last executing test programs: 4.044559627s ago: executing program 4 (id=4273): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xe, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x8000000, 0x0, 0x0, 0x41100, 0x20}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5838, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x8089, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f800b704000000000000850000003300000085000000de359dab2e8eb486e5c6d64e2a0000009500000000000000b731ad438018d3ba8de67bbc36b03afdd3d00d5c8a385e4ed93fdf4ae2a58a9ce9012980bcf89cb1e40264efb8fa9483ef20ce4902ed040040ac8f6d"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0x7) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r2, 0x4, r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x0, 0x3}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000140)=@ax25={{0x3, @bcast, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000640)="35660506be02665be51de23beeef2878c05dc0e25452b21ee198472f45aa07fb2fab3efa54aba331db64e8c5ec8d61feb088573f6c8630500709480e90b0edb2969dec0dfd082a6af7fa98404e8eb5faac9783bf23d18db01650dc843a4b42c1a91265381b87d6057366a574dbbc8317ba980d7ba950fe8b4a9d1433d383945a3160928490220762d79da932a48c03d4c2d8243ce99272c318337692d11e69e5ca957747a725ddd5e931f3a6f538ec01b07ef09ef832c2b64db65de26f5bf0647dde6e780bb827a12884be2ceb1fe61e842c5deeb8020a1cf804166fc6e9ebe9915876d921353ff325d99b91842c2c9375462f", 0xf3}, {&(0x7f0000000740)="c34786a8084df7af52cbb07cfdeca02ac160b0554feb84f74e84b301353c2be919a813c13e7027a346e03ecd5378b0ebfc6dda183e7eef2390138ac3b97d6a70c9ec2bbcb646a8cdf9b526579fecfeea589b89fcf47f6deda00a3c2ab6d489031689130b4498d4eedd683ea84e87a1ced2c4e4f761ff1a46d70e", 0x7a}], 0x2, &(0x7f0000001500)=[{0xe0, 0x104, 0xf9a, "cbbd2b8a6dd4b9c37806979e7e16524cc4217cce18f8039d304264cd8168b9a3d36ed698ec44efda13da7c670a8de97c179116d1388674591dea842cd4a2d9b76c888f253997028e38ec0226325ca92d3f4257d37ceeeb7fb7e2b8d3ce75ca6b1e0f224a454b2250c6fa603d55418050fbe2465e8333c88a6885e5e8c8b1fbd9d286371085b05682c2dd4f4c1be110501be9166a296539a32aa6e3b42a0ea6669f243c87db8c5b22137e94b7a2fe29ad6756e18ea2f3a9f63bbb69485f3c29e09d0477c86c5d5aebee14"}, {0x68, 0x109, 0x6000, "a61267f9615b0e16e1d671423075d7f05efca6f6473388fc669ec6ff8aa2d954ecb35d2b26a7aa224207ba8e1e67a08c7cad3940dbc246b83a5c5322fc97119e25c0cdc014284e6bc9e9e9b12f7ad64362fa"}, {0x40, 0x110, 0xfffffff9, "fa6a79f5052af05eb6b24c4e928f7dca32590e8be7c0c25f60e957b9934f7904387537234c2c4c1fd6a9c7b7da8d"}, {0x28, 0x108, 0x2, "5d5fd1498d44434b0bddb70e3b833c8d325bbe274a"}, {0xf0, 0x1, 0x7fffffff, "20b4b2ac58c32430434867a3381fc0bea70c458e2e8a62212250066227e8d2cfd3102c2b92fc13f58ae5a8532629ee5ba08de7bb05dd2f02c3e2e6cecfd74cee748bcf9e27cdb553432fa5e094f661d372d9d9c34b1352a0b8cab25768b7e5e6525d9a94d8a77f5b5ef09871bde5666ed6cedda56c19773a8dd5c2c6cc9baa16ca3a35cdca730c88d86a78a76aef86838f3f6e60b3f20efb826a3aafbdc1408115ef7606139f85b97dedcc7506db6057a0399fa10d8adecfc83c3edafc8cef78fd8a5b9eb7a272b27c2be3e3fe957bb69b952285507a04720d2f"}, {0xf8, 0x115, 0xc47e3793, "f9218105812e97c519751dfc1bdb3850cc92221500a498bf453b3fdbfc456274f8bb259c3f88007dfa6b1f34e8e95dc746d79f903b45f21b503985d0865ddf0f0dd0be45dfbca0449e7c4b3ab5475840ac356e4e8767439c21dee39d4c3cb3368b6c4f54b5bf149f7065a2245fde3b039ab267bee3427db4832af5ac617e7b05f16ddcfd4b6b0ff4f9c33ab9142e5ae8b912acf0529d096cff7b44fb4da71a2e37ccfd8135e30a53f31ad2d1413c78e6335667bb45b20d92a10e85c6b37f174d287da1a81e1d4e98f6c6e74843155ca9dbe9736c4d0ee85407d766a1982db724879580a88c"}, {0xa8, 0x3a, 0x2, "162cd60a133ff8d81c24d957c16fd6f275a74d11161033f0c85c67eb390ab6e5fc2c2b84772342f3b84988348ace287eb0742a1546b146d1bc1274b656e40ed7cbbca52e9f7000e07be8fca07158378dbb9839215f95eb9203ebaf11efbad22ac657976e536360d0ed1f5a3d1c718e2bc18e86c1240f4ee7b9abdbb9c302c46bc456c73ac0143e3d28aa8090e0c8521cbe"}], 0x440}, 0x4040040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x6, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe082b0e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 3.750968121s ago: executing program 2 (id=4277): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x1000000000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1d, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xb17, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r4, r4, r4, r4], &(0x7f0000000440), 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(r2, 0x84, 0x83, &(0x7f0000000100)=r3, 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000) ioctl$TUNGETVNETLE(r1, 0x40047451, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c074002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x0) 3.083512513s ago: executing program 0 (id=4283): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x5, 0x4, 0x6d, 0x0, 0x0, 0x4e000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x147b8, 0xfffffffffffffffc, 0x0, 0x0, 0x3ffff, 0x7}, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x4000500, &(0x7f0000000140)="902bbc3eea99ea1c1a1edd8d55ac437b32186376782fb6999629127fb6436cf8d77b71e319d02b8c39abfb59d7ee1309e2d84b018878acbd796924eb8cc398f30a06a69ef3c53a5222bc8cf638742e0ee6618402ca7654e57f8a458492", 0x5d, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000240)="10adee658ab24c624c29b020cf8bde519ee4fd9efbd023408f5149f9fed1c757a4541818a8a31ee0913f3c116ec4b514798ae4b1ca6161b957a8d9bc3c6565078542288707e5c47f0e3182d990a4d58b1ab595df5003178407e21e3af45f2c2c2a9b34195d384f54e2495a21811798bfdc15b55d7fac7c1300be06c0946e2880f50c7459448a2f5cae122e4387ec3f5a781b87b6215bffdebfcbd7283aa95c8947dfdccc62b8c581b5b5478413016ddefa254c60db9ca5533c86aeca467f823cef6fa239bd94dbe8bbd10ca5886859e81b9801a9ac8eac6d6a0fa25c5d2166967b8b255e9143fdbc7aadc9112a5a20") perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x378f}, 0x1, 0x0, 0x1000004, 0x6, 0xfffffffffffffffe, 0x2000000a, 0xfffc, 0x0, 0x5}, r0, 0x1, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x48084) 3.020004856s ago: executing program 1 (id=4284): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007001000040016f2de81b8ec05085ee9e06e2e00100000"], 0x0, 0x2b}, 0x28) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x1a4ee8ba, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) close(r3) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d11410", 0x3}], 0x1}, 0x4c081) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a118001500060014", 0x23}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r1, r2}) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x5, 0x0, 0x0) 3.019624486s ago: executing program 3 (id=4285): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3", 0x63}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @end, @generic={0x82, 0xf, "3a047e2aae56e4b9eab8f1483f"}]}}}], 0x48}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000feff7000000070000000020000000400000000000002050000000300000005000093010000000a000000ffff00000600000002000000ff0f000005000000040000003e000000030000000a0000000300000081000000100000007304000001000000050000000000000e0400000000000000000000000000000d"], 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) 2.842824014s ago: executing program 3 (id=4286): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) sendmsg$inet(r5, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000740)=[{&(0x7f00000002c0)='\'', 0x1}], 0x1}, 0x48000) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x11, &(0x7f0000000000)=r7, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xcb, &(0x7f0000000880)=""/203, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 2.797938167s ago: executing program 0 (id=4287): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/181, 0xb5}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f00000038c0)=""/4030, 0xfbe}, {&(0x7f0000000680)=""/4135, 0x1027}, {&(0x7f00000001c0)=""/176, 0xb0}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f00000016c0)=""/152, 0x98}, {&(0x7f0000000000)=""/73, 0x49}], 0x8}, 0x40000700) 2.635964114s ago: executing program 2 (id=4288): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600000085100000a0000000850000000700000095000010000000ff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad06b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976ada362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a867152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca4501391358000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff885"], &(0x7f0000000140)='GPL\x00', 0xffffffff, 0x1000, &(0x7f0000000300)=""/4096, 0x41000, 0x4, '\x00', 0x0, @xdp}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000622003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, [@map_val, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0x17, 0x1}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x65}, 0x94) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.635483754s ago: executing program 0 (id=4289): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000", 0x4}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x38, &(0x7f0000000040), 0x2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000380)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0) 2.567520698s ago: executing program 1 (id=4290): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x804a480, 0x0, 0x0, 0x0, 0x0, 0x0) 2.542970799s ago: executing program 4 (id=4291): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x830d}, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xce, &(0x7f0000000180)=""/206, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) socket$kcm(0x11, 0x3, 0x0) r2 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0x9, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0x0, 0x0}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={0x0, r0}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x1000, 0xfffffffffffffff4}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) socket$kcm(0x11, 0x200000000000003, 0x300) 2.492109251s ago: executing program 2 (id=4292): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff99, &(0x7f0000000040)=[{&(0x7f0000000340)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) 2.349000438s ago: executing program 0 (id=4293): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000004000000000000000000000b00000000020000000100000f029a067985368e8754ff0f000200000025ff000000000000000f02000000b8b300005f"], &(0x7f0000000540)=""/145, 0x50, 0x91, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504800000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000", @ANYRES64=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000001c0)=0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000640), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400006000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r1, 0xfffffffffffffe19, 0xfffffffffffffffe}, 0x9) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x0) 2.339682828s ago: executing program 4 (id=4294): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x100, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x4}, 0x10041, 0xc8, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="7000000000000000000000000900000077275e767792df"], 0x120}, 0xa000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd63"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) (fail_nth: 5) 2.336785848s ago: executing program 3 (id=4295): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="e4010000100000001800000000000000001251837e000000950000000000000055068790741ee6854b58584d11fe7072ed69f6d169ad1716515f1678cc547dd2f75ad7bacdeb850de3a2d4788e7fc43ab6ce8f70a8de8d01ec70a9b3f4efbc3e2f8cb3e6b7f00db57b3b8540490968014ae8381fd8145c46637c17479311d976d065ba44"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x6}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x237, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000300"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r0, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f00000005c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x96, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) write$cgroup_freezer_state(r3, 0x0, 0x71) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000880)={0x0, 0xba5, 0x10}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@fwd={0x7}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x10, 0x5}]}]}, {0x0, [0x61, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, 0x0, 0x48}, 0x28) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016000800014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) mkdir(&(0x7f0000000800)='./file0\x00', 0x23) syz_clone(0x800080, &(0x7f0000000580)="5b55e8f40900c32e397d38c0c5fcfe9b40e28d3a1798580cef0bd4472a6d01afa5858ebe2968f8f58c78250b3d8e9407910e2b8c846e940ef70dcc99609a8491caf2db92d0b835fa69d891f9cf1ecc3acacfd0184cd9eb5665a23c8319d4eba5c847fc8843d0933bcc19ec55dba980dcbe44b7d06ae76177742173dc37f38f01a79dbb23c1b34a6195101855c363d604aa03cfff6d5331ef8f6fd383cc2d728e8f5c40d8a2e35d8573be53492200387eb3dad3b9911e68d48714db", 0xbb, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000680)="b0f0ca3e912977a81e0fd02486b1e4e1299b2e9ae1e0df4503a4c515c8f8830afdec87bbb4b282b70c818d4f491fa84e30ddde678631040fed8ea95b0c9344a96c3bdd879ae90ddb0dad1ee0bbaeebdc037c3acaf01483049486283f4b23d0dfc9955ede5dc23fcb4b0feb83bd5968720e7d8d2ff538e26bb5b08b8234855b91b5ea7c7c8cc77f715d98e5d86f635c1c44d8ba51c8ac89d6f17f572eb1ad997696de901813807e3287dbdbeb39581a3eb2f50ae455ff5d13644171e21a952819b34504db5f112456") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000c80)="a7b89a", 0x3}], 0x1}, 0x4) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x5) 2.287686121s ago: executing program 2 (id=4296): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06d", 0x94}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @end, @generic={0x82, 0xf, "3a047e2aae56e4b9eab8f1483f"}]}}}], 0x48}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000feff7000000070000000020000000400000000000002050000000300000005000093010000000a000000ffff00000600000002000000ff0f000005000000040000003e000000030000000a0000000300000081000000100000007304000001000000050000000000000e0400000000000000000000000000000d"], 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) 1.46863892s ago: executing program 1 (id=4297): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x6084, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000080000000000000000000071103300000001009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0), 0x161) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000300)={0x2, 0x4e1f, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) 1.126508166s ago: executing program 2 (id=4298): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7ff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8", 0x1}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000002000000000000850000007b0000009500000000000000"], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0xa, 0x1, 0x84, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000080) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) 987.644723ms ago: executing program 4 (id=4299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xe, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0xfff8, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x63}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 984.930463ms ago: executing program 3 (id=4300): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000001380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007001000040016f2de81b8ec05085ee9e06e2e00100000"], 0x0, 0x2b}, 0x28) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x1a4ee8ba, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) close(r3) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000800)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000480)="d11410", 0x3}], 0x1}, 0x4c081) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a118001500060014", 0x23}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r1, r2}) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x0, 0x5, 0x0, 0x0) 836.20905ms ago: executing program 1 (id=4301): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$TUNSETIFF(r3, 0xb701, 0x0) sendmsg$kcm(r2, &(0x7f0000001140)={&(0x7f0000001300)=@in6={0xa, 0x4e22, 0x2, @mcast2={0xff, 0x5}, 0xd}, 0x80, 0x0}, 0x24048844) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="63202a3a2a207700253951179bd27cb77a420c58481d89252cb56431cac8ff2d989b476355da067e7315f6016c6ed2318af79bc3d06ddb092d0db94cde9f8324754196cf591002aee6b6bf04c8b997298277445215c2e26993017498b2f5"], 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1400000043007f029ea6b698e82966af5c0953a6", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) getpid() sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002a000b11d25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x100000, 0x35}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r8, 0x2403, 0x5) 640.735339ms ago: executing program 2 (id=4302): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0xe, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x8000000, 0x0, 0x0, 0x41100, 0x20}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5838, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x4, 0x0, 0x9, 0x8089, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f800b704000000000000850000003300000085000000de359dab2e8eb486e5c6d64e2a0000009500000000000000b731ad438018d3ba8de67bbc36b03afdd3d00d5c8a385e4ed93fdf4ae2a58a9ce9012980bcf89cb1e40264efb8fa9483ef20ce4902ed040040ac8f6d"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0x7) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r2, 0x4, r2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6, 0x0, 0x0, 0x3}]}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000140)=@ax25={{0x3, @bcast, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000640)="35660506be02665be51de23beeef2878c05dc0e25452b21ee198472f45aa07fb2fab3efa54aba331db64e8c5ec8d61feb088573f6c8630500709480e90b0edb2969dec0dfd082a6af7fa98404e8eb5faac9783bf23d18db01650dc843a4b42c1a91265381b87d6057366a574dbbc8317ba980d7ba950fe8b4a9d1433d383945a3160928490220762d79da932a48c03d4c2d8243ce99272c318337692d11e69e5ca957747a725ddd5e931f3a6f538ec01b07ef09ef832c2b64db65de26f5bf0647dde6e780bb827a12884be2ceb1fe61e842c5deeb8020a1cf804166fc6e9ebe9915876d921353ff325d99b91842c2c9375462f", 0xf3}, {&(0x7f0000000740)="c34786a8084df7af52cbb07cfdeca02ac160b0554feb84f74e84b301353c2be919a813c13e7027a346e03ecd5378b0ebfc6dda183e7eef2390138ac3b97d6a70c9ec2bbcb646a8cdf9b526579fecfeea589b89fcf47f6deda00a3c2ab6d489031689130b4498d4eedd683ea84e87a1ced2c4e4f761ff1a46d70e", 0x7a}], 0x2, &(0x7f0000001500)=[{0xe0, 0x104, 0xf9a, "cbbd2b8a6dd4b9c37806979e7e16524cc4217cce18f8039d304264cd8168b9a3d36ed698ec44efda13da7c670a8de97c179116d1388674591dea842cd4a2d9b76c888f253997028e38ec0226325ca92d3f4257d37ceeeb7fb7e2b8d3ce75ca6b1e0f224a454b2250c6fa603d55418050fbe2465e8333c88a6885e5e8c8b1fbd9d286371085b05682c2dd4f4c1be110501be9166a296539a32aa6e3b42a0ea6669f243c87db8c5b22137e94b7a2fe29ad6756e18ea2f3a9f63bbb69485f3c29e09d0477c86c5d5aebee14"}, {0x68, 0x109, 0x6000, "a61267f9615b0e16e1d671423075d7f05efca6f6473388fc669ec6ff8aa2d954ecb35d2b26a7aa224207ba8e1e67a08c7cad3940dbc246b83a5c5322fc97119e25c0cdc014284e6bc9e9e9b12f7ad64362fa"}, {0x40, 0x110, 0xfffffff9, "fa6a79f5052af05eb6b24c4e928f7dca32590e8be7c0c25f60e957b9934f7904387537234c2c4c1fd6a9c7b7da8d"}, {0x28, 0x108, 0x2, "5d5fd1498d44434b0bddb70e3b833c8d325bbe274a"}, {0xf0, 0x1, 0x7fffffff, "20b4b2ac58c32430434867a3381fc0bea70c458e2e8a62212250066227e8d2cfd3102c2b92fc13f58ae5a8532629ee5ba08de7bb05dd2f02c3e2e6cecfd74cee748bcf9e27cdb553432fa5e094f661d372d9d9c34b1352a0b8cab25768b7e5e6525d9a94d8a77f5b5ef09871bde5666ed6cedda56c19773a8dd5c2c6cc9baa16ca3a35cdca730c88d86a78a76aef86838f3f6e60b3f20efb826a3aafbdc1408115ef7606139f85b97dedcc7506db6057a0399fa10d8adecfc83c3edafc8cef78fd8a5b9eb7a272b27c2be3e3fe957bb69b952285507a04720d2f"}, {0xf8, 0x115, 0xc47e3793, "f9218105812e97c519751dfc1bdb3850cc92221500a498bf453b3fdbfc456274f8bb259c3f88007dfa6b1f34e8e95dc746d79f903b45f21b503985d0865ddf0f0dd0be45dfbca0449e7c4b3ab5475840ac356e4e8767439c21dee39d4c3cb3368b6c4f54b5bf149f7065a2245fde3b039ab267bee3427db4832af5ac617e7b05f16ddcfd4b6b0ff4f9c33ab9142e5ae8b912acf0529d096cff7b44fb4da71a2e37ccfd8135e30a53f31ad2d1413c78e6335667bb45b20d92a10e85c6b37f174d287da1a81e1d4e98f6c6e74843155ca9dbe9736c4d0ee85407d766a1982db724879580a88c"}, {0xa8, 0x3a, 0x2, "162cd60a133ff8d81c24d957c16fd6f275a74d11161033f0c85c67eb390ab6e5fc2c2b84772342f3b84988348ace287eb0742a1546b146d1bc1274b656e40ed7cbbca52e9f7000e07be8fca07158378dbb9839215f95eb9203ebaf11efbad22ac657976e536360d0ed1f5a3d1c718e2bc18e86c1240f4ee7b9abdbb9c302c46bc456c73ac0143e3d28aa8090e0c8521cbe"}], 0x440}, 0x4040040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x6, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xa0}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r11, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe082b0e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 640.475ms ago: executing program 4 (id=4303): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a867e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c27578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x7}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x88500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xc449}, 0x8121, 0x0, 0x80000001, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="181200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000500bfa1000000b60fe6a6d21a000000fb000000f8ffffffb702000008000000b703000000000000850000fe0500000085000700002095000000e30000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async, rerun: 32) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x13}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES8=r0, @ANYRESHEX=r4], 0x0, 0x53, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6}, 0x94) 639.67589ms ago: executing program 0 (id=4312): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20000280, 0x0, 0x19, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000007001000074010000050000001000000009000005010000000100001004000000560000001000000003000000810000000b00000004000000ff0f00000700000005000000ff0300000700000001000000000000000f00000004000000000000000200000000000000000000000c00000001000000f8000000040000000300000005000000000000000500000d00000000010000000000000010000000050000000a00000002000000040000000000000006000000050000001000000000000011020000000100000004000000000000090000000009000000000000000000000a00000003000000050000000e05000000020c00000e000000040000000700000007000000000000000700401a95fca6ed3a000005000000010000005c0b00000100000001000000020000000700000005000000400000000c00000000000000000000000500000000000009050000000200000000000007000000000aec00000000000c02000000010000000000000700"/391], &(0x7f0000001c40)=""/4106, 0x18d, 0x100a, 0x1, 0xe9}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0xb, 0x200000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 453.768208ms ago: executing program 3 (id=4304): r0 = socket$kcm(0xf, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x67, &(0x7f0000000080), 0x0, 0x0, 0x0, &(0x7f0000000680), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_type(r3, &(0x7f0000000180), 0xffffffffffffff6c) sendmsg$inet(r1, &(0x7f0000000a80)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0xd}, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x38}, 0x80) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="79f1480000000000690036000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 311.723665ms ago: executing program 1 (id=4305): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') write$cgroup_int(r2, &(0x7f0000000a00)=0x4, 0x12) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x60, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xd, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x200}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0xc660b1052454ad26, 0x4, 0x0, 0x3}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x27, &(0x7f00000002c0)=""/39, 0x40f00, 0x74, '\x00', r7, 0x0, r2, 0x8, &(0x7f0000000840)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x8, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[r2, r2, r2], &(0x7f0000000900)=[{0x3, 0x1, 0x5, 0x1}, {0x3, 0x3, 0xf}, {0x3, 0x1, 0xc, 0xef987bc42d1ade29}], 0x10, 0x4}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) 199.99556ms ago: executing program 4 (id=4306): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x9, [@const={0xc, 0x0, 0x0, 0xa, 0x1}, @ptr={0x5, 0x0, 0x0, 0x2, 0x2}, @const={0x8, 0x0, 0x0, 0xa, 0x3}, @union={0xe, 0x5, 0x0, 0x5, 0x0, 0x3ff, [{0xe, 0x2, 0xffffffff}, {0x0, 0x1, 0x4}, {0x5, 0x0, 0x9}, {0xd, 0x2, 0x1952ca2e}, {0x3, 0x5, 0x9}]}]}, {0x0, [0x5f, 0x61, 0x61, 0x61, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000680)=""/251, 0x8d, 0xfb, 0x0, 0xa}, 0x28) (async) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0xfffffffe, 0x80000000}, {0x2, 0x4, 0x0, 0x5}], 0x10, 0x4}, 0x94) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="b7000000f8000000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d100200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000e10000009f000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d66a77ac8daab82167606068067500c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923030000000000000014e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049ef6a989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270fa3d0ee281eaa11ad47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42e54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65807ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91c11ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cdb70f617af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028af0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00672f0814bf895e3a6dfbc711243f58a817895f5c4eaf7de8411a831ef65508f416ae3fd1db8386f6aae40515273adcff6196bb45476ec0a5279ed223f772aee25947b1f0d275c0e495b050f10a0b5d19b578a2b4096b9df527211bb39a29224c34a517dc344a195697b0c158d3519c04fe7621ebeef0bc369a1431a90c4117bdfe358e0e869e9f3e5443813261c1c3c78ab2584603e4468de7d0dc93691491050666f4ea5f083a1b281ed230569921856befe07538fbf33f43fa4ad583867bee301ae1e2566ae7a7afb7fc54895a2fef928d91a162affb4d373c7628a2871d7d19eaf06ed5f58f799c8ff391d3752b115073702ee257ade173dd2f736ed5939f219ba42f7650b9a262f6ee4af52aba3e669a835555ea1674f89d7f98ee1a1c7f977e0a93fdf91606d01c1a9dacfd4328502948bed0bc9514e4f66846bc1f245aa5abad88d56679092fee01007cade7ee72a49a498d51a26ba5cf0896cd9143d457262976f682bf31833ee99b5301f349dd2815e76a8b9a6cec5e000bd6bdafcb9536379b6cd0351cfe345abb1f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) (async) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 173.817102ms ago: executing program 0 (id=4307): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90924fc60100004f00a000400053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 47.685118ms ago: executing program 1 (id=4308): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001740)="3f013c9ef434ca4df0854ba1c14f7db8ccda5e87715ffd1ead9c4d9a2306168b07d3c6763a3ceabf6dfae235f3d783ddc8a7bbd796b345df843b5f0a623ab36b3123dfcd05bf4a6e3f35d859ffc0b699be4052995533be91880029387cc3e15b2d9bf3513e617572d965ba8f665eedcbdaad53d04cddeed78a3904956c5dc95f47132090648f98558d14a4850ac4b92e1b41a06d", 0x94}], 0x1, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @end, @generic={0x82, 0xf, "3a047e2aae56e4b9eab8f1483f"}]}}}], 0x48}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000feff7000000070000000020000000400000000000002050000000300000005000093010000000a000000ffff00000600000002000000ff0f000005000000040000003e000000030000000a0000000300000081000000100000007304000001000000050000000000000e0400000000000000000000000000000d"], 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) 0s ago: executing program 3 (id=4309): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0180300", 0x4}], 0x1}, 0x0) socketpair(0x2b, 0x4, 0x73, &(0x7f0000000380)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f4001100032b2c25fe8007000000007a2c08000000090000ff110000000000000000fffffff50000", 0x5dc}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8947, &(0x7f00000002c0)={'macvlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) kernel console output (not intermixed with test programs): ate [ 381.706344][T12924] device bridge_slave_0 entered promiscuous mode [ 381.716286][T12924] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.729393][T12924] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.745102][T12924] device bridge_slave_1 entered promiscuous mode [ 381.797556][T12924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.822378][T12924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.911602][T12924] team0: Port device team_slave_0 added [ 381.940641][T12924] team0: Port device team_slave_1 added [ 382.007298][T12924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.039122][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.099235][T12924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.135045][T12924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.152971][T12924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.222821][T12924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.353151][T12924] device hsr_slave_0 entered promiscuous mode [ 382.370484][T12924] device hsr_slave_1 entered promiscuous mode [ 382.387683][T12924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.411497][T12924] Cannot create hsr debugfs directory [ 382.440624][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 382.675028][T12924] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.804140][T12924] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.948796][T12924] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.205151][T12924] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.563281][T12924] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 383.608692][T12924] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 383.646054][T12924] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 383.680914][T12924] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 383.840715][T12967] netlink: 'syz.0.3057': attribute type 25 has an invalid length. [ 383.848612][T12967] netlink: 'syz.0.3057': attribute type 29 has an invalid length. [ 384.004230][T12924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.069758][T12970] netlink: 'syz.3.3060': attribute type 33 has an invalid length. [ 384.101127][T12970] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3060'. [ 384.144901][T12924] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.167082][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 384.202943][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 384.295317][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 384.304969][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 384.350301][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.357436][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 384.390404][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 384.410174][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 384.440193][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.447346][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.472320][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 384.519604][ T4228] Bluetooth: hci4: command 0x041b tx timeout [ 384.536337][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 384.571873][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 384.628834][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 384.663912][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 384.694610][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 384.751742][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 384.770412][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 384.818820][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 384.855260][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 384.882890][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 384.892154][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 384.903142][T12924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.376744][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.394788][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.412450][T12994] netlink: 3939 bytes leftover after parsing attributes in process `syz.4.3067'. [ 385.431359][T12924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.492009][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 385.512601][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 385.577887][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 385.588111][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.640675][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.653766][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.663518][T12924] device veth0_vlan entered promiscuous mode [ 385.683886][T12998] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3068'. [ 385.713053][T12924] device veth1_vlan entered promiscuous mode [ 385.804153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 385.817276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 385.834554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 385.855197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 385.882054][T12924] device veth0_macvtap entered promiscuous mode [ 385.936160][T12924] device veth1_macvtap entered promiscuous mode [ 385.983753][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 385.998136][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.012998][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.023952][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.053639][T12924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.075495][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 386.086213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 386.101279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.115266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.130040][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.140961][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.153746][T12924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.169401][T12924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.182395][T12924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.191317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.202939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.218279][T12924] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.227996][T12924] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.237277][T12924] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.251108][T12924] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.712880][ T4267] Bluetooth: hci4: command 0x040f tx timeout [ 386.861198][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.876038][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.929808][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 386.955520][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.970734][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.978839][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 387.176506][T13020] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3078'. [ 387.233134][T13020] netlink: del zone limit has 8 unknown bytes [ 387.722262][T13038] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3086'. [ 388.770939][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 388.874625][T13044] chnl_net:caif_netlink_parms(): no params data found [ 389.427933][T13044] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.510965][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.540244][T13044] device bridge_slave_0 entered promiscuous mode [ 389.580130][T13044] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.619423][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.654041][T13044] device bridge_slave_1 entered promiscuous mode [ 389.741180][T13044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.775366][T13044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.904208][T13044] team0: Port device team_slave_0 added [ 389.916356][T13044] team0: Port device team_slave_1 added [ 389.946389][T13044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.953889][T13044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.008866][T13044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.047749][T13044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.055115][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 390.078696][T13044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.130622][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 390.182349][T13044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.534350][T13044] device hsr_slave_0 entered promiscuous mode [ 390.604451][T13044] device hsr_slave_1 entered promiscuous mode [ 390.637196][T13044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.653532][T13044] Cannot create hsr debugfs directory [ 390.732746][T13108] netlink: 'syz.4.3108': attribute type 10 has an invalid length. [ 390.818152][T13108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.908396][T13108] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 390.944613][T13110] netlink: 'syz.4.3108': attribute type 10 has an invalid length. [ 391.115001][T13110] team0: Device wg1 is of different type [ 391.893030][T13044] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.014682][T13044] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.120495][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 392.461309][T13044] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.556537][T13044] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.068189][T13044] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 393.333188][T13044] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 393.405384][T13044] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 393.446960][T13044] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 393.605971][T13168] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3129'. [ 393.621363][ T4266] device ip6gretap0 left promiscuous mode [ 393.627193][ T4266] Ÿë: port 2(ip6gretap0) entered disabled state [ 394.172507][T13044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.212168][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 394.332754][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 394.371773][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 394.437728][T13044] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.554304][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 394.590936][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 394.627738][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.634935][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.667001][T13202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3144'. [ 394.692094][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 394.701400][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 394.710863][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.718033][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.774497][T13202] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3144'. [ 394.823773][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 394.833295][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 394.843582][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 394.865398][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 394.896170][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 394.933573][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 394.975346][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 394.990676][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 395.003202][T13205] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3144'. [ 395.039139][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 395.053121][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 395.078782][T13044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.097409][T13044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 395.209643][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 395.222607][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 395.905644][ T4266] device wlan1 left promiscuous mode [ 395.944958][ T4266] team0: Port device wlan1 removed [ 395.988633][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 396.007507][ T157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 396.072598][T13044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.182809][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 396.197914][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 396.271367][T13242] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3155'. [ 396.281616][ T4228] Bluetooth: hci3: command 0x0419 tx timeout [ 396.310173][ T4266] device veth0_to_bridge left promiscuous mode [ 396.317264][ T4266] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 396.432358][ T4266] device hsr_slave_0 left promiscuous mode [ 396.504124][ T4266] bridge0: port 3(team0) entered disabled state [ 396.532505][ T4266] device bridge_slave_1 left promiscuous mode [ 396.554611][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.571121][ T4266] device bridge_slave_0 left promiscuous mode [ 396.589141][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.693200][ T4266] device veth1_macvtap left promiscuous mode [ 396.708036][ T4266] device veth0_macvtap left promiscuous mode [ 396.714920][ T4266] device veth1_vlan left promiscuous mode [ 396.727603][ T4266] device veth0_vlan left promiscuous mode [ 396.739970][T13257] FAULT_INJECTION: forcing a failure. [ 396.739970][T13257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.781525][T13257] CPU: 1 PID: 13257 Comm: syz.3.3168 Not tainted syzkaller #0 [ 396.789061][T13257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 396.799160][T13257] Call Trace: [ 396.802474][T13257] [ 396.805433][T13257] dump_stack_lvl+0x188/0x250 [ 396.810151][T13257] ? show_regs_print_info+0x20/0x20 [ 396.815392][T13257] ? load_image+0x400/0x400 [ 396.819961][T13257] ? __lock_acquire+0x7d10/0x7d10 [ 396.825128][T13257] ? lockdep_hardirqs_on+0x94/0x140 [ 396.830462][T13257] should_fail+0x38c/0x4c0 [ 396.834938][T13257] _copy_from_user+0x2e/0x170 [ 396.839654][T13257] __copy_msghdr_from_user+0x48a/0x630 [ 396.845152][T13257] ? verify_lock_unused+0x140/0x140 [ 396.850396][T13257] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 396.855716][T13257] ? perf_tp_event+0xa92/0xbf0 [ 396.860524][T13257] ___sys_sendmsg+0x19a/0x2e0 [ 396.865252][T13257] ? __sys_sendmsg+0x2a0/0x2a0 [ 396.870053][T13257] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 396.876084][T13257] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 396.882285][T13257] ? lockdep_hardirqs_on+0x94/0x140 [ 396.887536][T13257] ? __se_sys_sendmsg+0xe8/0x290 [ 396.892525][T13257] ? kasan_check_range+0x80/0x290 [ 396.897612][T13257] __se_sys_sendmsg+0x1af/0x290 [ 396.902500][T13257] ? __x64_sys_sendmsg+0x80/0x80 [ 396.907473][T13257] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 396.913492][T13257] ? lockdep_hardirqs_on+0x94/0x140 [ 396.918715][T13257] do_syscall_64+0x4c/0xa0 [ 396.923160][T13257] ? clear_bhb_loop+0x30/0x80 [ 396.927864][T13257] ? clear_bhb_loop+0x30/0x80 [ 396.932570][T13257] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 396.938484][T13257] RIP: 0033:0x7fca45f40799 [ 396.942930][T13257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.962595][T13257] RSP: 002b:00007fca4419a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.971056][T13257] RAX: ffffffffffffffda RBX: 00007fca461b9fa0 RCX: 00007fca45f40799 [ 396.979060][T13257] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 396.987101][T13257] RBP: 00007fca4419a090 R08: 0000000000000000 R09: 0000000000000000 [ 396.995107][T13257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.003107][T13257] R13: 00007fca461ba038 R14: 00007fca461b9fa0 R15: 00007fff214e7208 [ 397.011124][T13257] [ 397.378927][ T4266] device team_slave_1 left promiscuous mode [ 397.386142][ T4266] team0 (unregistering): Port device team_slave_1 removed [ 397.418233][ T4266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.427518][ T4266] device bond_slave_1 left promiscuous mode [ 397.442756][ T4266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.451988][ T4266] device bond_slave_0 left promiscuous mode [ 397.529107][ T4266] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 397.538822][ T4266] device bridge0 left promiscuous mode [ 397.545898][ T4266] bond0 (unregistering): Released all slaves [ 397.604184][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 397.614048][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 397.623796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 397.632507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 397.766516][T13044] device veth0_vlan entered promiscuous mode [ 397.828356][T13044] device veth1_vlan entered promiscuous mode [ 397.953708][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 397.970615][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 397.989953][T13044] device veth0_macvtap entered promiscuous mode [ 398.018922][T13044] device veth1_macvtap entered promiscuous mode [ 398.073419][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.098223][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.109333][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.120687][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.139964][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.154395][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.220720][T13044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.260390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 398.278759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 398.300372][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 398.321847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 398.362542][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.381902][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.397379][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.409920][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.426926][T13044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.457555][T13296] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3175'. [ 398.468250][T13044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.471122][T13044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.506226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 398.516006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 398.542207][T13044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.556149][T13044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.566278][T13044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.576055][T13044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.715304][T13293] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3173'. [ 398.946500][ T4247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.997580][ T4247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.036944][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 399.086273][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.115465][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.148533][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 399.905921][T13332] netlink: 'syz.2.3187': attribute type 3 has an invalid length. [ 399.976115][T13332] netlink: 118424 bytes leftover after parsing attributes in process `syz.2.3187'. [ 400.258212][T13338] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3188'. [ 400.465726][T13347] netlink: 'syz.4.3192': attribute type 10 has an invalid length. [ 400.521300][T13347] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.3192'. [ 400.705376][T13347] netlink: 'syz.4.3192': attribute type 21 has an invalid length. [ 400.794604][T13347] IPv6: NLM_F_CREATE should be specified when creating new route [ 400.988500][T13362] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3199'. [ 401.194464][T13348] netlink: 'syz.4.3192': attribute type 10 has an invalid length. [ 401.242483][T13348] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3192'. [ 402.961622][T13397] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3210'. [ 403.086403][T13368] chnl_net:caif_netlink_parms(): no params data found [ 403.203795][T13395] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3209'. [ 403.239863][T13406] FAULT_INJECTION: forcing a failure. [ 403.239863][T13406] name failslab, interval 1, probability 0, space 0, times 0 [ 403.262047][T13406] CPU: 0 PID: 13406 Comm: syz.0.3212 Not tainted syzkaller #0 [ 403.269581][T13406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.279678][T13406] Call Trace: [ 403.283001][T13406] [ 403.285973][T13406] dump_stack_lvl+0x188/0x250 [ 403.290714][T13406] ? show_regs_print_info+0x20/0x20 [ 403.295965][T13406] ? load_image+0x400/0x400 [ 403.300568][T13406] should_fail+0x38c/0x4c0 [ 403.305046][T13406] should_failslab+0x5/0x20 [ 403.309594][T13406] slab_pre_alloc_hook+0x51/0xc0 [ 403.314578][T13406] kmem_cache_alloc_trace+0x47/0x2a0 [ 403.319903][T13406] ? sctp_add_bind_addr+0x89/0x350 [ 403.325069][T13406] sctp_add_bind_addr+0x89/0x350 [ 403.330058][T13406] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 403.335738][T13406] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 403.341866][T13406] ? sctp_v4_is_any+0x31/0x50 [ 403.346589][T13406] ? sctp_copy_one_addr+0x93/0x660 [ 403.351771][T13406] sctp_bind_addr_copy+0xaf/0x3c0 [ 403.356837][T13406] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 403.363308][T13406] sctp_connect_new_asoc+0x2f5/0x6a0 [ 403.368643][T13406] ? __sctp_connect+0xd80/0xd80 [ 403.373546][T13406] ? __local_bh_enable_ip+0x136/0x1c0 [ 403.378970][T13406] ? _local_bh_enable+0xa0/0xa0 [ 403.383877][T13406] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 403.389482][T13406] ? security_sctp_bind_connect+0x85/0xb0 [ 403.395261][T13406] sctp_sendmsg+0x158d/0x2900 [ 403.400193][T13406] ? aa_sk_perm+0x7dc/0x910 [ 403.404753][T13406] ? sctp_getsockopt+0x8a0/0x8a0 [ 403.409780][T13406] ? aa_af_perm+0x340/0x340 [ 403.414325][T13406] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 403.420798][T13406] ? sock_rps_record_flow+0x17/0x3b0 [ 403.426141][T13406] ? inet_sendmsg+0x78/0x2f0 [ 403.430773][T13406] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 403.436106][T13406] ? security_socket_sendmsg+0x7c/0xa0 [ 403.441697][T13406] ? inet_send_prepare+0x260/0x260 [ 403.446871][T13406] ____sys_sendmsg+0x5b7/0x8f0 [ 403.451686][T13406] ? __sys_sendmsg_sock+0x30/0x30 [ 403.456861][T13406] ? import_iovec+0x6f/0xa0 [ 403.461510][T13406] ___sys_sendmsg+0x236/0x2e0 [ 403.466241][T13406] ? __sys_sendmsg+0x2a0/0x2a0 [ 403.471066][T13406] ? vfs_write+0x8b2/0xd60 [ 403.475554][T13406] __se_sys_sendmsg+0x1af/0x290 [ 403.480460][T13406] ? __x64_sys_sendmsg+0x80/0x80 [ 403.485443][T13406] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 403.491492][T13406] ? lockdep_hardirqs_on+0x94/0x140 [ 403.496748][T13406] do_syscall_64+0x4c/0xa0 [ 403.501207][T13406] ? clear_bhb_loop+0x30/0x80 [ 403.505937][T13406] ? clear_bhb_loop+0x30/0x80 [ 403.510664][T13406] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 403.516619][T13406] RIP: 0033:0x7fca9fa2e799 [ 403.521084][T13406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.541389][T13406] RSP: 002b:00007fca9dc88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.549852][T13406] RAX: ffffffffffffffda RBX: 00007fca9fca7fa0 RCX: 00007fca9fa2e799 [ 403.557879][T13406] RDX: 0000000000000010 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 403.565992][T13406] RBP: 00007fca9dc88090 R08: 0000000000000000 R09: 0000000000000000 [ 403.574022][T13406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.582046][T13406] R13: 00007fca9fca8038 R14: 00007fca9fca7fa0 R15: 00007ffc6456d708 [ 403.590175][T13406] [ 403.619307][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 403.628118][T13399] can: request_module (can-proto-5) failed. [ 403.718664][T13368] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.726723][T13368] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.737240][T13368] device bridge_slave_0 entered promiscuous mode [ 403.747181][T13368] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.755027][T13368] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.762887][T13415] FAULT_INJECTION: forcing a failure. [ 403.762887][T13415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.777888][T13368] device bridge_slave_1 entered promiscuous mode [ 403.824044][T13368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.850953][T13415] CPU: 0 PID: 13415 Comm: syz.2.3213 Not tainted syzkaller #0 [ 403.858483][T13415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.868669][T13415] Call Trace: [ 403.872031][T13415] [ 403.875008][T13415] dump_stack_lvl+0x188/0x250 [ 403.879748][T13415] ? show_regs_print_info+0x20/0x20 [ 403.884998][T13415] ? load_image+0x400/0x400 [ 403.889547][T13415] ? __lock_acquire+0x7d10/0x7d10 [ 403.894726][T13415] should_fail+0x38c/0x4c0 [ 403.899196][T13415] _copy_to_user+0x2e/0x130 [ 403.903969][T13415] simple_read_from_buffer+0xe3/0x150 [ 403.909497][T13415] proc_fail_nth_read+0x1a6/0x220 [ 403.914577][T13415] ? proc_fault_inject_write+0x310/0x310 [ 403.920269][T13415] ? fsnotify_perm+0x254/0x560 [ 403.925071][T13415] ? proc_fault_inject_write+0x310/0x310 [ 403.930875][T13415] vfs_read+0x301/0xd60 [ 403.935098][T13415] ? kernel_read+0x1e0/0x1e0 [ 403.939754][T13415] ? __fget_files+0x40f/0x480 [ 403.944492][T13415] ? mutex_lock_nested+0x17/0x20 [ 403.949477][T13415] ? __fdget_pos+0x2bf/0x370 [ 403.954103][T13415] ? ksys_read+0x71/0x260 [ 403.958555][T13415] ksys_read+0x152/0x260 [ 403.962840][T13415] ? vfs_write+0xd60/0xd60 [ 403.967311][T13415] ? lockdep_hardirqs_on+0x94/0x140 [ 403.972566][T13415] do_syscall_64+0x4c/0xa0 [ 403.977026][T13415] ? clear_bhb_loop+0x30/0x80 [ 403.981737][T13415] ? clear_bhb_loop+0x30/0x80 [ 403.986453][T13415] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 403.992388][T13415] RIP: 0033:0x7f9e8d81bfce [ 403.996838][T13415] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 404.016492][T13415] RSP: 002b:00007f9e8ba93fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.024961][T13415] RAX: ffffffffffffffda RBX: 00007f9e8ba946c0 RCX: 00007f9e8d81bfce [ 404.032990][T13415] RDX: 000000000000000f RSI: 00007f9e8ba940a0 RDI: 0000000000000005 [ 404.041004][T13415] RBP: 00007f9e8ba94090 R08: 0000000000000000 R09: 0000000000000000 [ 404.049025][T13415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.056717][T13368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.057123][T13415] R13: 00007f9e8dad5128 R14: 00007f9e8dad5090 R15: 00007ffe41262638 [ 404.074277][T13415] [ 404.148273][T13368] team0: Port device team_slave_0 added [ 404.158242][T13368] team0: Port device team_slave_1 added [ 404.261192][T13368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.302464][T13368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.397736][T13421] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3216'. [ 404.422063][T13368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.502298][T13430] netlink: 'syz.1.3216': attribute type 2 has an invalid length. [ 404.541025][T13430] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3216'. [ 404.593136][T13368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.606828][T13368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.642266][T13368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.654624][T13437] netlink: 'syz.0.3222': attribute type 1 has an invalid length. [ 404.666579][T13437] netlink: 'syz.0.3222': attribute type 3 has an invalid length. [ 404.677144][T13437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3222'. [ 404.677236][T13434] IPv6: Can't replace route, no match found [ 405.320120][T13455] IPv6: Can't replace route, no match found [ 405.343119][T13368] device hsr_slave_0 entered promiscuous mode [ 405.365190][T13368] device hsr_slave_1 entered promiscuous mode [ 405.384155][T13368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.392673][T13368] Cannot create hsr debugfs directory [ 405.651615][ T7222] Bluetooth: hci2: command 0x041b tx timeout [ 405.687332][T13468] netlink: 'syz.1.3234': attribute type 10 has an invalid length. [ 407.719412][ T7222] Bluetooth: hci2: command 0x040f tx timeout [ 407.751438][T13368] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.820852][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.828515][T13482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.841072][T13482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.848591][T13482] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.916137][T13484] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3240'. [ 408.117602][T13368] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.298910][T13368] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.387791][T13368] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.740527][T13504] netlink: 'syz.2.3249': attribute type 21 has an invalid length. [ 408.904901][T13509] netlink: 'syz.4.3250': attribute type 7 has an invalid length. [ 408.939690][T13509] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3250'. [ 408.993040][T13368] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 409.057474][T13368] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 409.098508][T13368] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 409.155400][T13368] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 409.605264][T13368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.695234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 409.714686][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 409.772044][T13368] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.799350][ T7246] Bluetooth: hci2: command 0x0419 tx timeout [ 409.817883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 409.836758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 409.951820][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.958986][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.022554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 410.124726][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 410.241861][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 410.280685][ T1286] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.287947][ T1286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.364687][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 410.411545][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 410.525078][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 410.584382][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 410.736275][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 410.765880][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 410.794968][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 410.875959][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 410.890627][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 410.916087][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 410.945888][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 411.005559][T13368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 411.605474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 411.650977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 411.724398][T13368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.814006][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 411.830558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 411.921368][T13562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.951105][T13562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.988854][T13562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.016220][T13562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.206668][T13368] device veth0_vlan entered promiscuous mode [ 412.239586][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 412.263946][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 412.305758][T13368] device veth1_vlan entered promiscuous mode [ 412.322473][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 412.332965][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 412.362728][ T4475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 412.444967][T13568] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3273'. [ 412.470863][T13368] device veth0_macvtap entered promiscuous mode [ 412.498937][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 412.521124][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 412.540694][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 412.568557][T13368] device veth1_macvtap entered promiscuous mode [ 412.586681][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 412.630629][T13368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.655186][T13368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.675220][T13368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.698838][T13368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.734144][T13368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.755379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 412.768065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 412.843325][T13368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.865439][T13368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.879307][T13368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.899307][T13368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.948157][T13368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.970761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 412.980652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 413.012548][T13368] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.042185][T13368] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.078266][T13368] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.107914][T13368] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.327404][T13580] netlink: 'syz.1.3278': attribute type 3 has an invalid length. [ 413.366676][T13580] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3278'. [ 413.409328][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.423310][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.450336][ T1286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 413.555390][ T1286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.575107][ T1286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.626968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 414.351198][T13602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.435051][T13602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.561385][T13602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.573919][T13602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.606261][T13602] batman_adv: batadv0: Removing interface: netdevsim0 [ 414.705320][T13602] bond0: (slave batadv0): Releasing backup interface [ 415.373582][T13625] netlink: 'syz.4.3297': attribute type 10 has an invalid length. [ 415.486584][T13628] netlink: 'syz.1.3296': attribute type 3 has an invalid length. [ 415.529390][T13628] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3296'. [ 415.758613][T13642] FAULT_INJECTION: forcing a failure. [ 415.758613][T13642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 415.827111][T13641] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3303'. [ 415.899729][T13642] CPU: 1 PID: 13642 Comm: syz.4.3301 Not tainted syzkaller #0 [ 415.907392][T13642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 415.917484][T13642] Call Trace: [ 415.920792][T13642] [ 415.923758][T13642] dump_stack_lvl+0x188/0x250 [ 415.928475][T13642] ? show_regs_print_info+0x20/0x20 [ 415.933707][T13642] ? load_image+0x400/0x400 [ 415.938242][T13642] ? __lock_acquire+0x7d10/0x7d10 [ 415.943301][T13642] ? slab_post_alloc_hook+0x4c/0x380 [ 415.948629][T13642] ? __alloc_skb+0xf4/0x750 [ 415.953163][T13642] ? alloc_skb_with_frags+0xa7/0x730 [ 415.958480][T13642] ? sock_alloc_send_pskb+0x87f/0x9a0 [ 415.963886][T13642] should_fail+0x38c/0x4c0 [ 415.968350][T13642] prepare_alloc_pages+0x1e4/0x5f0 [ 415.973504][T13642] __alloc_pages+0x11b/0x480 [ 415.978136][T13642] ? zone_statistics+0x170/0x170 [ 415.983179][T13642] kmalloc_large_node+0x7d/0x190 [ 415.988167][T13642] __kmalloc_node_track_caller+0x22e/0x3a0 [ 415.994017][T13642] ? alloc_skb_with_frags+0xa7/0x730 [ 415.999337][T13642] ? kmem_cache_alloc_node+0x162/0x2d0 [ 416.004835][T13642] ? __alloc_skb+0xf4/0x750 [ 416.009382][T13642] ? alloc_skb_with_frags+0xa7/0x730 [ 416.014797][T13642] __alloc_skb+0x22c/0x750 [ 416.019253][T13642] alloc_skb_with_frags+0xa7/0x730 [ 416.024509][T13642] ? mark_lock+0x94/0x320 [ 416.028902][T13642] sock_alloc_send_pskb+0x87f/0x9a0 [ 416.034161][T13642] ? sock_kzfree_s+0x50/0x50 [ 416.038804][T13642] tun_get_user+0x7c8/0x3a70 [ 416.043479][T13642] ? tun_ring_recv+0xc40/0xc40 [ 416.048291][T13642] ? rcu_lock_release+0x5/0x20 [ 416.053118][T13642] ? __lock_acquire+0x7d10/0x7d10 [ 416.058199][T13642] tun_chr_write_iter+0x112/0x1e0 [ 416.063270][T13642] vfs_write+0x745/0xd60 [ 416.067565][T13642] ? file_end_write+0x250/0x250 [ 416.072461][T13642] ? __fget_files+0x40f/0x480 [ 416.077263][T13642] ? __fdget_pos+0x1e2/0x370 [ 416.081924][T13642] ? ksys_write+0x71/0x260 [ 416.086383][T13642] ksys_write+0x152/0x260 [ 416.090761][T13642] ? __ia32_sys_read+0x80/0x80 [ 416.095574][T13642] ? lockdep_hardirqs_on+0x94/0x140 [ 416.100828][T13642] do_syscall_64+0x4c/0xa0 [ 416.105534][T13642] ? clear_bhb_loop+0x30/0x80 [ 416.110266][T13642] ? clear_bhb_loop+0x30/0x80 [ 416.115006][T13642] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 416.120941][T13642] RIP: 0033:0x7f29d911c799 [ 416.125581][T13642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.145259][T13642] RSP: 002b:00007f29d7355028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 416.153736][T13642] RAX: ffffffffffffffda RBX: 00007f29d9396090 RCX: 00007f29d911c799 [ 416.161758][T13642] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 416.169768][T13642] RBP: 00007f29d7355090 R08: 0000000000000000 R09: 0000000000000000 [ 416.177773][T13642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.185870][T13642] R13: 00007f29d9396128 R14: 00007f29d9396090 R15: 00007ffc9a7f4e98 [ 416.193889][T13642] [ 416.362648][T13646] netlink: 'syz.0.3304': attribute type 10 has an invalid length. [ 416.393500][T13646] bond0: (slave bond_slave_0): Releasing backup interface [ 416.573537][T13647] netlink: 'syz.0.3304': attribute type 46 has an invalid length. [ 416.582310][T13647] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3304'. [ 416.992184][T13663] netlink: 'syz.1.3311': attribute type 10 has an invalid length. [ 417.022437][T13663] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 417.641157][T13679] netlink: 'syz.0.3316': attribute type 16 has an invalid length. [ 417.863087][T13679] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3316'. [ 418.528654][T13698] device sit0 entered promiscuous mode [ 418.862321][T13705] FAULT_INJECTION: forcing a failure. [ 418.862321][T13705] name failslab, interval 1, probability 0, space 0, times 0 [ 418.906186][T13705] CPU: 0 PID: 13705 Comm: syz.4.3326 Not tainted syzkaller #0 [ 418.913837][T13705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.923930][T13705] Call Trace: [ 418.927245][T13705] [ 418.930200][T13705] dump_stack_lvl+0x188/0x250 [ 418.934914][T13705] ? show_regs_print_info+0x20/0x20 [ 418.940157][T13705] ? load_image+0x400/0x400 [ 418.944881][T13705] ? __might_sleep+0xf0/0xf0 [ 418.949512][T13705] ? __lock_acquire+0x7d10/0x7d10 [ 418.954595][T13705] should_fail+0x38c/0x4c0 [ 418.959081][T13705] should_failslab+0x5/0x20 [ 418.963729][T13705] slab_pre_alloc_hook+0x51/0xc0 [ 418.968716][T13705] __kmalloc+0x6b/0x330 [ 418.972908][T13705] ? bpf_test_init+0xf8/0x1b0 [ 418.977622][T13705] ? __lock_acquire+0x7d10/0x7d10 [ 418.982689][T13705] bpf_test_init+0xf8/0x1b0 [ 418.987271][T13705] bpf_prog_test_run_skb+0x181/0x1180 [ 418.992685][T13705] ? __fget_files+0x40f/0x480 [ 418.997411][T13705] ? cpu_online+0x60/0x60 [ 419.001785][T13705] bpf_prog_test_run+0x31e/0x390 [ 419.006763][T13705] __sys_bpf+0x5a5/0x6f0 [ 419.011038][T13705] ? bpf_link_show_fdinfo+0x380/0x380 [ 419.016455][T13705] ? vtime_user_exit+0x2c8/0x3e0 [ 419.021435][T13705] __x64_sys_bpf+0x78/0x90 [ 419.025887][T13705] do_syscall_64+0x4c/0xa0 [ 419.030344][T13705] ? clear_bhb_loop+0x30/0x80 [ 419.035059][T13705] ? clear_bhb_loop+0x30/0x80 [ 419.039801][T13705] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 419.045736][T13705] RIP: 0033:0x7f29d911c799 [ 419.050187][T13705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.069820][T13705] RSP: 002b:00007f29d7376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 419.078275][T13705] RAX: ffffffffffffffda RBX: 00007f29d9395fa0 RCX: 00007f29d911c799 [ 419.086282][T13705] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 419.094287][T13705] RBP: 00007f29d7376090 R08: 0000000000000000 R09: 0000000000000000 [ 419.102290][T13705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.110285][T13705] R13: 00007f29d9396038 R14: 00007f29d9395fa0 R15: 00007ffc9a7f4e98 [ 419.118298][T13705] [ 420.040132][T13737] netlink: 'syz.0.3335': attribute type 10 has an invalid length. [ 420.048077][T13737] batman_adv: batadv0: Removing interface: netdevsim0 [ 420.131233][T13737] team0: Port device netdevsim0 added [ 420.151555][T13741] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3336'. [ 420.700039][T13765] netlink: 'syz.4.3345': attribute type 5 has an invalid length. [ 420.787558][T13765] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3345'. [ 420.835586][T13771] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3346'. [ 420.987236][T13771] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3346'. [ 421.116616][T13773] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3346'. [ 422.122070][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 424.344504][T13845] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3374'. [ 424.516578][T13849] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3375'. [ 424.917838][T13864] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3381'. [ 425.122730][T13866] netlink: 'syz.4.3382': attribute type 21 has an invalid length. [ 425.504155][T13882] netlink: 'syz.4.3389': attribute type 21 has an invalid length. [ 425.528601][T13882] netlink: 'syz.4.3389': attribute type 6 has an invalid length. [ 425.559325][T13882] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3389'. [ 425.635229][T13889] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3391'. [ 425.655090][T13889] netlink: del zone limit has 8 unknown bytes [ 426.014863][T13899] Ÿë: port 1(veth0_to_team) entered blocking state [ 426.029075][T13899] Ÿë: port 1(veth0_to_team) entered disabled state [ 426.063774][T13899] device veth0_to_team entered promiscuous mode [ 426.217924][T13912] netlink: 'syz.4.3400': attribute type 1 has an invalid length. [ 426.242648][T13912] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.3400'. [ 427.539875][T13916] netlink: 'syz.1.3403': attribute type 21 has an invalid length. [ 427.555498][T13916] netlink: 'syz.1.3403': attribute type 6 has an invalid length. [ 427.563884][T13916] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3403'. [ 428.130997][T13957] netlink: 'syz.2.3415': attribute type 4 has an invalid length. [ 428.178184][T13957] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3415'. [ 428.324774][T13964] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3417'. [ 428.831799][T13957] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 428.977983][T13980] netlink: 'syz.3.3421': attribute type 21 has an invalid length. [ 429.052876][T13980] netlink: 'syz.3.3421': attribute type 6 has an invalid length. [ 429.077085][T13980] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3421'. [ 429.454066][T13993] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3426'. [ 429.546839][T13997] FAULT_INJECTION: forcing a failure. [ 429.546839][T13997] name failslab, interval 1, probability 0, space 0, times 0 [ 429.560970][T13992] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3427'. [ 429.639373][T13997] CPU: 0 PID: 13997 Comm: syz.1.3426 Not tainted syzkaller #0 [ 429.646899][T13997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.656988][T13997] Call Trace: [ 429.660374][T13997] [ 429.663324][T13997] dump_stack_lvl+0x188/0x250 [ 429.668028][T13997] ? show_regs_print_info+0x20/0x20 [ 429.673245][T13997] ? load_image+0x400/0x400 [ 429.677857][T13997] ? __might_sleep+0xf0/0xf0 [ 429.682468][T13997] ? __lock_acquire+0x7d10/0x7d10 [ 429.687517][T13997] ? mark_lock+0x94/0x320 [ 429.691960][T13997] should_fail+0x38c/0x4c0 [ 429.696412][T13997] should_failslab+0x5/0x20 [ 429.700944][T13997] slab_pre_alloc_hook+0x51/0xc0 [ 429.705915][T13997] __kmalloc+0x6b/0x330 [ 429.710128][T13997] ? tomoyo_realpath_from_path+0x118/0x610 [ 429.715963][T13997] tomoyo_realpath_from_path+0x118/0x610 [ 429.721626][T13997] tomoyo_path_number_perm+0x242/0x660 [ 429.727118][T13997] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 429.732620][T13997] ? rcu_nmi_exit+0x6f/0xf0 [ 429.737152][T13997] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 429.743190][T13997] security_file_ioctl+0x6c/0xa0 [ 429.748161][T13997] __se_sys_ioctl+0x48/0x170 [ 429.752775][T13997] do_syscall_64+0x4c/0xa0 [ 429.757219][T13997] ? clear_bhb_loop+0x30/0x80 [ 429.762259][T13997] ? clear_bhb_loop+0x30/0x80 [ 429.766969][T13997] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 429.772883][T13997] RIP: 0033:0x7ffa438f3799 [ 429.777330][T13997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.797092][T13997] RSP: 002b:00007ffa41b2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.805543][T13997] RAX: ffffffffffffffda RBX: 00007ffa43b6d090 RCX: 00007ffa438f3799 [ 429.813542][T13997] RDX: 0000200000000080 RSI: 0000000000008922 RDI: 000000000000000b [ 429.821535][T13997] RBP: 00007ffa41b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 429.829539][T13997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.837566][T13997] R13: 00007ffa43b6d128 R14: 00007ffa43b6d090 R15: 00007ffd83de0908 [ 429.845574][T13997] [ 429.891978][T13997] ERROR: Out of memory at tomoyo_realpath_from_path. [ 430.484926][T14008] device syzkaller0 entered promiscuous mode [ 430.691017][T14019] netlink: 'syz.1.3435': attribute type 28 has an invalid length. [ 431.595994][T14038] netlink: 'syz.4.3445': attribute type 3 has an invalid length. [ 431.691636][T14038] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3445'. [ 432.034061][T14046] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3447'. [ 432.104458][T14051] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3447'. [ 432.512640][T14065] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3452'. [ 432.556628][T14065] bridge_slave_1: default FDB implementation only supports local addresses [ 433.126709][T14083] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3456'. [ 434.171625][T14100] netlink: 'syz.1.3461': attribute type 4 has an invalid length. [ 434.264435][T14100] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3461'. [ 434.759046][T14100] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 434.917612][T14109] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3465'. [ 435.584121][ T4266] tipc: Left network mode [ 435.676483][ T4266] tipc: Left network mode [ 435.778397][T14125] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3479'. [ 435.852262][T14126] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3469'. [ 436.462268][T14133] netlink: 'syz.2.3471': attribute type 15 has an invalid length. [ 436.479398][T14133] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3471'. [ 436.945070][T14146] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3477'. [ 437.847189][T14170] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3483'. [ 438.198984][T14175] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3486'. [ 438.240438][T14175] bridge_slave_1: default FDB implementation only supports local addresses [ 438.337101][T14183] netlink: 'syz.4.3488': attribute type 29 has an invalid length. [ 438.391898][T14182] netlink: 'syz.4.3488': attribute type 10 has an invalid length. [ 438.405330][T14182] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3488'. [ 438.484014][T14183] netlink: 'syz.4.3488': attribute type 29 has an invalid length. [ 438.620980][T14185] netlink: 'syz.4.3488': attribute type 29 has an invalid length. [ 439.605565][T14199] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3492'. [ 439.985330][T14201] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3493'. [ 440.046320][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.052757][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.334614][T14205] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3494'. [ 441.289578][ T4266] device hsr_slave_0 left promiscuous mode [ 441.337395][ T4266] device hsr_slave_1 left promiscuous mode [ 441.349847][ T4266] bridge0: port 3(team0) entered disabled state [ 441.368521][ T4266] device bridge_slave_1 left promiscuous mode [ 441.431288][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.451650][ T4266] device bridge_slave_0 left promiscuous mode [ 441.458027][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.536017][T14226] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3507'. [ 441.548716][ T4266] device hsr_slave_0 left promiscuous mode [ 441.567518][ T4266] device hsr_slave_1 left promiscuous mode [ 441.592812][ T4266] device bridge_slave_1 left promiscuous mode [ 441.619783][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.631455][T14228] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3506'. [ 441.637849][T14230] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.3508'. [ 441.663567][ T4266] device bridge_slave_0 left promiscuous mode [ 441.699410][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.956843][ T4266] device veth1_macvtap left promiscuous mode [ 441.987211][ T4266] device veth1_vlan left promiscuous mode [ 442.015958][ T4266] device veth0_vlan left promiscuous mode [ 442.045986][T14236] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.3509'. [ 442.084102][ T4266] device veth1_macvtap left promiscuous mode [ 442.111210][ T4266] device veth1_vlan left promiscuous mode [ 442.117054][ T4266] device veth0_vlan left promiscuous mode [ 442.804977][ T4266] device team_slave_1 left promiscuous mode [ 442.819090][ T4266] team0 (unregistering): Port device team_slave_1 removed [ 442.838467][ T4266] device team_slave_0 left promiscuous mode [ 442.851796][ T4266] team0 (unregistering): Port device team_slave_0 removed [ 442.875094][ T4266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.889558][ T4266] device bond_slave_1 left promiscuous mode [ 442.954347][ T4266] device bond0 left promiscuous mode [ 442.962886][ T4266] team0 (unregistering): Port device bond0 removed [ 442.983308][ T4266] bond0 (unregistering): Released all slaves [ 443.188083][ T4266] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 443.197757][ T4266] device batadv_slave_0 left promiscuous mode [ 443.228570][ T4266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.237801][ T4266] device bond_slave_1 left promiscuous mode [ 443.252482][ T4266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.262679][ T4266] device bond_slave_0 left promiscuous mode [ 443.307727][ T4266] bond0 (unregistering): Released all slaves [ 443.558208][T14249] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3513'. [ 443.762640][T14248] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3523'. [ 444.060202][T14259] netlink: 'syz.4.3518': attribute type 3 has an invalid length. [ 444.068107][T14259] netlink: 118424 bytes leftover after parsing attributes in process `syz.4.3518'. [ 444.967544][T14273] netlink: 13762 bytes leftover after parsing attributes in process `syz.1.3520'. [ 445.485385][T14289] FAULT_INJECTION: forcing a failure. [ 445.485385][T14289] name failslab, interval 1, probability 0, space 0, times 0 [ 445.568963][T14289] CPU: 0 PID: 14289 Comm: syz.1.3529 Not tainted syzkaller #0 [ 445.576501][T14289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.586712][T14289] Call Trace: [ 445.590024][T14289] [ 445.592991][T14289] dump_stack_lvl+0x188/0x250 [ 445.597708][T14289] ? show_regs_print_info+0x20/0x20 [ 445.602966][T14289] ? load_image+0x400/0x400 [ 445.607527][T14289] should_fail+0x38c/0x4c0 [ 445.611987][T14289] should_failslab+0x5/0x20 [ 445.616523][T14289] slab_pre_alloc_hook+0x51/0xc0 [ 445.621498][T14289] kmem_cache_alloc_trace+0x47/0x2a0 [ 445.626902][T14289] ? sctp_add_bind_addr+0x89/0x350 [ 445.632065][T14289] sctp_add_bind_addr+0x89/0x350 [ 445.637047][T14289] sctp_copy_local_addr_list+0x2dd/0x4a0 [ 445.642716][T14289] ? sctp_do_8_2_transport_strike+0x840/0x840 [ 445.648816][T14289] ? sctp_v4_is_any+0x31/0x50 [ 445.653534][T14289] ? sctp_copy_one_addr+0x93/0x660 [ 445.658671][T14289] sctp_bind_addr_copy+0xaf/0x3c0 [ 445.663723][T14289] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 445.670079][T14289] sctp_connect_new_asoc+0x2f5/0x6a0 [ 445.675419][T14289] ? __sctp_connect+0xd80/0xd80 [ 445.680293][T14289] ? __local_bh_enable_ip+0x136/0x1c0 [ 445.685684][T14289] ? _local_bh_enable+0xa0/0xa0 [ 445.690554][T14289] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 445.696123][T14289] ? security_sctp_bind_connect+0x85/0xb0 [ 445.701976][T14289] sctp_sendmsg+0x158d/0x2900 [ 445.706737][T14289] ? aa_sk_perm+0x7dc/0x910 [ 445.711276][T14289] ? sctp_getsockopt+0x8a0/0x8a0 [ 445.716337][T14289] ? aa_af_perm+0x340/0x340 [ 445.720858][T14289] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 445.727294][T14289] ? sock_rps_record_flow+0x17/0x3b0 [ 445.732691][T14289] ? inet_sendmsg+0x78/0x2f0 [ 445.737390][T14289] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 445.742696][T14289] ? security_socket_sendmsg+0x7c/0xa0 [ 445.748178][T14289] ? inet_send_prepare+0x260/0x260 [ 445.753306][T14289] ____sys_sendmsg+0x5b7/0x8f0 [ 445.758110][T14289] ? __sys_sendmsg_sock+0x30/0x30 [ 445.763159][T14289] ? import_iovec+0x6f/0xa0 [ 445.767687][T14289] ___sys_sendmsg+0x236/0x2e0 [ 445.772389][T14289] ? __sys_sendmsg+0x2a0/0x2a0 [ 445.777184][T14289] ? vfs_write+0x8b2/0xd60 [ 445.781640][T14289] __se_sys_sendmsg+0x1af/0x290 [ 445.786543][T14289] ? __x64_sys_sendmsg+0x80/0x80 [ 445.791508][T14289] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 445.797608][T14289] ? lockdep_hardirqs_on+0x94/0x140 [ 445.802845][T14289] do_syscall_64+0x4c/0xa0 [ 445.807298][T14289] ? clear_bhb_loop+0x30/0x80 [ 445.811997][T14289] ? clear_bhb_loop+0x30/0x80 [ 445.816698][T14289] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 445.822608][T14289] RIP: 0033:0x7ffa438f3799 [ 445.827049][T14289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.846772][T14289] RSP: 002b:00007ffa41b4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.855237][T14289] RAX: ffffffffffffffda RBX: 00007ffa43b6cfa0 RCX: 00007ffa438f3799 [ 445.863246][T14289] RDX: 0000000000000010 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 445.871239][T14289] RBP: 00007ffa41b4d090 R08: 0000000000000000 R09: 0000000000000000 [ 445.879231][T14289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 445.887246][T14289] R13: 00007ffa43b6d038 R14: 00007ffa43b6cfa0 R15: 00007ffd83de0908 [ 445.895245][T14289] [ 446.204038][T14308] netlink: 'syz.4.3537': attribute type 10 has an invalid length. [ 446.333176][T14311] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.3539'. [ 446.447613][T14308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.468623][T14308] team0: Port device bond0 added [ 446.858923][T14337] netlink: 'syz.3.3547': attribute type 10 has an invalid length. [ 446.917897][T14334] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 446.965998][T14334] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 447.033439][T14334] device veth0_to_bridge entered promiscuous mode [ 447.105619][T14347] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3550'. [ 447.124226][T14336] Ÿë: port 2(veth0_to_team) entered blocking state [ 447.145964][T14336] Ÿë: port 2(veth0_to_team) entered disabled state [ 447.182527][T14336] device veth0_to_team entered promiscuous mode [ 448.316853][T14375] netlink: 'syz.0.3563': attribute type 10 has an invalid length. [ 448.358247][T14375] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 448.394067][T14375] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 448.415627][T14375] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 448.428326][T14375] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 448.820047][T14396] netlink: 'syz.0.3570': attribute type 7 has an invalid length. [ 448.842704][T14396] netlink: 'syz.0.3570': attribute type 6 has an invalid length. [ 448.853681][T14397] FAULT_INJECTION: forcing a failure. [ 448.853681][T14397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 448.853720][T14397] CPU: 0 PID: 14397 Comm: syz.3.3569 Not tainted syzkaller #0 [ 448.853746][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.853764][T14397] Call Trace: [ 448.853775][T14397] [ 448.853789][T14397] dump_stack_lvl+0x188/0x250 [ 448.853833][T14397] ? show_regs_print_info+0x20/0x20 [ 448.853870][T14397] ? load_image+0x400/0x400 [ 448.853909][T14397] ? __lock_acquire+0x7d10/0x7d10 [ 448.853965][T14397] should_fail+0x38c/0x4c0 [ 448.854016][T14397] _copy_from_user+0x2e/0x170 [ 448.854056][T14397] __copy_msghdr_from_user+0xc9/0x630 [ 448.854091][T14397] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 448.854134][T14397] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 448.854219][T14397] ___sys_sendmsg+0x19a/0x2e0 [ 448.854280][T14397] ? __sys_sendmsg+0x2a0/0x2a0 [ 448.854352][T14397] ? trace_event_raw_event_lock+0x270/0x270 [ 448.854381][T14397] ? vfs_write+0x8b2/0xd60 [ 448.854494][T14397] __se_sys_sendmsg+0x1af/0x290 [ 448.854537][T14397] ? __x64_sys_sendmsg+0x80/0x80 [ 448.854571][T14397] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 448.854647][T14397] ? lockdep_hardirqs_on+0x94/0x140 [ 448.854691][T14397] do_syscall_64+0x4c/0xa0 [ 448.854716][T14397] ? clear_bhb_loop+0x30/0x80 [ 448.854742][T14397] ? clear_bhb_loop+0x30/0x80 [ 448.854776][T14397] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 448.854803][T14397] RIP: 0033:0x7f701942b799 [ 448.854830][T14397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.854852][T14397] RSP: 002b:00007f7017685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.854885][T14397] RAX: ffffffffffffffda RBX: 00007f70196a4fa0 RCX: 00007f701942b799 [ 448.854906][T14397] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000012 [ 448.854924][T14397] RBP: 00007f7017685090 R08: 0000000000000000 R09: 0000000000000000 [ 448.854942][T14397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.854959][T14397] R13: 00007f70196a5038 R14: 00007f70196a4fa0 R15: 00007ffde03e5358 [ 448.855029][T14397] [ 449.338372][T14400] netlink: 'syz.0.3570': attribute type 10 has an invalid length. [ 449.488815][T14400] team0: Port device netdevsim0 removed [ 449.535644][T14412] netlink: 'syz.4.3573': attribute type 9 has an invalid length. [ 449.547167][T14412] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3573'. [ 450.331098][T14415] netlink: 'syz.4.3573': attribute type 9 has an invalid length. [ 450.368550][T14415] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3573'. [ 450.469765][T14419] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3576'. [ 451.031021][T14446] netlink: 'syz.0.3584': attribute type 7 has an invalid length. [ 451.049544][T14446] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3584'. [ 451.725239][T14474] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3594'. [ 452.350536][T14485] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3598'. [ 452.564187][T14493] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3601'. [ 452.967292][T14515] netlink: 'syz.0.3603': attribute type 3 has an invalid length. [ 452.977477][T14515] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3603'. [ 453.502006][T14539] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3609'. [ 453.915586][T14551] netlink: 'syz.0.3625': attribute type 10 has an invalid length. [ 453.918094][T14548] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3616'. [ 453.928744][T14551] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 453.971503][T14552] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3614'. [ 454.514156][T14572] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3626'. [ 454.545165][T14566] netlink: 'syz.4.3622': attribute type 21 has an invalid length. [ 454.566392][T14566] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3622'. [ 454.639588][T14566] netlink: 'syz.4.3622': attribute type 4 has an invalid length. [ 454.717016][T14566] netlink: 'syz.4.3622': attribute type 5 has an invalid length. [ 454.769291][T14566] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3622'. [ 455.384684][T14605] netlink: 'syz.4.3634': attribute type 4 has an invalid length. [ 455.425241][T14605] netlink: 'syz.4.3634': attribute type 1 has an invalid length. [ 455.615462][T14609] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 456.583347][T14622] netlink: 'syz.1.3642': attribute type 9 has an invalid length. [ 456.770272][T14639] __nla_validate_parse: 4 callbacks suppressed [ 456.770290][T14639] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3650'. [ 456.916451][T14639] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3650'. [ 456.950340][T14642] netlink: 'syz.4.3650': attribute type 10 has an invalid length. [ 456.997604][T14642] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.007358][T14642] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.079061][T14646] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3651'. [ 457.133513][T14642] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.141247][T14642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.151490][T14642] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.158914][T14642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.236298][T14642] team0: Port device bridge0 added [ 457.260214][T14643] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3650'. [ 457.318362][T14622] device syzkaller0 entered promiscuous mode [ 457.596307][T14653] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.3653'. [ 457.625369][T14650] netlink: 'syz.4.3653': attribute type 21 has an invalid length. [ 457.633937][T14650] netlink: 'syz.4.3653': attribute type 6 has an invalid length. [ 457.642576][T14650] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3653'. [ 457.868230][T14663] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3658'. [ 458.765061][T14669] FAULT_INJECTION: forcing a failure. [ 458.765061][T14669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.812646][T14669] CPU: 0 PID: 14669 Comm: syz.1.3659 Not tainted syzkaller #0 [ 458.820443][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 458.830536][T14669] Call Trace: [ 458.833855][T14669] [ 458.836867][T14669] dump_stack_lvl+0x188/0x250 [ 458.841597][T14669] ? show_regs_print_info+0x20/0x20 [ 458.846844][T14669] ? load_image+0x400/0x400 [ 458.851431][T14669] ? __lock_acquire+0x7d10/0x7d10 [ 458.856520][T14669] should_fail+0x38c/0x4c0 [ 458.860989][T14669] _copy_from_user+0x2e/0x170 [ 458.865706][T14669] bpf_test_init+0x136/0x1b0 [ 458.871375][T14669] bpf_prog_test_run_skb+0x181/0x1180 [ 458.876783][T14669] ? __fget_files+0x40f/0x480 [ 458.881519][T14669] ? cpu_online+0x60/0x60 [ 458.885894][T14669] bpf_prog_test_run+0x31e/0x390 [ 458.890878][T14669] __sys_bpf+0x5a5/0x6f0 [ 458.895160][T14669] ? bpf_link_show_fdinfo+0x380/0x380 [ 458.900576][T14669] ? vtime_user_exit+0x2c8/0x3e0 [ 458.905562][T14669] __x64_sys_bpf+0x78/0x90 [ 458.910034][T14669] do_syscall_64+0x4c/0xa0 [ 458.914483][T14669] ? clear_bhb_loop+0x30/0x80 [ 458.919202][T14669] ? clear_bhb_loop+0x30/0x80 [ 458.923927][T14669] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 458.929855][T14669] RIP: 0033:0x7ffa438f3799 [ 458.934480][T14669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.954138][T14669] RSP: 002b:00007ffa41b4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 458.962604][T14669] RAX: ffffffffffffffda RBX: 00007ffa43b6cfa0 RCX: 00007ffa438f3799 [ 458.970695][T14669] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 458.978701][T14669] RBP: 00007ffa41b4d090 R08: 0000000000000000 R09: 0000000000000000 [ 458.986710][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.994748][T14669] R13: 00007ffa43b6d038 R14: 00007ffa43b6cfa0 R15: 00007ffd83de0908 [ 459.002875][T14669] [ 459.212729][T14680] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3663'. [ 459.676126][T14690] device bridge_slave_1 left promiscuous mode [ 459.697950][T14690] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.782709][T14690] device bridge_slave_0 left promiscuous mode [ 459.800596][T14690] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.531565][T14709] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3677'. [ 460.608112][T14712] device lo entered promiscuous mode [ 461.692996][T14724] device bridge0 entered promiscuous mode [ 461.856090][T14729] netlink: 'syz.1.3684': attribute type 10 has an invalid length. [ 461.899221][T14729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3684'. [ 461.949429][T14729] device team0 entered promiscuous mode [ 461.990634][T14729] device team_slave_0 entered promiscuous mode [ 461.997057][T14729] device team_slave_1 entered promiscuous mode [ 462.018037][T14729] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 462.369380][T14735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3686'. [ 462.403961][T14735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3686'. [ 462.432452][T14735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3686'. [ 462.521691][T14737] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3688'. [ 462.753547][T14744] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3691'. [ 462.890740][T14747] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3692'. [ 463.067159][T14750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3690'. [ 463.212854][T14758] netlink: 'syz.1.3694': attribute type 2 has an invalid length. [ 463.263973][T14755] netlink: 'syz.3.3693': attribute type 10 has an invalid length. [ 463.276090][T14758] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3694'. [ 463.594165][T14769] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3697'. [ 463.755314][T14769] netlink: 'syz.2.3697': attribute type 10 has an invalid length. [ 463.852033][T14769] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.864614][T14769] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.965490][T14776] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 464.129662][T14769] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.137329][T14769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.148392][T14769] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.155787][T14769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.247768][T14769] team0: Port device bridge0 added [ 464.773308][T14782] netlink: 'syz.1.3702': attribute type 21 has an invalid length. [ 465.675967][T14831] netlink: 'syz.1.3716': attribute type 3 has an invalid length. [ 466.749854][T14872] FAULT_INJECTION: forcing a failure. [ 466.749854][T14872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.840525][T14872] CPU: 1 PID: 14872 Comm: syz.0.3732 Not tainted syzkaller #0 [ 466.848084][T14872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.858190][T14872] Call Trace: [ 466.861523][T14872] [ 466.864502][T14872] dump_stack_lvl+0x188/0x250 [ 466.869246][T14872] ? show_regs_print_info+0x20/0x20 [ 466.874514][T14872] ? load_image+0x400/0x400 [ 466.879083][T14872] ? __lock_acquire+0x7d10/0x7d10 [ 466.884193][T14872] should_fail+0x38c/0x4c0 [ 466.888695][T14872] _copy_from_user+0x2e/0x170 [ 466.893447][T14872] __copy_msghdr_from_user+0xc9/0x630 [ 466.898877][T14872] ? verify_lock_unused+0x140/0x140 [ 466.904141][T14872] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 466.909546][T14872] ___sys_sendmsg+0x19a/0x2e0 [ 466.914317][T14872] ? __sys_sendmsg+0x2a0/0x2a0 [ 466.919180][T14872] ? vfs_write+0x8b2/0xd60 [ 466.923739][T14872] __se_sys_sendmsg+0x1af/0x290 [ 466.928663][T14872] ? __x64_sys_sendmsg+0x80/0x80 [ 466.933671][T14872] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 466.939765][T14872] ? lockdep_hardirqs_on+0x94/0x140 [ 466.945041][T14872] do_syscall_64+0x4c/0xa0 [ 466.949515][T14872] ? clear_bhb_loop+0x30/0x80 [ 466.954244][T14872] ? clear_bhb_loop+0x30/0x80 [ 466.958980][T14872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 466.964971][T14872] RIP: 0033:0x7fca9fa2e799 [ 466.969444][T14872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.989127][T14872] RSP: 002b:00007fca9dc88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.997609][T14872] RAX: ffffffffffffffda RBX: 00007fca9fca7fa0 RCX: 00007fca9fa2e799 [ 467.005651][T14872] RDX: 0000000000048084 RSI: 00002000000001c0 RDI: 0000000000000003 [ 467.013715][T14872] RBP: 00007fca9dc88090 R08: 0000000000000000 R09: 0000000000000000 [ 467.021741][T14872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.029921][T14872] R13: 00007fca9fca8038 R14: 00007fca9fca7fa0 R15: 00007ffc6456d708 [ 467.038002][T14872] [ 467.638523][T14885] __nla_validate_parse: 9 callbacks suppressed [ 467.638544][T14885] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.3737'. [ 467.747043][T14891] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3738'. [ 468.007620][T14894] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3739'. [ 468.177663][T14897] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3740'. [ 468.247643][T14897] device hsr_slave_0 left promiscuous mode [ 468.283467][T14897] device hsr_slave_1 left promiscuous mode [ 468.447870][T14902] device syzkaller0 entered promiscuous mode [ 469.227539][T14922] netlink: 'syz.0.3747': attribute type 2 has an invalid length. [ 469.313151][T14922] netlink: 'syz.0.3747': attribute type 1 has an invalid length. [ 469.327567][T14922] netlink: 198800 bytes leftover after parsing attributes in process `syz.0.3747'. [ 469.878683][T14934] netlink: 'syz.2.3752': attribute type 3 has an invalid length. [ 469.936624][T14934] netlink: 'syz.2.3752': attribute type 1 has an invalid length. [ 469.975566][T14934] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3752'. [ 470.190755][T14937] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3753'. [ 470.606800][T14943] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3754'. [ 471.770932][T14970] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3765'. [ 472.186980][T14982] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3771'. [ 472.263415][T14982] netlink: del zone limit has 8 unknown bytes [ 472.279679][T14987] netlink: 'syz.2.3781': attribute type 33 has an invalid length. [ 473.082537][T15000] __nla_validate_parse: 2 callbacks suppressed [ 473.082555][T15000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3777'. [ 473.301890][T15002] netlink: 'syz.3.3777': attribute type 21 has an invalid length. [ 473.709742][T15015] netlink: 'syz.3.3783': attribute type 10 has an invalid length. [ 473.771247][T15015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3783'. [ 473.829935][T15015] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 473.862965][T15021] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3785'. [ 474.505198][T15035] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3791'. [ 475.410001][T15048] netlink: 'syz.0.3794': attribute type 46 has an invalid length. [ 475.604349][T15054] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3796'. [ 475.703231][T15056] netlink: 'syz.0.3797': attribute type 15 has an invalid length. [ 475.729433][T15056] netlink: 'syz.0.3797': attribute type 11 has an invalid length. [ 475.737725][T15056] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3797'. [ 477.102930][T15085] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3809'. [ 477.354071][T15092] IPv6: Can't replace route, no match found [ 477.442571][T15092] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3811'. [ 478.401963][T15108] device wlan1 entered promiscuous mode [ 478.666373][T15114] netlink: 'syz.2.3820': attribute type 9 has an invalid length. [ 478.684681][T15114] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3820'. [ 479.219559][T15134] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3825'. [ 479.250744][T15135] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3826'. [ 479.254189][T15134] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3825'. [ 479.300689][T15138] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3825'. [ 480.252611][T15165] FAULT_INJECTION: forcing a failure. [ 480.252611][T15165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.326818][T15165] CPU: 1 PID: 15165 Comm: syz.2.3838 Not tainted syzkaller #0 [ 480.334376][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.344494][T15165] Call Trace: [ 480.347812][T15165] [ 480.350784][T15165] dump_stack_lvl+0x188/0x250 [ 480.355598][T15165] ? show_regs_print_info+0x20/0x20 [ 480.360855][T15165] ? load_image+0x400/0x400 [ 480.365426][T15165] ? __lock_acquire+0x7d10/0x7d10 [ 480.370508][T15165] ? __lock_acquire+0x13bc/0x7d10 [ 480.375584][T15165] should_fail+0x38c/0x4c0 [ 480.380064][T15165] _copy_from_iter+0x22e/0x1170 [ 480.384986][T15165] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 480.390517][T15165] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 480.396725][T15165] ? lockdep_hardirqs_on+0x94/0x140 [ 480.402093][T15165] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 480.408319][T15165] ? __check_object_size+0x87/0x410 [ 480.413565][T15165] ? ping_common_sendmsg+0x93/0x2a0 [ 480.418810][T15165] ping_common_sendmsg+0xb8/0x2a0 [ 480.423884][T15165] ping_v6_sendmsg+0x21c/0x1030 [ 480.428786][T15165] ? tcpv6_net_exit_batch+0x20/0x20 [ 480.434040][T15165] ? lock_chain_count+0x20/0x20 [ 480.438945][T15165] ? __local_bh_enable_ip+0x136/0x1c0 [ 480.444369][T15165] ? lockdep_hardirqs_on+0x94/0x140 [ 480.449614][T15165] ? __local_bh_enable_ip+0x136/0x1c0 [ 480.455048][T15165] ? _local_bh_enable+0xa0/0xa0 [ 480.459952][T15165] ? inet_sendmsg+0x147/0x2f0 [ 480.464681][T15165] ? inet_sendmsg+0x147/0x2f0 [ 480.469404][T15165] ? inet_send_prepare+0x260/0x260 [ 480.474558][T15165] ____sys_sendmsg+0x5b7/0x8f0 [ 480.479369][T15165] ? __sys_sendmsg_sock+0x30/0x30 [ 480.484445][T15165] ? import_iovec+0x6f/0xa0 [ 480.489003][T15165] ___sys_sendmsg+0x236/0x2e0 [ 480.493765][T15165] ? __sys_sendmsg+0x2a0/0x2a0 [ 480.498589][T15165] ? __fget_files+0x1cf/0x480 [ 480.503356][T15165] __se_sys_sendmsg+0x1af/0x290 [ 480.508264][T15165] ? __x64_sys_sendmsg+0x80/0x80 [ 480.513267][T15165] ? syscall_enter_from_user_mode+0x2a/0x70 [ 480.519214][T15165] do_syscall_64+0x4c/0xa0 [ 480.523683][T15165] ? clear_bhb_loop+0x30/0x80 [ 480.528405][T15165] ? clear_bhb_loop+0x30/0x80 [ 480.533129][T15165] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 480.539083][T15165] RIP: 0033:0x7f9e8d85b799 [ 480.543555][T15165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.563298][T15165] RSP: 002b:00007f9e8bab5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.571772][T15165] RAX: ffffffffffffffda RBX: 00007f9e8dad4fa0 RCX: 00007f9e8d85b799 [ 480.580027][T15165] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 480.588043][T15165] RBP: 00007f9e8bab5090 R08: 0000000000000000 R09: 0000000000000000 [ 480.596227][T15165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.604249][T15165] R13: 00007f9e8dad5038 R14: 00007f9e8dad4fa0 R15: 00007ffe41262638 [ 480.612283][T15165] [ 480.778293][T15175] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3840'. [ 481.945252][T15208] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3853'. [ 482.085458][T15215] netlink: 'syz.3.3856': attribute type 10 has an invalid length. [ 482.124918][T15215] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3856'. [ 482.231623][T15215] batman_adv: batadv0: Adding interface: virt_wifi0 [ 482.261455][T15215] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.293835][T15215] batman_adv: batadv0: Interface activated: virt_wifi0 [ 482.409446][T15220] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 483.081539][ T4227] Bluetooth: hci0: command 0x0406 tx timeout [ 483.835457][T15251] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3868'. [ 484.975618][T15270] tap0: tun_chr_ioctl cmd 1074025677 [ 484.986066][T15270] tap0: linktype set to 785 [ 485.071130][T15273] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3877'. [ 485.160752][T15277] FAULT_INJECTION: forcing a failure. [ 485.160752][T15277] name failslab, interval 1, probability 0, space 0, times 0 [ 485.207305][T15277] CPU: 1 PID: 15277 Comm: syz.3.3879 Not tainted syzkaller #0 [ 485.214840][T15277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 485.224943][T15277] Call Trace: [ 485.228258][T15277] [ 485.231223][T15277] dump_stack_lvl+0x188/0x250 [ 485.235952][T15277] ? show_regs_print_info+0x20/0x20 [ 485.241206][T15277] ? load_image+0x400/0x400 [ 485.245757][T15277] ? __might_sleep+0xf0/0xf0 [ 485.250391][T15277] ? __lock_acquire+0x7d10/0x7d10 [ 485.255472][T15277] should_fail+0x38c/0x4c0 [ 485.259946][T15277] should_failslab+0x5/0x20 [ 485.264485][T15277] slab_pre_alloc_hook+0x51/0xc0 [ 485.269464][T15277] ? anon_vma_fork+0x1f6/0x500 [ 485.274265][T15277] kmem_cache_alloc+0x3d/0x290 [ 485.279103][T15277] anon_vma_fork+0x1f6/0x500 [ 485.283743][T15277] copy_mm+0xa06/0x13f0 [ 485.287962][T15277] ? copy_signal+0x640/0x640 [ 485.292601][T15277] ? __init_rwsem+0x11e/0x160 [ 485.297404][T15277] ? copy_signal+0x537/0x640 [ 485.302039][T15277] copy_process+0x17eb/0x3e20 [ 485.306842][T15277] ? perf_swevent_event+0xc8/0x530 [ 485.312041][T15277] ? __pidfd_prepare+0x140/0x140 [ 485.317038][T15277] kernel_clone+0x23f/0x990 [ 485.321576][T15277] ? trace_event_raw_event_lock+0x270/0x270 [ 485.327512][T15277] ? create_io_thread+0x180/0x180 [ 485.332593][T15277] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 485.338363][T15277] __x64_sys_clone+0x19a/0x210 [ 485.343175][T15277] ? __ia32_sys_vfork+0x130/0x130 [ 485.348348][T15277] ? lockdep_hardirqs_on+0x94/0x140 [ 485.353674][T15277] do_syscall_64+0x4c/0xa0 [ 485.358125][T15277] ? clear_bhb_loop+0x30/0x80 [ 485.362840][T15277] ? clear_bhb_loop+0x30/0x80 [ 485.367560][T15277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 485.373573][T15277] RIP: 0033:0x7f701942b799 [ 485.378142][T15277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.397933][T15277] RSP: 002b:00007f7017684fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 485.406398][T15277] RAX: ffffffffffffffda RBX: 00007f70196a4fa0 RCX: 00007f701942b799 [ 485.414427][T15277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 485.422444][T15277] RBP: 00007f7017685090 R08: 0000000000000000 R09: 0000000000000000 [ 485.430461][T15277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 485.438662][T15277] R13: 00007f70196a5038 R14: 00007f70196a4fa0 R15: 00007ffde03e5358 [ 485.446787][T15277] [ 485.705581][T15294] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.3884'. [ 485.784941][T15292] netlink: 'syz.4.3883': attribute type 10 has an invalid length. [ 485.867516][T15292] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3883'. [ 485.975740][T15292] device hsr0 entered promiscuous mode [ 486.007030][T15292] bridge0: port 3(hsr0) entered blocking state [ 486.015248][T15292] bridge0: port 3(hsr0) entered disabled state [ 486.104361][T15292] bridge0: port 3(hsr0) entered blocking state [ 486.115697][T15292] bridge0: port 3(hsr0) entered forwarding state [ 486.521487][T15313] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3891'. [ 486.637654][T15317] netlink: 'syz.4.3893': attribute type 3 has an invalid length. [ 486.803626][T15323] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3893'. [ 486.996305][T15322] netlink: 'syz.2.3894': attribute type 10 has an invalid length. [ 487.165570][T15322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.187505][T15322] team0: Port device bond0 added [ 487.208900][T15327] IPv6: Can't replace route, no match found [ 487.342218][T15329] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3897'. [ 487.566736][T15334] device sit0 left promiscuous mode [ 487.853723][T15337] device sit0 entered promiscuous mode [ 488.293631][T15342] netlink: 'syz.1.3900': attribute type 10 has an invalid length. [ 488.584101][T15375] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3909'. [ 488.995149][T15389] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3911'. [ 489.017943][T15384] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.3912'. [ 489.052875][T15389] device veth0_to_bond entered promiscuous mode [ 489.594645][T15404] device sit0 entered promiscuous mode [ 489.898654][T15409] netlink: 'syz.0.3920': attribute type 27 has an invalid length. [ 489.957563][T15409] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3920'. [ 490.172331][T15410] netlink: 'syz.0.3920': attribute type 10 has an invalid length. [ 490.473285][T15421] netlink: 'syz.1.3923': attribute type 10 has an invalid length. [ 490.496729][T15421] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3923'. [ 490.524619][T15421] device hsr0 entered promiscuous mode [ 490.735898][T15432] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3926'. [ 491.263051][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.302188][T15447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.316098][T15447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.324639][T15447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.337562][T15447] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 491.346639][T15447] batman_adv: batadv0: Removing interface: virt_wifi0 [ 491.569075][T15458] device sit0 entered promiscuous mode [ 491.897454][T15464] IPv6: Can't replace route, no match found [ 491.904020][T15466] netlink: 'syz.2.3938': attribute type 21 has an invalid length. [ 491.920780][T15466] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3938'. [ 491.934838][T15468] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3939'. [ 491.946999][T15466] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3938'. [ 492.333919][T15474] netlink: 'syz.3.3941': attribute type 10 has an invalid length. [ 492.580920][T15478] netlink: 'syz.2.3942': attribute type 7 has an invalid length. [ 492.608509][T15478] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3942'. [ 492.665121][T15474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.716543][T15474] team0: Port device bond0 added [ 493.880757][T15498] netlink: 'syz.3.3948': attribute type 10 has an invalid length. [ 494.026893][T15508] netlink: 'syz.1.3951': attribute type 10 has an invalid length. [ 494.055774][T15508] team0: Device macvlan0 is up. Set it down before adding it as a team port [ 495.163069][T15529] netlink: 'syz.3.3960': attribute type 21 has an invalid length. [ 495.210432][T15529] netlink: 'syz.3.3960': attribute type 6 has an invalid length. [ 495.259226][T15529] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3960'. [ 495.407544][T15531] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3962'. [ 495.618196][T15542] netlink: 'syz.3.3966': attribute type 15 has an invalid length. [ 495.679579][T15542] netlink: 'syz.3.3966': attribute type 5 has an invalid length. [ 495.701897][T15547] FAULT_INJECTION: forcing a failure. [ 495.701897][T15547] name failslab, interval 1, probability 0, space 0, times 0 [ 495.715381][T15547] CPU: 1 PID: 15547 Comm: syz.0.3968 Not tainted syzkaller #0 [ 495.722905][T15547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.733048][T15547] Call Trace: [ 495.736395][T15547] [ 495.739386][T15547] dump_stack_lvl+0x188/0x250 [ 495.744132][T15547] ? show_regs_print_info+0x20/0x20 [ 495.749491][T15547] ? load_image+0x400/0x400 [ 495.754169][T15547] ? rcu_lock_release+0x5/0x20 [ 495.759010][T15547] should_fail+0x38c/0x4c0 [ 495.763505][T15547] should_failslab+0x5/0x20 [ 495.768070][T15547] slab_pre_alloc_hook+0x51/0xc0 [ 495.773071][T15547] ? __nf_conntrack_alloc+0x99/0x380 [ 495.778416][T15547] kmem_cache_alloc+0x3d/0x290 [ 495.783248][T15547] __nf_conntrack_alloc+0x99/0x380 [ 495.788568][T15547] init_conntrack+0x258/0x14d0 [ 495.793415][T15547] ? __nf_conntrack_find_get+0x581/0x650 [ 495.799133][T15547] ? early_drop+0x810/0x810 [ 495.803726][T15547] ? nf_conntrack_find_get+0x670/0x670 [ 495.809271][T15547] ? __siphash_unaligned+0x258/0x3a0 [ 495.814651][T15547] nf_conntrack_in+0xd38/0x1730 [ 495.819628][T15547] ? nf_ct_pernet+0x240/0x240 [ 495.824436][T15547] ? ip6t_alloc_initial_table+0x640/0x640 [ 495.830256][T15547] ? ipv6_defrag+0x2d2/0x3a0 [ 495.834906][T15547] ? ipv4_confirm+0x220/0x220 [ 495.839646][T15547] nf_hook_slow+0xb9/0x200 [ 495.844120][T15547] ? refcount_add+0x80/0x80 [ 495.848682][T15547] NF_HOOK+0x1f2/0x390 [ 495.852793][T15547] ? refcount_add+0x80/0x80 [ 495.857353][T15547] ? ip6_rcv_core+0x1620/0x1620 [ 495.862265][T15547] ? refcount_add+0x80/0x80 [ 495.866851][T15547] ? ip6_rcv_finish_core+0x420/0x420 [ 495.872196][T15547] __netif_receive_skb+0xcc/0x290 [ 495.874849][T15542] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3966'. [ 495.877275][T15547] ? ktime_get_with_offset+0x2d7/0x320 [ 495.891833][T15547] netif_receive_skb+0x19e/0x700 [ 495.896865][T15547] ? netif_receive_skb_core+0x210/0x210 [ 495.902463][T15547] ? rcu_nmi_exit+0x6f/0xf0 [ 495.907067][T15547] tun_rx_batched+0x5fb/0x760 [ 495.911857][T15547] ? local_bh_enable+0x20/0x20 [ 495.916674][T15547] ? __local_bh_enable_ip+0x136/0x1c0 [ 495.922114][T15547] ? read_lock_is_recursive+0x10/0x10 [ 495.927585][T15547] ? __local_bh_enable_ip+0x136/0x1c0 [ 495.933009][T15547] ? _local_bh_enable+0xa0/0xa0 [ 495.937913][T15547] ? skb_copy_datagram_from_iter+0x5ab/0x6a0 [ 495.943983][T15547] tun_get_user+0x2517/0x3a70 [ 495.948712][T15547] ? perf_trace_lock+0x301/0x390 [ 495.953847][T15547] ? tun_ring_recv+0xc40/0xc40 [ 495.958703][T15547] ? rcu_lock_release+0x5/0x20 [ 495.963530][T15547] ? __lock_acquire+0x7d10/0x7d10 [ 495.968622][T15547] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 495.974454][T15547] tun_chr_write_iter+0x112/0x1e0 [ 495.980396][T15547] vfs_write+0x745/0xd60 [ 495.984809][T15547] ? file_end_write+0x250/0x250 [ 495.989973][T15547] ? __fget_files+0x40f/0x480 [ 495.994879][T15547] ? __fdget_pos+0x1e2/0x370 [ 495.999541][T15547] ? ksys_write+0x71/0x260 [ 496.004033][T15547] ksys_write+0x152/0x260 [ 496.008470][T15547] ? __ia32_sys_read+0x80/0x80 [ 496.013302][T15547] ? lockdep_hardirqs_on+0x94/0x140 [ 496.018566][T15547] do_syscall_64+0x4c/0xa0 [ 496.023044][T15547] ? clear_bhb_loop+0x30/0x80 [ 496.027776][T15547] ? clear_bhb_loop+0x30/0x80 [ 496.032511][T15547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 496.038557][T15547] RIP: 0033:0x7fca9fa2e799 [ 496.043039][T15547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.062791][T15547] RSP: 002b:00007fca9dc88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 496.071283][T15547] RAX: ffffffffffffffda RBX: 00007fca9fca7fa0 RCX: 00007fca9fa2e799 [ 496.079317][T15547] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 496.087448][T15547] RBP: 00007fca9dc88090 R08: 0000000000000000 R09: 0000000000000000 [ 496.095658][T15547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.103677][T15547] R13: 00007fca9fca8038 R14: 00007fca9fca7fa0 R15: 00007ffc6456d708 [ 496.111747][T15547] [ 496.469586][T15560] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3973'. [ 496.606358][T15566] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3975'. [ 497.174938][T15580] netlink: 'syz.1.3979': attribute type 41 has an invalid length. [ 497.200991][T15580] netlink: 'syz.1.3979': attribute type 4 has an invalid length. [ 497.213600][T15580] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3979'. [ 497.275384][T15580] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 497.440132][T15583] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 497.520979][T15583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.537757][T15584] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 497.557475][T15584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.800571][T15604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3987'. [ 497.878053][T15589] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3983'. [ 497.917812][T15604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3987'. [ 497.979946][T15605] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3987'. [ 498.439668][ T5181] Bluetooth: hci1: command 0x0406 tx timeout [ 498.816580][T15629] bridge_slave_1: default FDB implementation only supports local addresses [ 498.882208][T15632] netlink: 'syz.0.3999': attribute type 10 has an invalid length. [ 498.900067][T15632] device geneve0 entered promiscuous mode [ 498.974063][T15632] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 499.029580][T15629] netlink: 'syz.0.3999': attribute type 10 has an invalid length. [ 500.284966][T15654] __nla_validate_parse: 3 callbacks suppressed [ 500.285005][T15654] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4006'. [ 501.493984][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.505525][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.449943][T15685] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4016'. [ 503.533046][T15690] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 503.559243][T14501] Bluetooth: hci4: command 0x0406 tx timeout [ 504.723585][T15713] netlink: 'syz.2.4025': attribute type 10 has an invalid length. [ 504.945660][T15722] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4025'. [ 506.875061][T15752] netlink: 'syz.2.4037': attribute type 21 has an invalid length. [ 508.062590][T15771] netlink: 'syz.1.4044': attribute type 29 has an invalid length. [ 508.172844][T15771] netlink: 'syz.1.4044': attribute type 29 has an invalid length. [ 508.613170][T15787] netlink: 'syz.1.4049': attribute type 3 has an invalid length. [ 508.634638][T15787] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4049'. [ 509.662880][T15803] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4055'. [ 509.762329][T15809] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.4059'. [ 509.838277][T15814] FAULT_INJECTION: forcing a failure. [ 509.838277][T15814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 509.877347][T15814] CPU: 0 PID: 15814 Comm: syz.3.4060 Not tainted syzkaller #0 [ 509.884880][T15814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 509.895090][T15814] Call Trace: [ 509.898411][T15814] [ 509.901381][T15814] dump_stack_lvl+0x188/0x250 [ 509.906109][T15814] ? show_regs_print_info+0x20/0x20 [ 509.911361][T15814] ? load_image+0x400/0x400 [ 509.916045][T15814] ? __lock_acquire+0x7d10/0x7d10 [ 509.921128][T15814] should_fail+0x38c/0x4c0 [ 509.925611][T15814] _copy_from_user+0x2e/0x170 [ 509.930336][T15814] __copy_msghdr_from_user+0x48a/0x630 [ 509.935841][T15814] ? verify_lock_unused+0x140/0x140 [ 509.941127][T15814] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 509.946464][T15814] ? perf_tp_event+0xa92/0xbf0 [ 509.951284][T15814] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 509.957142][T15814] ___sys_sendmsg+0x19a/0x2e0 [ 509.961913][T15814] ? __sys_sendmsg+0x2a0/0x2a0 [ 509.966780][T15814] __se_sys_sendmsg+0x1af/0x290 [ 509.971689][T15814] ? __x64_sys_sendmsg+0x80/0x80 [ 509.976683][T15814] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 509.982730][T15814] ? lockdep_hardirqs_on+0x94/0x140 [ 509.987995][T15814] do_syscall_64+0x4c/0xa0 [ 509.992456][T15814] ? clear_bhb_loop+0x30/0x80 [ 509.997181][T15814] ? clear_bhb_loop+0x30/0x80 [ 510.001900][T15814] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 510.007850][T15814] RIP: 0033:0x7f701942b799 [ 510.012351][T15814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.032085][T15814] RSP: 002b:00007f7017685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.040545][T15814] RAX: ffffffffffffffda RBX: 00007f70196a4fa0 RCX: 00007f701942b799 [ 510.048569][T15814] RDX: 0000000000048084 RSI: 00002000000001c0 RDI: 0000000000000003 [ 510.056583][T15814] RBP: 00007f7017685090 R08: 0000000000000000 R09: 0000000000000000 [ 510.064593][T15814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.072605][T15814] R13: 00007f70196a5038 R14: 00007f70196a4fa0 R15: 00007ffde03e5358 [ 510.080726][T15814] [ 510.186352][T15820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4062'. [ 510.708600][T15845] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.4069'. [ 510.741572][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4069'. [ 510.826583][T15836] device syzkaller0 entered promiscuous mode [ 511.167772][T15850] netlink: 'syz.1.4070': attribute type 21 has an invalid length. [ 511.186351][T15850] netlink: 'syz.1.4070': attribute type 1 has an invalid length. [ 511.233393][T15850] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4070'. [ 511.687131][T15869] netlink: 'syz.0.4078': attribute type 7 has an invalid length. [ 511.716508][T15869] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4078'. [ 511.832360][T15869] netlink: 'syz.0.4078': attribute type 10 has an invalid length. [ 511.865547][T15869] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4078'. [ 512.815534][T15895] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4088'. [ 512.842070][T15895] netlink: del zone limit has 8 unknown bytes [ 513.038361][T15897] netlink: 'syz.3.4089': attribute type 1 has an invalid length. [ 513.053383][T15893] netlink: 'syz.1.4087': attribute type 33 has an invalid length. [ 513.799234][ T1325] Bluetooth: hci3: command 0x0406 tx timeout [ 513.897273][T15930] __nla_validate_parse: 3 callbacks suppressed [ 513.897313][T15930] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4103'. [ 514.469482][T15935] netlink: 'syz.3.4104': attribute type 10 has an invalid length. [ 514.804727][T15961] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.4114'. [ 515.309457][T15972] netlink: 'syz.2.4115': attribute type 15 has an invalid length. [ 515.338969][T15972] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4115'. [ 515.371782][T15970] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4116'. [ 515.449014][T15978] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.4129'. [ 515.665913][T15980] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4119'. [ 516.193105][T16003] device syzkaller0 entered promiscuous mode [ 516.341801][T16018] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4135'. [ 516.757783][T16028] netlink: 'syz.1.4137': attribute type 9 has an invalid length. [ 516.787125][T16028] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4137'. [ 516.835378][T16022] netlink: 'syz.2.4136': attribute type 2 has an invalid length. [ 517.188398][ T4266] device hsr_slave_0 left promiscuous mode [ 517.217441][ T4266] device hsr_slave_1 left promiscuous mode [ 517.231178][ T4266] device bridge_slave_1 left promiscuous mode [ 517.295720][ T4266] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.485123][ T4266] device bridge_slave_0 left promiscuous mode [ 517.503011][ T4266] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.568846][ T4266] device veth0_macvtap left promiscuous mode [ 517.600559][ T4266] device veth1_vlan left promiscuous mode [ 517.630907][ T4266] device veth0_vlan left promiscuous mode [ 517.656808][T16056] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.4148'. [ 517.682313][T16047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4146'. [ 518.232903][ T4266] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.243787][ T4266] device bond_slave_1 left promiscuous mode [ 518.257948][ T4266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.269231][ T4266] device bond_slave_0 left promiscuous mode [ 518.328893][ T4266] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 518.341290][ T4266] device bridge0 left promiscuous mode [ 518.346961][ T4266] bond0 (unregistering): Released all slaves [ 518.494112][T16059] device syzkaller0 entered promiscuous mode [ 518.506719][T16067] netlink: 'syz.0.4150': attribute type 10 has an invalid length. [ 518.576611][T16067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.621691][T16067] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 518.670602][T16068] netlink: 'syz.0.4150': attribute type 10 has an invalid length. [ 518.696645][T16068] team0: Device wg1 is of different type [ 519.196592][T16092] FAULT_INJECTION: forcing a failure. [ 519.196592][T16092] name failslab, interval 1, probability 0, space 0, times 0 [ 519.209594][T16092] CPU: 0 PID: 16092 Comm: syz.3.4160 Not tainted syzkaller #0 [ 519.217099][T16092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.227199][T16092] Call Trace: [ 519.230518][T16092] [ 519.233491][T16092] dump_stack_lvl+0x188/0x250 [ 519.238332][T16092] ? show_regs_print_info+0x20/0x20 [ 519.243658][T16092] ? load_image+0x400/0x400 [ 519.248232][T16092] ? lock_acquire+0x208/0x400 [ 519.252961][T16092] should_fail+0x38c/0x4c0 [ 519.257427][T16092] should_failslab+0x5/0x20 [ 519.261963][T16092] slab_pre_alloc_hook+0x51/0xc0 [ 519.266947][T16092] ? dst_alloc+0x101/0x160 [ 519.271407][T16092] kmem_cache_alloc+0x3d/0x290 [ 519.276227][T16092] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 519.282017][T16092] dst_alloc+0x101/0x160 [ 519.286320][T16092] ip6_pol_route+0x921/0x12c0 [ 519.291038][T16092] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 519.296723][T16092] fib6_rule_lookup+0x208/0x5d0 [ 519.301610][T16092] ? ip6_route_output_flags_noref+0x390/0x390 [ 519.307722][T16092] ? fib6_lookup+0x2d0/0x2d0 [ 519.312366][T16092] ? dev_get_by_index_rcu+0xf0/0x110 [ 519.317694][T16092] ? __ipv6_addr_type+0xce/0x2f0 [ 519.322673][T16092] ? ip6_route_output_flags_noref+0x230/0x390 [ 519.328791][T16092] ip6_route_output_flags+0xbf/0x300 [ 519.334126][T16092] ip6_dst_lookup_tail+0x1a9/0x1280 [ 519.339378][T16092] ? rcu_lock_release+0x5/0x20 [ 519.344184][T16092] ? ip6_dst_lookup+0x60/0x60 [ 519.348912][T16092] ? sk_dst_check+0x2e4/0x430 [ 519.353626][T16092] ip6_sk_dst_lookup_flow+0x70e/0x9b0 [ 519.359048][T16092] ping_v6_sendmsg+0x8c0/0x1030 [ 519.363980][T16092] ? tcpv6_net_exit_batch+0x20/0x20 [ 519.369308][T16092] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 519.375524][T16092] ? __local_bh_enable_ip+0x13e/0x1c0 [ 519.380941][T16092] ? _local_bh_enable+0xa0/0xa0 [ 519.385833][T16092] ? inet_sendmsg+0x147/0x2f0 [ 519.390560][T16092] ? inet_sendmsg+0x147/0x2f0 [ 519.395288][T16092] ? inet_send_prepare+0x260/0x260 [ 519.400437][T16092] ____sys_sendmsg+0x5b7/0x8f0 [ 519.405247][T16092] ? __sys_sendmsg_sock+0x30/0x30 [ 519.410418][T16092] ? import_iovec+0x6f/0xa0 [ 519.414965][T16092] ___sys_sendmsg+0x236/0x2e0 [ 519.419702][T16092] ? __sys_sendmsg+0x2a0/0x2a0 [ 519.424529][T16092] ? rcu_is_watching+0x11/0xa0 [ 519.429352][T16092] ? __se_sys_sendmsg+0xc9/0x290 [ 519.434377][T16092] __se_sys_sendmsg+0x1af/0x290 [ 519.439279][T16092] ? __x64_sys_sendmsg+0x80/0x80 [ 519.444280][T16092] ? syscall_enter_from_user_mode+0x2a/0x70 [ 519.450220][T16092] do_syscall_64+0x4c/0xa0 [ 519.454673][T16092] ? clear_bhb_loop+0x30/0x80 [ 519.459491][T16092] ? clear_bhb_loop+0x30/0x80 [ 519.464209][T16092] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 519.470135][T16092] RIP: 0033:0x7f701942b799 [ 519.474669][T16092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.494306][T16092] RSP: 002b:00007f7017685028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.502771][T16092] RAX: ffffffffffffffda RBX: 00007f70196a4fa0 RCX: 00007f701942b799 [ 519.510790][T16092] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 519.518832][T16092] RBP: 00007f7017685090 R08: 0000000000000000 R09: 0000000000000000 [ 519.526846][T16092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.534868][T16092] R13: 00007f70196a5038 R14: 00007f70196a4fa0 R15: 00007ffde03e5358 [ 519.542906][T16092] [ 520.915842][T16136] __nla_validate_parse: 1 callbacks suppressed [ 520.915865][T16136] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4177'. [ 521.110426][T16134] FAULT_INJECTION: forcing a failure. [ 521.110426][T16134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.166524][T16134] CPU: 1 PID: 16134 Comm: syz.3.4176 Not tainted syzkaller #0 [ 521.174056][T16134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.184150][T16134] Call Trace: [ 521.187465][T16134] [ 521.190415][T16134] dump_stack_lvl+0x188/0x250 [ 521.195146][T16134] ? show_regs_print_info+0x20/0x20 [ 521.200372][T16134] ? load_image+0x400/0x400 [ 521.204893][T16134] ? __lock_acquire+0x7d10/0x7d10 [ 521.209955][T16134] should_fail+0x38c/0x4c0 [ 521.214399][T16134] _copy_from_user+0x2e/0x170 [ 521.219111][T16134] __sys_bpf+0x26d/0x6f0 [ 521.223385][T16134] ? bpf_link_show_fdinfo+0x380/0x380 [ 521.228790][T16134] __x64_sys_bpf+0x78/0x90 [ 521.233235][T16134] do_syscall_64+0x4c/0xa0 [ 521.237670][T16134] ? clear_bhb_loop+0x30/0x80 [ 521.242369][T16134] ? clear_bhb_loop+0x30/0x80 [ 521.247067][T16134] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 521.253008][T16134] RIP: 0033:0x7f701942b799 [ 521.257464][T16134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.277264][T16134] RSP: 002b:00007f7017685028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 521.285704][T16134] RAX: ffffffffffffffda RBX: 00007f70196a4fa0 RCX: 00007f701942b799 [ 521.293720][T16134] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000003 [ 521.301713][T16134] RBP: 00007f7017685090 R08: 0000000000000000 R09: 0000000000000000 [ 521.309963][T16134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.317945][T16134] R13: 00007f70196a5038 R14: 00007f70196a4fa0 R15: 00007ffde03e5358 [ 521.325953][T16134] [ 521.723429][T16157] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4184'. [ 521.940203][T16164] netlink: 'syz.3.4186': attribute type 10 has an invalid length. [ 521.948950][T16164] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4186'. [ 521.965973][T16164] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 522.867668][T16184] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4194'. [ 523.544390][T16204] IPv6: Can't replace route, no match found [ 523.804617][T16213] netlink: 'syz.0.4203': attribute type 3 has an invalid length. [ 523.824327][T16213] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.4203'. [ 523.925733][T16209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.039574][ T7222] Bluetooth: hci2: command 0x0406 tx timeout [ 524.803859][T16277] FAULT_INJECTION: forcing a failure. [ 524.803859][T16277] name failslab, interval 1, probability 0, space 0, times 0 [ 524.891477][T16277] CPU: 1 PID: 16277 Comm: syz.3.4209 Not tainted syzkaller #0 [ 524.899143][T16277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.909240][T16277] Call Trace: [ 524.912585][T16277] [ 524.915588][T16277] dump_stack_lvl+0x188/0x250 [ 524.920312][T16277] ? show_regs_print_info+0x20/0x20 [ 524.925563][T16277] ? load_image+0x400/0x400 [ 524.930145][T16277] ? __might_sleep+0xf0/0xf0 [ 524.934768][T16277] ? __lock_acquire+0x7d10/0x7d10 [ 524.939835][T16277] should_fail+0x38c/0x4c0 [ 524.944297][T16277] should_failslab+0x5/0x20 [ 524.948833][T16277] slab_pre_alloc_hook+0x51/0xc0 [ 524.953812][T16277] ? anon_vma_fork+0xe3/0x500 [ 524.958528][T16277] kmem_cache_alloc+0x3d/0x290 [ 524.963359][T16277] anon_vma_fork+0xe3/0x500 [ 524.967989][T16277] copy_mm+0xa06/0x13f0 [ 524.972207][T16277] ? copy_signal+0x640/0x640 [ 524.976852][T16277] ? __init_rwsem+0x11e/0x160 [ 524.981566][T16277] ? copy_signal+0x537/0x640 [ 524.986219][T16277] copy_process+0x17eb/0x3e20 [ 524.991069][T16277] ? __pidfd_prepare+0x140/0x140 [ 524.996061][T16277] kernel_clone+0x23f/0x990 [ 525.000637][T16277] ? trace_event_raw_event_lock+0x270/0x270 [ 525.006613][T16277] ? trace_event_raw_event_lock+0x270/0x270 [ 525.012563][T16277] ? vfs_write+0x8b2/0xd60 [ 525.017042][T16277] ? create_io_thread+0x180/0x180 [ 525.022658][T16277] __x64_sys_clone+0x19a/0x210 [ 525.027484][T16277] ? __ia32_sys_vfork+0x130/0x130 [ 525.032588][T16277] ? lockdep_hardirqs_on+0x94/0x140 [ 525.037845][T16277] do_syscall_64+0x4c/0xa0 [ 525.042568][T16277] ? clear_bhb_loop+0x30/0x80 [ 525.047289][T16277] ? clear_bhb_loop+0x30/0x80 [ 525.052029][T16277] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 525.058141][T16277] RIP: 0033:0x7f701942b799 [ 525.063116][T16277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.082856][T16277] RSP: 002b:00007f7017684fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 525.091320][T16277] RAX: ffffffffffffffda RBX: 00007f70196a4fa0 RCX: 00007f701942b799 [ 525.099329][T16277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 525.107441][T16277] RBP: 00007f7017685090 R08: 0000000000000000 R09: 0000000000000000 [ 525.115445][T16277] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 525.123460][T16277] R13: 00007f70196a5038 R14: 00007f70196a4fa0 R15: 00007ffde03e5358 [ 525.131499][T16277] [ 525.986086][T16303] IPv6: Can't replace route, no match found [ 526.265300][T16313] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.4222'. [ 526.422951][T16319] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.4225'. [ 526.814840][T16326] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4226'. [ 527.572329][T16352] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4238'. [ 527.904169][T16361] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4240'. [ 528.077279][T16373] netlink: 'syz.2.4245': attribute type 10 has an invalid length. [ 528.121626][T16373] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.4245'. [ 528.441999][T16398] netlink: 'syz.3.4253': attribute type 21 has an invalid length. [ 528.499575][T16398] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4253'. [ 528.620342][T16393] netlink: 'syz.3.4253': attribute type 1 has an invalid length. [ 528.805773][T16393] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.4253'. [ 529.324893][T16443] netlink: 'syz.4.4263': attribute type 21 has an invalid length. [ 529.335074][T16443] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4263'. [ 529.344689][T16448] delete_channel: no stack [ 529.349216][T16443] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4263'. [ 530.290474][T16480] netlink: 'syz.2.4277': attribute type 7 has an invalid length. [ 530.366532][T16487] netlink: 'syz.3.4280': attribute type 10 has an invalid length. [ 531.260111][T16515] netlink: 'syz.2.4292': attribute type 21 has an invalid length. [ 531.290345][T16515] netlink: 'syz.2.4292': attribute type 6 has an invalid length. [ 531.298137][T16515] __nla_validate_parse: 5 callbacks suppressed [ 531.298155][T16515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4292'. [ 531.452602][T16521] FAULT_INJECTION: forcing a failure. [ 531.452602][T16521] name failslab, interval 1, probability 0, space 0, times 0 [ 531.465382][T16521] CPU: 0 PID: 16521 Comm: syz.4.4294 Not tainted syzkaller #0 [ 531.472923][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.483036][T16521] Call Trace: [ 531.486355][T16521] [ 531.489327][T16521] dump_stack_lvl+0x188/0x250 [ 531.494062][T16521] ? show_regs_print_info+0x20/0x20 [ 531.499475][T16521] ? load_image+0x400/0x400 [ 531.504136][T16521] should_fail+0x38c/0x4c0 [ 531.508721][T16521] should_failslab+0x5/0x20 [ 531.513261][T16521] slab_pre_alloc_hook+0x51/0xc0 [ 531.518358][T16521] ? nf_ct_ext_add+0x42e/0x660 [ 531.523163][T16521] __kmalloc_track_caller+0x69/0x330 [ 531.528480][T16521] ? nf_ct_ext_add+0x42e/0x660 [ 531.533290][T16521] ? __nf_conntrack_alloc+0x99/0x380 [ 531.538626][T16521] krealloc+0x5a/0xf0 [ 531.542646][T16521] nf_ct_ext_add+0x42e/0x660 [ 531.547725][T16521] init_conntrack+0x768/0x14d0 [ 531.552547][T16521] ? __nf_conntrack_find_get+0x581/0x650 [ 531.558335][T16521] ? early_drop+0x810/0x810 [ 531.562882][T16521] ? nf_conntrack_find_get+0x670/0x670 [ 531.568380][T16521] ? __siphash_unaligned+0x258/0x3a0 [ 531.573834][T16521] nf_conntrack_in+0xd38/0x1730 [ 531.578798][T16521] ? nf_ct_pernet+0x240/0x240 [ 531.583578][T16521] ? ip6t_alloc_initial_table+0x640/0x640 [ 531.589416][T16521] ? ipv6_defrag+0x2d2/0x3a0 [ 531.594069][T16521] ? ipv4_confirm+0x220/0x220 [ 531.598789][T16521] nf_hook_slow+0xb9/0x200 [ 531.603250][T16521] ? refcount_add+0x80/0x80 [ 531.607791][T16521] NF_HOOK+0x1f2/0x390 [ 531.611889][T16521] ? refcount_add+0x80/0x80 [ 531.616428][T16521] ? ip6_rcv_core+0x1620/0x1620 [ 531.621325][T16521] ? refcount_add+0x80/0x80 [ 531.625881][T16521] ? ip6_rcv_finish_core+0x420/0x420 [ 531.631723][T16521] __netif_receive_skb+0xcc/0x290 [ 531.636780][T16521] ? ktime_get_with_offset+0x2d7/0x320 [ 531.642286][T16521] netif_receive_skb+0x19e/0x700 [ 531.647271][T16521] ? netif_receive_skb_core+0x210/0x210 [ 531.653136][T16521] tun_rx_batched+0x5fb/0x760 [ 531.657867][T16521] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 531.663901][T16521] ? local_bh_enable+0x20/0x20 [ 531.668695][T16521] ? __local_bh_enable_ip+0x136/0x1c0 [ 531.674116][T16521] ? read_lock_is_recursive+0x10/0x10 [ 531.679533][T16521] ? __local_bh_enable_ip+0x136/0x1c0 [ 531.684942][T16521] ? _local_bh_enable+0xa0/0xa0 [ 531.689827][T16521] ? skb_copy_datagram_from_iter+0x5ab/0x6a0 [ 531.695872][T16521] tun_get_user+0x2517/0x3a70 [ 531.700586][T16521] ? perf_trace_lock+0x301/0x390 [ 531.705628][T16521] ? tun_ring_recv+0xc40/0xc40 [ 531.710881][T16521] ? rcu_lock_release+0x5/0x20 [ 531.715782][T16521] ? __lock_acquire+0x7d10/0x7d10 [ 531.720848][T16521] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 531.726644][T16521] tun_chr_write_iter+0x112/0x1e0 [ 531.731714][T16521] vfs_write+0x745/0xd60 [ 531.736008][T16521] ? file_end_write+0x250/0x250 [ 531.740917][T16521] ? __fget_files+0x40f/0x480 [ 531.745655][T16521] ? __fdget_pos+0x1e2/0x370 [ 531.750272][T16521] ? ksys_write+0x71/0x260 [ 531.754728][T16521] ksys_write+0x152/0x260 [ 531.759104][T16521] ? __ia32_sys_read+0x80/0x80 [ 531.763926][T16521] ? lockdep_hardirqs_on+0x94/0x140 [ 531.769260][T16521] do_syscall_64+0x4c/0xa0 [ 531.773857][T16521] ? clear_bhb_loop+0x30/0x80 [ 531.778562][T16521] ? clear_bhb_loop+0x30/0x80 [ 531.783285][T16521] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.789206][T16521] RIP: 0033:0x7f29d911c799 [ 531.793656][T16521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.813329][T16521] RSP: 002b:00007f29d7376028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 531.821797][T16521] RAX: ffffffffffffffda RBX: 00007f29d9395fa0 RCX: 00007f29d911c799 [ 531.829935][T16521] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 531.838074][T16521] RBP: 00007f29d7376090 R08: 0000000000000000 R09: 0000000000000000 [ 531.846086][T16521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.854085][T16521] R13: 00007f29d9396038 R14: 00007f29d9395fa0 R15: 00007ffc9a7f4e98 [ 531.862131][T16521] [ 532.020710][T16530] netlink: 'syz.3.4295': attribute type 21 has an invalid length. [ 532.051320][T16530] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4295'. [ 533.881720][ C1] ------------[ cut here ]------------ [ 533.883849][T16565] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.4307'. [ 533.887993][ C1] WARNING: CPU: 1 PID: 16554 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 533.907195][ C1] Modules linked in: [ 533.911417][ C1] CPU: 1 PID: 16554 Comm: syz.2.4302 Not tainted syzkaller #0 [ 533.919192][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.929648][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 533.936065][ C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 533.955862][ C1] RSP: 0018:ffffc90000dcfda8 EFLAGS: 00010246 [ 533.962255][ C1] RAX: ffffffff81a08f90 RBX: 0000000000000000 RCX: ffff88802b793b80 [ 533.970491][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.978814][ C1] RBP: 0000000000000000 R08: ffffc90000dd01d7 R09: ffffc90000dd01a4 [ 533.987237][ C1] R10: dffffc0000000000 R11: fffff520001ba03b R12: ffff88802b795308 [ 533.995589][ C1] R13: ffffc900011c6030 R14: ffffc90000dcfe08 R15: 0000000000000000 [ 534.003867][ C1] FS: 00007f9e8bab56c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 534.012982][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.019898][ C1] CR2: 0000001b33f23ffc CR3: 0000000073be0000 CR4: 00000000003506e0 [ 534.028773][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 534.037290][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 534.045713][ C1] Call Trace: [ 534.049173][ C1] [ 534.052176][ C1] bpf_probe_read_user+0x26/0x70 [ 534.057377][ C1] bpf_prog_f2594087b0f175cc+0x32/0x220 [ 534.063174][ C1] bpf_flow_dissect+0x12b/0x3f0 [ 534.068401][ C1] __skb_flow_dissect+0x792/0x60b0 [ 534.074172][ C1] ? mark_lock+0x94/0x320 [ 534.079157][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 534.084622][ C1] ? verify_lock_unused+0x140/0x140 [ 534.090278][ C1] ? perf_trace_lock+0xe4/0x390 [ 534.095645][ C1] ? trace_event_raw_event_lock+0x270/0x270 [ 534.101891][ C1] ? perf_trace_lock+0xe4/0x390 [ 534.107048][ C1] ? mark_lock+0x94/0x320 [ 534.111678][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 534.117092][ C1] ? ktime_get+0x7b/0x270 [ 534.121887][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 534.128493][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 534.134555][ C1] ? verify_lock_unused+0x140/0x140 [ 534.140019][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 534.145578][ C1] ? perf_trace_lock+0xe4/0x390 [ 534.150873][ C1] ___skb_get_hash+0x55/0x680 [ 534.156169][ C1] __skb_get_hash+0xd2/0x270 [ 534.161109][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 534.167217][ C1] ? rcu_lock_release+0x9/0x20 [ 534.172415][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 534.178858][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 534.184656][ C1] netdev_pick_tx+0x335/0xad0 [ 534.189879][ C1] netdev_core_pick_tx+0x12e/0x2e0 [ 534.195319][ C1] __dev_queue_xmit+0x756/0x2f80 [ 534.200899][ C1] ? dev_queue_xmit+0x20/0x20 [ 534.205886][ C1] ? arpt_alloc_initial_table+0xce0/0xce0 [ 534.211853][ C1] ? rcu_lock_release+0x5/0x20 [ 534.216959][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 534.222326][ C1] ? nf_hook_slow+0x1b0/0x200 [ 534.227359][ C1] NF_HOOK+0x2fe/0x380 [ 534.231868][ C1] ? NF_HOOK+0x380/0x380 [ 534.236307][ C1] ? arp_xmit+0x230/0x230 [ 534.240982][ C1] ? NF_HOOK+0x380/0x380 [ 534.245632][ C1] arp_xmit+0x142/0x230 [ 534.250096][ C1] arp_solicit+0xba5/0xde0 [ 534.254914][ C1] ? arp_ifdown+0x20/0x20 [ 534.259613][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 534.266175][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 534.271852][ C1] ? arp_ifdown+0x20/0x20 [ 534.276384][ C1] neigh_timer_handler+0xaa9/0xfe0 [ 534.281776][ C1] ? neigh_release+0x80/0x80 [ 534.286810][ C1] call_timer_fn+0x17b/0x540 [ 534.291652][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 534.298380][ C1] ? neigh_release+0x80/0x80 [ 534.303391][ C1] ? __run_timers+0x800/0x800 [ 534.308544][ C1] ? neigh_release+0x80/0x80 [ 534.313482][ C1] __run_timers+0x53e/0x800 [ 534.318373][ C1] ? detach_timer+0x2b0/0x2b0 [ 534.323312][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 534.329558][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 534.334645][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 534.340322][ C1] run_timer_softirq+0x63/0xf0 [ 534.345498][ C1] handle_softirqs+0x339/0x830 [ 534.350628][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 534.355853][ C1] ? do_softirq+0x210/0x210 [ 534.360697][ C1] __irq_exit_rcu+0x13b/0x230 [ 534.365705][ C1] ? irq_exit_rcu+0x20/0x20 [ 534.370691][ C1] irq_exit_rcu+0x5/0x20 [ 534.375844][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 534.382168][ C1] [ 534.385387][ C1] [ 534.388561][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 534.394905][ C1] RIP: 0010:fib_rules_event+0x8b3/0xb80 [ 534.400847][ C1] Code: 84 39 02 00 00 48 8d 5d 10 49 89 de 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 5a 01 00 00 44 8b 23 ff ff ff ff 44 89 e6 e8 80 b6 85 f9 41 83 fc ff 74 07 e8 15 b3 [ 534.420932][ C1] RSP: 0018:ffffc90002fdf408 EFLAGS: 00000246 [ 534.427254][ C1] RAX: 0000000000000000 RBX: ffff8880605d9b10 RCX: 1ffff1100f8b441a [ 534.435799][ C1] RDX: ffffffff87f365db RSI: ffffffff8d44e0c0 RDI: 0000000000000005 [ 534.444100][ C1] RBP: ffff8880605d9b00 R08: ffff88802b793b80 R09: 0000000000000003 [ 534.452474][ C1] R10: 000000000000000b R11: 0000000000000002 R12: 0000000000000000 [ 534.460700][ C1] R13: ffff88801b180488 R14: 1ffff1100c0bb362 R15: ffff88801b180408 [ 534.469051][ C1] ? fib_rules_event+0xab/0xb80 [ 534.474207][ C1] ? fib_rules_event+0xab/0xb80 [ 534.479433][ C1] raw_notifier_call_chain+0xcb/0x160 [ 534.485135][ C1] register_netdevice+0x12a6/0x1710 [ 534.490835][ C1] ? netif_stacked_transfer_operstate+0x200/0x200 [ 534.497511][ C1] ? memset+0x1e/0x40 [ 534.501883][ C1] ? xdp_rxq_info_reg+0xe0/0x2e0 [ 534.507177][ C1] ? alloc_netdev_mqs+0x9ce/0xc40 [ 534.512545][ C1] ? __ip_tunnel_create+0x291/0x390 [ 534.518127][ C1] __ip_tunnel_create+0x2c7/0x390 [ 534.523471][ C1] ? ip_tunnel_init_net+0x6f0/0x6f0 [ 534.528889][ C1] ? strlcpy+0x83/0xc0 [ 534.533253][ C1] ? memcpy+0x3c/0x60 [ 534.537596][ C1] ip_tunnel_init_net+0x246/0x6f0 [ 534.543080][ C1] ? ip_tunnel_get_iflink+0x50/0x50 [ 534.548639][ C1] ops_init+0x357/0x600 [ 534.553270][ C1] setup_net+0x39e/0xa10 [ 534.557803][ C1] ? down_read_killable+0x69/0x340 [ 534.563454][ C1] ? copy_net_ns+0x5b0/0x5b0 [ 534.568251][ C1] ? kasan_check_range+0x84/0x290 [ 534.573594][ C1] ? copy_net_ns+0x32e/0x5b0 [ 534.578486][ C1] ? down_read_killable+0x1ce/0x340 [ 534.584115][ C1] copy_net_ns+0x348/0x5b0 [ 534.588958][ C1] create_new_namespaces+0x3d3/0x6f0 [ 534.594707][ C1] copy_namespaces+0x37d/0x3e0 [ 534.599838][ C1] copy_process+0x1834/0x3e20 [ 534.605133][ C1] ? __pidfd_prepare+0x140/0x140 [ 534.610335][ C1] ? kernel_clone+0xd1/0x990 [ 534.615275][ C1] ? kasan_check_range+0x1b0/0x290 [ 534.620904][ C1] kernel_clone+0x23f/0x990 [ 534.625748][ C1] ? trace_event_raw_event_lock+0x270/0x270 [ 534.631975][ C1] ? create_io_thread+0x180/0x180 [ 534.637771][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 534.644092][ C1] __x64_sys_clone+0x19a/0x210 [ 534.649198][ C1] ? __ia32_sys_vfork+0x130/0x130 [ 534.654684][ C1] ? syscall_enter_from_user_mode+0x2a/0x70 [ 534.660913][ C1] do_syscall_64+0x4c/0xa0 [ 534.665609][ C1] ? clear_bhb_loop+0x30/0x80 [ 534.670529][ C1] ? clear_bhb_loop+0x30/0x80 [ 534.675727][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.681952][ C1] RIP: 0033:0x7f9e8d85b799 [ 534.686560][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.706670][ C1] RSP: 002b:00007f9e8bab4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 534.715378][ C1] RAX: ffffffffffffffda RBX: 00007f9e8dad4fa0 RCX: 00007f9e8d85b799 [ 534.723799][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000061000600 [ 534.732195][ C1] RBP: 00007f9e8d8f1c99 R08: 0000000000000000 R09: 0000000000000000 [ 534.740374][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 534.748539][ C1] R13: 00007f9e8dad5038 R14: 00007f9e8dad4fa0 R15: 00007ffe41262638 [ 534.756866][ C1] [ 534.760234][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 534.768420][ C1] CPU: 1 PID: 16554 Comm: syz.2.4302 Not tainted syzkaller #0 [ 534.775928][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 534.786120][ C1] Call Trace: [ 534.789444][ C1] [ 534.792330][ C1] dump_stack_lvl+0x188/0x250 [ 534.797094][ C1] ? show_regs_print_info+0x20/0x20 [ 534.802533][ C1] ? load_image+0x400/0x400 [ 534.807118][ C1] panic+0x2e5/0x810 [ 534.811079][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 534.815685][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 534.821906][ C1] ? __warn+0x230/0x2b0 [ 534.827262][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 534.832876][ C1] __warn+0x248/0x2b0 [ 534.836919][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 534.842525][ C1] report_bug+0x1b7/0x2e0 [ 534.847011][ C1] handle_bug+0x3a/0x70 [ 534.851410][ C1] exc_invalid_op+0x16/0x40 [ 534.855969][ C1] asm_exc_invalid_op+0x16/0x20 [ 534.860899][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 534.867263][ C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 534.887003][ C1] RSP: 0018:ffffc90000dcfda8 EFLAGS: 00010246 [ 534.893123][ C1] RAX: ffffffff81a08f90 RBX: 0000000000000000 RCX: ffff88802b793b80 [ 534.901151][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.909177][ C1] RBP: 0000000000000000 R08: ffffc90000dd01d7 R09: ffffc90000dd01a4 [ 534.917198][ C1] R10: dffffc0000000000 R11: fffff520001ba03b R12: ffff88802b795308 [ 534.925230][ C1] R13: ffffc900011c6030 R14: ffffc90000dcfe08 R15: 0000000000000000 [ 534.933270][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 534.938892][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 534.944590][ C1] bpf_probe_read_user+0x26/0x70 [ 534.949602][ C1] bpf_prog_f2594087b0f175cc+0x32/0x220 [ 534.955307][ C1] bpf_flow_dissect+0x12b/0x3f0 [ 534.960221][ C1] __skb_flow_dissect+0x792/0x60b0 [ 534.965409][ C1] ? mark_lock+0x94/0x320 [ 534.969812][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 534.974891][ C1] ? verify_lock_unused+0x140/0x140 [ 534.980231][ C1] ? perf_trace_lock+0xe4/0x390 [ 534.985688][ C1] ? trace_event_raw_event_lock+0x270/0x270 [ 534.991846][ C1] ? perf_trace_lock+0xe4/0x390 [ 534.996867][ C1] ? mark_lock+0x94/0x320 [ 535.001340][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 535.006437][ C1] ? ktime_get+0x7b/0x270 [ 535.010973][ C1] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 535.017309][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 535.022649][ C1] ? verify_lock_unused+0x140/0x140 [ 535.027942][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 535.033245][ C1] ? perf_trace_lock+0xe4/0x390 [ 535.038161][ C1] ___skb_get_hash+0x55/0x680 [ 535.042950][ C1] __skb_get_hash+0xd2/0x270 [ 535.047627][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 535.053414][ C1] ? rcu_lock_release+0x9/0x20 [ 535.058247][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 535.064618][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 535.070015][ C1] netdev_pick_tx+0x335/0xad0 [ 535.074852][ C1] netdev_core_pick_tx+0x12e/0x2e0 [ 535.080039][ C1] __dev_queue_xmit+0x756/0x2f80 [ 535.085062][ C1] ? dev_queue_xmit+0x20/0x20 [ 535.089799][ C1] ? arpt_alloc_initial_table+0xce0/0xce0 [ 535.095683][ C1] ? rcu_lock_release+0x5/0x20 [ 535.100519][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 535.105613][ C1] ? nf_hook_slow+0x1b0/0x200 [ 535.110366][ C1] NF_HOOK+0x2fe/0x380 [ 535.114493][ C1] ? NF_HOOK+0x380/0x380 [ 535.118890][ C1] ? arp_xmit+0x230/0x230 [ 535.123309][ C1] ? NF_HOOK+0x380/0x380 [ 535.127644][ C1] arp_xmit+0x142/0x230 [ 535.131861][ C1] arp_solicit+0xba5/0xde0 [ 535.136389][ C1] ? arp_ifdown+0x20/0x20 [ 535.140782][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 535.147085][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 535.152357][ C1] ? arp_ifdown+0x20/0x20 [ 535.156744][ C1] neigh_timer_handler+0xaa9/0xfe0 [ 535.161920][ C1] ? neigh_release+0x80/0x80 [ 535.166569][ C1] call_timer_fn+0x17b/0x540 [ 535.171310][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 535.177516][ C1] ? neigh_release+0x80/0x80 [ 535.182247][ C1] ? __run_timers+0x800/0x800 [ 535.187005][ C1] ? neigh_release+0x80/0x80 [ 535.191654][ C1] __run_timers+0x53e/0x800 [ 535.196225][ C1] ? detach_timer+0x2b0/0x2b0 [ 535.200951][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 535.207079][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 535.211984][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 535.217340][ C1] run_timer_softirq+0x63/0xf0 [ 535.222169][ C1] handle_softirqs+0x339/0x830 [ 535.227018][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 535.231929][ C1] ? do_softirq+0x210/0x210 [ 535.236502][ C1] __irq_exit_rcu+0x13b/0x230 [ 535.241229][ C1] ? irq_exit_rcu+0x20/0x20 [ 535.246013][ C1] irq_exit_rcu+0x5/0x20 [ 535.250309][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 535.255994][ C1] [ 535.258964][ C1] [ 535.261977][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 535.268042][ C1] RIP: 0010:fib_rules_event+0x8b3/0xb80 [ 535.273644][ C1] Code: 84 39 02 00 00 48 8d 5d 10 49 89 de 49 c1 ee 03 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 06 84 c0 0f 85 5a 01 00 00 44 8b 23 ff ff ff ff 44 89 e6 e8 80 b6 85 f9 41 83 fc ff 74 07 e8 15 b3 [ 535.293393][ C1] RSP: 0018:ffffc90002fdf408 EFLAGS: 00000246 [ 535.299645][ C1] RAX: 0000000000000000 RBX: ffff8880605d9b10 RCX: 1ffff1100f8b441a [ 535.307671][ C1] RDX: ffffffff87f365db RSI: ffffffff8d44e0c0 RDI: 0000000000000005 [ 535.315785][ C1] RBP: ffff8880605d9b00 R08: ffff88802b793b80 R09: 0000000000000003 [ 535.323815][ C1] R10: 000000000000000b R11: 0000000000000002 R12: 0000000000000000 [ 535.331839][ C1] R13: ffff88801b180488 R14: 1ffff1100c0bb362 R15: ffff88801b180408 [ 535.339883][ C1] ? fib_rules_event+0xab/0xb80 [ 535.344808][ C1] ? fib_rules_event+0xab/0xb80 [ 535.349723][ C1] raw_notifier_call_chain+0xcb/0x160 [ 535.355171][ C1] register_netdevice+0x12a6/0x1710 [ 535.360464][ C1] ? netif_stacked_transfer_operstate+0x200/0x200 [ 535.367025][ C1] ? memset+0x1e/0x40 [ 535.371239][ C1] ? xdp_rxq_info_reg+0xe0/0x2e0 [ 535.376235][ C1] ? alloc_netdev_mqs+0x9ce/0xc40 [ 535.381555][ C1] ? __ip_tunnel_create+0x291/0x390 [ 535.386925][ C1] __ip_tunnel_create+0x2c7/0x390 [ 535.392008][ C1] ? ip_tunnel_init_net+0x6f0/0x6f0 [ 535.397258][ C1] ? strlcpy+0x83/0xc0 [ 535.401380][ C1] ? memcpy+0x3c/0x60 [ 535.405465][ C1] ip_tunnel_init_net+0x246/0x6f0 [ 535.410550][ C1] ? ip_tunnel_get_iflink+0x50/0x50 [ 535.415825][ C1] ops_init+0x357/0x600 [ 535.420046][ C1] setup_net+0x39e/0xa10 [ 535.424364][ C1] ? down_read_killable+0x69/0x340 [ 535.429543][ C1] ? copy_net_ns+0x5b0/0x5b0 [ 535.434189][ C1] ? kasan_check_range+0x84/0x290 [ 535.439275][ C1] ? copy_net_ns+0x32e/0x5b0 [ 535.443985][ C1] ? down_read_killable+0x1ce/0x340 [ 535.449245][ C1] copy_net_ns+0x348/0x5b0 [ 535.453733][ C1] create_new_namespaces+0x3d3/0x6f0 [ 535.459095][ C1] copy_namespaces+0x37d/0x3e0 [ 535.463922][ C1] copy_process+0x1834/0x3e20 [ 535.468697][ C1] ? __pidfd_prepare+0x140/0x140 [ 535.473692][ C1] ? kernel_clone+0xd1/0x990 [ 535.478431][ C1] ? kasan_check_range+0x1b0/0x290 [ 535.483607][ C1] kernel_clone+0x23f/0x990 [ 535.488275][ C1] ? trace_event_raw_event_lock+0x270/0x270 [ 535.494229][ C1] ? create_io_thread+0x180/0x180 [ 535.499312][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 535.505336][ C1] __x64_sys_clone+0x19a/0x210 [ 535.510133][ C1] ? __ia32_sys_vfork+0x130/0x130 [ 535.515214][ C1] ? syscall_enter_from_user_mode+0x2a/0x70 [ 535.521579][ C1] do_syscall_64+0x4c/0xa0 [ 535.526042][ C1] ? clear_bhb_loop+0x30/0x80 [ 535.530746][ C1] ? clear_bhb_loop+0x30/0x80 [ 535.535446][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 535.541613][ C1] RIP: 0033:0x7f9e8d85b799 [ 535.546123][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.565755][ C1] RSP: 002b:00007f9e8bab4fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 535.574210][ C1] RAX: ffffffffffffffda RBX: 00007f9e8dad4fa0 RCX: 00007f9e8d85b799 [ 535.582208][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000061000600 [ 535.590306][ C1] RBP: 00007f9e8d8f1c99 R08: 0000000000000000 R09: 0000000000000000 [ 535.598301][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 535.606294][ C1] R13: 00007f9e8dad5038 R14: 00007f9e8dad4fa0 R15: 00007ffe41262638 [ 535.614306][ C1] [ 535.617598][ C1] Kernel Offset: disabled [ 535.622235][ C1] Rebooting in 86400 seconds..