last executing test programs: 19.909053655s ago: executing program 1 (id=4116): perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222"], 0x0, 0x5}, 0x94) r0 = perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000d00)='cpu\t<\"&&\t') perf_event_open(&(0x7f0000000e40)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x4, 0x0, &(0x7f0000000ec0)) r1 = perf_event_open(&(0x7f0000000f00)={0x4, 0x80, 0xd, 0x77, 0x9a, 0x10, 0x0, 0x55, 0x10020, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xe48, 0x2}, 0x4080, 0xa, 0x1, 0x6, 0x9, 0x6, 0x0, 0x0, 0x6, 0x0, 0x2ef2}, 0x0, 0xb, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x40000000000002, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x12, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000750000008500000006000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b704000000000000b705000000000000850000001c00000095"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000001240)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000001280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000012c0), 0x12) perf_event_open(&(0x7f0000001300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = openat$cgroup(r2, &(0x7f0000001380)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000013c0)={0x0, 0x80, 0x68, 0x0, 0x7, 0xff, 0x0, 0xde75, 0x8, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000001440), 0x3}, 0x22, 0x1000, 0x5, 0x6, 0x0, 0x4, 0x9, 0x0, 0x7f, 0x0, 0x8}, r4, 0x1, r1, 0xd) perf_event_open$cgroup(&(0x7f0000001480)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast2}, 0x0, 0x1, 0x2, 0x2}}, 0x80, 0x0}, 0x4044044) perf_event_open(&(0x7f0000001600)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}, 0x6000, 0x0, 0x3, 0x6, 0x0, 0x2000000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001680), 0xcf) socket$kcm(0x11, 0x200000000000003, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xc, 0xe, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f0000002480)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000024c0)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6d01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x23, 0x2, 0x0) 18.755268252s ago: executing program 1 (id=4125): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYBLOB="0100000002"], 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0}, 0x0, 0x5, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r3, &(0x7f0000000680), 0x0}, 0x20) 18.576383461s ago: executing program 4 (id=4128): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1088, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="350400002f000511d25a80648c63d40d0424fe76e7ff34400c0006dd0100002037153e370c040180060410004500c999ee5dbfef762bde194f6310b33df514043ca263b8a66594bde0b54ec45b6a576503ef9cf190584d3808b5c2e5dd9e18754752b179fd91116e707d7fb3c98c7888393677dab64b8f5c91aa1f279e125d815bcfedc4787c9c0ebe44c8a26113b9223f0a0830c7712f7bb24ca0929113752eff0dec58cb14138b15973f1c792f4bd920159534990df6f31daa2b02d2659b4237fd73d624a9e12bedef3becc77c7eee414ef18c99232b28132ae2a57fad54f50d", 0xe1}, {&(0x7f0000000600)="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", 0x354}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) close(r2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000080)="5c00000024006bab9e3fe3d86e17aa31076b876c1d0000007ea60864160af36504001a00380005008f0ca0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0", 0x4e}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x541b, 0x20000000) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000b00)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000b40)={r7, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e1208000500", 0x2c}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000d40)={0x0, 0xfffffffe, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 18.4868264s ago: executing program 2 (id=4129): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000015006b03004e21000af32c6e020675f80025030040010000002c740e17d34460bc24eab5fac905251e6182949a36c23d3b48dfd8cdbf9364c9f8ffffffffffffffd0bdd70000b6c0504bb9189d5208eddedf0c", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 18.399266159s ago: executing program 2 (id=4131): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000900), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000940)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000ac0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000f40)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 18.339528415s ago: executing program 1 (id=4133): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000005c0)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000600)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r2, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000940)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000009c0)={r2, r3, 0x4, r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000a00)={0x0, 0xffffff2d, &(0x7f0000000a40)=[{&(0x7f0000000a80)="c00e020022003505d25a806f8c6394f96724fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000ac0)={0x0, 0x18, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x0, 0x80004, 0x10104, 0x9}], 0x10, 0x1}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000c80)={0x0, 0xd18c9b25, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="e03f03003b000b05d25a806c8c6f94f90424fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x4}, 0x6462, 0x0, 0x0, 0x8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848030000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24088054) 18.101470039s ago: executing program 4 (id=4135): perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222"], 0x0, 0x5}, 0x94) r0 = perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000d00)='cpu\t<\"&&\t') perf_event_open(&(0x7f0000000e40)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x25, 0x4, 0x0, &(0x7f0000000ec0)) r1 = perf_event_open(&(0x7f0000000f00)={0x4, 0x80, 0xd, 0x77, 0x9a, 0x10, 0x0, 0x55, 0x10020, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xe48, 0x2}, 0x4080, 0xa, 0x1, 0x6, 0x9, 0x6, 0x0, 0x0, 0x6, 0x0, 0x2ef2}, 0x0, 0xb, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfff, 0x4}, 0x4000, 0x40000000000002, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r1, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x12, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000750000008500000006000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000b704000000000000b705000000000000850000001c00000095"], &(0x7f0000001180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000001240)='cpuset.cpus\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000001280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000012c0), 0x12) perf_event_open(&(0x7f0000001300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = openat$cgroup(r2, &(0x7f0000001380)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000013c0)={0x0, 0x80, 0x68, 0x0, 0x7, 0xff, 0x0, 0xde75, 0x8, 0xc, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000001440), 0x3}, 0x22, 0x1000, 0x5, 0x6, 0x0, 0x4, 0x9, 0x0, 0x7f, 0x0, 0x8}, r4, 0x1, r1, 0xd) perf_event_open$cgroup(&(0x7f0000001480)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001500)='./cgroup/syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @multicast2}, 0x0, 0x1, 0x2, 0x2}}, 0x80, 0x0}, 0x4044044) perf_event_open(&(0x7f0000001600)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1}, 0x6000, 0x0, 0x3, 0x6, 0x0, 0x2000000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001680), 0xcf) socket$kcm(0x11, 0x200000000000003, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xc, 0xe, &(0x7f0000001780)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e0000"], &(0x7f0000002480)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000024c0)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x6d01, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x23, 0x2, 0x0) 17.818838538s ago: executing program 4 (id=4136): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="110000000400000000000000", @ANYRES32, @ANYBLOB="0fd2a3e148b81b8a1b133b4399072f896262af1b38306a19db9757fc2912c6bdc78e0c2a56aa237e631fa86adf6de7d384bbb5fc5319021772466b8356de4b83992745135cc75a4864900e789a8554750b9b7448b13810554d3f4698f4f1e20247142b89db3c3715915b3777ec7c4669c48c18129103d77b4c6e07dcc289a680eee7d011f188df373f4c3455a1039cc694fa31e4", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x7, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7c, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b", 0x4f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000200)='GPL\x00', 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r8, 0x0, 0x0}, 0x10) 17.817589058s ago: executing program 2 (id=4146): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1088, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="350400002f000511d25a80648c63d40d0424fe76e7ff34400c0006dd0100002037153e370c040180060410004500c999ee5dbfef762bde194f6310b33df514043ca263b8a66594bde0b54ec45b6a576503ef9cf190584d3808b5c2e5dd9e18754752b179fd91116e707d7fb3c98c7888393677dab64b8f5c91aa1f279e125d815bcfedc4787c9c0ebe44c8a26113b9223f0a0830c7712f7bb24ca0929113752eff0dec58cb14138b15973f1c792f4bd920159534990df6f31daa2b02d2659b4237fd73d624a9e12bedef3becc77c7eee414ef18c99232b28132ae2a57fad54f50d", 0xe1}, {&(0x7f0000000600)="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", 0x354}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) close(r2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000080)="5c00000024006bab9e3fe3d86e17aa31076b876c1d0000007ea60864160af36504001a00380005008f0ca0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0", 0x4e}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x541b, 0x20000000) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000b00)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000b40)={r7, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e1208000500", 0x2c}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000d40)={0x0, 0xfffffffe, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 17.682547492s ago: executing program 0 (id=4137): r0 = socket$kcm(0x10, 0x0, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000018c0), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000001900)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x200040c4) r3 = openat$cgroup_ro(r1, &(0x7f0000001940)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000001980)=0x1, 0x12) write$cgroup_subtree(r3, &(0x7f00000019c0)={[{0x0, 'memory'}, {0x2b, 'devices'}, {0x2d, 'cpuset'}, {0x2d, 'cpu'}, {0x2b, 'rlimit'}]}, 0x26) openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x40000800}, 0x4000, 0x0, 0x0, 0x6, 0x8, 0x0, 0x3}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000006, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000140), 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/155, 0x9b}, {&(0x7f0000001600)=""/167, 0xa7}, {&(0x7f00000016c0)=""/164, 0xa4}, {&(0x7f0000001780)=""/213, 0xd5}], 0x5}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0xad380000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001c00)="3b433a35a3d247b01bd3c1f3607b08b0188a3235bd5a65489d5c69e4191225d442f29db52dd0c851308fbdf3dd816faa0c5113d798f4a092410b36ebe67b7282dcf4a6a278c1acfbcd135522003f9a83c2ca691a3f14ccb7500816bd9901000100fa0ba7f717b9729fcbfd8994a68d108fdabcaf9f8eaa9670ca45fd8fc5d1a1203e2ab4b9d0effe82e988b278eaa4b981075ce0806f9b9788255edd111fe8fe7389c6b4413302d466473463529dd5535b88ca5ee586226b88c1a275", 0xbc}, {&(0x7f0000001ac0)="6936a6be53a62f12203b7dedaf08a0f7e93871aaa98f825d56802a71b8e973de70969b30a0ef0359952da0d5b4dee42775599ea43f59cd39348b42a3f9dfb11a2f233148efe381bf4f6b66b4fe71956bac4f44a9f113633c61616331250ffb4edcb5ee4468b9008dc73f5ea4b3bab417066132b225", 0x75}], 0x2}, 0x48010) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20040010) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004885) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r7, 0x400454cd, 0x300) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) 17.461492334s ago: executing program 3 (id=4138): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xc, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x2000060, 0x36, 0x0, &(0x7f0000000a80)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.164803664s ago: executing program 3 (id=4139): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile={0xa, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000080)=""/74, 0x27, 0x4a, 0x1, 0x1}, 0x28) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x1, 0x4000, r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x11, 0x6, 0xaffb, &(0x7f00000001c0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={0x1, &(0x7f0000000200)="01aaa5be7e87b61e258342bd5632fec0b2723ef6166ea3644713bf846331994c8e6edb55bf77cddef6693b521e3272f02d0e1dc5d3eebcceedf42b4f264359bdb5d2e502faa41f5988c439ef7045b851d54a82cee518d0d646101b4406671c060841577ee1205cb57c436cd75d04c2c0508994c64ef94254d7a3271a74a3895aa1a1d5393dfbe3740f6f4f01824e7381d76edfdc601dcd997b9a9ceac993cede4b54924d985e0e9f95a4a96fd3f7e3e7e8fc055fe2214e6cb9bd529edce7c896c3af2d8406679b4c907c0f5fb4420ac3c38b1bf453f3b8b2912ca7f991e1b4b2e74e", &(0x7f0000000300)=""/135}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0x4}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x15, 0x6, 0x8, 0x200, 0x6a085, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x0, 0x2, 0x3, 0x0, @value=r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, r0, 0x3, 0x3, 0x2}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000009c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xd, &(0x7f0000000400)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @generic={0xd, 0x6, 0x4, 0x4, 0x5656}, @exit], &(0x7f0000000480)='GPL\x00', 0x24a2cac6, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x2f, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x2, &(0x7f0000000a00)=[r5, r6, r7, r8, r9, r1], &(0x7f0000000a40)=[{0x4, 0x4, 0x4, 0xc}, {0x5, 0x2, 0x5, 0xc}], 0x10, 0xffffbe02}, 0x94) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d00)='./file1\x00', 0x0, 0x10}, 0x18) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x100}, [@ldst={0x2, 0x3, 0x0, 0x5, 0x1d, 0xfffffffffffffffe, 0x4}, @ldst={0x3, 0x2, 0x2, 0x7, 0x1, 0x6, 0x8}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}]}, &(0x7f0000000b80)='GPL\x00', 0x10000, 0xd6, &(0x7f0000000bc0)=""/214, 0x41000, 0x2, '\x00', r3, 0x1c, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000cc0)={0x3, 0x10, 0x4}, 0x10, 0x24c1d, r9, 0x4, &(0x7f0000000d80)=[0x1, r10], &(0x7f0000000dc0)=[{0x0, 0x4, 0x3, 0x8}, {0x2, 0x3, 0x7, 0x4}, {0x2, 0x3, 0xd, 0xa}, {0x1, 0x5, 0x9, 0xc}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@cgroup=r9, 0x10, 0x1, 0x97, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001000)={@map=r8, r11, 0x25, 0x0, 0x0, @void, @value=r9, @void, @void, r13}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11f, 0x11f, 0x7, [@datasec={0x4, 0x3, 0x0, 0xf, 0x3, [{0x2, 0x86, 0x80000001}, {0x4, 0x8001, 0xff}, {0x5, 0x0, 0x4}], "b6351f"}, @enum64={0x1, 0x7, 0x0, 0x13, 0x1, 0x8, [{0x8, 0x5, 0x5}, {0x5, 0x9, 0x6}, {0xc, 0x8, 0x77bb67f7}, {0xd, 0x40, 0xafd}, {0x2, 0x3ff, 0x6}, {0xc, 0x80, 0x2}, {0xd, 0xfffff800, 0x9}]}, @const={0x8, 0x0, 0x0, 0xa, 0x4}, @typedef={0x0, 0x0, 0x0, 0x8, 0x5}, @union={0x3, 0x5, 0x0, 0x5, 0x0, 0x0, [{0xe, 0x3, 0xa08c}, {0xc, 0x4, 0xf5}, {0x2, 0x3, 0x5}, {0xb, 0x4, 0x7fff}, {0xd, 0x4, 0xfffffffe}]}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0xb, 0x80000000}]}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x5}, @ptr={0xf, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x61, 0x2e, 0x5f, 0x0, 0x61]}}, &(0x7f0000001180)=""/87, 0x13f, 0x57, 0x1, 0xffff811f, 0x10000, @value=r9}, 0x28) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001240)={0x7}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000001280)='GPL\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r5, 0x58, &(0x7f00000012c0)}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001480)={@cgroup=r9, 0xe, 0x0, 0x2, &(0x7f0000001380)=[0x0], 0x1, 0x0, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000014c0)={@fallback=r2, r11, 0x5, 0x2010, 0x0, @value=r9, @void, @void, @void, r15}, 0x20) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000001500)={r2}, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r16, 0xc008240a, &(0x7f0000001540)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) write$cgroup_int(r16, &(0x7f0000001580)=0x78, 0x12) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000015c0)) openat$cgroup_netprio_ifpriomap(r12, &(0x7f0000001600), 0x2, 0x0) socketpair(0x18, 0x3, 0x0, &(0x7f0000001640)) r17 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x0, '\x00', r3, r14, 0x3, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000001700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd11a00, 0x0, 0x0, 0x0, 0xff}, [@jmp={0x5, 0x1, 0xd, 0x4, 0xb, 0x20, 0xfffffffffffffff0}, @exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r17, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r16}}, @ldst={0x3, 0x3, 0x5, 0xd, 0x7, 0x10, 0xfffffffffffffff0}]}, &(0x7f0000001780)='syzkaller\x00', 0x9, 0xa5, &(0x7f00000017c0)=""/165, 0x40f00, 0x48, '\x00', 0x0, 0x1a, r0, 0x8, &(0x7f0000001940)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000001980)={0x1, 0xb, 0x9, 0x4}, 0x10, 0x1b8ea, r16, 0x4, &(0x7f0000001a40)=[r10, r9, 0xffffffffffffffff, r9, r10], &(0x7f0000001a80)=[{0x5, 0x3, 0x7, 0x7}, {0x2, 0x1, 0xe, 0x8}, {0x2, 0x5, 0x3, 0x1}, {0x0, 0x2, 0x8, 0x7}], 0x10, 0x4}, 0x94) 16.875368804s ago: executing program 4 (id=4140): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0x6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000001640)='GPL\x00', 0x5, 0x29e, &(0x7f0000001680)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000001780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000001800)={0x2, 0x80, 0xfc, 0xa, 0x0, 0x0, 0x0, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x0, 0x0, 0x9, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001880)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000018c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) perf_event_open$cgroup(&(0x7f0000001900)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)}, 0x0) sendmsg$kcm(r0, &(0x7f0000001a00)={&(0x7f0000001a40)=@tipc=@id, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x0) sendmsg(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x20000000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001bc0)={{r4, 0xffffffffffffffff}, &(0x7f0000001c00), &(0x7f0000001c40)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001c80)={r5, &(0x7f0000001cc0), &(0x7f0000001d00)=""/22}, 0x20) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x6, 0xc, &(0x7f0000001e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000001e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ec0)={r7, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f40)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x20) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$kcm(0xa, 0x1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0xc, 0xe, &(0x7f0000002080)=ANY=[@ANYBLOB="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"], &(0x7f0000002c40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000002c80), 0x4b}, 0x48) setsockopt$sock_attach_bpf(r10, 0x29, 0x6, &(0x7f0000002cc0)=r11, 0x58) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000002d00), 0x4) sendmsg$kcm(r9, &(0x7f0000002d40)={&(0x7f0000002d80)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x80, 0x0}, 0x400c050) bpf$MAP_CREATE(0x0, &(0x7f0000002e00)=ANY=[@ANYBLOB="0900000008000000080000009000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0100000002"], 0x48) 16.874053604s ago: executing program 1 (id=4151): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1088, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="350400002f000511d25a80648c63d40d0424fe76e7ff34400c0006dd0100002037153e370c040180060410004500c999ee5dbfef762bde194f6310b33df514043ca263b8a66594bde0b54ec45b6a576503ef9cf190584d3808b5c2e5dd9e18754752b179fd91116e707d7fb3c98c7888393677dab64b8f5c91aa1f279e125d815bcfedc4787c9c0ebe44c8a26113b9223f0a0830c7712f7bb24ca0929113752eff0dec58cb14138b15973f1c792f4bd920159534990df6f31daa2b02d2659b4237fd73d624a9e12bedef3becc77c7eee414ef18c99232b28132ae2a57fad54f50d", 0xe1}, {&(0x7f0000000600)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdae711ed9ac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d5996", 0x354}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) close(r2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000080)="5c00000024006bab9e3fe3d86e17aa31076b876c1d0000007ea60864160af36504001a00380005008f0ca0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0", 0x4e}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x541b, 0x20000000) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000b00)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000b40)={r7, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e1208000500", 0x2c}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000d40)={0x0, 0xfffffffe, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 16.873344074s ago: executing program 2 (id=4141): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000015006b03004e21000af32c6e020675f80025030040010000002c740e17d34460bc24eab5fac905251e6182949a36c23d3b48dfd8cdbf9364c9f8ffffffffffffffd0bdd70000b6c0504bb9189d5208eddedf0c", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 16.873187474s ago: executing program 3 (id=4142): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (fail_nth: 5) 16.823678119s ago: executing program 0 (id=4143): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x3, 0x0, 0x20000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000"], 0x0, 0x80}, 0x28) r1 = socket$kcm(0x10, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x26}, 0x28) r2 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYBLOB="4e6f205be589e92672bc14ea9fb03b0613cffa8bc4f9d474c036534aa4", @ANYBLOB="862bab93a40e2954064493b87e4a75ff612d00203464eab86c446a6af48772e8d43f71d765eb50b2628724eebb4d86a846b8e5ee2c305bbb968435a663f35b70955274a81a5a84a1e4313cf73314c3795e6d7e425c0bf1ea63236de365054f291d49241cbf030189836872caf69878c3aca0c8e80e964f62d78d8eaec1a742da8fcfc6562840929ce44de1154a825db123eac6a35a27aeba65eb92e4988e5cc7a10d2403ec47de04df05c137136f7f0c9ec3e2a932de66b69528e9016e55c9540c12c940cf6286d5d50586", @ANYRESDEC=r2, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r0, @ANYRESOCT=0x0], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x92, 0x52, &(0x7f0000000840)="89a88942424f6b5136b3c50f007bfb62f80523b90b37eeb53c2167f16f21556c6aaae61ad7b83cfde9b299f8ec3b2890419ad47ad325402d77a79e12796757967b6d29e268e7c60c2f9b3df6dcce968c26aa3deabce8bf9d8c0f6c2dc73f185b8db8f293e55c4f9dd7e753a38cf25646df4d740a07c2f8c1f04ee2473c62579daae6cf400e5686cb63702da8cf9982a64724", &(0x7f0000000900)=""/82, 0x1, 0x0, 0xa2, 0x96, &(0x7f0000000a80)="913478405bc4981764ef99c63be6d5c1a5f44ca8ce746b269029fc1153c4b967151fd0089e7b4939eebd066f02340c90cb9630d3b805ac7568a8d4b691fd49bed1dc7b5e563c8b44e55654cbad2e3f2fbff6977a34e8ce3206f3e6850062ce916c216b9bb5662c42ef39748cfb0a7785da9f0ae13efefb966c13cfe766ab7ab9fa326e0ff557f619b4b05d504ded4add3aa198861cbe2ad2917c73ece679e480609e", &(0x7f0000000b40)="6d6f374ed1f7411e162e5aa990e1bd5448f96f1d49e6643b60c9cb11473aeb39637f13bca6e5ec90f3d4e824a7558ce72f78058aaae01189a4abff0c585037cc82bc607685d984d5c4f5ec028e2690fc51d7d736e86eae5694ab5f746aae84b584774be4f8e11146f09aa646487079f4a673a88a9800b6b530c02750bb2a55de2511263fae0dd0c47d7427ba08dd80a8aba28bc482ac", 0x1, 0x0, 0x7}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = openat$cgroup_procs(r3, &(0x7f0000000c00)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000c80), 0x200002, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) r6 = openat$cgroup_ro(r5, &(0x7f0000000cc0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000d00)=0x1, 0x12) mkdirat$cgroup(r5, &(0x7f0000000d40)='syz0\x00', 0x1ff) r7 = openat$cgroup_freezer_state(r3, &(0x7f0000000d80), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000dc0)='THAWED\x00', 0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0, 0x0, 0x1f000801}, 0x200000000000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000e80)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000000000007f"], 0xffffffffffffffc7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000ec0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x0, 0x5, &(0x7f0000000fc0)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0800000000000000950000000000000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001000)={'tunl0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001040)={'pim6reg1\x00', 0x1}) 16.8173313s ago: executing program 2 (id=4144): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYBLOB="0100000002"], 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0}, 0x0, 0x5, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r3, &(0x7f0000000680), 0x0}, 0x20) 16.341208388s ago: executing program 3 (id=4145): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="110000000400000000000000", @ANYRES32, @ANYBLOB="0fd2a3e148b81b8a1b133b4399072f896262af1b38306a19db9757fc2912c6bdc78e0c2a56aa237e631fa86adf6de7d384bbb5fc5319021772466b8356de4b83992745135cc75a4864900e789a8554750b9b7448b13810554d3f4698f4f1e20247142b89db3c3715915b3777ec7c4669c48c18129103d77b4c6e07dcc289a680eee7d011f188df373f4c3455a1039cc694fa31e4", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x7, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x7c, 0x4, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000200)='GPL\x00', 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r8, 0x0, 0x0}, 0x10) 16.312213441s ago: executing program 0 (id=4147): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000900), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000940)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000ac0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000f40)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 15.987972884s ago: executing program 0 (id=4148): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="632084f935a0e51ff9e1351150865d24ea66dfd199460c895eae33cc7530cede6f4dea945d", @ANYRES64=r4], 0xb) r5 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r6}, &(0x7f00000001c0), &(0x7f0000000740)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pS \x00'}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r7, 0x2e, 0x1, 0xd551, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000380)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0xc, &(0x7f0000000200)=ANY=[@ANYRES64=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x0, 0x11, 0x4, 0x5, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x4, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000080)) 15.92734439s ago: executing program 2 (id=4149): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000800)={&(0x7f0000000840)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000008c0)='0', 0x1}], 0x1}, 0x45) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000940)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f00000009c0)='\x00', 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000b00)=[{}, {0x1}], 0x10, 0x3}, 0x94) recvmsg$unix(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000), 0x98) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200040c4) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="1c0000005e007f029e3b470ded9b72ab25399c3683e5caa9bb22d956", 0x1c}], 0x1}, 0x20001850) recvmsg$kcm(r6, &(0x7f0000000340)={0x0, 0xfffffffffffffe54, 0x0, 0x0, 0x0, 0x7}, 0x10122) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f00000003c0)={'wlan0\x00', @random}) 15.92580801s ago: executing program 1 (id=4150): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2112, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000240)=""/73, 0x49, 0x0, &(0x7f00000002c0)=""/49, 0x31}}, 0x10) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x24040050) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback, 0x7, 0x1, 0x5, &(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='memory.numa_stat\x00', 0x26e1, 0x0) close(r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000700)) ioctl$SIOCSIFHWADDR(r2, 0x8b36, &(0x7f0000000740)={'wlan1\x00', @random="1f00"}) r3 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xe, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000001340)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f00000013c0)={'wlan1\x00', @random="02000000000a"}) perf_event_open(&(0x7f0000001400)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x6, 0x5, &(0x7f0000001540)=ANY=[], &(0x7f0000001580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000015c0), 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000001600)={'sit0\x00', @local}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000001680)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000ff000061001295ca8cbbf4000000000000000000000000000064b19292"], &(0x7f0000001700)=""/249, 0x2c, 0xf9, 0x7}, 0x28) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 15.847268219s ago: executing program 3 (id=4152): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1088, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, r0, 0xa) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="350400002f000511d25a80648c63d40d0424fe76e7ff34400c0006dd0100002037153e370c040180060410004500c999ee5dbfef762bde194f6310b33df514043ca263b8a66594bde0b54ec45b6a576503ef9cf190584d3808b5c2e5dd9e18754752b179fd91116e707d7fb3c98c7888393677dab64b8f5c91aa1f279e125d815bcfedc4787c9c0ebe44c8a26113b9223f0a0830c7712f7bb24ca0929113752eff0dec58cb14138b15973f1c792f4bd920159534990df6f31daa2b02d2659b4237fd73d624a9e12bedef3becc77c7eee414ef18c99232b28132ae2a57fad54f50d", 0xe1}, {&(0x7f0000000600)="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", 0x354}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) close(r2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000080)="5c00000024006bab9e3fe3d86e17aa31076b876c1d0000007ea60864160af36504001a00380005008f0ca0e69ee517d34460bc24eab556a705251e6182949a3651f60a84c9f4d4938037e786a6d0", 0x4e}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000b00)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000b40)={r7, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e1208000500", 0x2c}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000d40)={0x0, 0xfffffffe, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466506000e800a00142603600e1208000f0000000406a80016c0080009400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 15.846124989s ago: executing program 4 (id=4153): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000900), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000940)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000ac0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000f40)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 15.756302778s ago: executing program 4 (id=4154): r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r2) setsockopt$sock_attach_bpf(r0, 0x6, 0x1e, &(0x7f00000000c0)=r3, 0x4) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x8, 0x70, 0x7f, 0x1, 0x0, 0x7fffffff, 0x60040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_config_ext={0x7, 0x7fff}, 0x10c, 0xff, 0x7, 0x6, 0x7, 0x7, 0x81, 0x0, 0x400, 0x0, 0x7}, 0x0, 0x5, r3, 0xa) perf_event_open(&(0x7f00000003c0)={0x8, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10, &(0x7f0000000300)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x0, '\x00', 0x0, r3, 0x4, 0x2, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@arena={0x21, 0x0, 0x0, 0x5, 0x20000, r3, 0x5, '\x00', 0x0, r3, 0x1, 0x0, 0xf6a}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r6}, &(0x7f00000009c0)=0x20000, &(0x7f0000000a00)=r5}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x28) perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000e00)={0x2, 0x9e, 0x16, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r8 = perf_event_open(&(0x7f0000000e80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="1c000000210081044e81f782db44b9040200000000806c0100001500", 0x1c}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000001040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) perf_event_open(&(0x7f0000001080)={0x2, 0x80, 0xde, 0x0, 0xff, 0x0, 0x0, 0x3, 0x22022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x4, 0x7, 0x5, 0x0, 0x4, 0x0, 0x200}, 0x0, 0xffffffffffffffff, r8, 0x0) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001140)=[{0x0}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0x58, &(0x7f00000011c0)}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240), 0x200002, 0x0) 15.583190085s ago: executing program 3 (id=4155): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xa, 0x5, 0x7, 0xc1}, 0x50) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000005c0)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000600)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r2, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000940)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000009c0)={r2, r3, 0x4, r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000a00)={0x0, 0xffffff2d, &(0x7f0000000a40)=[{&(0x7f0000000a80)="c00e020022003505d25a806f8c6394f96724fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000ac0)={0x0, 0x18, &(0x7f0000000b00)=[{&(0x7f0000000b40)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x3f, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x0, 0x80004, 0x10104, 0x9}], 0x10, 0x1}, 0x94) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000c80)={0x0, 0xd18c9b25, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="e03f03003b000b05d25a806c8c6f94f90424fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x4}, 0x6462, 0x0, 0x0, 0x8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, 0x0, 0x0) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848030000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x24088054) 15.578301556s ago: executing program 1 (id=4156): r0 = socket$kcm(0x10, 0x0, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000018c0), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000001900)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x200040c4) r3 = openat$cgroup_ro(r1, &(0x7f0000001940)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000001980)=0x1, 0x12) write$cgroup_subtree(r3, &(0x7f00000019c0)={[{0x0, 'memory'}, {0x2b, 'devices'}, {0x2d, 'cpuset'}, {0x2d, 'cpu'}, {0x2b, 'rlimit'}]}, 0x26) openat$tun(0xffffffffffffff9c, 0x0, 0x40841, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x40000800}, 0x4000, 0x0, 0x0, 0x6, 0x8, 0x0, 0x3}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000006, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000140), 0x4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/155, 0x9b}, {&(0x7f0000001600)=""/167, 0xa7}, {&(0x7f00000016c0)=""/164, 0xa4}, {&(0x7f0000001780)=""/213, 0xd5}], 0x5}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0xad380000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001c00)="3b433a35a3d247b01bd3c1f3607b08b0188a3235bd5a65489d5c69e4191225d442f29db52dd0c851308fbdf3dd816faa0c5113d798f4a092410b36ebe67b7282dcf4a6a278c1acfbcd135522003f9a83c2ca691a3f14ccb7500816bd9901000100fa0ba7f717b9729fcbfd8994a68d108fdabcaf9f8eaa9670ca45fd8fc5d1a1203e2ab4b9d0effe82e988b278eaa4b981075ce0806f9b9788255edd111fe8fe7389c6b4413302d466473463529dd5535b88ca5ee586226b88c1a27544", 0xbd}, {&(0x7f0000001ac0)="6936a6be53a62f12203b7dedaf08a0f7e93871aaa98f825d56802a71b8e973de70969b30a0ef0359952da0d5b4dee42775599ea43f59cd39348b42a3f9dfb11a2f233148efe381bf4f6b66b4fe71956bac4f44a9f113633c61616331250ffb4edcb5ee4468b9008dc73f5ea4b3bab417066132b225", 0x75}], 0x2}, 0x48010) sendmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20040010) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20004885) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40841, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r7, 0x400454cd, 0x300) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) 15.453738968s ago: executing program 0 (id=4157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="11000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r1, 0xffffffffffffffff, 0x521}, 0x57) 307.91µs ago: executing program 0 (id=4158): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x4, 0x7, 0x0, 0x7, 0x0, 0x8, 0x20000, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4400, 0x4, 0x5, 0x3, 0x3c37, 0x9, 0x5, 0x0, 0xb6, 0x0, 0xffff}, 0x0, 0x7, r0, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002cc0)={0x3, 0x11, &(0x7f0000002d80)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000002e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)=[r1], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002ec0)={r2, 0x0, 0xe, 0x0, &(0x7f0000002f40)="d8188619000000004284860188a8", 0x0, 0x8001fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 32 (id=4158): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x4, 0x7, 0x0, 0x7, 0x0, 0x8, 0x20000, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4400, 0x4, 0x5, 0x3, 0x3c37, 0x9, 0x5, 0x0, 0xb6, 0x0, 0xffff}, 0x0, 0x7, r0, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002cc0)={0x3, 0x11, &(0x7f0000002d80)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000002e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)=[r1], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002ec0)={r2, 0x0, 0xe, 0x0, &(0x7f0000002f40)="d8188619000000004284860188a8", 0x0, 0x8001fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): _slave_1: link becomes ready [ 331.227832][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.241841][T12674] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.254392][T12674] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.263125][T12674] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.272427][T12674] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.301292][T12860] netlink: 'syz.1.3249': attribute type 10 has an invalid length. [ 331.371135][T12860] team0: Device hsr_slave_1 failed to register rx_handler [ 331.585562][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.593628][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.602789][ T7057] Bluetooth: hci0: command 0x040f tx timeout [ 331.611680][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 331.631056][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.649278][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.693619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 332.135000][ T4263] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.189874][ T4263] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.211489][T12899] netlink: 'syz.1.3263': attribute type 10 has an invalid length. [ 332.229146][T12899] team0: Device hsr_slave_1 failed to register rx_handler [ 332.280869][T12892] rxe_eth0 speed is unknown, defaulting to 1000 [ 332.304415][ T4263] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.423310][ T4263] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.525233][T12892] chnl_net:caif_netlink_parms(): no params data found [ 332.579735][T12892] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.587687][T12892] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.600010][T12892] device bridge_slave_0 entered promiscuous mode [ 332.611524][T12892] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.619224][T12892] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.628180][T12892] device bridge_slave_1 entered promiscuous mode [ 332.676695][T12892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.744284][T12892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.785855][T12892] team0: Port device team_slave_0 added [ 332.794641][T12892] team0: Port device team_slave_1 added [ 332.838721][T12927] FAULT_INJECTION: forcing a failure. [ 332.838721][T12927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.859495][T12892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.873871][T12892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.910156][T12927] CPU: 1 PID: 12927 Comm: syz.1.3270 Not tainted syzkaller #0 [ 332.917774][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 332.927876][T12927] Call Trace: [ 332.931160][T12927] [ 332.934096][T12927] dump_stack_lvl+0x188/0x250 [ 332.938955][T12927] ? show_regs_print_info+0x20/0x20 [ 332.944155][T12927] ? load_image+0x410/0x410 [ 332.948672][T12927] ? __lock_acquire+0x7d40/0x7d40 [ 332.953708][T12927] should_fail+0x383/0x4b0 [ 332.958125][T12927] _copy_to_user+0x2e/0x130 [ 332.962719][T12927] simple_read_from_buffer+0xe3/0x150 [ 332.968088][T12927] proc_fail_nth_read+0x1a6/0x220 [ 332.973111][T12927] ? proc_fault_inject_write+0x310/0x310 [ 332.978741][T12927] ? fsnotify_perm+0x254/0x560 [ 332.983506][T12927] ? proc_fault_inject_write+0x310/0x310 [ 332.989218][T12927] vfs_read+0x2ff/0xd50 [ 332.993383][T12927] ? __lock_acquire+0x7d40/0x7d40 [ 332.998399][T12927] ? kernel_read+0x1e0/0x1e0 [ 333.002989][T12927] ? mutex_lock_nested+0x17/0x20 [ 333.007920][T12927] ? __fdget_pos+0x2bf/0x370 [ 333.012503][T12927] ? ksys_read+0x70/0x260 [ 333.016821][T12927] ksys_read+0x153/0x260 [ 333.021051][T12927] ? vfs_write+0xd70/0xd70 [ 333.025455][T12927] ? lockdep_hardirqs_on+0x94/0x140 [ 333.030647][T12927] do_syscall_64+0x4c/0xa0 [ 333.035052][T12927] ? clear_bhb_loop+0x30/0x80 [ 333.039716][T12927] ? clear_bhb_loop+0x30/0x80 [ 333.044382][T12927] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.050264][T12927] RIP: 0033:0x7f97706e580e [ 333.054679][T12927] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 333.074336][T12927] RSP: 002b:00007f976e971fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.082764][T12927] RAX: ffffffffffffffda RBX: 00007f976e9726c0 RCX: 00007f97706e580e [ 333.090817][T12927] RDX: 000000000000000f RSI: 00007f976e9720a0 RDI: 0000000000000005 [ 333.098787][T12927] RBP: 00007f976e972090 R08: 0000000000000000 R09: 0000000000000000 [ 333.106860][T12927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.114820][T12927] R13: 00007f97709a2038 R14: 00007f97709a1fa0 R15: 00007fffddef8708 [ 333.122884][T12927] [ 333.183518][T12892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.590710][T12892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.608205][T12892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.648335][T12892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.670361][ T4263] tipc: Left network mode [ 333.688344][ T4256] Bluetooth: hci0: command 0x0419 tx timeout [ 333.746969][T12892] device hsr_slave_0 entered promiscuous mode [ 333.771427][T12892] device hsr_slave_1 entered promiscuous mode [ 333.786656][T12892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.821479][T12892] Cannot create hsr debugfs directory [ 334.154397][ T4256] Bluetooth: hci1: command 0x0409 tx timeout [ 334.580472][T12892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 334.680615][T12892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 334.696715][T12892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 334.716596][T12892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 334.733066][T13002] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3291'. [ 335.108797][T12892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.160371][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 335.183302][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 335.236024][T12892] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.317839][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 335.333486][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 335.344565][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.351695][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.383127][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 335.394876][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 335.403679][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.410936][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.454418][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 335.481661][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 335.498759][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 335.587134][ T4263] bridge0: port 3(dummy0) entered disabled state [ 335.618168][ T4263] device bridge_slave_1 left promiscuous mode [ 335.624809][ T4263] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.636786][ T4263] device bridge_slave_0 left promiscuous mode [ 335.643030][ T4263] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.669615][ T4263] device veth1_vlan left promiscuous mode [ 335.689692][ T4263] device veth0_vlan left promiscuous mode [ 336.100787][ T4263] team0 (unregistering): Port device hsr_slave_1 removed [ 336.142894][ T4263] team0 (unregistering): Port device team_slave_1 removed [ 336.161722][ T4263] team0 (unregistering): Port device team_slave_0 removed [ 336.235037][T10112] Bluetooth: hci1: command 0x041b tx timeout [ 336.271463][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 336.281030][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 336.290024][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 336.300113][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 336.311530][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 336.322599][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 336.342772][T12892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.354475][T12892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 336.373945][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 336.385391][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 336.406026][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 336.719705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 336.735721][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 336.786383][T12892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.095928][T13104] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3325'. [ 337.203363][T13104] netlink: 279 bytes leftover after parsing attributes in process `syz.0.3325'. [ 337.227260][T13104] netlink: 'syz.0.3325': attribute type 10 has an invalid length. [ 337.302139][T13112] netlink: 'syz.2.3326': attribute type 3 has an invalid length. [ 337.302228][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.322878][T13112] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3326'. [ 337.357014][T13104] device bridge_slave_1 left promiscuous mode [ 337.363196][T13113] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3326'. [ 337.379042][T13104] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.600516][T13104] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 337.654792][T13113] netlink: 'syz.2.3326': attribute type 10 has an invalid length. [ 337.678427][T13117] FAULT_INJECTION: forcing a failure. [ 337.678427][T13117] name failslab, interval 1, probability 0, space 0, times 0 [ 337.691931][ C0] Illegal XDP return value 16128, expect packet loss! [ 337.723489][T13117] CPU: 1 PID: 13117 Comm: syz.1.3328 Not tainted syzkaller #0 [ 337.731148][T13117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 337.741330][T13117] Call Trace: [ 337.744639][T13117] [ 337.747634][T13117] dump_stack_lvl+0x188/0x250 [ 337.752364][T13117] ? show_regs_print_info+0x20/0x20 [ 337.757608][T13117] ? load_image+0x410/0x410 [ 337.762262][T13117] should_fail+0x383/0x4b0 [ 337.766761][T13117] should_failslab+0x5/0x20 [ 337.771300][T13117] slab_pre_alloc_hook+0x51/0xc0 [ 337.776279][T13117] __kmalloc_node_track_caller+0x68/0x3a0 [ 337.782030][T13117] ? tcp_send_fin+0x1a2/0xe60 [ 337.786857][T13117] ? __alloc_skb+0xf4/0x750 [ 337.791482][T13117] ? tcp_send_fin+0x1a2/0xe60 [ 337.796192][T13117] __alloc_skb+0x22c/0x750 [ 337.800644][T13117] tcp_send_fin+0x1a2/0xe60 [ 337.805184][T13117] __tcp_close+0x5bc/0xf10 [ 337.809647][T13117] tcp_close+0x24/0x110 [ 337.813828][T13117] inet_release+0x139/0x180 [ 337.818367][T13117] sock_close+0xbf/0x210 [ 337.822641][T13117] ? sock_mmap+0x90/0x90 [ 337.826907][T13117] __fput+0x212/0x8c0 [ 337.830928][T13117] task_work_run+0x125/0x1a0 [ 337.835983][T13117] exit_to_user_mode_loop+0x10f/0x130 [ 337.836668][T13113] team0: Device gre0 is of different type [ 337.841560][T13117] exit_to_user_mode_prepare+0xee/0x180 [ 337.841638][T13117] syscall_exit_to_user_mode+0x16/0x40 [ 337.841664][T13117] do_syscall_64+0x58/0xa0 [ 337.862813][T13117] ? clear_bhb_loop+0x30/0x80 [ 337.867511][T13117] ? clear_bhb_loop+0x30/0x80 [ 337.872209][T13117] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 337.878121][T13117] RIP: 0033:0x7f9770724fd9 [ 337.882556][T13117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.902269][T13117] RSP: 002b:00007f976e972028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 337.910795][T13117] RAX: 0000000000000000 RBX: 00007f97709a1fa0 RCX: 00007f9770724fd9 [ 337.918782][T13117] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000010 [ 337.926766][T13117] RBP: 00007f976e972090 R08: 0000000000000000 R09: 0000000000000000 [ 337.934754][T13117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.942744][T13117] R13: 00007f97709a2038 R14: 00007f97709a1fa0 R15: 00007fffddef8708 [ 337.950769][T13117] [ 338.149846][T12424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 338.159769][ T4221] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 338.182059][T12424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 338.282166][T12892] device veth0_vlan entered promiscuous mode [ 338.314522][ T7055] Bluetooth: hci1: command 0x040f tx timeout [ 338.325872][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 338.342012][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 338.369648][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 338.390598][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 338.446013][T12892] device veth1_vlan entered promiscuous mode [ 338.532400][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 338.553553][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 338.602690][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 338.617833][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 338.643200][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 338.687896][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 338.736295][T12892] device veth0_macvtap entered promiscuous mode [ 338.766164][T13150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3339'. [ 338.788923][T12892] device veth1_macvtap entered promiscuous mode [ 338.834723][T12892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.857663][T12892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.886439][T12892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.908352][T12892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.931539][T12892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.944069][T13159] netlink: 'syz.3.3340': attribute type 3 has an invalid length. [ 338.960230][T13159] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3340'. [ 338.962538][T12892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.996656][T13160] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3340'. [ 339.021968][T12892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.051390][T12892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.089784][T12892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.119714][T12892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.152043][T12892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.189777][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.210997][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.241666][T12892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.273148][T12892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.303622][T12892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.334615][T12892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.374661][T12892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.404042][T12892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.438146][T12892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.458951][T12892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.472564][T12892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 339.490126][T12892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.512747][T12892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.549741][T12892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.577982][T12892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.590384][T12892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.602657][T12892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.643952][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.669685][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.932276][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.949504][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.981508][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 340.052846][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.074538][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.105565][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.375635][T13195] netlink: 'syz.0.3353': attribute type 3 has an invalid length. [ 340.390643][T13195] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3353'. [ 340.409155][ T4256] Bluetooth: hci1: command 0x0419 tx timeout [ 340.420001][T13201] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3353'. [ 340.451168][T13195] netlink: 'syz.0.3353': attribute type 10 has an invalid length. [ 340.753680][T13195] team0: Device gre0 is of different type [ 341.811390][T13224] netlink: 'syz.1.3363': attribute type 9 has an invalid length. [ 341.865179][T13224] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3363'. [ 342.038887][ T4221] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 342.366900][T13245] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3370'. [ 342.472983][T13245] netlink: 279 bytes leftover after parsing attributes in process `syz.2.3370'. [ 342.513172][T13251] netlink: 'syz.2.3370': attribute type 10 has an invalid length. [ 342.547975][T13251] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.567283][T13256] netlink: 'syz.1.3371': attribute type 3 has an invalid length. [ 342.594170][T13251] device bridge_slave_1 left promiscuous mode [ 342.598270][T13256] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3371'. [ 342.632684][T13259] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3371'. [ 342.649570][T13251] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.694331][T13259] netlink: 'syz.1.3371': attribute type 10 has an invalid length. [ 342.885528][T13259] team0: Device gre0 is of different type [ 343.423639][T13284] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3383'. [ 343.976364][T13306] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.3391'. [ 344.133410][T13306] netlink: 279 bytes leftover after parsing attributes in process `syz.3.3391'. [ 344.162042][T13306] netlink: 'syz.3.3391': attribute type 10 has an invalid length. [ 344.222265][T13306] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.253455][T13306] device bridge_slave_1 left promiscuous mode [ 344.263766][T13306] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.345114][T13312] netlink: 'syz.1.3392': attribute type 3 has an invalid length. [ 344.353317][T13306] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 344.460757][T13311] netlink: 'syz.1.3392': attribute type 10 has an invalid length. [ 345.183479][T13311] team0: Device gre0 is of different type [ 345.706498][T13349] __nla_validate_parse: 3 callbacks suppressed [ 345.706535][T13349] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.3405'. [ 345.819501][T13351] netlink: 279 bytes leftover after parsing attributes in process `syz.1.3405'. [ 345.865187][T13353] netlink: 'syz.1.3405': attribute type 10 has an invalid length. [ 345.936210][T13353] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.975211][T13353] device bridge_slave_1 left promiscuous mode [ 346.015172][T13353] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.078207][T13353] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 346.343263][T13368] FAULT_INJECTION: forcing a failure. [ 346.343263][T13368] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 346.387901][T13368] CPU: 1 PID: 13368 Comm: syz.0.3411 Not tainted syzkaller #0 [ 346.395435][T13368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 346.405491][T13368] Call Trace: [ 346.408821][T13368] [ 346.411775][T13368] dump_stack_lvl+0x188/0x250 [ 346.416466][T13368] ? show_regs_print_info+0x20/0x20 [ 346.421660][T13368] ? load_image+0x410/0x410 [ 346.426156][T13368] ? __lock_acquire+0x7d40/0x7d40 [ 346.431376][T13368] ? mark_lock+0x94/0x320 [ 346.435881][T13368] should_fail+0x383/0x4b0 [ 346.440312][T13368] prepare_alloc_pages+0x1e3/0x5b0 [ 346.445428][T13368] __alloc_pages+0x11b/0x480 [ 346.450031][T13368] ? zone_statistics+0x170/0x170 [ 346.454961][T13368] ? __lock_acquire+0x12df/0x7d40 [ 346.460001][T13368] alloc_pages_vma+0x2bc/0x790 [ 346.464760][T13368] wp_page_copy+0x225/0x2090 [ 346.469345][T13368] ? __lock_acquire+0x7d40/0x7d40 [ 346.474365][T13368] ? insert_page_into_pte_locked+0x470/0x470 [ 346.480334][T13368] ? _raw_spin_unlock+0x24/0x40 [ 346.485175][T13368] ? do_wp_page+0x965/0xb30 [ 346.489679][T13368] handle_mm_fault+0x1fbd/0x4440 [ 346.494667][T13368] ? get_page+0xe0/0xe0 [ 346.498827][T13368] ? vmacache_find+0x238/0x590 [ 346.503583][T13368] ? find_vma+0xd2/0x230 [ 346.507816][T13368] do_user_addr_fault+0x494/0xc90 [ 346.512844][T13368] exc_page_fault+0x60/0x100 [ 346.517425][T13368] asm_exc_page_fault+0x22/0x30 [ 346.522268][T13368] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 346.528934][T13368] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 346.548740][T13368] RSP: 0018:ffffc900034cf678 EFLAGS: 00050202 [ 346.554824][T13368] RAX: ffffffff83e74901 RBX: 0000000000000e6c RCX: 000000000000002c [ 346.562788][T13368] RDX: 0000000000000e6c RSI: ffff88802c3a0e40 RDI: 0000200000002000 [ 346.570763][T13368] RBP: ffffc900034cf7e0 R08: ffff88802c3a0e6b R09: 1ffff110058741cd [ 346.578819][T13368] R10: dffffc0000000000 R11: ffffed10058741ce R12: ffff88802c3a0000 [ 346.586891][T13368] R13: 0000000000000eff R14: 00002000000011c0 R15: 0000000000000000 [ 346.594868][T13368] ? _copy_to_iter+0x241/0x1170 [ 346.599901][T13368] _copy_to_iter+0x322/0x1170 [ 346.605035][T13368] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 346.611094][T13368] ? iov_iter_init+0x170/0x170 [ 346.615935][T13368] ? __virt_addr_valid+0x3c6/0x470 [ 346.621038][T13368] ? __phys_addr_symbol+0x2b/0x70 [ 346.626080][T13368] ? __check_object_size+0x30c/0x410 [ 346.631360][T13368] __skb_datagram_iter+0xde/0x740 [ 346.636379][T13368] ? skb_copy_datagram_iter+0x1f0/0x1f0 [ 346.641931][T13368] skb_copy_datagram_iter+0xad/0x1f0 [ 346.647222][T13368] netlink_recvmsg+0x2d3/0xe50 [ 346.651984][T13368] ? netlink_sendmsg+0xbe0/0xbe0 [ 346.656917][T13368] ? aa_sk_perm+0x7dc/0x910 [ 346.661441][T13368] ? aa_af_perm+0x340/0x340 [ 346.665946][T13368] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 346.671218][T13368] ? security_socket_recvmsg+0x85/0xb0 [ 346.676666][T13368] ? netlink_sendmsg+0xbe0/0xbe0 [ 346.681686][T13368] ____sys_recvmsg+0x2ca/0x5b0 [ 346.686441][T13368] ? __might_fault+0xb3/0x110 [ 346.691125][T13368] ? __sys_recvmsg_sock+0x40/0x40 [ 346.696149][T13368] ? import_iovec+0x6f/0xa0 [ 346.700641][T13368] ___sys_recvmsg+0x213/0x5c0 [ 346.705484][T13368] ? __sys_recvmsg+0x280/0x280 [ 346.710245][T13368] ? __lock_acquire+0x7d40/0x7d40 [ 346.715260][T13368] ? vfs_write+0xaa6/0xd70 [ 346.719673][T13368] ? __fget_files+0x402/0x470 [ 346.724397][T13368] __x64_sys_recvmsg+0x201/0x2d0 [ 346.729331][T13368] ? ___sys_recvmsg+0x5c0/0x5c0 [ 346.734345][T13368] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 346.740339][T13368] ? lockdep_hardirqs_on+0x94/0x140 [ 346.745534][T13368] do_syscall_64+0x4c/0xa0 [ 346.749941][T13368] ? clear_bhb_loop+0x30/0x80 [ 346.754619][T13368] ? clear_bhb_loop+0x30/0x80 [ 346.759467][T13368] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 346.765571][T13368] RIP: 0033:0x7f1c11d91fd9 [ 346.770020][T13368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.789711][T13368] RSP: 002b:00007f1c0ffdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 346.798131][T13368] RAX: ffffffffffffffda RBX: 00007f1c1200efa0 RCX: 00007f1c11d91fd9 [ 346.806174][T13368] RDX: 0000000000010100 RSI: 0000200000000840 RDI: 0000000000000003 [ 346.814279][T13368] RBP: 00007f1c0ffdf090 R08: 0000000000000000 R09: 0000000000000000 [ 346.822364][T13368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.830340][T13368] R13: 00007f1c1200f038 R14: 00007f1c1200efa0 R15: 00007ffff779dc78 [ 346.838319][T13368] [ 346.883400][T13372] FAULT_INJECTION: forcing a failure. [ 346.883400][T13372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.927693][T13372] CPU: 0 PID: 13372 Comm: syz.3.3414 Not tainted syzkaller #0 [ 346.935204][T13372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 346.945374][T13372] Call Trace: [ 346.948661][T13372] [ 346.951603][T13372] dump_stack_lvl+0x188/0x250 [ 346.956308][T13372] ? show_regs_print_info+0x20/0x20 [ 346.961619][T13372] ? load_image+0x410/0x410 [ 346.966144][T13372] ? __lock_acquire+0x7d40/0x7d40 [ 346.971240][T13372] should_fail+0x383/0x4b0 [ 346.975687][T13372] _copy_to_user+0x2e/0x130 [ 346.980209][T13372] simple_read_from_buffer+0xe3/0x150 [ 346.985600][T13372] proc_fail_nth_read+0x1a6/0x220 [ 346.990645][T13372] ? proc_fault_inject_write+0x310/0x310 [ 346.996293][T13372] ? vfs_read+0x2e5/0xd50 [ 347.000082][T13374] netlink: 'syz.2.3413': attribute type 3 has an invalid length. [ 347.000763][T13372] ? proc_fault_inject_write+0x310/0x310 [ 347.000818][T13372] vfs_read+0x2ff/0xd50 [ 347.018336][T13372] ? __lock_acquire+0x7d40/0x7d40 [ 347.022712][T13374] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3413'. [ 347.023385][T13372] ? kernel_read+0x1e0/0x1e0 [ 347.023430][T13372] ? mutex_lock_nested+0x17/0x20 [ 347.023452][T13372] ? __fdget_pos+0x2bf/0x370 [ 347.023470][T13372] ? ksys_read+0x70/0x260 [ 347.051218][T13372] ksys_read+0x153/0x260 [ 347.055521][T13372] ? vfs_write+0xd70/0xd70 [ 347.059965][T13372] ? syscall_enter_from_user_mode+0x2a/0x70 [ 347.065890][T13372] do_syscall_64+0x4c/0xa0 [ 347.070337][T13372] ? clear_bhb_loop+0x30/0x80 [ 347.075028][T13372] ? clear_bhb_loop+0x30/0x80 [ 347.079717][T13372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.085621][T13372] RIP: 0033:0x7f60e1ea180e [ 347.090166][T13372] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 347.097346][T13374] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3413'. [ 347.109981][T13372] RSP: 002b:00007f60e012dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.110011][T13372] RAX: ffffffffffffffda RBX: 00007f60e012e6c0 RCX: 00007f60e1ea180e [ 347.110023][T13372] RDX: 000000000000000f RSI: 00007f60e012e0a0 RDI: 0000000000000005 [ 347.110034][T13372] RBP: 00007f60e012e090 R08: 0000000000000000 R09: 0000000000000000 [ 347.110044][T13372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.110053][T13372] R13: 00007f60e215e038 R14: 00007f60e215dfa0 R15: 00007ffd70a90f38 [ 347.110081][T13372] [ 347.176870][T13383] netlink: 'syz.2.3413': attribute type 10 has an invalid length. [ 347.329407][T13383] team0: Device gre0 is of different type [ 347.844466][T13409] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3422'. [ 347.973265][T13414] FAULT_INJECTION: forcing a failure. [ 347.973265][T13414] name failslab, interval 1, probability 0, space 0, times 0 [ 347.993405][T13414] CPU: 0 PID: 13414 Comm: syz.3.3428 Not tainted syzkaller #0 [ 348.000914][T13414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 348.010991][T13414] Call Trace: [ 348.014288][T13414] [ 348.017324][T13414] dump_stack_lvl+0x188/0x250 [ 348.022030][T13414] ? show_regs_print_info+0x20/0x20 [ 348.027261][T13414] ? load_image+0x410/0x410 [ 348.031809][T13414] should_fail+0x383/0x4b0 [ 348.036263][T13414] ? bpf_clone_redirect+0x1c2/0x460 [ 348.041576][T13414] should_failslab+0x5/0x20 [ 348.046105][T13414] slab_pre_alloc_hook+0x51/0xc0 [ 348.051065][T13414] ? bpf_clone_redirect+0x1c2/0x460 [ 348.056293][T13414] __kmalloc_node_track_caller+0x68/0x3a0 [ 348.062034][T13414] ? bpf_clone_redirect+0x1c2/0x460 [ 348.067515][T13414] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.073704][T13414] ? bpf_clone_redirect+0x1c2/0x460 [ 348.078924][T13414] pskb_expand_head+0x128/0x1100 [ 348.083985][T13414] bpf_clone_redirect+0x1c2/0x460 [ 348.089044][T13414] bpf_prog_2c2e575695d386cb+0x19/0x468 [ 348.094609][T13414] bpf_test_run+0x4ae/0x800 [ 348.099167][T13414] ? convert___skb_to_skb+0x4c0/0x4c0 [ 348.104559][T13414] ? kasan_check_range+0x80/0x290 [ 348.109697][T13414] ? bpf_prog_test_run_skb+0x6c9/0x1190 [ 348.115266][T13414] ? convert___skb_to_skb+0x3d/0x4c0 [ 348.120679][T13414] bpf_prog_test_run_skb+0x9fb/0x1190 [ 348.126194][T13414] ? cpu_online+0x60/0x60 [ 348.130640][T13414] bpf_prog_test_run+0x31c/0x390 [ 348.135612][T13414] __sys_bpf+0x5a5/0x6f0 [ 348.139881][T13414] ? bpf_link_show_fdinfo+0x380/0x380 [ 348.145288][T13414] ? __sys_bpf+0xd/0x6f0 [ 348.149556][T13414] __x64_sys_bpf+0x78/0x90 [ 348.154000][T13414] do_syscall_64+0x4c/0xa0 [ 348.158432][T13414] ? clear_bhb_loop+0x30/0x80 [ 348.163123][T13414] ? clear_bhb_loop+0x30/0x80 [ 348.167833][T13414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.173788][T13414] RIP: 0033:0x7f60e1ee0fd9 [ 348.178217][T13414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.197834][T13414] RSP: 002b:00007f60e012e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 348.206464][T13414] RAX: ffffffffffffffda RBX: 00007f60e215dfa0 RCX: 00007f60e1ee0fd9 [ 348.214457][T13414] RDX: 0000000000000050 RSI: 0000200000000700 RDI: 000000000000000a [ 348.222451][T13414] RBP: 00007f60e012e090 R08: 0000000000000000 R09: 0000000000000000 [ 348.230440][T13414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.238429][T13414] R13: 00007f60e215e038 R14: 00007f60e215dfa0 R15: 00007ffd70a90f38 [ 348.246438][T13414] [ 348.783173][T13433] netlink: 'syz.2.3436': attribute type 3 has an invalid length. [ 348.809786][T13433] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3436'. [ 348.878339][T13433] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3436'. [ 348.918991][T13433] netlink: 'syz.2.3436': attribute type 10 has an invalid length. [ 349.012336][T13447] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.3440'. [ 349.429668][T13433] team0: Device gre0 is of different type [ 350.509085][T13487] netlink: 'syz.3.3453': attribute type 10 has an invalid length. [ 350.520949][T13487] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3453'. [ 350.535763][T13487] device hsr0 entered promiscuous mode [ 350.556443][T13487] bridge0: port 2(hsr0) entered blocking state [ 350.573315][T13487] bridge0: port 2(hsr0) entered disabled state [ 350.607169][T13494] netlink: 'syz.0.3454': attribute type 3 has an invalid length. [ 350.632503][T13487] bridge0: port 2(hsr0) entered blocking state [ 350.639762][T13487] bridge0: port 2(hsr0) entered forwarding state [ 350.651540][T13494] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3454'. [ 350.722187][T13491] netlink: 'syz.0.3454': attribute type 10 has an invalid length. [ 351.094786][T13491] team0: Device gre0 is of different type [ 352.508308][T13555] netlink: 'syz.3.3476': attribute type 10 has an invalid length. [ 352.567114][T13555] __nla_validate_parse: 1 callbacks suppressed [ 352.567131][T13555] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3476'. [ 352.715573][T13557] netlink: 'syz.2.3481': attribute type 3 has an invalid length. [ 352.745630][T13557] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3481'. [ 352.793413][T13557] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3481'. [ 352.852906][T13564] netlink: 'syz.2.3481': attribute type 10 has an invalid length. [ 353.046098][T13564] team0: Device gre0 is of different type [ 354.585266][T13601] netlink: 'syz.2.3493': attribute type 10 has an invalid length. [ 354.639124][T13601] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3493'. [ 355.882990][T13655] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.3511'. [ 355.905250][T13658] netlink: 'syz.1.3513': attribute type 10 has an invalid length. [ 355.913390][T13658] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3513'. [ 355.933905][T13658] device hsr0 entered promiscuous mode [ 355.946535][T13658] bridge0: port 2(hsr0) entered blocking state [ 355.969719][T13658] bridge0: port 2(hsr0) entered disabled state [ 355.994669][T13658] bridge0: port 2(hsr0) entered blocking state [ 356.001012][T13658] bridge0: port 2(hsr0) entered forwarding state [ 357.394781][T13698] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3528'. [ 357.545939][T13704] FAULT_INJECTION: forcing a failure. [ 357.545939][T13704] name failslab, interval 1, probability 0, space 0, times 0 [ 357.798875][T13711] netlink: 'syz.0.3530': attribute type 10 has an invalid length. [ 357.813897][T13704] CPU: 1 PID: 13704 Comm: syz.3.3529 Not tainted syzkaller #0 [ 357.821542][T13704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 357.831786][T13704] Call Trace: [ 357.835081][T13704] [ 357.838013][T13704] dump_stack_lvl+0x188/0x250 [ 357.842721][T13704] ? show_regs_print_info+0x20/0x20 [ 357.847912][T13704] ? load_image+0x410/0x410 [ 357.852511][T13704] ? __lock_acquire+0x7d40/0x7d40 [ 357.857532][T13704] should_fail+0x383/0x4b0 [ 357.862059][T13704] should_failslab+0x5/0x20 [ 357.866659][T13704] slab_pre_alloc_hook+0x51/0xc0 [ 357.871609][T13704] kmem_cache_alloc_node+0x47/0x2c0 [ 357.876794][T13704] ? __alloc_skb+0xf4/0x750 [ 357.881289][T13704] ? __lock_acquire+0x7d40/0x7d40 [ 357.886324][T13704] __alloc_skb+0xf4/0x750 [ 357.890644][T13704] sk_stream_alloc_skb+0x204/0xb50 [ 357.895747][T13704] tcp_connect+0x16d6/0x4970 [ 357.900345][T13704] ? prandom_u32+0x217/0x250 [ 357.904925][T13704] tcp_v6_connect+0x11cf/0x1a10 [ 357.909788][T13704] ? tcp_v6_pre_connect+0xf0/0xf0 [ 357.914800][T13704] ? mark_lock+0x94/0x320 [ 357.919120][T13704] ? tcp_sendmsg_fastopen+0x1d5/0x600 [ 357.924497][T13704] ? tcp_sendmsg_locked+0x2efb/0x3330 [ 357.929864][T13704] ? tcp_sendmsg+0x2b/0x40 [ 357.934449][T13704] ? ____sys_sendmsg+0x5be/0x8f0 [ 357.939376][T13704] ? ___sys_sendmsg+0x236/0x2e0 [ 357.944214][T13704] ? do_syscall_64+0x4c/0xa0 [ 357.948995][T13704] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 357.955058][T13704] __inet_stream_connect+0x244/0xd80 [ 357.960427][T13704] ? inet_dgram_connect+0x340/0x340 [ 357.965710][T13704] tcp_sendmsg_fastopen+0x38f/0x600 [ 357.970904][T13704] tcp_sendmsg_locked+0x2efb/0x3330 [ 357.976090][T13704] ? aa_sk_perm+0x910/0x910 [ 357.980595][T13704] ? mark_lock+0x94/0x320 [ 357.984913][T13704] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 357.990892][T13704] ? lock_chain_count+0x20/0x20 [ 357.995736][T13704] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 358.001797][T13704] ? tcp_free_fastopen_req+0x70/0x70 [ 358.007086][T13704] tcp_sendmsg+0x2b/0x40 [ 358.011319][T13704] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 358.016603][T13704] ____sys_sendmsg+0x5be/0x8f0 [ 358.021384][T13704] ? __sys_sendmsg_sock+0x30/0x30 [ 358.026430][T13704] ? import_iovec+0x6f/0xa0 [ 358.030955][T13704] ___sys_sendmsg+0x236/0x2e0 [ 358.035636][T13704] ? __sys_sendmsg+0x290/0x290 [ 358.040428][T13704] __se_sys_sendmsg+0x1b7/0x2a0 [ 358.045393][T13704] ? __x64_sys_sendmsg+0x80/0x80 [ 358.050319][T13704] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 358.056306][T13704] ? lockdep_hardirqs_on+0x94/0x140 [ 358.061525][T13704] do_syscall_64+0x4c/0xa0 [ 358.066060][T13704] ? clear_bhb_loop+0x30/0x80 [ 358.070742][T13704] ? clear_bhb_loop+0x30/0x80 [ 358.075424][T13704] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 358.081326][T13704] RIP: 0033:0x7f60e1ee0fd9 [ 358.085741][T13704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.105521][T13704] RSP: 002b:00007f60e010d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.114105][T13704] RAX: ffffffffffffffda RBX: 00007f60e215e090 RCX: 00007f60e1ee0fd9 [ 358.122091][T13704] RDX: 0000000020000001 RSI: 0000200000000780 RDI: 0000000000000004 [ 358.130057][T13704] RBP: 00007f60e010d090 R08: 0000000000000000 R09: 0000000000000000 [ 358.138017][T13704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.146069][T13704] R13: 00007f60e215e128 R14: 00007f60e215e090 R15: 00007ffd70a90f38 [ 358.154159][T13704] [ 358.158530][T13711] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3530'. [ 358.194266][T13711] device hsr0 entered promiscuous mode [ 358.200078][T13711] bridge0: port 2(hsr0) entered blocking state [ 358.281120][T13711] bridge0: port 2(hsr0) entered disabled state [ 358.305622][T13711] bridge0: port 2(hsr0) entered blocking state [ 358.311877][T13711] bridge0: port 2(hsr0) entered forwarding state [ 358.491848][T13734] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.3537'. [ 358.525265][T13726] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3537'. [ 359.101333][T13741] FAULT_INJECTION: forcing a failure. [ 359.101333][T13741] name failslab, interval 1, probability 0, space 0, times 0 [ 359.154164][T13741] CPU: 0 PID: 13741 Comm: syz.4.3539 Not tainted syzkaller #0 [ 359.161716][T13741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 359.172073][T13741] Call Trace: [ 359.175368][T13741] [ 359.178310][T13741] dump_stack_lvl+0x188/0x250 [ 359.183270][T13741] ? show_regs_print_info+0x20/0x20 [ 359.188499][T13741] ? load_image+0x410/0x410 [ 359.193029][T13741] ? __lock_acquire+0x7d40/0x7d40 [ 359.198094][T13741] should_fail+0x383/0x4b0 [ 359.202631][T13741] should_failslab+0x5/0x20 [ 359.207289][T13741] slab_pre_alloc_hook+0x51/0xc0 [ 359.212248][T13741] __kmalloc+0x6b/0x340 [ 359.216422][T13741] ? security_sk_alloc+0x47/0x130 [ 359.221562][T13741] security_sk_alloc+0x47/0x130 [ 359.226438][T13741] sk_prot_alloc+0x101/0x210 [ 359.231048][T13741] ? sk_alloc+0x1d/0x310 [ 359.235312][T13741] sk_alloc+0x2f/0x310 [ 359.239421][T13741] bpf_prog_test_run_skb+0x23c/0x1190 [ 359.244808][T13741] ? __fget_files+0x402/0x470 [ 359.249605][T13741] ? cpu_online+0x60/0x60 [ 359.253964][T13741] bpf_prog_test_run+0x31c/0x390 [ 359.258924][T13741] __sys_bpf+0x5a5/0x6f0 [ 359.263266][T13741] ? bpf_link_show_fdinfo+0x380/0x380 [ 359.268697][T13741] __x64_sys_bpf+0x78/0x90 [ 359.273227][T13741] do_syscall_64+0x4c/0xa0 [ 359.278050][T13741] ? clear_bhb_loop+0x30/0x80 [ 359.282756][T13741] ? clear_bhb_loop+0x30/0x80 [ 359.287453][T13741] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 359.293379][T13741] RIP: 0033:0x7f05ac192fd9 [ 359.297811][T13741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.317536][T13741] RSP: 002b:00007f05aa3e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 359.325971][T13741] RAX: ffffffffffffffda RBX: 00007f05ac40ffa0 RCX: 00007f05ac192fd9 [ 359.333964][T13741] RDX: 000000000000002c RSI: 00002000000041c0 RDI: 000000000000000a [ 359.342134][T13741] RBP: 00007f05aa3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 359.350127][T13741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.358330][T13741] R13: 00007f05ac410038 R14: 00007f05ac40ffa0 R15: 00007ffe73f61e88 [ 359.366518][T13741] [ 359.454756][T13750] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3541'. [ 360.097029][T13766] netlink: 'syz.0.3549': attribute type 3 has an invalid length. [ 360.120665][T13766] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3549'. [ 360.189997][T13766] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3549'. [ 360.220541][T13762] netlink: 'syz.4.3548': attribute type 10 has an invalid length. [ 360.241607][T13762] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3548'. [ 360.268172][T13762] device hsr0 entered promiscuous mode [ 360.323058][T13762] bridge0: port 3(hsr0) entered blocking state [ 360.354330][T13762] bridge0: port 3(hsr0) entered disabled state [ 360.482132][T13762] bridge0: port 3(hsr0) entered blocking state [ 360.489352][T13762] bridge0: port 3(hsr0) entered forwarding state [ 360.537433][T13766] netlink: 'syz.0.3549': attribute type 10 has an invalid length. [ 361.089107][T13766] team0: Device gre0 is of different type [ 361.251354][T13781] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3554'. [ 361.480527][T13781] netlink: 134552 bytes leftover after parsing attributes in process `syz.0.3554'. [ 361.650727][T13793] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3556'. [ 361.934805][T13802] device syzkaller0 entered promiscuous mode [ 362.069604][T13803] rxe_eth0 speed is unknown, defaulting to 1000 [ 362.131187][T13812] netlink: 'syz.3.3565': attribute type 3 has an invalid length. [ 362.299686][T13812] netlink: 'syz.3.3565': attribute type 10 has an invalid length. [ 363.152367][T13812] team0: Device gre0 is of different type [ 363.390809][T13820] __nla_validate_parse: 3 callbacks suppressed [ 363.390827][T13820] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3567'. [ 363.612672][ T4221] tipc: Left network mode [ 363.970896][T13841] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3574'. [ 364.214734][T13841] netlink: 134552 bytes leftover after parsing attributes in process `syz.3.3574'. [ 365.084278][T13864] netlink: 'syz.3.3582': attribute type 10 has an invalid length. [ 365.092589][T13864] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3582'. [ 365.125562][T13873] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3585'. [ 365.199637][T13875] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3586'. [ 365.270485][T13870] netlink: 'syz.2.3581': attribute type 3 has an invalid length. [ 365.304903][T13870] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3581'. [ 365.337391][T13876] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3581'. [ 365.351645][T13875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.426918][T13875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.503260][T13875] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 365.579595][T13875] bond0 (unregistering): Released all slaves [ 365.697395][T13876] netlink: 'syz.2.3581': attribute type 10 has an invalid length. [ 365.760018][T13886] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.3590'. [ 365.999275][T13876] team0: Device gre0 is of different type [ 366.108862][T13892] FAULT_INJECTION: forcing a failure. [ 366.108862][T13892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.217924][T13892] CPU: 1 PID: 13892 Comm: syz.1.3591 Not tainted syzkaller #0 [ 366.225541][T13892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 366.235648][T13892] Call Trace: [ 366.238941][T13892] [ 366.241882][T13892] dump_stack_lvl+0x188/0x250 [ 366.246574][T13892] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 366.252756][T13892] ? show_regs_print_info+0x20/0x20 [ 366.257985][T13892] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 366.264183][T13892] ? dump_stack+0x5/0x20 [ 366.268453][T13892] should_fail+0x383/0x4b0 [ 366.272901][T13892] _copy_from_user+0x2e/0x170 [ 366.277640][T13892] __sys_bpf+0x26d/0x6f0 [ 366.281905][T13892] ? bpf_link_show_fdinfo+0x380/0x380 [ 366.287410][T13892] __x64_sys_bpf+0x78/0x90 [ 366.291942][T13892] do_syscall_64+0x4c/0xa0 [ 366.296639][T13892] ? clear_bhb_loop+0x30/0x80 [ 366.301425][T13892] ? clear_bhb_loop+0x30/0x80 [ 366.306216][T13892] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 366.312127][T13892] RIP: 0033:0x7f9770724fd9 [ 366.316654][T13892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.336479][T13892] RSP: 002b:00007f976e972028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.344889][T13892] RAX: ffffffffffffffda RBX: 00007f97709a1fa0 RCX: 00007f9770724fd9 [ 366.352999][T13892] RDX: 0000000000000022 RSI: 0000200000000140 RDI: 0000000000000005 [ 366.360963][T13892] RBP: 00007f976e972090 R08: 0000000000000000 R09: 0000000000000000 [ 366.368924][T13892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.376880][T13892] R13: 00007f97709a2038 R14: 00007f97709a1fa0 R15: 00007fffddef8708 [ 366.384852][T13892] [ 366.540318][T13890] netlink: 279 bytes leftover after parsing attributes in process `syz.3.3590'. [ 366.776729][ T4221] device hsr_slave_0 left promiscuous mode [ 366.800741][ T4221] device hsr_slave_1 left promiscuous mode [ 366.807903][ T4221] bridge0: port 1(hsr0) entered disabled state [ 366.985463][ T4221] bridge0: port 3(dummy0) entered disabled state [ 367.065412][ T4221] device bridge_slave_1 left promiscuous mode [ 367.071657][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.598937][ T4221] device veth1_vlan left promiscuous mode [ 367.616292][ T4221] device veth0_vlan left promiscuous mode [ 367.736554][T13939] FAULT_INJECTION: forcing a failure. [ 367.736554][T13939] name failslab, interval 1, probability 0, space 0, times 0 [ 367.821225][T13939] CPU: 0 PID: 13939 Comm: syz.0.3606 Not tainted syzkaller #0 [ 367.828733][T13939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 367.838894][T13939] Call Trace: [ 367.842182][T13939] [ 367.845122][T13939] dump_stack_lvl+0x188/0x250 [ 367.849820][T13939] ? show_regs_print_info+0x20/0x20 [ 367.855031][T13939] ? load_image+0x410/0x410 [ 367.859575][T13939] should_fail+0x383/0x4b0 [ 367.864027][T13939] should_failslab+0x5/0x20 [ 367.868544][T13939] slab_pre_alloc_hook+0x51/0xc0 [ 367.873493][T13939] ? skb_clone+0x1bd/0x350 [ 367.877926][T13939] kmem_cache_alloc+0x3d/0x280 [ 367.882710][T13939] skb_clone+0x1bd/0x350 [ 367.886973][T13939] __netlink_deliver_tap+0x3cb/0x7c0 [ 367.892284][T13939] netlink_deliver_tap+0x16c/0x180 [ 367.897415][T13939] netlink_unicast+0x7f0/0x9e0 [ 367.902212][T13939] netlink_sendmsg+0x8ba/0xbe0 [ 367.907003][T13939] ? netlink_getsockopt+0x570/0x570 [ 367.912220][T13939] ? aa_sock_msg_perm+0x94/0x150 [ 367.917177][T13939] ? apparmor_socket_sendmsg+0x173/0x230 [ 367.922960][T13939] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 367.928256][T13939] ? security_socket_sendmsg+0x7c/0xa0 [ 367.933731][T13939] ? netlink_getsockopt+0x570/0x570 [ 367.938952][T13939] ____sys_sendmsg+0x5be/0x8f0 [ 367.943730][T13939] ? __sys_sendmsg_sock+0x30/0x30 [ 367.948787][T13939] ? import_iovec+0x6f/0xa0 [ 367.953299][T13939] ___sys_sendmsg+0x236/0x2e0 [ 367.957990][T13939] ? __sys_sendmsg+0x290/0x290 [ 367.962796][T13939] __se_sys_sendmsg+0x1b7/0x2a0 [ 367.967660][T13939] ? __x64_sys_sendmsg+0x80/0x80 [ 367.972595][T13939] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 367.978589][T13939] ? lockdep_hardirqs_on+0x94/0x140 [ 367.983878][T13939] do_syscall_64+0x4c/0xa0 [ 367.988290][T13939] ? clear_bhb_loop+0x30/0x80 [ 367.992979][T13939] ? clear_bhb_loop+0x30/0x80 [ 367.997799][T13939] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 368.003723][T13939] RIP: 0033:0x7f1c11d91fd9 [ 368.008153][T13939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.027955][T13939] RSP: 002b:00007f1c0ffdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.036380][T13939] RAX: ffffffffffffffda RBX: 00007f1c1200efa0 RCX: 00007f1c11d91fd9 [ 368.044352][T13939] RDX: 0000000020004800 RSI: 0000200000000180 RDI: 0000000000000005 [ 368.052323][T13939] RBP: 00007f1c0ffdf090 R08: 0000000000000000 R09: 0000000000000000 [ 368.060304][T13939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.068359][T13939] R13: 00007f1c1200f038 R14: 00007f1c1200efa0 R15: 00007ffff779dc78 [ 368.076349][T13939] [ 368.522989][ T4221] team0 (unregistering): Port device team_slave_1 removed [ 368.566547][ T4221] team0 (unregistering): Port device team_slave_0 removed [ 368.940355][T13939] __nla_validate_parse: 4 callbacks suppressed [ 368.940392][T13939] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3606'. [ 369.030586][T13947] netlink: 279 bytes leftover after parsing attributes in process `syz.2.3605'. [ 369.701818][T13966] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3616'. [ 370.075112][T13977] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.3620'. [ 370.163809][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 370.297832][T13980] netlink: 279 bytes leftover after parsing attributes in process `syz.1.3620'. [ 370.432106][T13977] netlink: 'syz.1.3620': attribute type 10 has an invalid length. [ 370.598068][T13996] FAULT_INJECTION: forcing a failure. [ 370.598068][T13996] name failslab, interval 1, probability 0, space 0, times 0 [ 370.643905][T13996] CPU: 1 PID: 13996 Comm: syz.2.3626 Not tainted syzkaller #0 [ 370.651416][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 370.661489][T13996] Call Trace: [ 370.664864][T13996] [ 370.667805][T13996] dump_stack_lvl+0x188/0x250 [ 370.672610][T13996] ? show_regs_print_info+0x20/0x20 [ 370.677828][T13996] ? load_image+0x410/0x410 [ 370.682360][T13996] ? __might_sleep+0xf0/0xf0 [ 370.687316][T13996] ? __lock_acquire+0x7d40/0x7d40 [ 370.692361][T13996] should_fail+0x383/0x4b0 [ 370.696799][T13996] should_failslab+0x5/0x20 [ 370.701321][T13996] slab_pre_alloc_hook+0x51/0xc0 [ 370.706278][T13996] __kmalloc+0x6b/0x340 [ 370.710461][T13996] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 370.716202][T13996] tomoyo_realpath_from_path+0xed/0x5e0 [ 370.721983][T13996] tomoyo_path_number_perm+0x251/0x6b0 [ 370.727549][T13996] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 370.733368][T13996] ? ksys_write+0x1d4/0x260 [ 370.738014][T13996] security_file_ioctl+0x6c/0xa0 [ 370.743035][T13996] __se_sys_ioctl+0x48/0x170 [ 370.747622][T13996] do_syscall_64+0x4c/0xa0 [ 370.752037][T13996] ? clear_bhb_loop+0x30/0x80 [ 370.756701][T13996] ? clear_bhb_loop+0x30/0x80 [ 370.761373][T13996] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 370.767257][T13996] RIP: 0033:0x7f57a6d42fd9 [ 370.771672][T13996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.791881][T13996] RSP: 002b:00007f57a4f90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.800290][T13996] RAX: ffffffffffffffda RBX: 00007f57a6fbffa0 RCX: 00007f57a6d42fd9 [ 370.808251][T13996] RDX: 0000200000001a80 RSI: 0000000000008922 RDI: 0000000000000007 [ 370.816311][T13996] RBP: 00007f57a4f90090 R08: 0000000000000000 R09: 0000000000000000 [ 370.824376][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.832344][T13996] R13: 00007f57a6fc0038 R14: 00007f57a6fbffa0 R15: 00007fff322030c8 [ 370.840436][T13996] [ 371.111459][T14007] netlink: 'syz.4.3628': attribute type 10 has an invalid length. [ 371.197110][T14007] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3628'. [ 371.339291][T14010] netlink: 'syz.0.3630': attribute type 10 has an invalid length. [ 371.377989][T14010] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3630'. [ 371.513151][T13996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 371.576801][T14013] FAULT_INJECTION: forcing a failure. [ 371.576801][T14013] name failslab, interval 1, probability 0, space 0, times 0 [ 371.672155][T14013] CPU: 0 PID: 14013 Comm: syz.1.3631 Not tainted syzkaller #0 [ 371.679664][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 371.689872][T14013] Call Trace: [ 371.693177][T14013] [ 371.696138][T14013] dump_stack_lvl+0x188/0x250 [ 371.700844][T14013] ? show_regs_print_info+0x20/0x20 [ 371.706070][T14013] ? load_image+0x410/0x410 [ 371.710599][T14013] ? __might_sleep+0xf0/0xf0 [ 371.715224][T14013] ? __lock_acquire+0x7d40/0x7d40 [ 371.720377][T14013] should_fail+0x383/0x4b0 [ 371.724825][T14013] should_failslab+0x5/0x20 [ 371.729356][T14013] slab_pre_alloc_hook+0x51/0xc0 [ 371.734320][T14013] __kmalloc_node_track_caller+0x68/0x3a0 [ 371.740073][T14013] ? netlink_sendmsg+0x654/0xbe0 [ 371.745033][T14013] ? __alloc_skb+0xf4/0x750 [ 371.749748][T14013] ? netlink_sendmsg+0x654/0xbe0 [ 371.754896][T14013] __alloc_skb+0x22c/0x750 [ 371.759342][T14013] netlink_sendmsg+0x654/0xbe0 [ 371.764138][T14013] ? netlink_getsockopt+0x570/0x570 [ 371.769359][T14013] ? aa_sock_msg_perm+0x94/0x150 [ 371.774469][T14013] ? apparmor_socket_sendmsg+0x88/0x230 [ 371.780063][T14013] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 371.785466][T14013] ? security_socket_sendmsg+0x7c/0xa0 [ 371.790950][T14013] ? netlink_getsockopt+0x570/0x570 [ 371.796176][T14013] ____sys_sendmsg+0x5be/0x8f0 [ 371.800967][T14013] ? __sys_sendmsg_sock+0x30/0x30 [ 371.806013][T14013] ? import_iovec+0x6f/0xa0 [ 371.810536][T14013] ___sys_sendmsg+0x236/0x2e0 [ 371.815246][T14013] ? __sys_sendmsg+0x290/0x290 [ 371.820069][T14013] __se_sys_sendmsg+0x1b7/0x2a0 [ 371.825036][T14013] ? __x64_sys_sendmsg+0x80/0x80 [ 371.830018][T14013] ? syscall_enter_from_user_mode+0x2a/0x70 [ 371.835937][T14013] do_syscall_64+0x4c/0xa0 [ 371.840369][T14013] ? clear_bhb_loop+0x30/0x80 [ 371.845058][T14013] ? clear_bhb_loop+0x30/0x80 [ 371.849919][T14013] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 371.855825][T14013] RIP: 0033:0x7f9770724fd9 [ 371.860249][T14013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.880081][T14013] RSP: 002b:00007f976e972028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.888511][T14013] RAX: ffffffffffffffda RBX: 00007f97709a1fa0 RCX: 00007f9770724fd9 [ 371.896669][T14013] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 371.904742][T14013] RBP: 00007f976e972090 R08: 0000000000000000 R09: 0000000000000000 [ 371.912923][T14013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.920908][T14013] R13: 00007f97709a2038 R14: 00007f97709a1fa0 R15: 00007fffddef8708 [ 371.929000][T14013] [ 372.473420][T14040] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3637'. [ 372.618122][T14040] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.691221][T14040] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.747124][T14040] bond0 (unregistering): Released all slaves [ 372.817967][T14048] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3638'. [ 373.294215][T14061] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3643'. [ 373.369298][T14066] netlink: 'syz.3.3644': attribute type 10 has an invalid length. [ 373.842897][T14069] netlink: 'syz.4.3645': attribute type 10 has an invalid length. [ 374.027283][T14073] __nla_validate_parse: 2 callbacks suppressed [ 374.027317][T14073] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3647'. [ 374.194466][T14079] FAULT_INJECTION: forcing a failure. [ 374.194466][T14079] name failslab, interval 1, probability 0, space 0, times 0 [ 374.228499][T14079] CPU: 1 PID: 14079 Comm: syz.0.3650 Not tainted syzkaller #0 [ 374.236093][T14079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 374.246159][T14079] Call Trace: [ 374.249447][T14079] [ 374.252379][T14079] dump_stack_lvl+0x188/0x250 [ 374.257069][T14079] ? show_regs_print_info+0x20/0x20 [ 374.262314][T14079] ? load_image+0x410/0x410 [ 374.266853][T14079] ? rcu_lock_release+0x5/0x20 [ 374.271639][T14079] should_fail+0x383/0x4b0 [ 374.276244][T14079] should_failslab+0x5/0x20 [ 374.280764][T14079] slab_pre_alloc_hook+0x51/0xc0 [ 374.285720][T14079] ? __nf_conntrack_alloc+0x93/0x370 [ 374.291023][T14079] kmem_cache_alloc+0x3d/0x280 [ 374.295806][T14079] __nf_conntrack_alloc+0x93/0x370 [ 374.301029][T14079] init_conntrack+0x2fd/0x1530 [ 374.305914][T14079] ? get_l4proto+0x670/0x670 [ 374.310609][T14079] ? early_drop+0x800/0x800 [ 374.315135][T14079] ? nf_conntrack_find_get+0x640/0x640 [ 374.320719][T14079] ? __siphash_unaligned+0x286/0x3d0 [ 374.326037][T14079] nf_conntrack_in+0xd76/0x17b0 [ 374.330953][T14079] ? nf_ct_pernet+0x240/0x240 [ 374.335941][T14079] ? mark_lock+0x94/0x320 [ 374.340293][T14079] ? ipv4_conntrack_defrag+0x284/0x590 [ 374.345860][T14079] ? ipv4_conntrack_local+0x11f/0x200 [ 374.351255][T14079] ? ipv4_conntrack_in+0x20/0x20 [ 374.356223][T14079] nf_hook_slow+0xb9/0x200 [ 374.360668][T14079] ? nf_hook+0x360/0x360 [ 374.364949][T14079] nf_hook+0x205/0x360 [ 374.369070][T14079] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 374.375249][T14079] ? __ip_local_out+0x5e0/0x5e0 [ 374.380220][T14079] ? nf_hook+0x360/0x360 [ 374.384579][T14079] ? csum_partial+0x31a/0x440 [ 374.389296][T14079] __ip_local_out+0x4b7/0x5e0 [ 374.393989][T14079] ? nf_hook+0x360/0x360 [ 374.398257][T14079] ip_send_skb+0x48/0x1d0 [ 374.402606][T14079] udp_send_skb+0x93f/0x1330 [ 374.407242][T14079] udp_sendmsg+0x746/0x2350 [ 374.411786][T14079] ? udp_sendmsg+0x2350/0x2350 [ 374.416568][T14079] ? mark_lock+0x94/0x320 [ 374.420922][T14079] ? udp_cmsg_send+0x350/0x350 [ 374.425974][T14079] ? __lock_acquire+0x13b3/0x7d40 [ 374.431028][T14079] ? mark_lock+0x94/0x320 [ 374.435379][T14079] ? __lock_acquire+0x13b3/0x7d40 [ 374.440482][T14079] udpv6_sendmsg+0x80f/0x2520 [ 374.445195][T14079] ? aa_sk_perm+0x910/0x910 [ 374.449723][T14079] ? udp_v6_early_demux+0xe10/0xe10 [ 374.454970][T14079] ? aa_sk_perm+0x7dc/0x910 [ 374.459506][T14079] ? aa_af_perm+0x340/0x340 [ 374.464037][T14079] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 374.470468][T14079] ? sock_rps_record_flow+0x17/0x3b0 [ 374.475821][T14079] ? inet_send_prepare+0x57/0x250 [ 374.480892][T14079] ? inet6_sendmsg+0x5b/0xd0 [ 374.485508][T14079] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 374.490723][T14079] ____sys_sendmsg+0x5be/0x8f0 [ 374.495510][T14079] ? __sys_sendmsg_sock+0x30/0x30 [ 374.500557][T14079] ? import_iovec+0x6f/0xa0 [ 374.505077][T14079] ___sys_sendmsg+0x236/0x2e0 [ 374.509783][T14079] ? __sys_sendmsg+0x290/0x290 [ 374.514668][T14079] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 374.520950][T14079] __se_sys_sendmsg+0x1b7/0x2a0 [ 374.525824][T14079] ? __x64_sys_sendmsg+0x80/0x80 [ 374.530837][T14079] ? syscall_enter_from_user_mode+0x2a/0x70 [ 374.536752][T14079] do_syscall_64+0x4c/0xa0 [ 374.541184][T14079] ? clear_bhb_loop+0x30/0x80 [ 374.545887][T14079] ? clear_bhb_loop+0x30/0x80 [ 374.550584][T14079] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.556494][T14079] RIP: 0033:0x7f1c11d91fd9 [ 374.560936][T14079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.580645][T14079] RSP: 002b:00007f1c0ffdf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.589098][T14079] RAX: ffffffffffffffda RBX: 00007f1c1200efa0 RCX: 00007f1c11d91fd9 [ 374.597097][T14079] RDX: 0000000000040050 RSI: 00002000000003c0 RDI: 0000000000000006 [ 374.605086][T14079] RBP: 00007f1c0ffdf090 R08: 0000000000000000 R09: 0000000000000000 [ 374.613177][T14079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.621171][T14079] R13: 00007f1c1200f038 R14: 00007f1c1200efa0 R15: 00007ffff779dc78 [ 374.629267][T14079] [ 374.805831][T14073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.886179][T14073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.922688][T14073] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 374.964701][T14073] bond0 (unregistering): Released all slaves [ 375.130062][T14090] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3654'. [ 375.215236][T14100] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.3657'. [ 375.470561][T14100] netlink: 279 bytes leftover after parsing attributes in process `syz.4.3657'. [ 375.526105][T14108] netlink: 'syz.4.3657': attribute type 10 has an invalid length. [ 375.599782][T14108] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.670134][T14108] device bridge_slave_1 left promiscuous mode [ 375.707940][T14108] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.780492][T14104] netlink: 'syz.1.3658': attribute type 10 has an invalid length. [ 375.851048][T14104] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3658'. [ 375.985637][T14123] netlink: 'syz.0.3663': attribute type 3 has an invalid length. [ 376.008145][T14123] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3663'. [ 376.066018][T14125] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3663'. [ 376.300342][T14125] netlink: 'syz.0.3663': attribute type 10 has an invalid length. [ 376.787718][T14125] team0: Device gre0 is of different type [ 378.487133][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.493446][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.678325][T14137] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3668'. [ 379.832221][T14160] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3673'. [ 380.171993][T14175] netlink: 'syz.3.3675': attribute type 10 has an invalid length. [ 380.188152][T14175] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3675'. [ 381.231157][T14194] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.3681'. [ 381.298318][T14194] netlink: 279 bytes leftover after parsing attributes in process `syz.1.3681'. [ 381.326166][T14194] netlink: 'syz.1.3681': attribute type 10 has an invalid length. [ 383.092059][T14199] netlink: 'syz.1.3685': attribute type 3 has an invalid length. [ 383.095883][T14200] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3683'. [ 383.130940][T14199] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3685'. [ 383.153272][T14204] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3685'. [ 383.248235][T14199] netlink: 'syz.1.3685': attribute type 10 has an invalid length. [ 383.360630][T14209] netlink: 'syz.4.3688': attribute type 3 has an invalid length. [ 383.426357][T14209] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3688'. [ 383.782777][T14199] team0: Device gre0 is of different type [ 384.151642][T14213] netlink: 'syz.3.3689': attribute type 10 has an invalid length. [ 384.435396][T14213] team0 (unregistering): Port device team_slave_0 removed [ 384.470559][T14213] team0 (unregistering): Port device team_slave_1 removed [ 384.497479][T14223] netlink: 'syz.2.3690': attribute type 10 has an invalid length. [ 384.524007][T14223] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3690'. [ 384.777203][T14228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3693'. [ 385.116301][T14247] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3698'. [ 385.595485][T14264] netlink: 'syz.2.3704': attribute type 3 has an invalid length. [ 385.654840][T14264] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3704'. [ 385.794840][T14264] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3704'. [ 385.853197][T14267] netlink: 'syz.2.3704': attribute type 10 has an invalid length. [ 386.169393][T14274] netlink: 'syz.3.3706': attribute type 3 has an invalid length. [ 386.203842][T14274] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3706'. [ 386.383303][T14267] team0: Device gre0 is of different type [ 386.478992][T14285] netlink: 'syz.1.3709': attribute type 3 has an invalid length. [ 386.523845][T14285] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3709'. [ 386.561736][T14287] netlink: 'syz.1.3709': attribute type 10 has an invalid length. [ 386.806937][T14266] netlink: 'syz.0.3705': attribute type 10 has an invalid length. [ 386.824254][T14266] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3705'. [ 386.840887][T14277] netlink: 'syz.3.3706': attribute type 10 has an invalid length. [ 387.289725][T14292] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3711'. [ 387.498781][T14292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.569348][T14292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.641937][T14292] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 387.704429][T14292] bond0 (unregistering): Released all slaves [ 387.743283][T14296] netlink: 'syz.1.3712': attribute type 10 has an invalid length. [ 387.758173][T14296] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3712'. [ 388.139446][T14310] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3719'. [ 388.216984][ T4221] tipc: Left network mode [ 388.384355][T14319] netlink: 'syz.1.3724': attribute type 3 has an invalid length. [ 388.401469][T14323] netlink: 'syz.3.3723': attribute type 3 has an invalid length. [ 388.429215][T14319] netlink: 'syz.1.3724': attribute type 10 has an invalid length. [ 388.526095][T14319] netlink: 'syz.1.3724': attribute type 10 has an invalid length. [ 388.601649][T14325] netlink: 'syz.0.3725': attribute type 3 has an invalid length. [ 389.399899][T14319] team0: Device gre0 is of different type [ 390.223293][T14337] __nla_validate_parse: 5 callbacks suppressed [ 390.223385][T14337] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3738'. [ 390.605147][T14347] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3730'. [ 390.635908][T14350] netlink: 279 bytes leftover after parsing attributes in process `syz.2.3738'. [ 390.661501][T14355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3731'. [ 391.828151][T14380] validate_nla: 4 callbacks suppressed [ 391.828183][T14380] netlink: 'syz.3.3742': attribute type 3 has an invalid length. [ 391.870959][T14380] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3742'. [ 391.883112][T14384] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3744'. [ 391.917598][T14388] netlink: 'syz.3.3742': attribute type 10 has an invalid length. [ 391.939502][T14387] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3745'. [ 392.008274][T14380] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3742'. [ 392.098841][T14380] netlink: 'syz.3.3742': attribute type 10 has an invalid length. [ 392.197426][ T4221] device geneve1 left promiscuous mode [ 392.203305][ T4221] bridge0: port 3(geneve1) entered disabled state [ 392.248606][ T4221] bridge0: port 1(dummy0) entered disabled state [ 392.262896][ T4221] device bridge_slave_1 left promiscuous mode [ 392.270016][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.292578][ T4221] device veth0_vlan left promiscuous mode [ 392.832442][T14404] FAULT_INJECTION: forcing a failure. [ 392.832442][T14404] name failslab, interval 1, probability 0, space 0, times 0 [ 392.863423][T14404] CPU: 0 PID: 14404 Comm: syz.2.3749 Not tainted syzkaller #0 [ 392.870925][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 392.880999][T14404] Call Trace: [ 392.884289][T14404] [ 392.887221][T14404] dump_stack_lvl+0x188/0x250 [ 392.891903][T14404] ? show_regs_print_info+0x20/0x20 [ 392.897094][T14404] ? load_image+0x410/0x410 [ 392.901593][T14404] ? rcu_lock_release+0x9/0x20 [ 392.906357][T14404] should_fail+0x383/0x4b0 [ 392.910771][T14404] should_failslab+0x5/0x20 [ 392.915260][T14404] slab_pre_alloc_hook+0x51/0xc0 [ 392.920277][T14404] __kmalloc+0x6b/0x340 [ 392.924425][T14404] ? cfg80211_wext_siwscan+0x23a/0x1060 [ 392.930072][T14404] cfg80211_wext_siwscan+0x23a/0x1060 [ 392.935473][T14404] ioctl_standard_iw_point+0x823/0xd50 [ 392.940947][T14404] ? cfg80211_rehash_bss+0x530/0x530 [ 392.946246][T14404] ? iw_handler_get_iwstats+0x240/0x240 [ 392.951786][T14404] ? mutex_lock_io_nested+0x60/0x60 [ 392.957083][T14404] ? apparmor_capable+0x12c/0x190 [ 392.962213][T14404] ? full_name_hash+0x8e/0xe0 [ 392.966891][T14404] ioctl_standard_call+0xaa/0x250 [ 392.971946][T14404] ? cfg80211_rehash_bss+0x530/0x530 [ 392.977343][T14404] ? cfg80211_rehash_bss+0x530/0x530 [ 392.982640][T14404] wext_ioctl_dispatch+0x3da/0x470 [ 392.987745][T14404] ? wext_ioctl_dispatch+0x470/0x470 [ 392.993126][T14404] ? iw_handler_get_private+0x1e0/0x1e0 [ 392.998677][T14404] wext_handle_ioctl+0x114/0x1d0 [ 393.003604][T14404] ? call_commit_handler+0xf0/0xf0 [ 393.008716][T14404] sock_ioctl+0x143/0x700 [ 393.013040][T14404] ? sock_poll+0x420/0x420 [ 393.017613][T14404] ? bpf_lsm_file_ioctl+0x5/0x10 [ 393.022642][T14404] ? security_file_ioctl+0x7c/0xa0 [ 393.027753][T14404] ? sock_poll+0x420/0x420 [ 393.032184][T14404] __se_sys_ioctl+0xfa/0x170 [ 393.036768][T14404] do_syscall_64+0x4c/0xa0 [ 393.041265][T14404] ? clear_bhb_loop+0x30/0x80 [ 393.045929][T14404] ? clear_bhb_loop+0x30/0x80 [ 393.050722][T14404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 393.056608][T14404] RIP: 0033:0x7f57a6d42fd9 [ 393.061250][T14404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.081045][T14404] RSP: 002b:00007f57a4f90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.089579][T14404] RAX: ffffffffffffffda RBX: 00007f57a6fbffa0 RCX: 00007f57a6d42fd9 [ 393.097645][T14404] RDX: 0000200000001940 RSI: 0000000000008b18 RDI: 0000000000000007 [ 393.105698][T14404] RBP: 00007f57a4f90090 R08: 0000000000000000 R09: 0000000000000000 [ 393.113760][T14404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.121728][T14404] R13: 00007f57a6fc0038 R14: 00007f57a6fbffa0 R15: 00007fff322030c8 [ 393.129710][T14404] [ 393.157999][T14406] rxe_eth0 speed is unknown, defaulting to 1000 [ 394.107949][T14420] netlink: 'syz.3.3752': attribute type 10 has an invalid length. [ 394.116213][T14420] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3752'. [ 394.252646][T14427] netlink: 'syz.2.3764': attribute type 10 has an invalid length. [ 394.262243][T14427] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3764'. [ 394.512431][T14437] netlink: 'syz.2.3759': attribute type 10 has an invalid length. [ 394.875181][T14459] netlink: 'syz.0.3767': attribute type 10 has an invalid length. [ 395.653357][T14465] FAULT_INJECTION: forcing a failure. [ 395.653357][T14465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.701181][T14465] CPU: 1 PID: 14465 Comm: syz.3.3768 Not tainted syzkaller #0 [ 395.708787][T14465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 395.718889][T14465] Call Trace: [ 395.722231][T14465] [ 395.725174][T14465] dump_stack_lvl+0x188/0x250 [ 395.730044][T14465] ? show_regs_print_info+0x20/0x20 [ 395.735532][T14465] ? load_image+0x410/0x410 [ 395.740158][T14465] ? __lock_acquire+0x7d40/0x7d40 [ 395.745205][T14465] ? perf_trace_lock+0xe4/0x390 [ 395.750090][T14465] should_fail+0x383/0x4b0 [ 395.754623][T14465] _copy_from_user+0x2e/0x170 [ 395.759323][T14465] iovec_from_user+0x142/0x370 [ 395.764119][T14465] __import_iovec+0x70/0x490 [ 395.768738][T14465] ? perf_trace_lock+0xe4/0x390 [ 395.773636][T14465] import_iovec+0x6f/0xa0 [ 395.777982][T14465] ___sys_sendmsg+0x1fd/0x2e0 [ 395.782677][T14465] ? __sys_sendmsg+0x290/0x290 [ 395.787459][T14465] ? trace_event_raw_event_lock+0x250/0x250 [ 395.793400][T14465] __se_sys_sendmsg+0x1b7/0x2a0 [ 395.798270][T14465] ? __x64_sys_sendmsg+0x80/0x80 [ 395.803213][T14465] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 395.809229][T14465] ? lockdep_hardirqs_on+0x94/0x140 [ 395.814449][T14465] do_syscall_64+0x4c/0xa0 [ 395.818874][T14465] ? clear_bhb_loop+0x30/0x80 [ 395.823560][T14465] ? clear_bhb_loop+0x30/0x80 [ 395.828252][T14465] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 395.834158][T14465] RIP: 0033:0x7f60e1ee0fd9 [ 395.838583][T14465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.858199][T14465] RSP: 002b:00007f60e012e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.866636][T14465] RAX: ffffffffffffffda RBX: 00007f60e215dfa0 RCX: 00007f60e1ee0fd9 [ 395.874623][T14465] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 395.882639][T14465] RBP: 00007f60e012e090 R08: 0000000000000000 R09: 0000000000000000 [ 395.890714][T14465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.898785][T14465] R13: 00007f60e215e038 R14: 00007f60e215dfa0 R15: 00007ffd70a90f38 [ 395.906795][T14465] [ 395.930853][T14459] team0 (unregistering): Port device team_slave_0 removed [ 395.945442][T14459] team0 (unregistering): Port device team_slave_1 removed [ 396.584975][T14468] netlink: 'syz.2.3769': attribute type 4 has an invalid length. [ 396.605098][T14468] __nla_validate_parse: 3 callbacks suppressed [ 396.605116][T14468] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3769'. [ 396.633911][T14475] netlink: 'syz.4.3771': attribute type 10 has an invalid length. [ 396.654124][T14475] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3771'. [ 396.674057][T14475] device dummy0 entered promiscuous mode [ 396.701191][T14475] bridge0: port 2(dummy0) entered blocking state [ 396.731145][T14475] bridge0: port 2(dummy0) entered disabled state [ 396.760977][T14475] bridge0: port 2(dummy0) entered blocking state [ 396.767441][T14475] bridge0: port 2(dummy0) entered forwarding state [ 396.827371][T14478] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3772'. [ 397.357887][T14508] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.3782'. [ 397.431594][T14508] netlink: 'syz.3.3782': attribute type 10 has an invalid length. [ 397.479990][T14510] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3785'. [ 398.125586][T14523] netlink: 'syz.2.3789': attribute type 10 has an invalid length. [ 398.129696][T14529] FAULT_INJECTION: forcing a failure. [ 398.129696][T14529] name failslab, interval 1, probability 0, space 0, times 0 [ 398.133609][T14523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3789'. [ 398.207403][T14529] CPU: 1 PID: 14529 Comm: syz.3.3792 Not tainted syzkaller #0 [ 398.215005][T14529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 398.225158][T14529] Call Trace: [ 398.228443][T14529] [ 398.231367][T14529] dump_stack_lvl+0x188/0x250 [ 398.236041][T14529] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 398.242193][T14529] ? show_regs_print_info+0x20/0x20 [ 398.247398][T14529] ? load_image+0x410/0x410 [ 398.251938][T14529] should_fail+0x383/0x4b0 [ 398.256360][T14529] should_failslab+0x5/0x20 [ 398.260870][T14529] slab_pre_alloc_hook+0x51/0xc0 [ 398.265798][T14529] ? skb_clone+0x1bd/0x350 [ 398.270473][T14529] kmem_cache_alloc+0x3d/0x280 [ 398.275350][T14529] skb_clone+0x1bd/0x350 [ 398.279591][T14529] bpf_clone_redirect+0x166/0x460 [ 398.284622][T14529] bpf_prog_755aec1832b2a8fc+0x56/0xdec [ 398.290169][T14529] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 398.296170][T14529] ? lock_chain_count+0x20/0x20 [ 398.301016][T14529] ? __kasan_slab_alloc+0xa9/0xc0 [ 398.306038][T14529] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 398.312014][T14529] ? lock_chain_count+0x20/0x20 [ 398.316948][T14529] ? rcu_is_watching+0x11/0xa0 [ 398.321742][T14529] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 398.328079][T14529] ? lockdep_hardirqs_on+0x94/0x140 [ 398.333321][T14529] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 398.339485][T14529] ? 0xffffffffa0042214 [ 398.343646][T14529] bpf_test_run+0x2a8/0x800 [ 398.348185][T14529] ? convert___skb_to_skb+0x4c0/0x4c0 [ 398.353643][T14529] ? eth_get_headlen+0x200/0x200 [ 398.358573][T14529] ? convert___skb_to_skb+0x3d/0x4c0 [ 398.363849][T14529] bpf_prog_test_run_skb+0x9fb/0x1190 [ 398.369225][T14529] ? cpu_online+0x60/0x60 [ 398.373562][T14529] bpf_prog_test_run+0x31c/0x390 [ 398.378505][T14529] __sys_bpf+0x5a5/0x6f0 [ 398.382834][T14529] ? bpf_link_show_fdinfo+0x380/0x380 [ 398.388215][T14529] __x64_sys_bpf+0x78/0x90 [ 398.392626][T14529] do_syscall_64+0x4c/0xa0 [ 398.397031][T14529] ? clear_bhb_loop+0x30/0x80 [ 398.401804][T14529] ? clear_bhb_loop+0x30/0x80 [ 398.406646][T14529] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 398.412619][T14529] RIP: 0033:0x7f60e1ee0fd9 [ 398.417118][T14529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.436889][T14529] RSP: 002b:00007f60e012e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.445291][T14529] RAX: ffffffffffffffda RBX: 00007f60e215dfa0 RCX: 00007f60e1ee0fd9 [ 398.453351][T14529] RDX: 000000000000002c RSI: 0000200000001080 RDI: 000000000000000a [ 398.461325][T14529] RBP: 00007f60e012e090 R08: 0000000000000000 R09: 0000000000000000 [ 398.469548][T14529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.477513][T14529] R13: 00007f60e215e038 R14: 00007f60e215dfa0 R15: 00007ffd70a90f38 [ 398.485492][T14529] [ 398.927960][T14541] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3796'. [ 399.190758][T14545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3798'. [ 399.277400][T14551] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.3801'. [ 399.383444][T14551] netlink: 'syz.4.3801': attribute type 10 has an invalid length. [ 399.863292][T14574] netlink: 'syz.1.3807': attribute type 3 has an invalid length. [ 399.883488][T14572] netlink: 'syz.2.3806': attribute type 3 has an invalid length. [ 399.895043][T14574] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3807'. [ 399.961518][T14575] netlink: 'syz.1.3807': attribute type 10 has an invalid length. [ 400.046378][T14577] netlink: 'syz.2.3806': attribute type 10 has an invalid length. [ 400.073249][T14572] netlink: 'syz.2.3806': attribute type 10 has an invalid length. [ 400.602329][T14572] team0: Device gre0 is of different type [ 400.700445][T14574] netlink: 'syz.1.3807': attribute type 10 has an invalid length. [ 400.766692][T14574] team0: Device gre0 is of different type [ 400.964068][T14591] FAULT_INJECTION: forcing a failure. [ 400.964068][T14591] name failslab, interval 1, probability 0, space 0, times 0 [ 400.998365][T14591] CPU: 0 PID: 14591 Comm: syz.2.3810 Not tainted syzkaller #0 [ 401.006038][T14591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 401.016273][T14591] Call Trace: [ 401.019553][T14591] [ 401.022498][T14591] dump_stack_lvl+0x188/0x250 [ 401.027263][T14591] ? rcu_lock_release+0x9/0x20 [ 401.032019][T14591] ? show_regs_print_info+0x20/0x20 [ 401.037211][T14591] ? load_image+0x410/0x410 [ 401.041924][T14591] ? nf_hook_slow+0x1ae/0x200 [ 401.046600][T14591] should_fail+0x383/0x4b0 [ 401.051101][T14591] should_failslab+0x5/0x20 [ 401.055607][T14591] slab_pre_alloc_hook+0x51/0xc0 [ 401.060534][T14591] ? skb_clone+0x1bd/0x350 [ 401.064938][T14591] kmem_cache_alloc+0x3d/0x280 [ 401.069690][T14591] skb_clone+0x1bd/0x350 [ 401.073920][T14591] ? ip_mc_output+0x21b/0x5d0 [ 401.078595][T14591] ip_mc_output+0x228/0x5d0 [ 401.083121][T14591] ip_send_skb+0x12b/0x1d0 [ 401.087556][T14591] raw_sendmsg+0x12d8/0x18b0 [ 401.092235][T14591] ? compat_raw_ioctl+0x60/0x60 [ 401.097184][T14591] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 401.103610][T14591] ? aa_sock_msg_perm+0x94/0x150 [ 401.108665][T14591] ? sock_rps_record_flow+0x17/0x3b0 [ 401.114078][T14591] ? inet_sendmsg+0x7a/0x2a0 [ 401.118766][T14591] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 401.124128][T14591] ? inet_send_prepare+0x250/0x250 [ 401.129232][T14591] ____sys_sendmsg+0x5be/0x8f0 [ 401.133993][T14591] ? __sys_sendmsg_sock+0x30/0x30 [ 401.139011][T14591] ? import_iovec+0x6f/0xa0 [ 401.143506][T14591] ___sys_sendmsg+0x236/0x2e0 [ 401.148283][T14591] ? __sys_sendmsg+0x290/0x290 [ 401.153081][T14591] __se_sys_sendmsg+0x1b7/0x2a0 [ 401.157935][T14591] ? __x64_sys_sendmsg+0x80/0x80 [ 401.162869][T14591] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 401.168854][T14591] ? lockdep_hardirqs_on+0x94/0x140 [ 401.174180][T14591] do_syscall_64+0x4c/0xa0 [ 401.178845][T14591] ? clear_bhb_loop+0x30/0x80 [ 401.183548][T14591] ? clear_bhb_loop+0x30/0x80 [ 401.188231][T14591] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 401.194213][T14591] RIP: 0033:0x7f57a6d42fd9 [ 401.198661][T14591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.218647][T14591] RSP: 002b:00007f57a4f6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.227060][T14591] RAX: ffffffffffffffda RBX: 00007f57a6fc0090 RCX: 00007f57a6d42fd9 [ 401.235370][T14591] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 401.243346][T14591] RBP: 00007f57a4f6f090 R08: 0000000000000000 R09: 0000000000000000 [ 401.251416][T14591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.259395][T14591] R13: 00007f57a6fc0128 R14: 00007f57a6fc0090 R15: 00007fff322030c8 [ 401.267478][T14591] [ 401.421548][T14604] FAULT_INJECTION: forcing a failure. [ 401.421548][T14604] name failslab, interval 1, probability 0, space 0, times 0 [ 401.434588][T14604] CPU: 1 PID: 14604 Comm: syz.1.3814 Not tainted syzkaller #0 [ 401.442080][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 401.452443][T14604] Call Trace: [ 401.455730][T14604] [ 401.458704][T14604] dump_stack_lvl+0x188/0x250 [ 401.463402][T14604] ? show_regs_print_info+0x20/0x20 [ 401.468620][T14604] ? load_image+0x410/0x410 [ 401.473165][T14604] should_fail+0x383/0x4b0 [ 401.477610][T14604] should_failslab+0x5/0x20 [ 401.482305][T14604] slab_pre_alloc_hook+0x51/0xc0 [ 401.487349][T14604] __kmalloc+0x6b/0x340 [ 401.491519][T14604] ? ___neigh_create+0x6fa/0x2210 [ 401.496561][T14604] ? rcu_lockdep_current_cpu_online+0x35/0x130 [ 401.502737][T14604] ___neigh_create+0x6fa/0x2210 [ 401.507721][T14604] ip6_finish_output2+0xacc/0x1640 [ 401.512870][T14604] ? nf_hook+0x360/0x360 [ 401.517146][T14604] ? ip6_mtu+0x2fb/0x3d0 [ 401.521419][T14604] ? ip6_finish_output+0x627/0x790 [ 401.526560][T14604] ip6_send_skb+0x1af/0x350 [ 401.531085][T14604] icmp6_send+0x134a/0x19a0 [ 401.535635][T14604] ? icmpv6_push_pending_frames+0x440/0x440 [ 401.541556][T14604] ? raw6_local_deliver+0x875/0x920 [ 401.546796][T14604] ? rawv6_mh_filter_unregister+0x20/0x20 [ 401.552624][T14604] ? xfrm6_policy_check+0xf1/0x340 [ 401.557750][T14604] ip6_protocol_deliver_rcu+0x114e/0x1360 [ 401.563498][T14604] ? read_lock_is_recursive+0x10/0x10 [ 401.568911][T14604] ? ip6_input+0xa0/0xa0 [ 401.573186][T14604] ip6_input_finish+0xa2/0x130 [ 401.578065][T14604] NF_HOOK+0x303/0x390 [ 401.582159][T14604] ? ip6_input+0xa0/0xa0 [ 401.586423][T14604] ? ip6_rcv_core+0x1600/0x1600 [ 401.591295][T14604] ? ip6_input+0xa0/0xa0 [ 401.595564][T14604] ? ip6_rcv_finish+0x18d/0x240 [ 401.600436][T14604] ? refcount_add+0x80/0x80 [ 401.604991][T14604] NF_HOOK+0x303/0x390 [ 401.609109][T14604] ? refcount_add+0x80/0x80 [ 401.613633][T14604] ? ip6_rcv_core+0x1600/0x1600 [ 401.618505][T14604] ? refcount_add+0x80/0x80 [ 401.623036][T14604] ? ip6_rcv_finish_core+0x420/0x420 [ 401.628343][T14604] __netif_receive_skb+0xcc/0x290 [ 401.633382][T14604] ? ktime_get_with_offset+0x2d7/0x320 [ 401.638874][T14604] netif_receive_skb+0x19e/0x700 [ 401.643853][T14604] ? __bpf_trace_softirq+0x10/0x10 [ 401.648979][T14604] ? _copy_from_iter+0x5bf/0x1160 [ 401.654027][T14604] ? netif_receive_skb_core+0x210/0x210 [ 401.659693][T14604] tun_rx_batched+0x606/0x760 [ 401.664390][T14604] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 401.670396][T14604] ? local_bh_enable+0x20/0x20 [ 401.675187][T14604] ? __local_bh_enable_ip+0x136/0x1c0 [ 401.680581][T14604] ? read_lock_is_recursive+0x10/0x10 [ 401.685984][T14604] ? __local_bh_enable_ip+0x136/0x1c0 [ 401.691914][T14604] ? _local_bh_enable+0xa0/0xa0 [ 401.696845][T14604] tun_get_user+0x2bf4/0x3b10 [ 401.701602][T14604] ? tun_ring_recv+0xc90/0xc90 [ 401.706407][T14604] ? rcu_lock_release+0x5/0x20 [ 401.711300][T14604] ? __lock_acquire+0x7d40/0x7d40 [ 401.716371][T14604] tun_chr_write_iter+0x112/0x1e0 [ 401.721430][T14604] vfs_write+0x748/0xd70 [ 401.725706][T14604] ? file_end_write+0x250/0x250 [ 401.730587][T14604] ? __fget_files+0x402/0x470 [ 401.735296][T14604] ? __fdget_pos+0x1e2/0x370 [ 401.740080][T14604] ? ksys_write+0x70/0x260 [ 401.744624][T14604] ksys_write+0x153/0x260 [ 401.748979][T14604] ? __ia32_sys_read+0x80/0x80 [ 401.753768][T14604] ? lockdep_hardirqs_on+0x94/0x140 [ 401.759038][T14604] do_syscall_64+0x4c/0xa0 [ 401.763649][T14604] ? clear_bhb_loop+0x30/0x80 [ 401.768345][T14604] ? clear_bhb_loop+0x30/0x80 [ 401.773042][T14604] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 401.778957][T14604] RIP: 0033:0x7f9770724fd9 [ 401.783397][T14604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.803023][T14604] RSP: 002b:00007f976e972028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 401.811549][T14604] RAX: ffffffffffffffda RBX: 00007f97709a1fa0 RCX: 00007f9770724fd9 [ 401.819544][T14604] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 401.827632][T14604] RBP: 00007f976e972090 R08: 0000000000000000 R09: 0000000000000000 [ 401.835622][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.843797][T14604] R13: 00007f97709a2038 R14: 00007f97709a1fa0 R15: 00007fffddef8708 [ 401.851807][T14604] [ 401.952697][T14608] __nla_validate_parse: 5 callbacks suppressed [ 401.952737][T14608] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3815'. [ 402.080021][T14608] netlink: 'syz.2.3815': attribute type 10 has an invalid length. [ 402.212875][T14613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3818'. [ 402.448674][T14621] netlink: 'syz.4.3820': attribute type 3 has an invalid length. [ 402.480652][T14621] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3820'. [ 402.487386][T14619] netlink: 'syz.4.3820': attribute type 10 has an invalid length. [ 402.554581][T14624] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3820'. [ 402.621600][T14626] netlink: 192444 bytes leftover after parsing attributes in process `syz.0.3822'. [ 403.069498][T14623] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3821'. [ 403.421296][T14653] netlink: 'syz.1.3829': attribute type 10 has an invalid length. [ 403.440910][T14653] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3829'. [ 403.571677][T14658] netlink: 'syz.4.3831': attribute type 27 has an invalid length. [ 403.605695][T14658] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3831'. [ 404.622191][T14682] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3838'. [ 404.860128][T14688] netlink: 'syz.2.3841': attribute type 3 has an invalid length. [ 404.872288][T14693] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3843'. [ 404.912127][T14694] netlink: 'syz.2.3841': attribute type 10 has an invalid length. [ 404.984276][T14686] netlink: 'syz.3.3840': attribute type 3 has an invalid length. [ 405.021321][T14688] netlink: 'syz.2.3841': attribute type 10 has an invalid length. [ 405.244815][T14688] team0: Device gre0 is of different type [ 405.452013][T14700] netlink: 'syz.3.3840': attribute type 10 has an invalid length. [ 405.477435][T14698] device macvlan0 entered promiscuous mode [ 405.562368][T14686] netlink: 'syz.3.3840': attribute type 10 has an invalid length. [ 408.779882][ T4221] device hsr_slave_0 left promiscuous mode [ 408.790903][ T4221] device hsr_slave_1 left promiscuous mode [ 408.798137][ T4221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.828110][ T4221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.843615][ T4221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.874555][ T4221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.899785][ T4221] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 408.915073][ T4221] batman_adv: batadv0: Removing interface: virt_wifi0 [ 408.922714][T14744] sock: sock_timestamping_bind_phc: sock not bind to device [ 408.931493][ T4221] bridge0: port 4(hsr0) entered disabled state [ 408.961486][ T4221] device batadv0 left promiscuous mode [ 408.991626][ T4221] bridge0: port 3(batadv0) entered disabled state [ 409.017209][ T4221] bridge0: port 1(dummy0) entered disabled state [ 409.043045][T14752] validate_nla: 1 callbacks suppressed [ 409.043086][T14752] netlink: 'syz.1.3863': attribute type 1 has an invalid length. [ 409.066342][ T4221] device bridge_slave_1 left promiscuous mode [ 409.083425][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.092376][T14752] __nla_validate_parse: 7 callbacks suppressed [ 409.092406][T14752] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.3863'. [ 409.113473][ T4221] device veth1_vlan left promiscuous mode [ 409.130484][ T4221] device veth0_vlan left promiscuous mode [ 409.134228][T14758] netlink: 'syz.4.3862': attribute type 3 has an invalid length. [ 409.150383][T14758] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3862'. [ 409.230542][ T4221] team0 (unregistering): Port device macvlan1 removed [ 409.298010][ T4221] team0 (unregistering): Port device team_slave_1 removed [ 409.310508][ T4221] team0 (unregistering): Port device team_slave_0 removed [ 409.388157][T14756] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3864'. [ 409.398052][T14752] netlink: 'syz.1.3863': attribute type 10 has an invalid length. [ 409.406426][T14752] netlink: 'syz.1.3863': attribute type 16 has an invalid length. [ 409.425666][T14752] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3863'. [ 409.437101][T14760] netlink: 'syz.4.3862': attribute type 10 has an invalid length. [ 409.826861][T14767] netlink: 'syz.2.3868': attribute type 10 has an invalid length. [ 409.884547][T14767] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3868'. [ 409.948209][T14767] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 410.006475][T14767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.320425][T14787] rxe_eth0 speed is unknown, defaulting to 1000 [ 411.015325][T14798] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3876'. [ 411.165461][T14801] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.3877'. [ 411.346736][T14811] FAULT_INJECTION: forcing a failure. [ 411.346736][T14811] name failslab, interval 1, probability 0, space 0, times 0 [ 411.375200][T14811] CPU: 0 PID: 14811 Comm: syz.4.3881 Not tainted syzkaller #0 [ 411.382717][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 411.392906][T14811] Call Trace: [ 411.396196][T14811] [ 411.399122][T14811] dump_stack_lvl+0x188/0x250 [ 411.403798][T14811] ? show_regs_print_info+0x20/0x20 [ 411.408987][T14811] ? load_image+0x410/0x410 [ 411.413491][T14811] ? __might_sleep+0xf0/0xf0 [ 411.418075][T14811] ? __lock_acquire+0x7d40/0x7d40 [ 411.423100][T14811] should_fail+0x383/0x4b0 [ 411.427513][T14811] should_failslab+0x5/0x20 [ 411.432012][T14811] slab_pre_alloc_hook+0x51/0xc0 [ 411.436947][T14811] __kmalloc+0x6b/0x340 [ 411.441089][T14811] ? sk_prot_alloc+0xe7/0x210 [ 411.445760][T14811] sk_prot_alloc+0xe7/0x210 [ 411.450264][T14811] ? sk_alloc+0x1d/0x310 [ 411.454500][T14811] sk_alloc+0x2f/0x310 [ 411.458556][T14811] bpf_prog_test_run_skb+0x23c/0x1190 [ 411.463920][T14811] ? __fget_files+0x402/0x470 [ 411.468606][T14811] ? cpu_online+0x60/0x60 [ 411.472924][T14811] bpf_prog_test_run+0x31c/0x390 [ 411.477855][T14811] __sys_bpf+0x5a5/0x6f0 [ 411.482098][T14811] ? bpf_link_show_fdinfo+0x380/0x380 [ 411.487478][T14811] __x64_sys_bpf+0x78/0x90 [ 411.491891][T14811] do_syscall_64+0x4c/0xa0 [ 411.496294][T14811] ? clear_bhb_loop+0x30/0x80 [ 411.500959][T14811] ? clear_bhb_loop+0x30/0x80 [ 411.505624][T14811] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 411.511532][T14811] RIP: 0033:0x7f05ac192fd9 [ 411.515946][T14811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.535626][T14811] RSP: 002b:00007f05aa3e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.544028][T14811] RAX: ffffffffffffffda RBX: 00007f05ac40ffa0 RCX: 00007f05ac192fd9 [ 411.551988][T14811] RDX: 0000000000000050 RSI: 0000200000000a00 RDI: 000000000000000a [ 411.559956][T14811] RBP: 00007f05aa3e0090 R08: 0000000000000000 R09: 0000000000000000 [ 411.567917][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.575880][T14811] R13: 00007f05ac410038 R14: 00007f05ac40ffa0 R15: 00007ffe73f61e88 [ 411.584145][T14811] [ 411.658979][T14821] netlink: 'syz.2.3883': attribute type 1 has an invalid length. [ 411.693893][T14821] netlink: 'syz.2.3883': attribute type 4 has an invalid length. [ 411.715576][T14821] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3883'. [ 411.939120][T14823] netlink: 'syz.2.3884': attribute type 3 has an invalid length. [ 411.959317][T14823] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3884'. [ 412.010062][T14823] netlink: 'syz.2.3884': attribute type 10 has an invalid length. [ 412.058685][T14823] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3884'. [ 412.678072][T14823] team0: Device gre0 is of different type [ 415.383539][T14863] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3896'. [ 415.788211][T14880] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3902'. [ 415.836733][T14878] validate_nla: 1 callbacks suppressed [ 415.836765][T14878] netlink: 'syz.0.3903': attribute type 10 has an invalid length. [ 415.868214][T14878] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3903'. [ 415.883884][T14878] device dummy0 entered promiscuous mode [ 415.913863][T14878] bridge0: port 3(dummy0) entered blocking state [ 415.938282][T14878] bridge0: port 3(dummy0) entered disabled state [ 415.984918][T14878] bridge0: port 3(dummy0) entered blocking state [ 415.991693][T14878] bridge0: port 3(dummy0) entered forwarding state [ 416.000794][T14891] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.3905'. [ 416.394119][ T7055] Bluetooth: hci3: command 0x0406 tx timeout [ 418.508515][T14905] netlink: 'syz.0.3910': attribute type 10 has an invalid length. [ 418.522695][T14905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3910'. [ 418.553316][T14905] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.711924][T14915] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3912'. [ 418.777488][T14922] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3917'. [ 418.912959][T14927] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3918'. [ 419.076343][T14934] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3919'. [ 419.151023][T14934] netlink: 'syz.2.3919': attribute type 10 has an invalid length. [ 420.325204][T14960] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3925'. [ 420.356820][T14960] device hsr_slave_0 left promiscuous mode [ 420.423886][T14960] device hsr_slave_1 left promiscuous mode [ 420.505390][T14960] bridge0: port 2(hsr0) entered disabled state [ 420.611879][T14973] netlink: 'syz.1.3931': attribute type 3 has an invalid length. [ 420.634089][T14960] bridge0: port 2(hsr0) entered disabled state [ 420.653845][T14973] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3931'. [ 420.830003][T14972] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3930'. [ 420.850058][T14975] netlink: 'syz.1.3931': attribute type 10 has an invalid length. [ 420.999139][T14966] netlink: 'syz.4.3929': attribute type 10 has an invalid length. [ 421.064092][T14966] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3929'. [ 421.086629][T14982] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.3933'. [ 421.118072][T14966] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 421.170098][T14966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.249622][T14987] netlink: 'syz.1.3933': attribute type 10 has an invalid length. [ 422.976600][T15001] netlink: 'syz.1.3938': attribute type 10 has an invalid length. [ 423.009687][T15001] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3938'. [ 423.306760][T15010] netlink: 'syz.2.3942': attribute type 10 has an invalid length. [ 423.328368][T15010] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3942'. [ 423.339058][T15014] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3943'. [ 423.383912][T15018] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3945'. [ 423.386697][T15016] netlink: 'syz.1.3944': attribute type 3 has an invalid length. [ 423.435050][T15021] netlink: 'syz.1.3944': attribute type 10 has an invalid length. [ 423.453236][T15016] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3944'. [ 423.521843][T15016] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3944'. [ 423.541562][T15016] netlink: 'syz.1.3944': attribute type 10 has an invalid length. [ 424.141395][T15016] team0: Device gre0 is of different type [ 426.537564][T15075] netlink: 'syz.4.3964': attribute type 10 has an invalid length. [ 426.546366][T15075] __nla_validate_parse: 1 callbacks suppressed [ 426.546401][T15075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3964'. [ 426.580564][T15077] netlink: 'syz.1.3961': attribute type 10 has an invalid length. [ 426.601922][T15077] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3961'. [ 426.634257][ T7054] Bluetooth: hci5: command 0x0406 tx timeout [ 426.703203][T15073] netlink: 'syz.2.3962': attribute type 10 has an invalid length. [ 426.720436][T15073] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3962'. [ 426.870630][T15087] netlink: 'syz.3.3965': attribute type 3 has an invalid length. [ 426.894726][T15087] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3965'. [ 426.929682][T15087] netlink: 'syz.3.3965': attribute type 10 has an invalid length. [ 426.962036][T15087] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3965'. [ 426.977294][T15096] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.3971'. [ 426.991310][T15087] netlink: 'syz.3.3965': attribute type 10 has an invalid length. [ 427.028516][T15096] netlink: 'syz.2.3971': attribute type 10 has an invalid length. [ 427.877517][T15106] netlink: 'syz.2.3984': attribute type 3 has an invalid length. [ 427.893977][T15106] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3984'. [ 427.907736][T15106] netlink: 'syz.2.3984': attribute type 10 has an invalid length. [ 427.940726][T15106] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3984'. [ 427.972888][T15106] netlink: 'syz.2.3984': attribute type 10 has an invalid length. [ 428.389161][T15106] team0: Device gre0 is of different type [ 430.910711][T15119] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3976'. [ 430.987098][T15124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3977'. [ 431.569817][T15142] validate_nla: 5 callbacks suppressed [ 431.569854][T15142] netlink: 'syz.4.3986': attribute type 10 has an invalid length. [ 432.683868][T15172] netlink: 'syz.4.3993': attribute type 3 has an invalid length. [ 432.696483][T15170] netlink: 'syz.3.3994': attribute type 15 has an invalid length. [ 432.728032][T15172] __nla_validate_parse: 4 callbacks suppressed [ 432.728051][T15172] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3993'. [ 432.734314][T15170] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.3994'. [ 432.761503][T15170] netlink: 'syz.3.3994': attribute type 4 has an invalid length. [ 432.794093][T15170] netlink: 'syz.3.3994': attribute type 5 has an invalid length. [ 432.806241][T15170] netlink: 'syz.3.3994': attribute type 6 has an invalid length. [ 432.820341][T15170] netlink: 'syz.3.3994': attribute type 7 has an invalid length. [ 432.831038][T15175] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3993'. [ 432.850630][T15177] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.3996'. [ 432.860055][T15170] netlink: 'syz.3.3994': attribute type 11 has an invalid length. [ 432.860106][T15170] netlink: 'syz.3.3994': attribute type 15 has an invalid length. [ 432.860155][T15170] netlink: 'syz.3.3994': attribute type 16 has an invalid length. [ 432.860225][T15170] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.3994'. [ 432.897731][T15165] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3992'. [ 433.135003][T15175] team0: Device gre0 is of different type [ 433.399463][T15187] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3999'. [ 433.589992][T15195] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4002'. [ 434.652018][T15222] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4009'. [ 434.662105][T15230] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.4011'. [ 435.377717][T15237] team0: Device gre0 is of different type [ 436.451206][T15272] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 436.490494][T15269] : renamed from caif0 [ 436.531837][T15269] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 436.577256][T15279] validate_nla: 15 callbacks suppressed [ 436.577293][T15279] netlink: 'syz.4.4023': attribute type 10 has an invalid length. [ 436.666580][T15281] FAULT_INJECTION: forcing a failure. [ 436.666580][T15281] name failslab, interval 1, probability 0, space 0, times 0 [ 436.684346][T15281] CPU: 0 PID: 15281 Comm: syz.3.4025 Not tainted syzkaller #0 [ 436.691944][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 436.702097][T15281] Call Trace: [ 436.705418][T15281] [ 436.708443][T15281] dump_stack_lvl+0x188/0x250 [ 436.713133][T15281] ? show_regs_print_info+0x20/0x20 [ 436.718351][T15281] ? load_image+0x410/0x410 [ 436.722871][T15281] ? __might_sleep+0xf0/0xf0 [ 436.727461][T15281] ? __lock_acquire+0x7d40/0x7d40 [ 436.732489][T15281] should_fail+0x383/0x4b0 [ 436.737078][T15281] should_failslab+0x5/0x20 [ 436.741603][T15281] slab_pre_alloc_hook+0x51/0xc0 [ 436.746541][T15281] __kmalloc_node_track_caller+0x68/0x3a0 [ 436.752261][T15281] ? netlink_dump+0x1cc/0xdd0 [ 436.756925][T15281] ? __alloc_skb+0xf4/0x750 [ 436.761504][T15281] ? netlink_dump+0x1cc/0xdd0 [ 436.766172][T15281] __alloc_skb+0x22c/0x750 [ 436.770586][T15281] netlink_dump+0x1cc/0xdd0 [ 436.775112][T15281] ? __netlink_dump_start+0xf5/0x720 [ 436.780578][T15281] ? rcu_lock_release+0x5/0x20 [ 436.785340][T15281] ? netlink_lookup+0x1d0/0x1d0 [ 436.790412][T15281] __netlink_dump_start+0x4e4/0x720 [ 436.795627][T15281] rtnetlink_rcv_msg+0xd91/0xf10 [ 436.800577][T15281] ? rtnl_stats_get+0xa20/0xa20 [ 436.805518][T15281] ? rtnetlink_bind+0x80/0x80 [ 436.810193][T15281] ? __local_bh_enable_ip+0x136/0x1c0 [ 436.815728][T15281] ? lockdep_hardirqs_on+0x94/0x140 [ 436.820929][T15281] ? __local_bh_enable_ip+0x136/0x1c0 [ 436.826386][T15281] ? _local_bh_enable+0xa0/0xa0 [ 436.831252][T15281] ? __dev_queue_xmit+0x1b64/0x2e50 [ 436.836466][T15281] ? dev_queue_xmit+0x20/0x20 [ 436.841219][T15281] ? __copy_skb_header+0x3ba/0x4f0 [ 436.846858][T15281] ? memcpy+0x3c/0x60 [ 436.850851][T15281] ? rtnl_stats_get+0xa20/0xa20 [ 436.855702][T15281] ? __skb_clone+0x446/0x6c0 [ 436.860317][T15281] netlink_rcv_skb+0x1e9/0x430 [ 436.865075][T15281] ? rtnetlink_bind+0x80/0x80 [ 436.869746][T15281] ? netlink_ack+0xb10/0xb10 [ 436.874340][T15281] netlink_unicast+0x804/0x9e0 [ 436.879286][T15281] netlink_sendmsg+0x8ba/0xbe0 [ 436.884137][T15281] ? netlink_getsockopt+0x570/0x570 [ 436.889327][T15281] ? aa_sock_msg_perm+0x94/0x150 [ 436.894257][T15281] ? apparmor_socket_sendmsg+0x88/0x230 [ 436.899798][T15281] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 436.905071][T15281] ? security_socket_sendmsg+0x7c/0xa0 [ 436.910695][T15281] ? netlink_getsockopt+0x570/0x570 [ 436.916025][T15281] ____sys_sendmsg+0x5be/0x8f0 [ 436.920796][T15281] ? __sys_sendmsg_sock+0x30/0x30 [ 436.925820][T15281] ? import_iovec+0x6f/0xa0 [ 436.930337][T15281] ___sys_sendmsg+0x236/0x2e0 [ 436.935012][T15281] ? __sys_sendmsg+0x290/0x290 [ 436.939797][T15281] __se_sys_sendmsg+0x1b7/0x2a0 [ 436.944737][T15281] ? __x64_sys_sendmsg+0x80/0x80 [ 436.949767][T15281] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 436.955841][T15281] ? lockdep_hardirqs_on+0x94/0x140 [ 436.961130][T15281] do_syscall_64+0x4c/0xa0 [ 436.965552][T15281] ? clear_bhb_loop+0x30/0x80 [ 436.970315][T15281] ? clear_bhb_loop+0x30/0x80 [ 436.974993][T15281] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.981024][T15281] RIP: 0033:0x7f60e1ee0fd9 [ 436.985444][T15281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.005052][T15281] RSP: 002b:00007f60e012e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.013473][T15281] RAX: ffffffffffffffda RBX: 00007f60e215dfa0 RCX: 00007f60e1ee0fd9 [ 437.021451][T15281] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 437.029413][T15281] RBP: 00007f60e012e090 R08: 0000000000000000 R09: 0000000000000000 [ 437.037374][T15281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.045424][T15281] R13: 00007f60e215e038 R14: 00007f60e215dfa0 R15: 00007ffd70a90f38 [ 437.053498][T15281] [ 437.280303][T15292] netlink: 'syz.3.4034': attribute type 3 has an invalid length. [ 437.335827][T15292] netlink: 'syz.3.4034': attribute type 10 has an invalid length. [ 437.455024][T15296] netlink: 'syz.3.4034': attribute type 10 has an invalid length. [ 439.753600][T15312] netlink: 'syz.2.4039': attribute type 10 has an invalid length. [ 439.764576][T15312] __nla_validate_parse: 6 callbacks suppressed [ 439.764627][T15312] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4039'. [ 439.796700][T15321] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.4041'. [ 439.897860][T15325] netlink: 'syz.4.4040': attribute type 10 has an invalid length. [ 439.907961][T15325] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4040'. [ 439.925718][ T1433] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.932132][ T1433] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.975662][T15321] netlink: 'syz.0.4041': attribute type 10 has an invalid length. [ 440.127590][T15335] netlink: 'syz.0.4047': attribute type 3 has an invalid length. [ 440.161529][T15335] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4047'. [ 440.195912][T15335] netlink: 'syz.0.4047': attribute type 10 has an invalid length. [ 440.222137][T15339] netlink: 'syz.3.4049': attribute type 10 has an invalid length. [ 440.238281][T15335] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4047'. [ 440.248585][T15339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4049'. [ 440.908016][T15371] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4054'. [ 441.992839][T15382] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.4057'. [ 442.007313][ T7884] Bluetooth: hci2: command 0x0406 tx timeout [ 442.023220][T15382] validate_nla: 2 callbacks suppressed [ 442.023264][T15382] netlink: 'syz.0.4057': attribute type 10 has an invalid length. [ 442.217190][T15396] netlink: 192440 bytes leftover after parsing attributes in process `syz.2.4064'. [ 442.250732][T15395] netlink: 'syz.1.4062': attribute type 3 has an invalid length. [ 442.251409][T15396] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 442.285490][T15395] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4062'. [ 442.351017][T15395] netlink: 'syz.1.4062': attribute type 10 has an invalid length. [ 442.412395][T15388] netlink: 'syz.3.4060': attribute type 10 has an invalid length. [ 442.425536][T15395] netlink: 'syz.1.4062': attribute type 10 has an invalid length. [ 443.016389][T15395] team0: Device gre0 is of different type [ 443.865144][T15427] netlink: 'syz.1.4073': attribute type 4 has an invalid length. [ 444.190408][T15442] netlink: 'syz.2.4077': attribute type 3 has an invalid length. [ 444.220957][T15442] netlink: 'syz.2.4077': attribute type 10 has an invalid length. [ 444.321877][T15442] netlink: 'syz.2.4077': attribute type 10 has an invalid length. [ 445.041064][T15442] team0: Device gre0 is of different type [ 446.659259][T15448] __nla_validate_parse: 4 callbacks suppressed [ 446.659278][T15448] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.4078'. [ 446.825288][T15448] netlink: 'syz.3.4078': attribute type 10 has an invalid length. [ 447.683365][T15477] netlink: 'syz.1.4089': attribute type 10 has an invalid length. [ 447.721762][T15477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4089'. [ 447.788476][T15485] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.4090'. [ 447.900138][T15490] netlink: 'syz.4.4092': attribute type 3 has an invalid length. [ 447.910435][T15485] netlink: 'syz.0.4090': attribute type 10 has an invalid length. [ 447.942987][T15492] netlink: 'syz.4.4092': attribute type 10 has an invalid length. [ 447.973816][T15490] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4092'. [ 447.991645][T15492] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4092'. [ 448.008890][T15492] netlink: 'syz.4.4092': attribute type 10 has an invalid length. [ 448.176631][T15492] team0: Device gre0 is of different type [ 450.451904][T15556] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.4107'. [ 450.502543][T15556] netlink: 'syz.2.4107': attribute type 10 has an invalid length. [ 451.461420][T15567] netlink: 'syz.4.4111': attribute type 3 has an invalid length. [ 451.506764][T15567] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4111'. [ 451.507209][T15570] netlink: 'syz.4.4111': attribute type 10 has an invalid length. [ 451.568599][T15572] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.4114'. [ 451.664931][T15567] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4111'. [ 451.715840][T15572] netlink: 'syz.0.4114': attribute type 10 has an invalid length. [ 451.744309][T15570] netlink: 'syz.4.4111': attribute type 10 has an invalid length. [ 452.004981][T15570] team0: Device gre0 is of different type [ 452.317336][T15581] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4117'. [ 452.470235][ T7468] Bluetooth: hci0: command 0x0406 tx timeout [ 452.913999][T15607] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.4124'. [ 453.058559][T15602] validate_nla: 1 callbacks suppressed [ 453.058598][T15602] netlink: 'syz.3.4124': attribute type 10 has an invalid length. [ 453.154044][T15620] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.4128'. [ 453.252872][T15626] FAULT_INJECTION: forcing a failure. [ 453.252872][T15626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.286902][T15626] CPU: 0 PID: 15626 Comm: syz.3.4132 Not tainted syzkaller #0 [ 453.294451][T15626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 453.296347][T15614] netlink: 'syz.4.4128': attribute type 10 has an invalid length. [ 453.304518][T15626] Call Trace: [ 453.304530][T15626] [ 453.304539][T15626] dump_stack_lvl+0x188/0x250 [ 453.304568][T15626] ? show_regs_print_info+0x20/0x20 [ 453.304586][T15626] ? load_image+0x410/0x410 [ 453.304609][T15626] ? __lock_acquire+0x7d40/0x7d40 [ 453.304639][T15626] should_fail+0x383/0x4b0 [ 453.304664][T15626] _copy_from_user+0x2e/0x170 [ 453.304685][T15626] __copy_msghdr_from_user+0xc9/0x630 [ 453.304705][T15626] ? verify_lock_unused+0x140/0x140 [ 453.304730][T15626] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 453.304764][T15626] ___sys_sendmsg+0x19a/0x2e0 [ 453.304790][T15626] ? __sys_sendmsg+0x290/0x290 [ 453.304845][T15626] __se_sys_sendmsg+0x1b7/0x2a0 [ 453.304865][T15626] ? __x64_sys_sendmsg+0x80/0x80 [ 453.304880][T15626] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 453.304914][T15626] ? lockdep_hardirqs_on+0x94/0x140 [ 453.304937][T15626] do_syscall_64+0x4c/0xa0 [ 453.304954][T15626] ? clear_bhb_loop+0x30/0x80 [ 453.304974][T15626] ? clear_bhb_loop+0x30/0x80 [ 453.305002][T15626] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 453.414233][T15626] RIP: 0033:0x7f60e1ee0fd9 [ 453.418737][T15626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.438342][T15626] RSP: 002b:00007f60e012e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.446762][T15626] RAX: ffffffffffffffda RBX: 00007f60e215dfa0 RCX: 00007f60e1ee0fd9 [ 453.454721][T15626] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 453.462766][T15626] RBP: 00007f60e012e090 R08: 0000000000000000 R09: 0000000000000000 [ 453.470749][T15626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.478716][T15626] R13: 00007f60e215e038 R14: 00007f60e215dfa0 R15: 00007ffd70a90f38 [ 453.486690][T15626] [ 453.582677][T15630] netlink: 'syz.1.4133': attribute type 3 has an invalid length. [ 453.663343][T15630] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4133'. [ 453.692372][T15637] netlink: 'syz.1.4133': attribute type 10 has an invalid length. [ 453.759258][T15630] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4133'. [ 453.835784][T15641] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.4146'. [ 453.842615][T15630] netlink: 'syz.1.4133': attribute type 10 has an invalid length. [ 454.182668][T15630] team0: Device gre0 is of different type [ 454.498099][T15645] netlink: 'syz.4.4136': attribute type 10 has an invalid length. [ 454.529704][T15645] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4136'. [ 454.565260][T15648] netlink: 'syz.2.4146': attribute type 10 has an invalid length. [ 454.749869][T15662] FAULT_INJECTION: forcing a failure. [ 454.749869][T15662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.814841][T15662] CPU: 1 PID: 15662 Comm: syz.3.4142 Not tainted syzkaller #0 [ 454.822364][T15662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 454.832610][T15662] Call Trace: [ 454.835900][T15662] [ 454.838842][T15662] dump_stack_lvl+0x188/0x250 [ 454.843536][T15662] ? show_regs_print_info+0x20/0x20 [ 454.848747][T15662] ? load_image+0x410/0x410 [ 454.853266][T15662] ? __lock_acquire+0x7d40/0x7d40 [ 454.858396][T15662] should_fail+0x383/0x4b0 [ 454.862843][T15662] _copy_from_iter+0x234/0x1160 [ 454.867711][T15662] ? __lock_acquire+0x7d40/0x7d40 [ 454.872750][T15662] ? copy_mc_pipe_to_iter+0x7d0/0x7d0 [ 454.878132][T15662] ? __virt_addr_valid+0x3c6/0x470 [ 454.883247][T15662] ? __phys_addr_symbol+0x2b/0x70 [ 454.888266][T15662] ? __check_object_size+0x30c/0x410 [ 454.893551][T15662] netlink_sendmsg+0x758/0xbe0 [ 454.898411][T15662] ? netlink_getsockopt+0x570/0x570 [ 454.903607][T15662] ? aa_sock_msg_perm+0x94/0x150 [ 454.908547][T15662] ? apparmor_socket_sendmsg+0x88/0x230 [ 454.914091][T15662] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 454.919379][T15662] ? security_socket_sendmsg+0x7c/0xa0 [ 454.924835][T15662] ? netlink_getsockopt+0x570/0x570 [ 454.930032][T15662] ____sys_sendmsg+0x5be/0x8f0 [ 454.934803][T15662] ? __sys_sendmsg_sock+0x30/0x30 [ 454.939832][T15662] ? import_iovec+0x6f/0xa0 [ 454.944339][T15662] ___sys_sendmsg+0x236/0x2e0 [ 454.949024][T15662] ? __sys_sendmsg+0x290/0x290 [ 454.953905][T15662] __se_sys_sendmsg+0x1b7/0x2a0 [ 454.958761][T15662] ? __x64_sys_sendmsg+0x80/0x80 [ 454.963699][T15662] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 454.969731][T15662] ? lockdep_hardirqs_on+0x94/0x140 [ 454.974937][T15662] do_syscall_64+0x4c/0xa0 [ 454.979365][T15662] ? clear_bhb_loop+0x30/0x80 [ 454.984040][T15662] ? clear_bhb_loop+0x30/0x80 [ 454.988718][T15662] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 454.994606][T15662] RIP: 0033:0x7f60e1ee0fd9 [ 454.999024][T15662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.018630][T15662] RSP: 002b:00007f60e012e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.027060][T15662] RAX: ffffffffffffffda RBX: 00007f60e215dfa0 RCX: 00007f60e1ee0fd9 [ 455.035044][T15662] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 455.043018][T15662] RBP: 00007f60e012e090 R08: 0000000000000000 R09: 0000000000000000 [ 455.051017][T15662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.058987][T15662] R13: 00007f60e215e038 R14: 00007f60e215dfa0 R15: 00007ffd70a90f38 [ 455.066973][T15662] [ 455.225768][T15674] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.4151'. [ 455.562606][T15681] netlink: 'syz.1.4151': attribute type 10 has an invalid length. [ 455.790538][T15694] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.4152'. [ 455.913781][T15694] netlink: 'syz.3.4152': attribute type 10 has an invalid length. [ 456.229684][T15707] netlink: 'syz.3.4155': attribute type 3 has an invalid length. [ 472.380249][T15724] rxe_eth0 speed is unknown, defaulting to 1000 [ 472.681987][T15729] rxe_eth0 speed is unknown, defaulting to 1000 [ 473.034034][T15731] rxe_eth0 speed is unknown, defaulting to 1000 [ 473.275948][T15724] chnl_net:caif_netlink_parms(): no params data found [ 473.352069][T15732] rxe_eth0 speed is unknown, defaulting to 1000 [ 473.568851][T15729] chnl_net:caif_netlink_parms(): no params data found [ 473.603151][T15733] rxe_eth0 speed is unknown, defaulting to 1000 [ 473.766967][T15724] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.792897][T15724] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.813463][T15724] device bridge_slave_0 entered promiscuous mode [ 473.878515][T15724] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.898532][T15724] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.922855][T15724] device bridge_slave_1 entered promiscuous mode [ 474.064644][T15731] chnl_net:caif_netlink_parms(): no params data found [ 474.109149][T15724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.313891][ T7883] Bluetooth: hci4: command 0x0409 tx timeout [ 474.473841][ T7883] Bluetooth: hci6: command 0x0409 tx timeout [ 474.793749][ T7883] Bluetooth: hci7: command 0x0409 tx timeout [ 474.873851][ T7883] Bluetooth: hci9: command 0x0409 tx timeout [ 474.880011][ T7883] Bluetooth: hci8: command 0x0409 tx timeout [ 476.393837][ T7883] Bluetooth: hci4: command 0x041b tx timeout [ 476.553844][ T7883] Bluetooth: hci6: command 0x041b tx timeout [ 476.873818][ T7883] Bluetooth: hci7: command 0x041b tx timeout [ 476.953797][ T7883] Bluetooth: hci8: command 0x041b tx timeout [ 476.960009][ T7883] Bluetooth: hci9: command 0x041b tx timeout [ 478.473839][ T7883] Bluetooth: hci4: command 0x040f tx timeout [ 478.633860][ T7883] Bluetooth: hci6: command 0x040f tx timeout [ 478.953830][ T7883] Bluetooth: hci7: command 0x040f tx timeout [ 479.033842][ T7883] Bluetooth: hci9: command 0x040f tx timeout [ 479.041408][ T7883] Bluetooth: hci8: command 0x040f tx timeout [ 480.553785][ T7839] Bluetooth: hci4: command 0x0419 tx timeout [ 480.714157][ T7839] Bluetooth: hci6: command 0x0419 tx timeout [ 481.033794][ T7883] Bluetooth: hci7: command 0x0419 tx timeout [ 481.113835][ T7883] Bluetooth: hci8: command 0x0419 tx timeout [ 481.122565][ T7883] Bluetooth: hci9: command 0x0419 tx timeout [ 534.873829][ T7839] Bluetooth: hci10: command 0x0409 tx timeout [ 534.953807][ T7839] Bluetooth: hci12: command 0x0409 tx timeout [ 534.962291][ T7839] Bluetooth: hci11: command 0x0409 tx timeout [ 535.033830][ T7839] Bluetooth: hci13: command 0x0409 tx timeout [ 535.113785][ T7839] Bluetooth: hci14: command 0x0409 tx timeout [ 536.953858][ T7839] Bluetooth: hci10: command 0x041b tx timeout [ 537.033770][ T7839] Bluetooth: hci11: command 0x041b tx timeout [ 537.042151][ T7839] Bluetooth: hci12: command 0x041b tx timeout [ 537.113781][ T7839] Bluetooth: hci13: command 0x041b tx timeout [ 537.194177][ T7839] Bluetooth: hci14: command 0x041b tx timeout [ 539.033772][ T7883] Bluetooth: hci10: command 0x040f tx timeout [ 539.113808][ T7883] Bluetooth: hci12: command 0x040f tx timeout [ 539.121710][ T7883] Bluetooth: hci11: command 0x040f tx timeout [ 539.193782][ T7883] Bluetooth: hci13: command 0x040f tx timeout [ 539.273735][ T7883] Bluetooth: hci14: command 0x040f tx timeout [ 541.113812][ T7883] Bluetooth: hci10: command 0x0419 tx timeout [ 541.193828][ T7883] Bluetooth: hci11: command 0x0419 tx timeout [ 541.203497][ T7883] Bluetooth: hci12: command 0x0419 tx timeout [ 541.273817][ T7883] Bluetooth: hci13: command 0x0419 tx timeout [ 541.353745][ T7883] Bluetooth: hci14: command 0x0419 tx timeout [ 561.133642][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 561.140707][ C1] rcu: 0-....: (1 GPs behind) idle=291/1/0x4000000000000000 softirq=44179/44180 fqs=5247 [ 561.151962][ C1] (detected by 1, t=10502 jiffies, g=65209, q=2380) [ 561.158815][ C1] Sending NMI from CPU 1 to CPUs 0: [ 561.164122][ C0] NMI backtrace for cpu 0 [ 561.164136][ C0] CPU: 0 PID: 15702 Comm: syz.4.4154 Not tainted syzkaller #0 [ 561.164152][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 561.164161][ C0] RIP: 0010:perf_trace_buf_update+0xd9/0x230 [ 561.164183][ C0] Code: 48 c1 e9 03 42 0f b6 0c 21 84 c9 0f 85 af 00 00 00 41 88 07 65 4c 8b 3d 95 61 81 7e 49 81 c7 c8 05 00 00 4c 89 f9 48 c1 e9 03 <42> 0f b6 0c 21 84 c9 0f 85 ac 00 00 00 45 8b 3f 48 8d 7b 04 48 89 [ 561.164195][ C0] RSP: 0018:ffffc90000007280 EFLAGS: 00000802 [ 561.164207][ C0] RAX: 0000000000350001 RBX: ffffe8ffffce8000 RCX: 1ffff110050db829 [ 561.164218][ C0] RDX: 0000000000000000 RSI: 0000000000000101 RDI: 0000000000000000 [ 561.164226][ C0] RBP: ffffc90000007330 R08: ffff8880286dbb87 R09: 1ffff110050db770 [ 561.164237][ C0] R10: dffffc0000000000 R11: ffffed10050db771 R12: dffffc0000000000 [ 561.164247][ C0] R13: 1ffff92000000e54 R14: 0000000000000116 R15: ffff8880286dc148 [ 561.164257][ C0] FS: 00007f05aa3e06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 561.164269][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 561.164279][ C0] CR2: 00007f60e012dff8 CR3: 0000000078bce000 CR4: 00000000003506f0 [ 561.164292][ C0] DR0: 0000000000000000 DR1: 00002000000006c0 DR2: 0000000000000000 [ 561.164301][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 561.164309][ C0] Call Trace: [ 561.164316][ C0] [ 561.164330][ C0] ? perf_trace_buf_alloc+0x300/0x300 [ 561.164365][ C0] perf_tp_event+0x1a2/0xbe0 [ 561.164388][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 561.164438][ C0] ? trace_event_raw_event_lock+0x250/0x250 [ 561.164483][ C0] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 561.164506][ C0] perf_trace_preemptirq_template+0x2aa/0x360 [ 561.164525][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 561.164543][ C0] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 561.164561][ C0] ? __irq_exit_rcu+0x147/0x230 [ 561.164576][ C0] ? irq_exit_rcu+0x20/0x20 [ 561.164595][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 561.164610][ C0] trace_irq_enable_rcuidle+0x108/0x180 [ 561.164628][ C0] trace_hardirqs_on+0x57/0x80 [ 561.164643][ C0] asm_sysvec_irq_work+0x16/0x20 [ 561.164656][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 561.164672][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 d2 f6 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 561.164683][ C0] RSP: 0018:ffffc90000007800 EFLAGS: 00000206 [ 561.164694][ C0] RAX: f2650c97ea162d00 RBX: 1ffff92000000f04 RCX: f2650c97ea162d00 [ 561.164704][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2b60 RDI: ffffffff8a7a5100 [ 561.164713][ C0] RBP: ffffc900000078e0 R08: ffff8880b8e3b30b R09: 1ffff110171c7661 [ 561.164723][ C0] R10: dffffc0000000000 R11: ffffed10171c7662 R12: ffffffff8d123400 [ 561.164733][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 561.164769][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 561.164792][ C0] ? __netif_receive_skb+0x290/0x290 [ 561.164816][ C0] __rcu_read_unlock+0x78/0xd0 [ 561.164833][ C0] netif_receive_skb_list_internal+0x961/0xbd0 [ 561.164862][ C0] ? netif_receive_skb_list+0x3e0/0x3e0 [ 561.164892][ C0] ? detach_buf_split+0x8a6/0xab0 [ 561.164912][ C0] napi_complete_done+0x37e/0x850 [ 561.164933][ C0] ? free_old_xmit_skbs+0x252/0x2b0 [ 561.164950][ C0] ? __napi_schedule_irqoff+0x230/0x230 [ 561.164968][ C0] ? virtqueue_get_buf_ctx+0x45d/0xe50 [ 561.164989][ C0] ? virtqueue_enable_cb_prepare+0x226/0x550 [ 561.165009][ C0] virtnet_poll+0x9b7/0xfb0 [ 561.165038][ C0] ? refill_work+0x220/0x220 [ 561.165049][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 561.165069][ C0] ? lock_chain_count+0x20/0x20 [ 561.165087][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 561.165107][ C0] __napi_poll+0xbb/0x430 [ 561.165126][ C0] net_rx_action+0x522/0xa80 [ 561.165148][ C0] ? net_tx_action+0x880/0x880 [ 561.165162][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 561.165179][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 561.165212][ C0] handle_softirqs+0x336/0x830 [ 561.165233][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 561.165252][ C0] ? do_softirq+0x210/0x210 [ 561.165279][ C0] __irq_exit_rcu+0x13b/0x230 [ 561.165293][ C0] ? irq_exit_rcu+0x20/0x20 [ 561.165307][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 561.165333][ C0] irq_exit_rcu+0x5/0x20 [ 561.165350][ C0] common_interrupt+0xb5/0xd0 [ 561.165364][ C0] [ 561.165368][ C0] [ 561.165375][ C0] asm_common_interrupt+0x22/0x40 [ 561.165388][ C0] RIP: 0010:put_cpu_partial+0x15e/0x190 [ 561.165403][ C0] Code: 00 00 48 3b 44 24 08 75 4d 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7f 82 0b 08 41 f7 c5 00 02 00 00 74 c3 fb 4d 85 ff <75> c2 eb cb 48 c7 c7 90 24 1f 8d 4c 89 e6 e8 6f 8f 4b 02 e9 e5 fe [ 561.165414][ C0] RSP: 0018:ffffc90002faf938 EFLAGS: 00000246 [ 561.165425][ C0] RAX: f2650c97ea162d00 RBX: ffff88801784c000 RCX: f2650c97ea162d00 [ 561.165435][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2b60 RDI: ffffffff8a7a5100 [ 561.165445][ C0] RBP: 0000000000000001 R08: ffff8880b8e3b30b R09: 1ffff110171c7661 [ 561.165454][ C0] R10: dffffc0000000000 R11: ffffed10171c7662 R12: 0000000000000000 [ 561.165464][ C0] R13: 0000000000000282 R14: ffff8880b8e3e370 R15: 0000000000000000 [ 561.165501][ C0] qlist_free_all+0x35/0x90 [ 561.165518][ C0] kasan_quarantine_reduce+0x150/0x160 [ 561.165535][ C0] __kasan_slab_alloc+0x2f/0xc0 [ 561.165554][ C0] ? perf_trace_lock+0x301/0x390 [ 561.165579][ C0] ? trace_event_raw_event_lock+0x250/0x250 [ 561.165619][ C0] ? slab_pre_alloc_hook+0x27/0xc0 [ 561.165634][ C0] ? __might_sleep+0xf0/0xf0 [ 561.165649][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 561.165677][ C0] slab_post_alloc_hook+0x4c/0x380 [ 561.165693][ C0] ? should_failslab+0x5/0x20 [ 561.165709][ C0] ? security_file_alloc+0x30/0x110 [ 561.165725][ C0] kmem_cache_alloc+0x15d/0x280 [ 561.165747][ C0] security_file_alloc+0x30/0x110 [ 561.165765][ C0] __alloc_file+0xc2/0x240 [ 561.165785][ C0] alloc_empty_file+0x90/0x180 [ 561.165802][ C0] alloc_file+0x5c/0x510 [ 561.165814][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 561.165834][ C0] alloc_file_pseudo+0x180/0x200 [ 561.165853][ C0] ? alloc_empty_file_noaccount+0x80/0x80 [ 561.165885][ C0] sock_alloc_file+0xb3/0x240 [ 561.165906][ C0] __sys_socket+0x11d/0x170 [ 561.165925][ C0] __x64_sys_socket+0x76/0x80 [ 561.165940][ C0] do_syscall_64+0x4c/0xa0 [ 561.165952][ C0] ? clear_bhb_loop+0x30/0x80 [ 561.165965][ C0] ? clear_bhb_loop+0x30/0x80 [ 561.165981][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 561.165995][ C0] RIP: 0033:0x7f05ac192fd9 [ 561.166012][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.166023][ C0] RSP: 002b:00007f05aa3e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 561.166036][ C0] RAX: ffffffffffffffda RBX: 00007f05ac40ffa0 RCX: 00007f05ac192fd9 [ 561.166046][ C0] RDX: 0000000000000010 RSI: 0000000000000002 RDI: 0000000000000010 [ 561.166054][ C0] RBP: 00007f05ac221fed R08: 0000000000000000 R09: 0000000000000000 [ 561.166063][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.166071][ C0] R13: 00007f05ac410038 R14: 00007f05ac40ffa0 R15: 00007ffe73f61e88 [ 561.166100][ C0] [ 562.795393][ T4258] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10666 jiffies s: 38345 root: 0x1/. [ 562.818828][ T4258] rcu: blocking rcu_node structures (internal RCU debug): [ 562.830028][ T4258] Task dump for CPU 0: [ 562.834230][ T4258] task:syz.4.4154 state:R running task stack:26200 pid:15702 ppid: 12892 flags:0x0000400c [ 562.845129][ T4258] Call Trace: [ 562.848411][ T4258] [ 562.851391][ T4258] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 562.857180][ T4258] ? perf_trace_preemptirq_template+0x2bc/0x360 [ 562.863438][ T4258] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 562.869758][ T4258] ? irqentry_enter+0x33/0x50 [ 562.874612][ T4258] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 562.881823][ T4258] ? rcu_nmi_exit+0x6f/0xf0 [ 562.886381][ T4258] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 562.892473][ T4258] ? rcu_is_watching+0x11/0xa0 [ 562.897284][ T4258] ? common_interrupt+0x8e/0xd0 [ 562.902143][ T4258] ? asm_common_interrupt+0x22/0x40 [ 562.907405][ T4258] ? put_cpu_partial+0x15e/0x190 [ 562.912361][ T4258] ? qlist_free_all+0x35/0x90 [ 562.917079][ T4258] ? kasan_quarantine_reduce+0x150/0x160 [ 562.922819][ T4258] ? __kasan_slab_alloc+0x2f/0xc0 [ 562.927912][ T4258] ? perf_trace_lock+0x301/0x390 [ 562.932868][ T4258] ? trace_event_raw_event_lock+0x250/0x250 [ 562.938829][ T4258] ? slab_pre_alloc_hook+0x27/0xc0 [ 562.943979][ T4258] ? __might_sleep+0xf0/0xf0 [ 562.948589][ T4258] ? __lock_acquire+0x7d40/0x7d40 [ 562.953658][ T4258] ? slab_post_alloc_hook+0x4c/0x380 [ 562.958949][ T4258] ? should_failslab+0x5/0x20 [ 562.963661][ T4258] ? security_file_alloc+0x30/0x110 [ 562.968862][ T4258] ? kmem_cache_alloc+0x15d/0x280 [ 562.973925][ T4258] ? security_file_alloc+0x30/0x110 [ 562.979141][ T4258] ? __alloc_file+0xc2/0x240 [ 562.983770][ T4258] ? alloc_empty_file+0x90/0x180 [ 562.988750][ T4258] ? alloc_file+0x5c/0x510 [ 562.993165][ T4258] ? do_raw_spin_unlock+0x11d/0x230 [ 562.998403][ T4258] ? alloc_file_pseudo+0x180/0x200 [ 563.003518][ T4258] ? alloc_empty_file_noaccount+0x80/0x80 [ 563.009287][ T4258] ? sock_alloc_file+0xb3/0x240 [ 563.014172][ T4258] ? __sys_socket+0x11d/0x170 [ 563.018862][ T4258] ? __x64_sys_socket+0x76/0x80 [ 563.023742][ T4258] ? do_syscall_64+0x4c/0xa0 [ 563.028334][ T4258] ? clear_bhb_loop+0x30/0x80 [ 563.033009][ T4258] ? clear_bhb_loop+0x30/0x80 [ 563.037711][ T4258] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 563.044030][ T4258]