtu less than device minimum [ 317.244427][T10556] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2268'. [ 317.259537][T10556] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 317.451963][T10567] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2272'. [ 317.536938][T10571] FAULT_INJECTION: forcing a failure. [ 317.536938][T10571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.557806][T10571] CPU: 0 PID: 10571 Comm: syz.1.2273 Not tainted syzkaller #0 [ 317.565309][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 317.575385][T10571] Call Trace: [ 317.578677][T10571] [ 317.581621][T10571] dump_stack_lvl+0x188/0x250 [ 317.586320][T10571] ? show_regs_print_info+0x20/0x20 [ 317.591540][T10571] ? load_image+0x400/0x400 [ 317.596067][T10571] ? __lock_acquire+0x7d10/0x7d10 [ 317.601100][T10571] ? perf_trace_lock_acquire+0xed/0x3e0 [ 317.606667][T10571] should_fail+0x38c/0x4c0 [ 317.611099][T10571] _copy_from_user+0x2e/0x170 [ 317.615794][T10571] iovec_from_user+0x142/0x370 [ 317.620581][T10571] __import_iovec+0x70/0x490 [ 317.625200][T10571] import_iovec+0x6f/0xa0 [ 317.629553][T10571] ___sys_sendmsg+0x1fd/0x2e0 [ 317.634333][T10571] ? __sys_sendmsg+0x2a0/0x2a0 [ 317.639146][T10571] __se_sys_sendmsg+0x1af/0x290 [ 317.644005][T10571] ? __x64_sys_sendmsg+0x80/0x80 [ 317.648938][T10571] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 317.654934][T10571] ? lockdep_hardirqs_on+0x94/0x140 [ 317.660149][T10571] do_syscall_64+0x4c/0xa0 [ 317.664584][T10571] ? clear_bhb_loop+0x30/0x80 [ 317.669274][T10571] ? clear_bhb_loop+0x30/0x80 [ 317.673968][T10571] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 317.679963][T10571] RIP: 0033:0x7fedcb50feb9 [ 317.684410][T10571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.704105][T10571] RSP: 002b:00007fedc976b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.712524][T10571] RAX: ffffffffffffffda RBX: 00007fedcb78afa0 RCX: 00007fedcb50feb9 [ 317.720506][T10571] RDX: 0000000014000800 RSI: 0000200000000300 RDI: 0000000000000003 [ 317.728637][T10571] RBP: 00007fedc976b090 R08: 0000000000000000 R09: 0000000000000000 [ 317.736623][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.744596][T10571] R13: 00007fedcb78b038 R14: 00007fedcb78afa0 R15: 00007ffc70317cf8 [ 317.752591][T10571] [ 317.920486][T10581] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2276'. [ 317.947287][T10581] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 318.058149][T10582] netlink: 'syz.3.2274': attribute type 19 has an invalid length. [ 318.077044][T10582] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2274'. [ 318.320754][T10591] ip6tnl0: mtu less than device minimum [ 318.745797][T10603] netlink: 'syz.3.2287': attribute type 29 has an invalid length. [ 318.773209][T10603] netlink: 'syz.3.2287': attribute type 29 has an invalid length. [ 318.818328][T10607] netlink: 'syz.3.2287': attribute type 29 has an invalid length. [ 319.047949][T10624] ip6tnl0: mtu less than device minimum [ 319.092072][ C1] [ 319.092082][ C1] ================================ [ 319.092087][ C1] WARNING: inconsistent lock state [ 319.092103][ C1] syzkaller #0 Not tainted [ 319.092112][ C1] -------------------------------- [ 319.092116][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 319.092123][ C1] syz.1.2295/10629 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 319.092141][ C1] ffff888054f87218 (&htab->lockdep_key){....}-{2:2}, at: htab_map_delete_elem+0x1b2/0x520 [ 319.092188][ C1] {INITIAL USE} state was registered at: [ 319.092194][ C1] lock_acquire+0x19e/0x400 [ 319.092212][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 319.092229][ C1] htab_map_update_elem+0x225/0xa40 [ 319.092245][ C1] bpf_map_update_value+0x57d/0x650 [ 319.092260][ C1] map_update_elem+0x626/0x770 [ 319.092275][ C1] __sys_bpf+0x46b/0x6f0 [ 319.092288][ C1] __x64_sys_bpf+0x78/0x90 [ 319.092302][ C1] do_syscall_64+0x4c/0xa0 [ 319.092314][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.092328][ C1] irq event stamp: 1826 [ 319.092333][ C1] hardirqs last enabled at (1825): [] exc_debug+0xe6/0x130 [ 319.092352][ C1] hardirqs last disabled at (1826): [] exc_debug+0x6e/0x130 [ 319.092369][ C1] softirqs last enabled at (1818): [] netlink_insert+0xe95/0x11f0 [ 319.092392][ C1] softirqs last disabled at (1816): [] release_sock+0x2b/0x1b0 [ 319.092410][ C1] [ 319.092410][ C1] other info that might help us debug this: [ 319.092414][ C1] Possible unsafe locking scenario: [ 319.092414][ C1] [ 319.092418][ C1] CPU0 [ 319.092421][ C1] ---- [ 319.092423][ C1] lock(&htab->lockdep_key); [ 319.092433][ C1] [ 319.092436][ C1] lock(&htab->lockdep_key); [ 319.092445][ C1] [ 319.092445][ C1] *** DEADLOCK *** [ 319.092445][ C1] [ 319.092448][ C1] no locks held by syz.1.2295/10629. [ 319.092455][ C1] [ 319.092455][ C1] stack backtrace: [ 319.092459][ C1] CPU: 1 PID: 10629 Comm: syz.1.2295 Not tainted syzkaller #0 [ 319.092474][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 319.092481][ C1] Call Trace: [ 319.092485][ C1] <#DB> [ 319.092490][ C1] dump_stack_lvl+0x188/0x250 [ 319.092510][ C1] ? show_regs_print_info+0x20/0x20 [ 319.092531][ C1] ? print_usage_bug+0x42a/0x690 [ 319.092544][ C1] ? verify_lock_unused+0x18/0x140 [ 319.092564][ C1] lock_acquire+0x2c3/0x400 [ 319.092583][ C1] ? htab_map_delete_elem+0x1b2/0x520 [ 319.092601][ C1] ? read_lock_is_recursive+0x10/0x10 [ 319.092618][ C1] ? look_up_lock_class+0x71/0x110 [ 319.092635][ C1] ? verify_lock_unused+0x18/0x140 [ 319.092655][ C1] _raw_spin_lock_irqsave+0xb0/0x100 [ 319.092672][ C1] ? htab_map_delete_elem+0x1b2/0x520 [ 319.092689][ C1] ? _raw_spin_lock+0x40/0x40 [ 319.092706][ C1] ? htab_map_hash+0x2b1/0x6d0 [ 319.092720][ C1] htab_map_delete_elem+0x1b2/0x520 [ 319.092746][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x92c [ 319.092761][ C1] bpf_overflow_handler+0x1c2/0x4a0 [ 319.092782][ C1] ? perf_event_switch_output+0x730/0x730 [ 319.092803][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 319.092820][ C1] __perf_event_overflow+0x364/0x530 [ 319.092838][ C1] perf_swevent_event+0x4ad/0x530 [ 319.092856][ C1] perf_bp_event+0x276/0x320 [ 319.092875][ C1] ? perf_event_free_bpf_prog+0x110/0x110 [ 319.092905][ C1] ? rcu_lock_acquire+0x9/0x30 [ 319.092923][ C1] ? read_lock_is_recursive+0x10/0x10 [ 319.092945][ C1] hw_breakpoint_exceptions_notify+0x152/0x470 [ 319.092989][ C1] atomic_notifier_call_chain+0x15d/0x280 [ 319.093008][ C1] notify_die+0x141/0x1a0 [ 319.093025][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 319.093044][ C1] ? exc_debug+0x6e/0x130 [ 319.093058][ C1] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 319.093078][ C1] notify_debug+0x20/0x30 [ 319.093094][ C1] exc_debug+0xcf/0x130 [ 319.093110][ C1] asm_exc_debug+0x1a/0x40 [ 319.093123][ C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 319.093142][ C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 319.093156][ C1] RSP: 0018:ffffc9000349f7f8 EFLAGS: 00050206 [ 319.093169][ C1] RAX: ffffffff83e1b101 RBX: 0000000000000067 RCX: 0000000000000063 [ 319.093180][ C1] RDX: 0000000000000067 RSI: 0000200000000304 RDI: ffff8880631d2404 [ 319.093191][ C1] RBP: ffffc9000349f950 R08: ffff8880631d2466 R09: 1ffff1100c63a48c [ 319.093203][ C1] R10: dffffc0000000000 R11: ffffed100c63a48d R12: ffff8880631d2400 [ 319.093214][ C1] R13: dffffc00000000ff R14: 0000200000000300 R15: 0000000000000000 [ 319.093229][ C1] ? _copy_from_iter+0x231/0x1170 [ 319.093250][ C1] [ 319.093254][ C1] [ 319.093258][ C1] _copy_from_iter+0x318/0x1170 [ 319.093276][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 319.093297][ C1] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 319.093315][ C1] ? __virt_addr_valid+0x3c6/0x470 [ 319.093327][ C1] ? __phys_addr_symbol+0x2b/0x70 [ 319.093338][ C1] ? __check_object_size+0x30c/0x410 [ 319.093354][ C1] netlink_sendmsg+0x758/0xbe0 [ 319.093369][ C1] ? netlink_getsockopt+0x570/0x570 [ 319.093379][ C1] ? aa_sock_msg_perm+0x94/0x150 [ 319.093392][ C1] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 319.093404][ C1] ? security_socket_sendmsg+0x7c/0xa0 [ 319.093416][ C1] ? netlink_getsockopt+0x570/0x570 [ 319.093425][ C1] ____sys_sendmsg+0x5b7/0x8f0 [ 319.093442][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 319.093457][ C1] ? import_iovec+0x6f/0xa0 [ 319.093470][ C1] ___sys_sendmsg+0x236/0x2e0 [ 319.093485][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 319.093502][ C1] ? percpu_counter_add_batch+0x13b/0x160 [ 319.093525][ C1] __se_sys_sendmsg+0x1af/0x290 [ 319.093540][ C1] ? __x64_sys_sendmsg+0x80/0x80 [ 319.093552][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 319.093572][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 319.093586][ C1] do_syscall_64+0x4c/0xa0 [ 319.093595][ C1] ? clear_bhb_loop+0x30/0x80 [ 319.093606][ C1] ? clear_bhb_loop+0x30/0x80 [ 319.093617][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 319.093628][ C1] RIP: 0033:0x7fedcb50feb9 [ 319.093638][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.093648][ C1] RSP: 002b:00007fedc976b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.093660][ C1] RAX: ffffffffffffffda RBX: 00007fedcb78afa0 RCX: 00007fedcb50feb9 [ 319.093669][ C1] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 319.093676][ C1] RBP: 00007fedcb57dc1f R08: 0000000000000000 R09: 0000000000000000 [ 319.093682][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.093689][ C1] R13: 00007fedcb78b038 R14: 00007fedcb78afa0 R15: 00007ffc70317cf8 [ 319.093703][ C1]