last executing test programs: 7.260694445s ago: executing program 2 (id=2466): r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext={0x0, 0xe00000000}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000a80)={&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x4, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', @random="440000001000"}) 6.834118665s ago: executing program 2 (id=2471): socket$kcm(0x21, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x40049409, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)}, 0x547052430a225ce3) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x800}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f00000000c0)=@rxrpc=@in6={0x21, 0x7, 0x2, 0x1c, {0xa, 0x4e23, 0x101, @mcast2, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x79, 0x0, &(0x7f0000000380)="b90103600040f000009e0ff006001fffffe100003fe3632f77298e3c4b1d343242f3b42c2b631299cad2b2c89e636bff3d75820eeff193f8fa073d6d0a7bc6b5476ab053e47d65d673195b7fd6033577856eee791b4b35a63d9b45298353390974d65230f89123d5efde7d1e4b92323ccc66a6687bf8ede3ee", 0x0, 0x104, 0x8000000, 0x113, 0x7, &(0x7f0000000540)="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", &(0x7f0000000040)="b478b5f7338a0f", 0x0, 0x0, 0x3}, 0x50) 6.772858476s ago: executing program 4 (id=2472): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2f9, 0xf788, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x8000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 6.746814357s ago: executing program 0 (id=2473): socket$kcm(0x10, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180252a0000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 6.745055287s ago: executing program 3 (id=2475): perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, @perf_bp={0x0}, 0x10c002, 0x89}, 0x0, 0xd, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000001c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2b6, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x6000, 0x0, 0x4, 0x6, 0x0, 0x2001000a, 0xfffc, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0xd) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21000ab16d6e230675f8020000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf20000000000000160002000ee600f03d030100000000009500000000000000bc26000000000000bf67000000080000070200000fff07276702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 4.565723266s ago: executing program 4 (id=2477): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 4.455877919s ago: executing program 1 (id=2478): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0xbe9bac6d2d0f4e0b) socket$kcm(0x29, 0xd, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x3}, 0x108282, 0x6, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x23}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x288, 0xfffffffffffeffff, 0xe70, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x39c}, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x40}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000bd0000000003000000850000002700000095", @ANYRESHEX=r5], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 4.455210689s ago: executing program 2 (id=2479): socket$kcm(0x10, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180252a0000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 4.454149839s ago: executing program 0 (id=2480): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x105840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0x32, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477fbac141416e00003f511f8be4c73c30e251f5ce0fa0a94029f", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xa703}, 0x50) 4.405144869s ago: executing program 3 (id=2481): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11c412, 0x1, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/pid\x00') bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/24], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x105840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7, &(0x7f00000000c0)=[{}], 0x8, 0x0, &(0x7f0000001f00), &(0x7f0000000540), 0x8, 0x53, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001158000000000000800000850000006d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0x18, &(0x7f0000000180)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffe5d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x97) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.404934789s ago: executing program 4 (id=2482): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 4.190663234s ago: executing program 2 (id=2483): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x1, 0x4000000, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0xef) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="6204270018ff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534", 0xcd}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0x7}], 0x3}, 0x8045) 4.182448854s ago: executing program 0 (id=2484): perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x1, 0x0, 0x0, 0xd, 0x0, 0x7, 0x80012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7a6, 0x1dc9}, 0x0, 0x8, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x1, 0x0, 0x0, 0xd, 0x0, 0x7, 0x80012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7a6, 0x1dc9}, 0x0, 0x8, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x230}, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x4) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x4) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x5, 0xe, 0x0, &(0x7f0000000200)="259a53f2719efb234644b972a5d2", 0x0, 0xf0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="020000000000000000000036824dd54d8a0c0700", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = socket$kcm(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000008070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) 4.085253527s ago: executing program 3 (id=2485): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="b1", 0x1}], 0x1}, 0xc8d4) sendmsg$inet(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1}, 0x4000) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="5500000014006b02c84e21100af32c6e0a", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ec33c9e9b986c0f4f24abba1a4", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x6f) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) 4.069583737s ago: executing program 4 (id=2486): r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xff90, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.908036651s ago: executing program 2 (id=2487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xeb, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff000}, {0x6, 0xfd, 0x3, 0xffffffff}]}) socket$kcm(0x29, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0}, 0x40) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) write$cgroup_devices(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d84c184ffff"], 0xffdd) 3.906313071s ago: executing program 1 (id=2497): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba, 0x1, 0x4000000, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0xef) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="6204270018ff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca", 0xd4}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0x7}], 0x3}, 0x8045) 3.846054322s ago: executing program 3 (id=2488): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x2c, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x3, 0x2, 0x0, 0xa, 0x0, 0xfffffffffffffff8, 0x1}, @generic={0x9, 0x6, 0x2, 0xf5ec, 0x5}, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x1, 0x4, 0xf, 0x1}], 0x10, 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000030000000000000804000000000000000000000204000000000000000000000a02000000000000612e"], 0x0, 0x52}, 0x28) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="1b0000000000000000000000d400000000000000", @ANYRES32=r1, @ANYBLOB="ffffffff0000000000000000dc6b601b94fe6811", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000200"/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002300)={&(0x7f0000000640)="ddc58fa52bde1e99137edd0fa93251c97306a741277e0a735f8dcf840993f5976004a25818df1470f6b391b9c45674bf3a15dcda85b53aa1b8aab3fac56d69bbb502a5582618ccc7459faf4b086cdbdabccaa059f3c51116a220f1035924c6fa85ed5573e0f42034eeba511829d411acdd59f6c19911db632567eb3da00a53cedaadca1993b4eca4c810ac566025d0df325b4b4b6a7aff42965102d09bd04d3efcc2fddae88086a789d769fba4a36f2a7dc674598a53777c469c50082a648738a3de936991d0c00696b3de3241f793d378ef29740dfc", &(0x7f0000000740)=""/127, &(0x7f00000007c0)="411a4b82229fd43d5b5758c6ee378f86db63f1f5c0e96a1b45223084add405a078da1109f81c486ec7e9afd51e5efe498f3962d2ce3a9ab3da1ac03552397f624b41d8c3051974647be00f8402501ed5ce8d250937cbbb16245831be889db0b855c0efa718302d129c6ccd9ec395c4b9219bcea39ab3462e4648db8e3ff8a23d0848aa71cff01d0942615d3a0768d7b5f95e202ddd88d494d3cb2308cf646d7cbe890adc81f682b261619f4a566c6ba372df682fa79c4f0091b61b09085eeb46fd8072e7015296", &(0x7f0000001280)="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", 0x6, r4}, 0x38) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000004059ab2ff09c9817b7e85329d60000cdceb6c20000000000b7080000000000007b8af8ff0000000000000000000000680000000000bfa100000000000007010000f8ffffffbfa4000000000000070400", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x4, 0x4, 0x7, 0x0, 0x1, 0xe92}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000000000b70400000000000085000000c3000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r12, r11}, 0xc) 3.769228354s ago: executing program 4 (id=2489): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="037260c2750a80e4a200000000", @ANYRESHEX, @ANYBLOB], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x10, 0x1, 0x10, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) socket$kcm(0x23, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x1, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8941, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff00000000000000008500000020000000a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 3.755382954s ago: executing program 0 (id=2490): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000060035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10090, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb00000000003f000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)}, 0x8001) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415", 0x3}, {&(0x7f0000000740)}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0x26}], 0x3}, 0x200ce0c0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x20040080) r7 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x82, &(0x7f0000000000), 0x8) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000000c0)=0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3000000}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000005c0)=""/222, 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1003, r8}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001bc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) 3.50688175s ago: executing program 1 (id=2491): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001a180400020208fc02000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) 2.409275195s ago: executing program 1 (id=2492): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000a80)=@hci={0x1f, 0x1, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="62031400d755af176510120f1eafbc142be12b30254f40c3fc7dbb29136eaf4b122a2c5b67b9c2582d26", 0x2a}], 0x1}, 0x4041) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) 579.691526ms ago: executing program 1 (id=2493): socket$kcm(0x10, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180252a0000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 511.039298ms ago: executing program 4 (id=2494): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000020035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) 464.670839ms ago: executing program 0 (id=2495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg(r2, &(0x7f0000000480)={&(0x7f0000000180)=@can={0x1d, r3}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)="7184678eede2b5b788e6a48406e24abb18412fb63f327d7d5f0a88e23e7953d34984f33cbaffc21287716494c12bdb9024c99f268c65bc410f5a22e93a111ee93beb48f76d2a0f800df2bd6cf1ed90a71d8fa4e488ab42e5cb99e22c0f6421014102316f6b7df165b919f0841779cdd5efee89ff8793ce7fa76eaa99a6dcc13484ccb53d79ccdadc419752cdf6ad50b174fde6dfcc86fe3c109a5238c9f7b7b926ff5df00ac4df40b6fa369a9befdadf1630eff0b6ac6af473c5588e433f43ea55e414ab234123d662c9ec790608c1d53f4821d7f0456cf502d425f04c0182", 0xdf}, {&(0x7f0000000300)="f32373ce1edb7de15c636085bdbec44e95bd78ad5a4890f418526839a515fbb0266071fc4e4bbc667328e0a9936f80fd2d634db9724a23f7d01abcb0fc2dbfd27591f831abec887cbf19faf62dcc54b8769dd0bbc27e50bd6cc735e76063c1a884159334", 0x64}], 0x2, &(0x7f00000003c0)=[{0x78, 0x10f, 0x8001, "f852b6fd9598daab707b34682aef46c5d5797db23e59ec651d6011f005e25c35fd8c7a8730ed911b28c1b8d4bf444d2d824dc336b887fed9fbdf4815f2be31c0205bfb5a705f8827997c75f8fe369c3d50932658031560c190b1bd1a8e57e3274769d0daa979c8fe"}, {0x28, 0x119, 0x6a13, "d8199ee78bcb53258effde25243e7a00b9429574"}], 0xa0}, 0x4000000) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup=r4, 0x15, 0x1, 0x8, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0]}, 0x40) sendmsg$sock(r2, &(0x7f0000000980)={&(0x7f0000000640)=@caif=@dgm={0x25, 0x5, 0x9e}, 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)="54741cbc750c316299123e86be9f72facac24921a70732c8c6e170edc2e61eb0da9da11a9fbcf52c937697e12e784253d9883b219866b9f1aa96e3419c5cf81014ececc5aebcf6b8e68273e5d0b3e9c45c1e59a2c10ff8e41b335ee92c5cd0a169ed17dd5075b7419a049de2bf4880365ec03a2f25c4e291f3c04cfdc26018ad22eacb2d9041cc4bee353787799f5f815824b6cea193a5df7fa56ecd60a59ce78992691d383749cd82c79805fe296797ebaf2b5267df42857925ebefe8ea047e30faefdd3064c052726e059ee22a9b00b1c8b10c28e0b95865859c165d55c3ec6f95f427fc708f4ea4e927784ff8b026d1df4f", 0xf3}, {&(0x7f00000007c0)="1bf8233abacea7695378f3094ad36521e699dd59b59e91afeda483488c", 0x1d}, {&(0x7f0000000800)="b1465d4a389ff8baedbdb730357202509ba148c40ed43b7c5868d3d26dbcd74fb923ec65ec29d960242fdb5648541b8e938545620d8012581f7660d258b4fa961d5a7a8e06887904ad40968b715006ab6454ee7908625224ae869eff86f188c1f0eca9c5f3e4a895c2fde89d1a27954325f482f8a2a833c0ed933453d75c49b9038520ae7985b4fcec23b811abb4a79d73edf57264a08d80019841faf1f245d1b4bec681fe35434ebc8defefc58c13", 0xaf}, {&(0x7f00000008c0)}], 0x4, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x7}}], 0x30}, 0x800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000009c0)={'veth0_to_bond\x00', 0x4000}) r6 = perf_event_open(&(0x7f0000000a00)={0x3, 0x80, 0xb, 0x5, 0x7, 0xf1, 0x0, 0x7fff, 0x201, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3047, 0xc}, 0x88, 0x8f4, 0x4, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x0, 0xa2d3}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000ac0)='syz1\x00', 0x1ff) r7 = perf_event_open$cgroup(&(0x7f0000000b40)={0x1, 0x80, 0x9, 0x5d, 0x3, 0x4, 0x0, 0x4000000000000, 0x14f009, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x2, @perf_bp={&(0x7f0000000b00), 0xd}, 0x10a06d, 0x5, 0x0, 0x3, 0x9, 0x4, 0x1, 0x0, 0x3, 0x0, 0x4}, r4, 0xb, r6, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0xae, 0xce, &(0x7f0000000bc0)="6f8593eaf886c71ff4b9ea0fe6dc4dd8eacb255dcd240747662afbcbf722705a10958cdff6c7d49769d7bd626cce76e7b46c336b39e21394db42677cdd10f92d9a661369d537ed16218f4a63f6578b8e614b01bc46a52fe95b02182d76e44f518ae9544312c4484fc2721bf438e5ecff4448aabede3db16f31629ca9fe689399147f2027a9f4e663f37854500a86be12a1b2474eb032c2c164d2c131d7c6c67ce623249e2e0db659616cb7d765b8", &(0x7f0000000c80)=""/206, 0x2, 0x0, 0x7, 0x5, &(0x7f0000000d80)="b16bf0adfd9952", &(0x7f0000000dc0)="091c8a3035", 0x0, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000e80)={'syz_tun\x00', 0x100}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x1d, &(0x7f0000000ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ldst={0x2, 0x2, 0x2, 0x2, 0x3, 0x8, 0xfffffffffffffff0}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000fc0)='syzkaller\x00', 0x6, 0x81, &(0x7f0000001000)=""/129, 0x40f00, 0x20, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000010c0)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000001100)=[{0x4, 0x1, 0x2, 0xa}, {0x2, 0x4, 0xc, 0xa}, {0x3, 0x3, 0x3, 0xb}, {0x0, 0x2, 0x0, 0x4}, {0x4, 0x2, 0xd, 0xb}, {0x0, 0x3, 0x5, 0x8}, {0x3, 0x5, 0x10, 0x8}, {0x5, 0x3, 0xb, 0x7}], 0x10, 0x7}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r8, 0xe0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001240)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0], 0x0, 0x9b, &(0x7f0000001300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001380), &(0x7f00000013c0), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000001400)}}, 0x10) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001600)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000001580)={0x0, 0x80, 0xff, 0x1, 0x0, 0x20, 0x0, 0x0, 0xdd62, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x100, 0x80000000}, 0x500, 0x2, 0x3, 0x2, 0x79405feb, 0x8, 0x9f8, 0x0, 0x8, 0x0, 0x9}, r11, 0xa, r7, 0xc) socketpair(0x15, 0x8, 0xfff, &(0x7f0000001640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r13, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001680)="7e63ae", 0x3}, {&(0x7f00000016c0)="9ea30d7ded1b7e5a44e77586e5c23ea4c0ec285a3157ee4645253b03651d30ee9140a2d35ca7b6d4fa1089d18353b7ce8e593edc7a166e8cebbba59849c8784ce52ace5bd3bd81b1a5d3ea81c0320ba4ea2dc85daf20cf80699e39a524de3ff553df15e1914f53e52dfeb0fb278b17a0e4429eb1878a2e0e75ed", 0x7a}, {&(0x7f0000001740)="7b56096c3211ba993a6338bde2c3e7d7e080d00bb25e998c5910d771cb04b481011cdb7e93ed825015ca0a5d6c3436706853de08a880628895b80303922794f50f643630bd81354cfcfbc1def63a89dcae27b8c2e963289d4f7c3616538abb51e0087979075b58e471423c2ce6854b30f91f0e3f59e8b20bca257460812b1856d44fb351ddd7c6ba2dfcf6767b64b91c4727baf7fbd98545efed97972af43b7b13f0f1dc5a48b5deb5b576d077364e86d51aba5bde1a08847c65959d2efd00de015442e72e", 0xc5}, {&(0x7f0000001840)="8e71150953d6e6056211da1a6b3f331f32defdb214406ec6d4ed4ee826cbb6ca39e6ba8cb227893b445800ba9724af863d6e6927809d5aac6b28a97e46ddcc1ff46fff952f3bea6e663ab2f8d56b2996be906d440e290e608c72a68f7ff03d8d0517531f950b95bb09daae7013b6ebd15e2135cfe4b7b8b66f5d92d022e560b40abdf8c2f7d529662730606add0252eb8724296a71d475b2151c799d029c2d730c26bf5c97a7c4bde029cf9921d72257be30b3922ef72d1b234eecfc2ad27560f490a688bec921a3721cce0a0bd04c1006e00e54", 0xd4}, {&(0x7f0000001940)="122c72c9b138f4434acd25819cea18999fadd946e08a4248781d56d6741d583fcd07df48b9985a2cea32efd1fce05fd5e2575e3fcaa95c735b8f4cb01887b684191edcb07d28e82c4e9d8c22e5289b26300578ad3b1180fd0eb97f2cdfc7b58ca66b32e9415c6a81563d12687ab05121ad6339b603bc2358e28d805aba3bc884b3e6b320dc", 0x85}, {&(0x7f0000001a00)="e7177036402e90e9416b315dd457dca05e5c8681f1583a2f73fbff2e8e85f5483a24444f337fe0df44ce0f42d56ed46cebe31933e50cf29ba4bc309d937b", 0x3e}, {&(0x7f0000001a40)="4ec0e20c2e58ab5633e6272cfb9c288783e4988b604c28c6dabba86386a4273721c88e1fc66467966e0156947d8c5a0b18f79338af53bf3007a84c8b8c401d490cc7be048e6fe63339e434b315619293c7033cd527a6697aa826534d3ce227baba5983bdfa698838ed161fa2a14a65f710a74f5327f8b5a9320ab01da27017a05785c32b7d41d3cb41d9d4ab57", 0x8d}], 0x7}, 0x4040884) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=@bloom_filter={0x1e, 0x0, 0xffff, 0x418, 0x39a28, 0xffffffffffffffff, 0x6, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x3, @value=r11}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001ec0)={&(0x7f0000001bc0)="302202a621e5a7adf8e754a289ae9121cde7c4c1ce8c1bfb5071c515234b819c56be2eba1a84a00ea7d94416133318e17573cbfcb9c5b2347b85a88e6bcfd1d98c4a6c788d89b33bf3615ae2af6321f66002de6e2973fea52e5b1dbb04f0353db938c9d975a61d39292e9fd7032d96f50832a1892bbb1971758659569872d77f1bd6f301d1797add4065c911ba8b0ed8bae66167122a8edf2ca56d353230d90422fb50b382374f42d49fba865fd47ceb", &(0x7f0000001c80)=""/163, &(0x7f0000001d40)="255e39e5eb6debb1b42784ab87d913497417ab5a87b62f0e1c499b27c60015bbeeef811e8166daa9360253ff3d0b8a0da09bf7fb42bdd10f657303c41367d7df49cc3f7c089aa46dfb55e344410ae02622884f21ec8ecf90f64c9387814170cb411a08883304bb1165153becc4753ef6744849eefd", &(0x7f0000001dc0)="e6a8cd5b37dbf52b049d1c615870f6dae8a588e1a6b53d1630348ab99711081c21f287f083237b4aac0c1d81e2b59dea2ba5a947b5ff4af1a43d8c45cb53fc32801f7e256927aecd83bd9785", 0xe, r14}, 0x38) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000001f00)={r1, r8}) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002080)=r10, 0x4) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002140)=@o_path={&(0x7f0000002100)='./file0\x00', 0x0, 0x8, r6}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002240)={0x6, 0x4, &(0x7f0000001f40)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}], &(0x7f0000001f80)='GPL\x00', 0xffff, 0x83, &(0x7f0000001fc0)=""/131, 0x40f00, 0x1, '\x00', r9, 0x25, r15, 0x8, &(0x7f00000020c0)={0xf, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000021c0)=[r16, r14, 0xffffffffffffffff, 0xffffffffffffffff, r14, r14, r14, r14], &(0x7f0000002200)=[{0x5, 0x5, 0xa}, {0x0, 0x5, 0xc, 0xa}, {0x0, 0x3, 0xd, 0x2}], 0x10, 0x4e6}, 0x94) 460.900399ms ago: executing program 3 (id=2496): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000b80)=ANY=[@ANYBLOB="61128c004d04000061134c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf6700000000000026060800010400004507000002000000240600000ee60000bf050000000000000f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ff2d350100000000009500000000000000050000000000000095000000000000001f1bd182bd43cb58074e0816289328452c0880fe4b3af9c97925711095cc7d3ebcd8418ffdc4a1da470a14e4391c3fb6915cbff2a4911fe82664d775cdb9dfc83fa32db39b636c1866b526185f4ab35172a74e9afe751664f575306ebb2c2890a4fa79303101a652776cc2fb4f01e79cd10215d917a116350d60f27fdc244bdab56ee3ad8f5fdf82027a1215bc54045d6b9f30bdebcf053aa120397695ffd0f6e5fe24ce4b9143a3d8419fb51331ca5fef"], &(0x7f0000000100)='GPL\x00'}, 0x48) 416.02645ms ago: executing program 2 (id=2498): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x9}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x1, 0xe2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x12d}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000900)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[], 0x31) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x1000, 0x400000, 0x0, 0x8, 0x1, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRESOCT, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x1000004, 0x1002, &(0x7f00000014c0)=""/4093, 0x0, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x37) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/27], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX=r2, @ANYBLOB="116a8d29829cdfb8d26baa6988ca0e342fcb3e9ea4f03232b4e93365c7c237637978b37cd8944061e47734abd878ce64587e070289ee5d04ce5af1d65f4a88672f78e1a5e98fc3c9abdc942728359e4899898a31bb437ebbfcdfbdeffdb7b6adcba1d6bdf5a79640fbef01d581d38fe77dfbbf6ac35e940d4994c2cd8e7b5cd054c2eddfad09a20d80040e56f4a3bc5b6dd3dd4b57e0407f", @ANYRESDEC=0x0], 0xffd3) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX=r2, @ANYBLOB="116a8d29829cdfb8d26baa6988ca0e342fcb3e9ea4f03232b4e93365c7c237637978b37cd8944061e47734abd878ce64587e070289ee5d04ce5af1d65f4a88672f78e1a5e98fc3c9abdc942728359e4899898a31bb437ebbfcdfbdeffdb7b6adcba1d6bdf5a79640fbef01d581d38fe77dfbbf6ac35e940d4994c2cd8e7b5cd054c2eddfad09a20d80040e56f4a3bc5b6dd3dd4b57e0407f", @ANYRESDEC=0x0], 0xffd3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x3}, 0x0, 0xb, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000200), 0x2, 0x0) (async) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000940)=ANY=[@ANYBLOB="6270746164763032394ea1d5be015bf8007fd0fb933f87f9617ad24c7143a63ceb352a2f07d063125a2fbbdc672c2d914f8c7aa868831ffa1a5d8197874f4480a0e0a8b5e165e3d91799dc5404d977b34ce7f657f69d81c860a7c2bf8d4ec2b4fda34619bacd8a1a3b6192ed177fa2cf9da9f146cf59764c7dc5384b236f7e042f8b623822b79b2cc399fa79498dedc72eca7d0d8da028f8bce4970e0ce0382969d1198e8a094b75006f4784a13979bb9dde5cebee2d2a10ce1412d5674b78bc49aeec0de8dc76f5e7d29e27fa6380f73eb9f0"], 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305828, &(0x7f0000000040)=0x20000) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x87, 0x9, 0xc3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2f0, 0xf72a}, 0x0, 0x3, 0xfffffff9, 0x4, 0x0, 0x9, 0xc, 0x0, 0x1, 0x0, 0x6}, r4, 0x10, 0xffffffffffffffff, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb01001800000000000000140000002b0000000a0000000200000001000006040000000600000000000000000061612e2e5f306100"], &(0x7f0000000840)=""/170, 0x36, 0xaa, 0x1, 0x0, 0x10000}, 0x28) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e65745f7072696f20f53cc4127b47bf335ae5e85ff2608ea11ce6b86846db67b36ed32a03fb646517235f164784be7161400f2d9ce74afb07f2bb853950ff442559b39f23a886d7aec551c699c6557bf545ca0e72128301e65d9522d7676e9c5dd49b033dcd53f0dd759900fd62fa346ce4fd8d5b657151306c5c4d58c7dff52fe5c3b1d5a4bf65805b52ecd306559b9f18b7b81701de0e1b20ab81974dc6894b50ebc332760194a08297078b87"], 0xa) 311.594003ms ago: executing program 1 (id=2499): r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f0000000100)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0xc8d4) sendmsg$inet(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000340)="d9", 0x1}], 0x1}, 0x4000) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="5500000014006b02c84e21100af32c6e0a", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63ec33c9e9b986c0f4f24abba1a4", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x6f) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) 27.714389ms ago: executing program 0 (id=2500): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0xef) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x10}, 0x0, 0xc8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="20000000000000008400000002000000fe80410000000000920000000000000010"], 0x30}, 0x8021) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r4, 0x3, 0x1}, 0x50) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xe, &(0x7f0000000000)=[@rights={{0x14}}]}, 0x262) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100032f00fc08000000110200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x81, @local, 0x7}}, 0x80, &(0x7f0000003b40)=[{&(0x7f0000000ac0)="ee", 0x1}, {&(0x7f0000002a00)="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", 0x584}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a0016000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="6204270018ff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000001e00)={&(0x7f00000006c0)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x3, 0x1}}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000000700)="ccaa9879a32c15681b813e3c3da34486e90e023d6a582f0cd23d1c317bfcbd5a274e832f6740458bee42300a4fad82fc28ee3872730f3c3891fe599f9af6b8fc0adfa48b1eb00e45d318660f7204082b80b237846c604b8c525e9212e8290b0a86e79f1df7e34f0390fed819c3ac6024790ffa6ae5cee216a0b2c74b75b291e0ae18749461896129f992f5cd30c0df8d22f918d8ae74b63062461182d2b3f04f41d5e8cf1d1a34b992e3798c419ee7bef487770e76ffbb666f3d9ccdfdf0e8f591e8c9fb37a4975f78eda6875e4aebaa645f7bb1f63378dbf4dea0a95a897c372eb01cd97a3cee9ff6865e", 0xeb}, {&(0x7f0000000a80)="0092bb12f6a69e06bb18c186fd79cc844ac9e1ab011c2aaae118c1d0df240001879ed7b3f15bd7b6d806fbf31e5168fd7fc1821ebf671775ad314a4c9399dbf7689193a25ed001bcfabc136e8ff09dfbd19e253b54b6719cae065e", 0x5b}, {&(0x7f0000000b00)="7df52e6c82c9da685fa31a0d0c274659fd752d5595a81bec0c6a81e7bc0e2c6f6b649c94c859aaa29904562000fbcbae5606640762e829d665bca573ac0cd3523fba95d45b64111886c13524b5159238b2f08d08b114ea8140248c0a084692d03789c45e49d4a24b9d48", 0x6a}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="efb3b3a0980fdb72cd32f38e26d0e6a99b6de60087b50babb64d612ee4bc077de6de283fa4bee25e95054fb20152f9279d220df3e2cf5b176ed11c88099801739411a61188929ea5df5e5420aeae71caf5d7bc721dd04a67f0ea4fe029841a98454a6d330eece0595eb360bf63d5fcaeb3609cf581d96dd91e015f8899fe22ad41651a3043f519a6cac109e9185da03e1166e444d7", 0x95}, {&(0x7f0000001c40)="9bd8dc19a1d4a98169465f9a0c9388ad24e7bc498ac2bae7da779a257e3d425c36baeb", 0x23}, {&(0x7f0000001c80)="1919c1c068e89d3c659de5f4e141b65b47c9708e110482508889e7289156db83aa9009fcc818d203c65a5746dcadbbd39ee67a0999161e2d56fac2fd0d6e50004ef4bcd2341c2635e173f9991af507f1b3f6d17b1315b653a3115b39564adfe00237ab8d5ec69d27315f6234e980652a68d0158eb33f50352a5b8591", 0x7c}], 0x7, &(0x7f0000001d80)="a014ed33f9ee3ff8a5c4d0a4b73476809be9c5e1cfc1d3545b28f7f858b694470f0b15b3491a4d64f642801710930f4cdbc6199997f97a8fa8440442cc00c4cdffa0340f134befd5b2c104e8e9b809ad911ce7982bc5f36ff4b921", 0x5b, 0x40850}, 0x0) r7 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r7, &(0x7f0000000680)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)=""/137, 0x89}, {&(0x7f00000001c0)=""/51, 0x33}, {&(0x7f0000000200)=""/57, 0x39}, {&(0x7f0000000300)=""/230, 0xe6}], 0x4, &(0x7f0000000580)=""/235, 0xeb}, 0x20) 0s ago: executing program 3 (id=2501): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000feffff3f000000000001000085100000060000008710000004000000c608feffff3f00001800000000000000000000000000000095"], 0x0, 0x7, 0x0, 0x0, 0x100, 0x40}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080)="b7d866758f60f7e8", 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000019c0)={0xffffffffffffffff, &(0x7f0000000080)="37111eb6c3013a", 0x0, 0x4}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)={[{0x2b, 'io'}]}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfc}, 0x48) kernel console output (not intermixed with test programs): 3.559051][ T7922] netlink: 'syz.4.1175': attribute type 5 has an invalid length. [ 324.590147][ T7937] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1180'. [ 324.627686][ T7937] device bond0 entered promiscuous mode [ 324.643213][ T7937] device bond_slave_1 entered promiscuous mode [ 324.699590][ T7937] bridge0: port 2(bond0) entered blocking state [ 324.709598][ T7937] bridge0: port 2(bond0) entered disabled state [ 324.806916][ T7937] bridge0: port 2(bond0) entered blocking state [ 324.814311][ T7937] bridge0: port 2(bond0) entered forwarding state [ 324.901360][ T7947] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1183'. [ 324.943007][ T7947] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1183'. [ 326.387909][ T7968] validate_nla: 5 callbacks suppressed [ 326.387939][ T7968] netlink: 'syz.3.1191': attribute type 2 has an invalid length. [ 326.466262][ T7968] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1191'. [ 326.684973][ T7976] FAULT_INJECTION: forcing a failure. [ 326.684973][ T7976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.732184][ T7976] CPU: 1 PID: 7976 Comm: syz.0.1194 Not tainted syzkaller #0 [ 326.740639][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.751992][ T7976] Call Trace: [ 326.755863][ T7976] [ 326.760118][ T7976] dump_stack_lvl+0x188/0x24e [ 326.765091][ T7976] ? show_regs_print_info+0x12/0x12 [ 326.771807][ T7976] ? load_image+0x410/0x410 [ 326.776708][ T7976] ? __lock_acquire+0x7c40/0x7c40 [ 326.782853][ T7976] should_fail_ex+0x390/0x4c0 [ 326.787840][ T7976] _copy_to_user+0x2c/0x130 [ 326.793977][ T7976] generic_map_lookup_batch+0x829/0xbf0 [ 326.801358][ T7976] ? bpf_map_update_value+0x670/0x670 [ 326.808858][ T7976] ? bpf_map_update_value+0x670/0x670 [ 326.814307][ T7976] ? bpf_map_do_batch+0x2d5/0x5f0 [ 326.819412][ T7976] ? bpf_map_update_value+0x670/0x670 [ 326.825032][ T7976] bpf_map_do_batch+0x2e0/0x5f0 [ 326.830061][ T7976] ? bpf_lsm_bpf+0x5/0x10 [ 326.834811][ T7976] ? security_bpf+0x7a/0xa0 [ 326.841666][ T7976] __sys_bpf+0x6f7/0x780 [ 326.848303][ T7976] ? bpf_link_show_fdinfo+0x380/0x380 [ 326.857202][ T7976] __x64_sys_bpf+0x78/0x90 [ 326.861731][ T7976] do_syscall_64+0x4c/0xa0 [ 326.866595][ T7976] ? clear_bhb_loop+0x60/0xb0 [ 326.871469][ T7976] ? clear_bhb_loop+0x60/0xb0 [ 326.876873][ T7976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.883175][ T7976] RIP: 0033:0x7fe22039e0d9 [ 326.887780][ T7976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.909439][ T7976] RSP: 002b:00007fe22127a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 326.918980][ T7976] RAX: ffffffffffffffda RBX: 00007fe220625fa0 RCX: 00007fe22039e0d9 [ 326.927194][ T7976] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 326.935579][ T7976] RBP: 00007fe22127a090 R08: 0000000000000000 R09: 0000000000000000 [ 326.944319][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.953033][ T7976] R13: 00007fe220626038 R14: 00007fe220625fa0 R15: 00007fffeaea67f8 [ 326.961934][ T7976] [ 327.470751][ T7986] bond0: (slave team0): Error: Slave device does not support XDP [ 328.564635][ T8019] netlink: 'syz.2.1212': attribute type 10 has an invalid length. [ 328.620015][ T8019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1212'. [ 328.711533][ T8019] bond0: (slave team0): Releasing backup interface [ 328.776239][ T8019] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 328.847964][ T8027] netlink: 'syz.0.1216': attribute type 21 has an invalid length. [ 328.887817][ T8027] netlink: 'syz.0.1216': attribute type 1 has an invalid length. [ 328.981882][ T8032] netlink: 'syz.3.1219': attribute type 10 has an invalid length. [ 329.000544][ T8032] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1219'. [ 329.025728][ T8032] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 329.043518][ T8034] netlink: 'syz.4.1218': attribute type 10 has an invalid length. [ 329.072614][ T8034] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1218'. [ 329.092235][ T8034] device bond0 entered promiscuous mode [ 329.098146][ T8034] device bond_slave_0 entered promiscuous mode [ 329.117135][ T8034] device bond_slave_1 entered promiscuous mode [ 329.136535][ T8034] device team0 entered promiscuous mode [ 329.155937][ T8034] device team_slave_0 entered promiscuous mode [ 329.178694][ T8034] device team_slave_1 entered promiscuous mode [ 329.231140][ T8034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.262859][ T8034] bridge0: port 3(bond0) entered blocking state [ 329.278956][ T8034] bridge0: port 3(bond0) entered disabled state [ 329.747080][ T8034] bridge0: port 3(bond0) entered blocking state [ 329.760436][ T8034] bridge0: port 3(bond0) entered forwarding state [ 330.139804][ T8034] syz.4.1218 (8034) used greatest stack depth: 19088 bytes left [ 331.898871][ T8075] netlink: 535 bytes leftover after parsing attributes in process `syz.3.1234'. [ 332.057817][ T8081] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1233'. [ 332.166108][ T8081] netlink: 'syz.0.1233': attribute type 21 has an invalid length. [ 332.237992][ T8078] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1233'. [ 332.293778][ T8078] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 332.478865][ T8078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.647359][ T8092] netlink: 'syz.4.1237': attribute type 16 has an invalid length. [ 332.680616][ T8092] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1237'. [ 333.001796][ T8098] FAULT_INJECTION: forcing a failure. [ 333.001796][ T8098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.050791][ T8098] CPU: 0 PID: 8098 Comm: syz.1.1240 Not tainted syzkaller #0 [ 333.058364][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 333.068664][ T8098] Call Trace: [ 333.072066][ T8098] [ 333.075131][ T8098] dump_stack_lvl+0x188/0x24e [ 333.079887][ T8098] ? show_regs_print_info+0x12/0x12 [ 333.085161][ T8098] ? load_image+0x410/0x410 [ 333.090273][ T8098] ? __lock_acquire+0x7c40/0x7c40 [ 333.096317][ T8098] should_fail_ex+0x390/0x4c0 [ 333.101677][ T8098] _copy_from_user+0x2c/0x170 [ 333.106594][ T8098] iovec_from_user+0x143/0x360 [ 333.111668][ T8098] __import_iovec+0x6c/0x510 [ 333.116520][ T8098] import_iovec+0x6f/0xa0 [ 333.122304][ T8098] ___sys_sendmsg+0x252/0x360 [ 333.127051][ T8098] ? __sys_sendmsg+0x2a0/0x2a0 [ 333.132003][ T8098] ? ktime_get+0x7b/0x270 [ 333.136485][ T8098] __se_sys_sendmsg+0x1c3/0x2b0 [ 333.141394][ T8098] ? perf_trace_preemptirq_template+0x268/0x320 [ 333.147754][ T8098] ? __x64_sys_sendmsg+0x80/0x80 [ 333.152769][ T8098] ? lockdep_hardirqs_on+0x94/0x140 [ 333.158003][ T8098] do_syscall_64+0x4c/0xa0 [ 333.162461][ T8098] ? clear_bhb_loop+0x60/0xb0 [ 333.167974][ T8098] ? clear_bhb_loop+0x60/0xb0 [ 333.172840][ T8098] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 333.178796][ T8098] RIP: 0033:0x7f591c39e0d9 [ 333.183705][ T8098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.204759][ T8098] RSP: 002b:00007f591a5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.213310][ T8098] RAX: ffffffffffffffda RBX: 00007f591c625fa0 RCX: 00007f591c39e0d9 [ 333.221532][ T8098] RDX: 0000000000000844 RSI: 0000200000000000 RDI: 0000000000000005 [ 333.229681][ T8098] RBP: 00007f591a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.238592][ T8098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.247062][ T8098] R13: 00007f591c626038 R14: 00007f591c625fa0 R15: 00007ffdb84eb208 [ 333.255089][ T8098] [ 333.346558][ T4303] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 335.345981][ T8136] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1252'. [ 335.406955][ T8133] netlink: 'syz.4.1252': attribute type 21 has an invalid length. [ 335.471269][ T8139] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1252'. [ 335.502265][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 335.562342][ T8139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.057102][ T8154] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1259'. [ 336.212107][ T8161] netlink: 'syz.0.1259': attribute type 21 has an invalid length. [ 336.224513][ T8161] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1259'. [ 336.250885][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 336.331204][ T8161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.905888][ T8197] netlink: 'syz.0.1273': attribute type 21 has an invalid length. [ 340.954834][ T8197] netlink: 'syz.0.1273': attribute type 5 has an invalid length. [ 341.430745][ T8210] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1278'. [ 343.742697][ T8253] netlink: 'syz.0.1296': attribute type 5 has an invalid length. [ 343.882574][ T8254] netlink: 'syz.0.1296': attribute type 5 has an invalid length. [ 343.989105][ T8261] netlink: 'syz.2.1297': attribute type 3 has an invalid length. [ 344.071078][ T8261] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1297'. [ 344.322941][ T8264] netlink: 'syz.0.1299': attribute type 29 has an invalid length. [ 344.371590][ T8264] netlink: 'syz.0.1299': attribute type 29 has an invalid length. [ 344.424960][ T8264] netlink: 'syz.0.1299': attribute type 29 has an invalid length. [ 344.787228][ T8274] netlink: 'syz.1.1303': attribute type 10 has an invalid length. [ 344.834162][ T8274] bridge0: port 3(bond0) entered blocking state [ 344.842414][ T8274] bridge0: port 3(bond0) entered forwarding state [ 344.850652][ T8274] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.858957][ T8274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.869031][ T8274] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.882977][ T8274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.953381][ T8274] bridge0: port 3(bond0) entered disabled state [ 344.962364][ T8274] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.970779][ T8274] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.346176][ T8284] netlink: 'syz.1.1307': attribute type 2 has an invalid length. [ 346.307874][ T8307] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1316'. [ 346.311771][ T8308] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1318'. [ 346.373805][ T8308] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1318'. [ 346.423787][ T8309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1318'. [ 346.544139][ T8309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1318'. [ 348.333286][ T8344] validate_nla: 5 callbacks suppressed [ 348.333305][ T8344] netlink: 'syz.3.1330': attribute type 10 has an invalid length. [ 348.449192][ T8344] bond0: (slave wlan1): Opening slave failed [ 349.527429][ T8372] netlink: 'syz.3.1339': attribute type 10 has an invalid length. [ 349.546812][ T8372] device bridge_slave_1 entered promiscuous mode [ 349.559532][ T8372] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 349.766214][ T8375] netlink: 'syz.4.1342': attribute type 2 has an invalid length. [ 349.775416][ T8375] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1342'. [ 349.846093][ T8379] FAULT_INJECTION: forcing a failure. [ 349.846093][ T8379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.894654][ T8379] CPU: 0 PID: 8379 Comm: syz.0.1343 Not tainted syzkaller #0 [ 349.902171][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 349.915191][ T8379] Call Trace: [ 349.918651][ T8379] [ 349.921941][ T8379] dump_stack_lvl+0x188/0x24e [ 349.927436][ T8379] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 349.935220][ T8379] ? show_regs_print_info+0x12/0x12 [ 349.941034][ T8379] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 349.947912][ T8379] should_fail_ex+0x390/0x4c0 [ 349.952771][ T8379] _copy_to_user+0x2c/0x130 [ 349.957526][ T8379] generic_map_lookup_batch+0x7cc/0xbf0 [ 349.966418][ T8379] ? bpf_map_update_value+0x670/0x670 [ 349.974231][ T8379] ? __fdget+0x17c/0x200 [ 349.978913][ T8379] ? bpf_map_update_value+0x670/0x670 [ 349.984670][ T8379] bpf_map_do_batch+0x2e0/0x5f0 [ 349.990217][ T8379] ? bpf_lsm_bpf+0x5/0x10 [ 349.996227][ T8379] ? security_bpf+0x7a/0xa0 [ 350.001358][ T8379] __sys_bpf+0x6f7/0x780 [ 350.005951][ T8379] ? bpf_link_show_fdinfo+0x380/0x380 [ 350.014144][ T8379] ? lock_chain_count+0x20/0x20 [ 350.019829][ T8379] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 350.026773][ T8379] __x64_sys_bpf+0x78/0x90 [ 350.031266][ T8379] do_syscall_64+0x4c/0xa0 [ 350.035894][ T8379] ? clear_bhb_loop+0x60/0xb0 [ 350.041153][ T8379] ? clear_bhb_loop+0x60/0xb0 [ 350.046189][ T8379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.052715][ T8379] RIP: 0033:0x7fe22039e0d9 [ 350.059809][ T8379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.080888][ T8379] RSP: 002b:00007fe22127a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.089905][ T8379] RAX: ffffffffffffffda RBX: 00007fe220625fa0 RCX: 00007fe22039e0d9 [ 350.098830][ T8379] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 350.106955][ T8379] RBP: 00007fe22127a090 R08: 0000000000000000 R09: 0000000000000000 [ 350.115411][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.123722][ T8379] R13: 00007fe220626038 R14: 00007fe220625fa0 R15: 00007fffeaea67f8 [ 350.132661][ T8379] [ 353.742716][ T8425] FAULT_INJECTION: forcing a failure. [ 353.742716][ T8425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.774190][ T8425] CPU: 1 PID: 8425 Comm: syz.3.1359 Not tainted syzkaller #0 [ 353.781859][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.792173][ T8425] Call Trace: [ 353.795607][ T8425] [ 353.798692][ T8425] dump_stack_lvl+0x188/0x24e [ 353.803456][ T8425] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 353.809692][ T8425] ? show_regs_print_info+0x12/0x12 [ 353.815499][ T8425] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 353.822622][ T8425] should_fail_ex+0x390/0x4c0 [ 353.827562][ T8425] _copy_from_user+0x2c/0x170 [ 353.832302][ T8425] ___sys_sendmsg+0x1c3/0x360 [ 353.837575][ T8425] ? __sys_sendmsg+0x2a0/0x2a0 [ 353.842437][ T8425] ? ktime_get+0x7b/0x270 [ 353.846853][ T8425] __se_sys_sendmsg+0x1c3/0x2b0 [ 353.851952][ T8425] ? perf_trace_preemptirq_template+0x268/0x320 [ 353.858370][ T8425] ? __x64_sys_sendmsg+0x80/0x80 [ 353.863488][ T8425] ? lockdep_hardirqs_on+0x94/0x140 [ 353.869117][ T8425] do_syscall_64+0x4c/0xa0 [ 353.873630][ T8425] ? clear_bhb_loop+0x60/0xb0 [ 353.878981][ T8425] ? clear_bhb_loop+0x60/0xb0 [ 353.883941][ T8425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.890636][ T8425] RIP: 0033:0x7f77eeb9e0d9 [ 353.895545][ T8425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.915434][ T8425] RSP: 002b:00007f77efade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.924086][ T8425] RAX: ffffffffffffffda RBX: 00007f77eee25fa0 RCX: 00007f77eeb9e0d9 [ 353.932189][ T8425] RDX: 0000000000000844 RSI: 0000200000000000 RDI: 0000000000000005 [ 353.940318][ T8425] RBP: 00007f77efade090 R08: 0000000000000000 R09: 0000000000000000 [ 353.948873][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.956996][ T8425] R13: 00007f77eee26038 R14: 00007f77eee25fa0 R15: 00007ffc9c044628 [ 353.967467][ T8425] [ 354.595833][ T8446] netlink: 'syz.0.1365': attribute type 10 has an invalid length. [ 354.618480][ T8448] FAULT_INJECTION: forcing a failure. [ 354.618480][ T8448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.645156][ T8446] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1365'. [ 354.690730][ T8448] CPU: 1 PID: 8448 Comm: syz.4.1366 Not tainted syzkaller #0 [ 354.698237][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.708368][ T8448] Call Trace: [ 354.711703][ T8448] [ 354.714691][ T8448] dump_stack_lvl+0x188/0x24e [ 354.719440][ T8448] ? show_regs_print_info+0x12/0x12 [ 354.725853][ T8448] ? load_image+0x410/0x410 [ 354.730608][ T8448] ? __lock_acquire+0x7c40/0x7c40 [ 354.735714][ T8448] should_fail_ex+0x390/0x4c0 [ 354.740559][ T8448] _copy_from_user+0x2c/0x170 [ 354.746428][ T8448] __copy_msghdr+0x384/0x560 [ 354.751284][ T8448] ___sys_sendmsg+0x210/0x360 [ 354.753389][ T8446] device team0 entered promiscuous mode [ 354.756033][ T8448] ? __sys_sendmsg+0x2a0/0x2a0 [ 354.756100][ T8448] ? __lock_acquire+0x7c40/0x7c40 [ 354.773247][ T8448] __se_sys_sendmsg+0x1c3/0x2b0 [ 354.779101][ T8448] ? __x64_sys_sendmsg+0x80/0x80 [ 354.784143][ T8448] ? lockdep_hardirqs_on+0x94/0x140 [ 354.790289][ T8448] do_syscall_64+0x4c/0xa0 [ 354.796621][ T8448] ? clear_bhb_loop+0x60/0xb0 [ 354.802521][ T8448] ? clear_bhb_loop+0x60/0xb0 [ 354.807989][ T8448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.814493][ T8448] RIP: 0033:0x7fd9fdd9e0d9 [ 354.819360][ T8448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.840934][ T8448] RSP: 002b:00007fd9fed22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.851606][ T8448] RAX: ffffffffffffffda RBX: 00007fd9fe025fa0 RCX: 00007fd9fdd9e0d9 [ 354.860092][ T8448] RDX: 000000002004408d RSI: 00002000000003c0 RDI: 0000000000000003 [ 354.870715][ T8448] RBP: 00007fd9fed22090 R08: 0000000000000000 R09: 0000000000000000 [ 354.878827][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.887869][ T8448] R13: 00007fd9fe026038 R14: 00007fd9fe025fa0 R15: 00007ffe8552eab8 [ 354.897303][ T8448] [ 354.902295][ T8446] device team_slave_0 entered promiscuous mode [ 354.913162][ T8446] device team_slave_1 entered promiscuous mode [ 354.919728][ T8446] device bridge0 entered promiscuous mode [ 354.926153][ T8446] device geneve1 entered promiscuous mode [ 354.933872][ T8446] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 355.403960][ T8459] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1372'. [ 359.824220][ T8515] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.1387'. [ 360.195289][ T8519] netlink: 'syz.2.1390': attribute type 16 has an invalid length. [ 360.317674][ T8519] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1390'. [ 360.684783][ T8528] FAULT_INJECTION: forcing a failure. [ 360.684783][ T8528] name failslab, interval 1, probability 0, space 0, times 1 [ 360.843018][ T8528] CPU: 1 PID: 8528 Comm: syz.2.1393 Not tainted syzkaller #0 [ 360.850867][ T8528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.861303][ T8528] Call Trace: [ 360.864736][ T8528] [ 360.868676][ T8528] dump_stack_lvl+0x188/0x24e [ 360.873619][ T8528] ? show_regs_print_info+0x12/0x12 [ 360.878928][ T8528] ? lockdep_hardirqs_on+0x94/0x140 [ 360.884379][ T8528] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 360.888317][ T8530] netlink: 'syz.3.1394': attribute type 10 has an invalid length. [ 360.901018][ T8528] should_fail_ex+0x390/0x4c0 [ 360.905820][ T8528] should_failslab+0x5/0x20 [ 360.910914][ T8528] slab_pre_alloc_hook+0x59/0x300 [ 360.916143][ T8528] kmem_cache_alloc_node+0x5a/0x310 [ 360.918586][ T8530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.921512][ T8528] ? __alloc_skb+0xf9/0x7d0 [ 360.921555][ T8528] __alloc_skb+0xf9/0x7d0 [ 360.921586][ T8528] netlink_sendmsg+0x654/0xbd0 [ 360.921740][ T8528] ? netlink_getsockopt+0x550/0x550 [ 360.921774][ T8528] ? apparmor_socket_sendmsg+0x8a/0x330 [ 360.921860][ T8528] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 360.921885][ T8528] ? security_socket_sendmsg+0x7c/0xa0 [ 360.921912][ T8528] ? netlink_getsockopt+0x550/0x550 [ 360.921947][ T8528] ____sys_sendmsg+0x5ed/0x9a0 [ 360.921989][ T8528] ? __sys_sendmsg_sock+0x30/0x30 [ 360.922018][ T8528] ? __import_iovec+0x306/0x510 [ 360.986583][ T8528] ? import_iovec+0x6f/0xa0 [ 360.991605][ T8528] ___sys_sendmsg+0x2a2/0x360 [ 360.996375][ T8528] ? __sys_sendmsg+0x2a0/0x2a0 [ 361.001215][ T8528] ? ktime_get+0x7b/0x270 [ 361.005625][ T8528] __se_sys_sendmsg+0x1c3/0x2b0 [ 361.010693][ T8528] ? perf_trace_preemptirq_template+0x268/0x320 [ 361.016994][ T8528] ? __x64_sys_sendmsg+0x80/0x80 [ 361.022007][ T8528] ? lockdep_hardirqs_on+0x94/0x140 [ 361.027257][ T8528] do_syscall_64+0x4c/0xa0 [ 361.031723][ T8528] ? clear_bhb_loop+0x60/0xb0 [ 361.036902][ T8528] ? clear_bhb_loop+0x60/0xb0 [ 361.041808][ T8528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.047764][ T8528] RIP: 0033:0x7fb23779e0d9 [ 361.052573][ T8528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.072601][ T8528] RSP: 002b:00007fb238759028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.081237][ T8528] RAX: ffffffffffffffda RBX: 00007fb237a25fa0 RCX: 00007fb23779e0d9 [ 361.089584][ T8528] RDX: 0000000000000844 RSI: 0000200000000000 RDI: 0000000000000005 [ 361.097872][ T8528] RBP: 00007fb238759090 R08: 0000000000000000 R09: 0000000000000000 [ 361.106731][ T8528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.116322][ T8528] R13: 00007fb237a26038 R14: 00007fb237a25fa0 R15: 00007ffe30cf6868 [ 361.124446][ T8528] [ 361.155482][ T8530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.245420][ T8530] device batadv_slave_0 entered promiscuous mode [ 361.289691][ T8530] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 361.889193][ T8541] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1396'. [ 362.639704][ T8567] netlink: 'syz.1.1406': attribute type 10 has an invalid length. [ 362.652746][ T8567] bridge0: port 3(bond0) entered blocking state [ 362.659698][ T8567] bridge0: port 3(bond0) entered forwarding state [ 362.668045][ T8567] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.675922][ T8567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.687258][ T8567] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.696414][ T8567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.117890][ T8567] device bridge0 entered promiscuous mode [ 363.187535][ T8567] team0: Port device bridge0 added [ 363.309980][ T4793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 363.537572][ T8591] netlink: 'syz.2.1413': attribute type 41 has an invalid length. [ 364.073007][ T8605] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1421'. [ 364.309452][ T8617] netlink: 'syz.1.1425': attribute type 21 has an invalid length. [ 364.338860][ T8617] netlink: 'syz.1.1425': attribute type 1 has an invalid length. [ 364.476950][ T4335] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 364.757721][ T8629] netlink: 'syz.1.1428': attribute type 3 has an invalid length. [ 364.784958][ T8629] netlink: 'syz.1.1428': attribute type 4 has an invalid length. [ 364.794132][ T8629] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.1428'. [ 364.929432][ T8629] netlink: 'syz.1.1428': attribute type 10 has an invalid length. [ 365.251583][ T8629] device wg1 entered promiscuous mode [ 365.284925][ T8629] team0: Device wg1 is of different type [ 365.363806][ T8636] netlink: 'syz.2.1432': attribute type 5 has an invalid length. [ 365.561553][ T8639] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1433'. [ 365.636894][ T8639] bond0: (slave bond_slave_0): Releasing backup interface [ 365.733823][ T8639] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 366.033147][ T8652] netlink: 'syz.1.1438': attribute type 19 has an invalid length. [ 366.060758][ T8652] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1438'. [ 366.483338][ T8668] netlink: 'syz.3.1445': attribute type 21 has an invalid length. [ 366.530182][ T8668] netlink: 'syz.3.1445': attribute type 5 has an invalid length. [ 366.989538][ T8674] netlink: 'syz.2.1448': attribute type 10 has an invalid length. [ 367.022705][ T8674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.068315][ T8674] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.163108][ T8674] device batadv_slave_0 entered promiscuous mode [ 367.189743][ T8674] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 369.998584][ T8736] netlink: 'syz.1.1470': attribute type 10 has an invalid length. [ 370.070939][ T8736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.145153][ T8736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.242529][ T8736] device batadv_slave_0 entered promiscuous mode [ 370.251073][ T8736] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 370.267659][ T8741] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1473'. [ 370.288195][ T8745] netlink: 'syz.3.1474': attribute type 2 has an invalid length. [ 370.348484][ T8748] netlink: 'syz.2.1476': attribute type 10 has an invalid length. [ 370.427250][ T8746] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1473'. [ 370.453724][ T8746] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 370.594977][ T8751] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1475'. [ 370.662591][ T8746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.067930][ T8745] device .d entered promiscuous mode [ 371.075081][ T8758] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1479'. [ 373.004655][ T8790] netlink: 'syz.3.1490': attribute type 5 has an invalid length. [ 373.022193][ T8791] netlink: 'syz.0.1488': attribute type 10 has an invalid length. [ 373.032711][ T8791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 373.070555][ T8791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.111132][ T8791] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 373.552623][ T8808] raw_sendmsg: syz.3.1495 forgot to set AF_INET. Fix it! [ 375.745012][ T8794] netlink: 'syz.4.1491': attribute type 10 has an invalid length. [ 375.757935][ T8794] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1491'. [ 375.790559][ T8811] netlink: 'syz.3.1495': attribute type 10 has an invalid length. [ 375.799556][ T8811] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1495'. [ 377.352840][ T8839] netlink: 'syz.4.1503': attribute type 2 has an invalid length. [ 377.361724][ T8839] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1503'. [ 377.557250][ T8843] netlink: 'syz.2.1507': attribute type 10 has an invalid length. [ 378.646458][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.662727][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.113807][ T8851] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1509'. [ 379.124769][ T8854] netlink: 'syz.3.1509': attribute type 21 has an invalid length. [ 379.135194][ T8858] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1509'. [ 379.145518][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 379.182406][ T8858] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.208683][ T8860] netlink: 'syz.4.1511': attribute type 3 has an invalid length. [ 379.250472][ T8860] netlink: 'syz.4.1511': attribute type 1 has an invalid length. [ 379.258825][ T8860] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1511'. [ 379.553179][ T8870] netlink: 'syz.3.1516': attribute type 10 has an invalid length. [ 379.562972][ T8870] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1516'. [ 379.572882][ T8870] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 380.434414][ T8890] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1525'. [ 380.524541][ T8892] netlink: 'syz.1.1525': attribute type 21 has an invalid length. [ 380.600683][ T8890] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1525'. [ 380.703456][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 380.741497][ T8890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 381.381193][ T8912] tun0: tun_chr_ioctl cmd 1074812118 [ 381.438363][ T8912] tun0: tun_chr_ioctl cmd 2147767519 [ 381.557613][ T8916] netlink: 'syz.3.1535': attribute type 2 has an invalid length. [ 381.580651][ T8916] netlink: 'syz.3.1535': attribute type 8 has an invalid length. [ 381.589073][ T8916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1535'. [ 381.600034][ T8916] netlink: 'syz.3.1535': attribute type 2 has an invalid length. [ 381.608805][ T8916] netlink: 'syz.3.1535': attribute type 8 has an invalid length. [ 381.631364][ T8916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1535'. [ 382.122032][ T8929] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1540'. [ 382.287333][ T8929] netlink: 'syz.4.1540': attribute type 21 has an invalid length. [ 382.343393][ T8933] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1540'. [ 382.369234][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 382.447859][ T8933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.280267][ T8957] netlink: 'syz.1.1550': attribute type 2 has an invalid length. [ 384.334022][ T8957] netlink: 'syz.1.1550': attribute type 8 has an invalid length. [ 384.386196][ T8957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1550'. [ 384.445334][ T8962] netlink: 'syz.1.1550': attribute type 2 has an invalid length. [ 384.497069][ T8962] netlink: 'syz.1.1550': attribute type 8 has an invalid length. [ 384.505720][ T8962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1550'. [ 384.527214][ T8965] netlink: 'syz.4.1553': attribute type 16 has an invalid length. [ 384.557746][ T8965] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1553'. [ 385.001566][ T8977] netlink: 'syz.4.1559': attribute type 10 has an invalid length. [ 385.009594][ T8977] device netdevsim0 entered promiscuous mode [ 385.647062][ T9003] netlink: 'syz.0.1568': attribute type 2 has an invalid length. [ 385.680899][ T9003] netlink: 'syz.0.1568': attribute type 8 has an invalid length. [ 385.688791][ T9003] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1568'. [ 385.755629][ T9011] netlink: 'syz.0.1568': attribute type 2 has an invalid length. [ 385.787844][ T9011] netlink: 'syz.0.1568': attribute type 8 has an invalid length. [ 385.842961][ T9011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1568'. [ 386.028094][ T9020] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1576'. [ 386.062056][ T9020] device team_slave_0 left promiscuous mode [ 386.146345][ T9020] team0: Port device team_slave_0 removed [ 386.221849][ T9020] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 386.370234][ T9020] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 386.468138][ T9034] bridge0: port 2(bond0) entered disabled state [ 386.479996][ T9034] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.564726][ T9020] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 386.601167][ T9020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.658019][ T9041] __nla_validate_parse: 3 callbacks suppressed [ 386.658043][ T9041] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1581'. [ 386.704297][ T9041] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.1581'. [ 387.405889][ T9054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1587'. [ 387.491020][ T9054] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1587'. [ 389.968417][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1599'. [ 391.014245][ T9092] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1601'. [ 391.048103][ T9092] bond0: (slave bond_slave_0): Releasing backup interface [ 391.087132][ T9092] device bond_slave_0 left promiscuous mode [ 391.126393][ T9092] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 391.157113][ T9094] validate_nla: 7 callbacks suppressed [ 391.157135][ T9094] netlink: 'syz.2.1603': attribute type 13 has an invalid length. [ 391.178225][ T9096] netlink: 'syz.3.1602': attribute type 2 has an invalid length. [ 391.190633][ T9096] netlink: 'syz.3.1602': attribute type 8 has an invalid length. [ 391.208941][ T9096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1602'. [ 391.228941][ T9098] netlink: 'syz.3.1602': attribute type 2 has an invalid length. [ 391.257001][ T9098] netlink: 'syz.3.1602': attribute type 8 has an invalid length. [ 391.281474][ T9098] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1602'. [ 391.891783][ T9115] delete_channel: no stack [ 391.897502][ T9115] delete_channel: no stack [ 392.158852][ T9117] netlink: 'syz.1.1609': attribute type 21 has an invalid length. [ 392.173432][ T9117] netlink: 'syz.1.1609': attribute type 5 has an invalid length. [ 392.725268][ T9124] netlink: 'syz.3.1612': attribute type 20 has an invalid length. [ 392.874285][ T9129] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1612'. [ 392.906542][ T9129] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1612'. [ 392.951427][ T9124] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1612'. [ 393.312417][ T9121] syz.2.1611 (9121) used greatest stack depth: 15440 bytes left [ 393.371682][ T9135] netlink: 'syz.1.1616': attribute type 2 has an invalid length. [ 393.411226][ T9135] netlink: 'syz.1.1616': attribute type 8 has an invalid length. [ 393.431990][ T9135] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1616'. [ 393.475771][ T9136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1616'. [ 393.924083][ T9144] device bridge0 left promiscuous mode [ 393.964241][ T9144] bridge0: port 3(bond0) entered disabled state [ 393.980676][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.989006][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.207056][ T9144] team0: Port device bridge0 removed [ 394.262251][ T9144] bridge0: port 3(bond0) entered blocking state [ 394.269693][ T9144] bridge0: port 3(bond0) entered forwarding state [ 394.282220][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.291347][ T9144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.300795][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.308840][ T9144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.439483][ T9144] bridge0: port 3(bond0) entered disabled state [ 394.448619][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.460419][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.538737][ T9157] team0: Device vlan0 is up. Set it down before adding it as a team port [ 394.747801][ T9167] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1627'. [ 394.760078][ T9167] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1627'. [ 394.774044][ T9167] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1627'. [ 394.787720][ T9167] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1627'. [ 394.968941][ T9170] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1628'. [ 395.501942][ T4344] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 396.184510][ T9197] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 396.218965][ T9197] CPU: 0 PID: 9197 Comm: syz.4.1635 Not tainted syzkaller #0 [ 396.226864][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 396.240816][ T9197] Call Trace: [ 396.244679][ T9197] [ 396.248173][ T9197] dump_stack_lvl+0x188/0x24e [ 396.261133][ T9197] ? show_regs_print_info+0x12/0x12 [ 396.266821][ T9197] ? load_image+0x410/0x410 [ 396.273102][ T9197] sysfs_warn_dup+0x8a/0xa0 [ 396.279501][ T9197] sysfs_do_create_link_sd+0xc0/0x110 [ 396.286618][ T9197] device_add+0x83b/0x1050 [ 396.291687][ T9197] wiphy_register+0x1d8b/0x2aa0 [ 396.297628][ T9197] ? cfg80211_event_work+0x40/0x40 [ 396.304117][ T9197] ? minstrel_ht_alloc+0x894/0xa20 [ 396.309675][ T9197] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 396.316152][ T9197] ieee80211_register_hw+0x2d48/0x39f0 [ 396.322861][ T9197] ? ieee80211_register_hw+0xee1/0x39f0 [ 396.329834][ T9197] ? ieee80211_register_hw+0xee1/0x39f0 [ 396.336935][ T9197] ? ieee80211_tasklet_handler+0x20/0x20 [ 396.342716][ T9197] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 396.349117][ T9197] ? __debug_object_init+0xed/0x440 [ 396.355454][ T9197] ? memset+0x1e/0x40 [ 396.360065][ T9197] ? __hrtimer_init+0x189/0x270 [ 396.365663][ T9197] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 396.372353][ T9197] ? memcpy+0x3c/0x60 [ 396.377601][ T9197] hwsim_new_radio_nl+0xab7/0xc90 [ 396.383027][ T9197] genl_family_rcv_msg_doit+0x22f/0x350 [ 396.389327][ T9197] ? end_current_label_crit_section+0x170/0x170 [ 396.396923][ T9197] ? trace_call_bpf+0xbf/0x6b0 [ 396.401992][ T9197] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 396.408330][ T9197] ? bpf_lsm_capable+0x5/0x10 [ 396.413471][ T9197] ? security_capable+0x85/0xb0 [ 396.420270][ T9197] genl_rcv_msg+0x601/0x790 [ 396.428589][ T9197] ? genl_bind+0x360/0x360 [ 396.433942][ T9197] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 396.442037][ T9197] netlink_rcv_skb+0x1ef/0x440 [ 396.447064][ T9197] ? genl_bind+0x360/0x360 [ 396.453982][ T9197] ? netlink_ack+0x1160/0x1160 [ 396.459802][ T9197] ? down_read+0x1a8/0x2d0 [ 396.464690][ T9197] genl_rcv+0x24/0x40 [ 396.469747][ T9197] netlink_unicast+0x7ad/0x920 [ 396.475450][ T9197] netlink_sendmsg+0x8ad/0xbd0 [ 396.480414][ T9197] ? netlink_getsockopt+0x550/0x550 [ 396.485995][ T9197] ? apparmor_socket_sendmsg+0x8a/0x330 [ 396.491759][ T9197] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 396.497957][ T9197] ? security_socket_sendmsg+0x7c/0xa0 [ 396.504235][ T9197] ? netlink_getsockopt+0x550/0x550 [ 396.511302][ T9197] ____sys_sendmsg+0x5ed/0x9a0 [ 396.517125][ T9197] ? __sys_sendmsg_sock+0x30/0x30 [ 396.523488][ T9197] ? __import_iovec+0x306/0x510 [ 396.530090][ T9197] ? import_iovec+0x6f/0xa0 [ 396.537365][ T9197] ___sys_sendmsg+0x2a2/0x360 [ 396.542903][ T9197] ? __sys_sendmsg+0x2a0/0x2a0 [ 396.549043][ T9197] __se_sys_sendmsg+0x1c3/0x2b0 [ 396.554660][ T9197] ? __x64_sys_sendmsg+0x80/0x80 [ 396.560120][ T9197] ? lockdep_hardirqs_on+0x94/0x140 [ 396.566327][ T9197] do_syscall_64+0x4c/0xa0 [ 396.571394][ T9197] ? clear_bhb_loop+0x60/0xb0 [ 396.579675][ T9197] ? clear_bhb_loop+0x60/0xb0 [ 396.584675][ T9197] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.590874][ T9197] RIP: 0033:0x7fd9fdd9e0d9 [ 396.596264][ T9197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.619363][ T9197] RSP: 002b:00007fd9fed01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.628687][ T9197] RAX: ffffffffffffffda RBX: 00007fd9fe026090 RCX: 00007fd9fdd9e0d9 [ 396.637401][ T9197] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 396.645940][ T9197] RBP: 00007fd9fde35024 R08: 0000000000000000 R09: 0000000000000000 [ 396.654270][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.662944][ T9197] R13: 00007fd9fe026128 R14: 00007fd9fe026090 R15: 00007ffe8552eab8 [ 396.671918][ T9197] [ 397.279651][ T9215] validate_nla: 10 callbacks suppressed [ 397.279670][ T9215] netlink: 'syz.4.1643': attribute type 2 has an invalid length. [ 397.283025][ T9212] netlink: 'syz.1.1642': attribute type 2 has an invalid length. [ 397.308906][ T9215] netlink: 'syz.4.1643': attribute type 8 has an invalid length. [ 397.384408][ T9215] netlink: 'syz.4.1643': attribute type 2 has an invalid length. [ 397.395528][ T9219] FAULT_INJECTION: forcing a failure. [ 397.395528][ T9219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.426497][ T9215] netlink: 'syz.4.1643': attribute type 8 has an invalid length. [ 397.472164][ T9219] CPU: 1 PID: 9219 Comm: syz.0.1646 Not tainted syzkaller #0 [ 397.480232][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.490553][ T9219] Call Trace: [ 397.493896][ T9219] [ 397.496864][ T9219] dump_stack_lvl+0x188/0x24e [ 397.502133][ T9219] ? show_regs_print_info+0x12/0x12 [ 397.508513][ T9219] ? load_image+0x410/0x410 [ 397.513158][ T9219] ? __lock_acquire+0x7c40/0x7c40 [ 397.518526][ T9219] ? memcpy+0x3c/0x60 [ 397.522666][ T9219] should_fail_ex+0x390/0x4c0 [ 397.528220][ T9219] _copy_to_user+0x2c/0x130 [ 397.533332][ T9219] generic_map_lookup_batch+0x7cc/0xbf0 [ 397.538959][ T9219] ? bpf_map_update_value+0x670/0x670 [ 397.544467][ T9219] ? bpf_map_update_value+0x670/0x670 [ 397.550077][ T9219] ? bpf_map_do_batch+0x2d5/0x5f0 [ 397.555216][ T9219] ? bpf_map_update_value+0x670/0x670 [ 397.561174][ T9219] bpf_map_do_batch+0x2e0/0x5f0 [ 397.566359][ T9219] __sys_bpf+0x6f7/0x780 [ 397.570690][ T9219] ? bpf_link_show_fdinfo+0x380/0x380 [ 397.576224][ T9219] ? __sys_bpf+0x1/0x780 [ 397.580677][ T9219] __x64_sys_bpf+0x78/0x90 [ 397.585166][ T9219] do_syscall_64+0x4c/0xa0 [ 397.589659][ T9219] ? clear_bhb_loop+0x60/0xb0 [ 397.595290][ T9219] ? clear_bhb_loop+0x60/0xb0 [ 397.600117][ T9219] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.606671][ T9219] RIP: 0033:0x7fe22039e0d9 [ 397.611142][ T9219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.632707][ T9219] RSP: 002b:00007fe22127a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.641472][ T9219] RAX: ffffffffffffffda RBX: 00007fe220625fa0 RCX: 00007fe22039e0d9 [ 397.650297][ T9219] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 397.658943][ T9219] RBP: 00007fe22127a090 R08: 0000000000000000 R09: 0000000000000000 [ 397.667338][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.677223][ T9219] R13: 00007fe220626038 R14: 00007fe220625fa0 R15: 00007fffeaea67f8 [ 397.687371][ T9219] [ 397.843328][ T9224] netlink: 'syz.2.1648': attribute type 16 has an invalid length. [ 398.023912][ T9228] netlink: 'syz.1.1650': attribute type 2 has an invalid length. [ 398.058177][ T9228] netlink: 'syz.1.1650': attribute type 8 has an invalid length. [ 398.083609][ T9228] __nla_validate_parse: 11 callbacks suppressed [ 398.083631][ T9228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1650'. [ 398.434438][ T9233] netlink: 'syz.1.1650': attribute type 2 has an invalid length. [ 398.444639][ T9233] netlink: 'syz.1.1650': attribute type 8 has an invalid length. [ 398.453911][ T9233] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1650'. [ 398.493931][ T9235] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.1652'. [ 398.512504][ T9235] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.1652'. [ 398.531421][ T9235] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.1652'. [ 398.751087][ T9242] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1655'. [ 398.866775][ T9242] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1655'. [ 398.907999][ T9242] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 399.046476][ T9242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.154120][ T9250] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1658'. [ 399.212736][ T9255] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1658'. [ 399.253795][ T9255] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 399.286843][ T9255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 399.330272][ T9256] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1660'. [ 399.581931][ T9266] netlink: 'syz.2.1664': attribute type 11 has an invalid length. [ 399.649326][ T9266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.757301][ T9272] FAULT_INJECTION: forcing a failure. [ 399.757301][ T9272] name failslab, interval 1, probability 0, space 0, times 0 [ 399.789462][ T9272] CPU: 1 PID: 9272 Comm: syz.3.1666 Not tainted syzkaller #0 [ 399.799044][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.809598][ T9272] Call Trace: [ 399.812942][ T9272] [ 399.817243][ T9272] dump_stack_lvl+0x188/0x24e [ 399.822927][ T9272] ? show_regs_print_info+0x12/0x12 [ 399.829729][ T9272] ? load_image+0x410/0x410 [ 399.834390][ T9272] ? __might_sleep+0xd0/0xd0 [ 399.839203][ T9272] ? __lock_acquire+0x7c40/0x7c40 [ 399.844401][ T9272] should_fail_ex+0x390/0x4c0 [ 399.850049][ T9272] should_failslab+0x5/0x20 [ 399.855431][ T9272] slab_pre_alloc_hook+0x59/0x300 [ 399.860713][ T9272] kmem_cache_alloc_node+0x5a/0x310 [ 399.866073][ T9272] ? __alloc_skb+0xf9/0x7d0 [ 399.870750][ T9272] __alloc_skb+0xf9/0x7d0 [ 399.877097][ T9272] netlink_sendmsg+0x654/0xbd0 [ 399.882146][ T9272] ? netlink_getsockopt+0x550/0x550 [ 399.887525][ T9272] ? apparmor_socket_sendmsg+0x8a/0x330 [ 399.893255][ T9272] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 399.898613][ T9272] ? security_socket_sendmsg+0x7c/0xa0 [ 399.904222][ T9272] ? netlink_getsockopt+0x550/0x550 [ 399.909599][ T9272] ____sys_sendmsg+0x5ed/0x9a0 [ 399.914740][ T9272] ? __sys_sendmsg_sock+0x30/0x30 [ 399.919861][ T9272] ? __import_iovec+0x306/0x510 [ 399.924906][ T9272] ? import_iovec+0x6f/0xa0 [ 399.930013][ T9272] ___sys_sendmsg+0x2a2/0x360 [ 399.934893][ T9272] ? __sys_sendmsg+0x2a0/0x2a0 [ 399.941348][ T9272] __se_sys_sendmsg+0x1c3/0x2b0 [ 399.946451][ T9272] ? __x64_sys_sendmsg+0x80/0x80 [ 399.951589][ T9272] do_syscall_64+0x4c/0xa0 [ 399.956138][ T9272] ? clear_bhb_loop+0x60/0xb0 [ 399.961171][ T9272] ? clear_bhb_loop+0x60/0xb0 [ 399.967152][ T9272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.973450][ T9272] RIP: 0033:0x7f77eeb9e0d9 [ 399.978172][ T9272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.998454][ T9272] RSP: 002b:00007f77efade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.006966][ T9272] RAX: ffffffffffffffda RBX: 00007f77eee25fa0 RCX: 00007f77eeb9e0d9 [ 400.014989][ T9272] RDX: 0000000000000844 RSI: 0000200000000000 RDI: 0000000000000005 [ 400.023174][ T9272] RBP: 00007f77efade090 R08: 0000000000000000 R09: 0000000000000000 [ 400.031194][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.041470][ T9272] R13: 00007f77eee26038 R14: 00007f77eee25fa0 R15: 00007ffc9c044628 [ 400.049704][ T9272] [ 404.306658][ T9307] bond0: (slave team0): Releasing backup interface [ 404.320816][ T9307] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 404.370735][ T9310] __nla_validate_parse: 9 callbacks suppressed [ 404.370752][ T9310] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1677'. [ 405.097749][ T9332] validate_nla: 13 callbacks suppressed [ 405.097770][ T9332] netlink: 'syz.3.1689': attribute type 2 has an invalid length. [ 405.194998][ T9332] netlink: 'syz.3.1689': attribute type 8 has an invalid length. [ 405.227020][ T9332] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1689'. [ 405.277220][ T9337] netlink: 'syz.3.1689': attribute type 2 has an invalid length. [ 405.340613][ T9337] netlink: 'syz.3.1689': attribute type 8 has an invalid length. [ 405.349246][ T9337] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1689'. [ 405.377384][ T9339] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1690'. [ 405.389826][ T9334] netlink: 'syz.1.1690': attribute type 21 has an invalid length. [ 405.451722][ T9341] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1690'. [ 405.477958][ T9341] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 405.541404][ T9341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.660759][ T9340] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1692'. [ 405.745693][ T9344] netlink: 'syz.0.1692': attribute type 21 has an invalid length. [ 405.777221][ T9345] netlink: 'syz.2.1693': attribute type 16 has an invalid length. [ 405.818128][ T9345] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1693'. [ 405.919604][ T9348] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1692'. [ 405.970668][ T9348] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 406.031608][ T9348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.078983][ T9358] netlink: 'syz.4.1696': attribute type 14 has an invalid length. [ 406.128400][ T9358] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1696'. [ 406.171969][ T9359] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1696'. [ 406.192154][ T9359] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 406.225023][ T9359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.850119][ T9381] netlink: 'syz.0.1705': attribute type 2 has an invalid length. [ 406.941027][ T9381] netlink: 'syz.0.1705': attribute type 8 has an invalid length. [ 408.314815][ T9390] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 408.426188][ T9390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.769739][ T9397] device syzkaller0 entered promiscuous mode [ 412.512099][ T9417] validate_nla: 3 callbacks suppressed [ 412.512119][ T9417] netlink: 'syz.4.1715': attribute type 16 has an invalid length. [ 412.530932][ T9417] __nla_validate_parse: 4 callbacks suppressed [ 412.530953][ T9417] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1715'. [ 412.975994][ T9437] netlink: 'syz.4.1721': attribute type 2 has an invalid length. [ 415.277987][ T9432] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1719'. [ 415.294168][ T9438] netlink: 'syz.3.1719': attribute type 21 has an invalid length. [ 415.303565][ T9439] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1719'. [ 415.324172][ T9439] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 415.369576][ T9439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.390550][ T9440] netlink: 'syz.4.1721': attribute type 16 has an invalid length. [ 415.414830][ T9440] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1721'. [ 416.641360][ T9481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1736'. [ 419.943813][ T9463] device syzkaller0 entered promiscuous mode [ 422.147920][ T9481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1736'. [ 422.157918][ T9494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1739'. [ 423.257607][ T9516] netlink: 'syz.2.1747': attribute type 2 has an invalid length. [ 423.321664][ T9516] netlink: 'syz.2.1747': attribute type 8 has an invalid length. [ 423.330040][ T9516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1747'. [ 423.435427][ T9520] netlink: 'syz.2.1747': attribute type 2 has an invalid length. [ 423.501584][ T9520] netlink: 'syz.2.1747': attribute type 8 has an invalid length. [ 423.549893][ T9520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1747'. [ 423.607118][ T9521] netlink: 'syz.3.1749': attribute type 10 has an invalid length. [ 424.254302][ T9527] netlink: 'syz.2.1750': attribute type 5 has an invalid length. [ 424.782780][ T9544] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1754'. [ 424.796323][ T9543] netlink: 'syz.1.1752': attribute type 5 has an invalid length. [ 425.864203][ T9558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1761'. [ 425.887895][ T9558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1761'. [ 425.902998][ T9558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1761'. [ 425.938535][ T9558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1761'. [ 426.938684][ T4335] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 427.251121][ T9577] netlink: 'syz.0.1770': attribute type 10 has an invalid length. [ 428.065616][ T9577] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.072922][ T9577] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.201196][ T9586] netlink: 'syz.4.1771': attribute type 10 has an invalid length. [ 428.230096][ T9586] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1771'. [ 428.338630][ T9588] delete_channel: no stack [ 428.552319][ T9596] netlink: 'syz.2.1774': attribute type 5 has an invalid length. [ 429.154926][ T9599] netlink: 'syz.3.1776': attribute type 3 has an invalid length. [ 429.184737][ T9599] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1776'. [ 429.297403][ T9605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1778'. [ 429.310143][ T9605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1778'. [ 429.351850][ T9605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1778'. [ 429.383912][ T9605] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1778'. [ 429.837049][ T9618] netlink: 'syz.4.1784': attribute type 10 has an invalid length. [ 429.907651][ T9618] bridge0: port 3(bond0) entered disabled state [ 429.919628][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.933892][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.069244][ T9618] bridge0: port 3(bond0) entered blocking state [ 430.077023][ T9618] bridge0: port 3(bond0) entered forwarding state [ 430.087585][ T9618] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.095818][ T9618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.105192][ T9618] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.113424][ T9618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.443016][ T9618] device bridge0 entered promiscuous mode [ 430.493277][ T9618] team0: Port device bridge0 added [ 431.072037][ T9658] netlink: 'syz.3.1795': attribute type 5 has an invalid length. [ 431.430505][ T9664] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1797'. [ 431.650673][ T9665] netlink: 'syz.0.1797': attribute type 21 has an invalid length. [ 431.782654][ T9662] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1797'. [ 431.831910][ T9662] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 432.121385][ T9662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 432.590101][ T9681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1803'. [ 432.607884][ T9681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1803'. [ 435.505494][ T9690] netlink: 'syz.3.1808': attribute type 10 has an invalid length. [ 435.523738][ T9690] device bridge0 left promiscuous mode [ 435.598364][ T9690] team0: Port device bridge0 removed [ 435.646671][ T9690] bridge0: port 2(bond0) entered blocking state [ 435.654358][ T9690] bridge0: port 2(bond0) entered forwarding state [ 435.665028][ T9690] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.673177][ T9690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.727416][ T9690] bridge0: port 2(bond0) entered disabled state [ 435.735125][ T9690] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.810446][ T9701] netlink: 'syz.4.1809': attribute type 3 has an invalid length. [ 435.822185][ T9700] netlink: 'syz.0.1812': attribute type 2 has an invalid length. [ 435.854168][ T9701] __nla_validate_parse: 3 callbacks suppressed [ 435.854189][ T9701] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1809'. [ 436.092917][ T9705] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1813'. [ 436.192028][ T9704] netlink: 'syz.1.1813': attribute type 21 has an invalid length. [ 436.238983][ T9704] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1813'. [ 436.255745][ T9704] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 436.376910][ T9712] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1815'. [ 436.541690][ T9704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.574177][ T9712] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1815'. [ 436.599392][ T9714] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1815'. [ 436.660733][ T9715] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1815'. [ 436.913111][ T9722] netlink: 'syz.0.1818': attribute type 21 has an invalid length. [ 436.945863][ T9722] netlink: 'syz.0.1818': attribute type 5 has an invalid length. [ 437.069944][ T9726] FAULT_INJECTION: forcing a failure. [ 437.069944][ T9726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.094437][ T9726] CPU: 0 PID: 9726 Comm: syz.4.1821 Not tainted syzkaller #0 [ 437.101939][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.112836][ T9726] Call Trace: [ 437.116166][ T9726] [ 437.119321][ T9726] dump_stack_lvl+0x188/0x24e [ 437.124252][ T9726] ? show_regs_print_info+0x12/0x12 [ 437.129527][ T9726] ? load_image+0x410/0x410 [ 437.134111][ T9726] ? __lock_acquire+0x7c40/0x7c40 [ 437.139393][ T9726] ? __virt_addr_valid+0x44f/0x540 [ 437.144616][ T9726] should_fail_ex+0x390/0x4c0 [ 437.149392][ T9726] _copy_to_user+0x2c/0x130 [ 437.153990][ T9726] generic_map_lookup_batch+0x829/0xbf0 [ 437.159620][ T9726] ? bpf_map_update_value+0x670/0x670 [ 437.165066][ T9726] ? __fdget+0x17c/0x200 [ 437.169499][ T9726] ? bpf_map_update_value+0x670/0x670 [ 437.174931][ T9726] bpf_map_do_batch+0x2e0/0x5f0 [ 437.179999][ T9726] __sys_bpf+0x6f7/0x780 [ 437.184484][ T9726] ? bpf_link_show_fdinfo+0x380/0x380 [ 437.189966][ T9726] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 437.196426][ T9726] __x64_sys_bpf+0x78/0x90 [ 437.200911][ T9726] do_syscall_64+0x4c/0xa0 [ 437.205564][ T9726] ? clear_bhb_loop+0x60/0xb0 [ 437.210301][ T9726] ? clear_bhb_loop+0x60/0xb0 [ 437.215315][ T9726] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.221304][ T9726] RIP: 0033:0x7fd9fdd9e0d9 [ 437.225780][ T9726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.245541][ T9726] RSP: 002b:00007fd9fed22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 437.254226][ T9726] RAX: ffffffffffffffda RBX: 00007fd9fe025fa0 RCX: 00007fd9fdd9e0d9 [ 437.262301][ T9726] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 437.270514][ T9726] RBP: 00007fd9fed22090 R08: 0000000000000000 R09: 0000000000000000 [ 437.279943][ T9726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 437.288094][ T9726] R13: 00007fd9fe026038 R14: 00007fd9fe025fa0 R15: 00007ffe8552eab8 [ 437.296154][ T9726] [ 437.850099][ T9740] netlink: 'syz.1.1824': attribute type 2 has an invalid length. [ 437.860147][ T9740] netlink: 'syz.1.1824': attribute type 8 has an invalid length. [ 437.882880][ T9740] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1824'. [ 437.921629][ T9746] netlink: 'syz.1.1824': attribute type 2 has an invalid length. [ 437.929563][ T9746] netlink: 'syz.1.1824': attribute type 8 has an invalid length. [ 438.031409][ T9746] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1824'. [ 438.410166][ T9756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1831'. [ 438.611650][ T9758] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 438.688325][ T9758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.130835][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.137290][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.639534][ T9800] validate_nla: 3 callbacks suppressed [ 440.639576][ T9800] netlink: 'syz.0.1846': attribute type 16 has an invalid length. [ 440.857724][ T9803] netlink: 'syz.4.1847': attribute type 21 has an invalid length. [ 440.877664][ T4286] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 440.886327][ T4286] Bluetooth: hci1: Invalid handle: 0x5393 > 0x0eff [ 440.896773][ T9803] __nla_validate_parse: 8 callbacks suppressed [ 440.896817][ T9803] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1847'. [ 440.947193][ T9803] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 441.144460][ T9803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.709351][ T9828] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1863'. [ 441.729632][ T9829] netlink: 'syz.3.1863': attribute type 21 has an invalid length. [ 441.774213][ T9824] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1863'. [ 441.874960][ T9824] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 442.080219][ T9824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.803475][ T9845] netlink: 'syz.2.1862': attribute type 1 has an invalid length. [ 442.852683][ T9845] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1862'. [ 442.879240][ T9849] netlink: 'syz.2.1862': attribute type 29 has an invalid length. [ 443.010658][ T9849] netlink: 'syz.2.1862': attribute type 29 has an invalid length. [ 443.690138][ T9868] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1870'. [ 443.832817][ T9868] netlink: 'syz.0.1870': attribute type 21 has an invalid length. [ 443.901956][ T9872] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1870'. [ 443.918197][ T9872] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 444.013165][ T9872] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.798870][ T9917] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1887'. [ 446.977523][ T9921] netlink: 'syz.0.1897': attribute type 5 has an invalid length. [ 446.996437][ T9914] netlink: 'syz.1.1887': attribute type 21 has an invalid length. [ 447.061336][ T9917] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1887'. [ 447.150263][ T9917] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 447.357819][ T9917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 447.571900][ T9923] netlink: 'syz.2.1888': attribute type 16 has an invalid length. [ 447.611162][ T9923] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1888'. [ 447.772722][ T9928] netlink: 'syz.4.1889': attribute type 16 has an invalid length. [ 447.790968][ T9928] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1889'. [ 449.003599][ T9953] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1902'. [ 449.105563][ T9953] netlink: 'syz.2.1902': attribute type 21 has an invalid length. [ 449.180118][ T9953] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1902'. [ 449.228895][ T9953] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 449.335964][ T9953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.793576][ T9974] netlink: 'syz.3.1907': attribute type 5 has an invalid length. [ 450.818858][T10001] netlink: 'syz.2.1919': attribute type 10 has an invalid length. [ 450.840269][T10001] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1919'. [ 450.909262][T10002] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1920'. [ 451.059154][T10002] netlink: 'syz.4.1920': attribute type 21 has an invalid length. [ 451.087038][T10002] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1920'. [ 451.106833][T10002] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 451.273535][T10002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.646751][T10005] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1931'. [ 451.686119][T10007] netlink: 'syz.4.1921': attribute type 16 has an invalid length. [ 451.768013][T10005] netlink: 'syz.2.1931': attribute type 21 has an invalid length. [ 451.816890][T10005] __nla_validate_parse: 1 callbacks suppressed [ 451.816926][T10005] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1931'. [ 451.857586][T10005] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 452.033234][T10005] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.150197][T10017] netlink: 'syz.4.1925': attribute type 3 has an invalid length. [ 452.172579][T10017] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1925'. [ 452.349364][T10021] netlink: 'syz.1.1926': attribute type 10 has an invalid length. [ 452.441853][T10029] FAULT_INJECTION: forcing a failure. [ 452.441853][T10029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.471545][T10021] device dummy0 entered promiscuous mode [ 452.488652][T10021] team0: Port device dummy0 added [ 452.548828][T10029] CPU: 1 PID: 10029 Comm: syz.0.1928 Not tainted syzkaller #0 [ 452.559004][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.569309][T10029] Call Trace: [ 452.572672][T10029] [ 452.576200][T10029] dump_stack_lvl+0x188/0x24e [ 452.581144][T10029] ? show_regs_print_info+0x12/0x12 [ 452.586526][T10029] ? load_image+0x410/0x410 [ 452.592419][T10029] ? __lock_acquire+0x7c40/0x7c40 [ 452.598533][T10029] should_fail_ex+0x390/0x4c0 [ 452.604432][T10029] _copy_from_user+0x2c/0x170 [ 452.609294][T10029] ___sys_sendmsg+0x1c3/0x360 [ 452.615059][T10029] ? __sys_sendmsg+0x2a0/0x2a0 [ 452.620058][T10029] ? __lock_acquire+0x7c40/0x7c40 [ 452.626234][T10029] __se_sys_sendmsg+0x1c3/0x2b0 [ 452.632418][T10029] ? __x64_sys_sendmsg+0x80/0x80 [ 452.638433][T10029] ? lockdep_hardirqs_on+0x94/0x140 [ 452.645954][T10029] do_syscall_64+0x4c/0xa0 [ 452.650719][T10029] ? clear_bhb_loop+0x60/0xb0 [ 452.656607][T10029] ? clear_bhb_loop+0x60/0xb0 [ 452.662416][T10029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.669872][T10029] RIP: 0033:0x7fe22039e0d9 [ 452.674734][T10029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.695193][T10029] RSP: 002b:00007fe22127a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.705532][T10029] RAX: ffffffffffffffda RBX: 00007fe220625fa0 RCX: 00007fe22039e0d9 [ 452.718768][T10029] RDX: 0000000000008045 RSI: 0000200000000040 RDI: 0000000000000003 [ 452.730418][T10029] RBP: 00007fe22127a090 R08: 0000000000000000 R09: 0000000000000000 [ 452.741324][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.752675][T10029] R13: 00007fe220626038 R14: 00007fe220625fa0 R15: 00007fffeaea67f8 [ 452.763643][T10029] [ 453.218615][T10034] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1933'. [ 453.495822][T10034] bridge0: port 3(bond0) entered disabled state [ 453.665747][T10034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.696980][T10034] device bond_slave_1 left promiscuous mode [ 453.829810][T10034] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 453.865566][T10034] device batadv_slave_0 left promiscuous mode [ 453.929676][T10034] bond0 (unregistering): Released all slaves [ 454.041346][T10046] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1934'. [ 454.075397][T10045] netlink: 'syz.2.1936': attribute type 10 has an invalid length. [ 454.086549][T10045] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1936'. [ 454.137149][T10045] device hsr0 entered promiscuous mode [ 454.166554][T10045] bridge0: port 2(hsr0) entered blocking state [ 454.183011][T10045] bridge0: port 2(hsr0) entered disabled state [ 454.293999][T10045] bridge0: port 2(hsr0) entered blocking state [ 454.303304][T10045] bridge0: port 2(hsr0) entered forwarding state [ 454.317000][T10052] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1938'. [ 454.406824][T10053] netlink: 'syz.0.1938': attribute type 21 has an invalid length. [ 454.450067][T10055] netlink: 'syz.3.1939': attribute type 10 has an invalid length. [ 454.584935][T10055] device nlmon0 entered promiscuous mode [ 454.609556][T10055] team0: Device nlmon0 is of different type [ 454.624253][T10056] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1938'. [ 454.650667][T10056] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 454.695702][T10056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.194111][T10095] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1951'. [ 456.209844][T10095] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1951'. [ 456.233248][T10098] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1951'. [ 456.317814][T10094] FAULT_INJECTION: forcing a failure. [ 456.317814][T10094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.552457][T10094] CPU: 0 PID: 10094 Comm: syz.3.1950 Not tainted syzkaller #0 [ 456.561548][T10094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.573318][T10094] Call Trace: [ 456.576833][T10094] [ 456.579960][T10094] dump_stack_lvl+0x188/0x24e [ 456.585591][T10094] ? show_regs_print_info+0x12/0x12 [ 456.591302][T10094] ? load_image+0x410/0x410 [ 456.596714][T10094] ? __lock_acquire+0x7c40/0x7c40 [ 456.601842][T10094] should_fail_ex+0x390/0x4c0 [ 456.607832][T10094] _copy_from_user+0x2c/0x170 [ 456.613748][T10094] iovec_from_user+0x143/0x360 [ 456.618864][T10094] __import_iovec+0x6c/0x510 [ 456.623652][T10094] import_iovec+0x6f/0xa0 [ 456.628063][T10094] ___sys_sendmsg+0x252/0x360 [ 456.633430][T10094] ? migrate_enable+0x148/0x220 [ 456.638425][T10094] ? __sys_sendmsg+0x2a0/0x2a0 [ 456.643406][T10094] __se_sys_sendmsg+0x1c3/0x2b0 [ 456.648368][T10094] ? __x64_sys_sendmsg+0x80/0x80 [ 456.653698][T10094] ? syscall_enter_from_user_mode+0x2a/0x80 [ 456.660724][T10094] do_syscall_64+0x4c/0xa0 [ 456.668093][T10094] ? clear_bhb_loop+0x60/0xb0 [ 456.673252][T10094] ? clear_bhb_loop+0x60/0xb0 [ 456.679522][T10094] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.688132][T10094] RIP: 0033:0x7f77eeb9e0d9 [ 456.694005][T10094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.715776][T10094] RSP: 002b:00007f77efade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.725410][T10094] RAX: ffffffffffffffda RBX: 00007f77eee25fa0 RCX: 00007f77eeb9e0d9 [ 456.733791][T10094] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 456.741921][T10094] RBP: 00007f77efade090 R08: 0000000000000000 R09: 0000000000000000 [ 456.750321][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.758334][T10094] R13: 00007f77eee26038 R14: 00007f77eee25fa0 R15: 00007ffc9c044628 [ 456.767850][T10094] [ 456.835246][T10101] netlink: 'syz.2.1952': attribute type 10 has an invalid length. [ 456.955678][T10101] device dummy0 entered promiscuous mode [ 457.011932][T10101] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 457.070469][T10102] __nla_validate_parse: 1 callbacks suppressed [ 457.070494][T10102] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1953'. [ 457.117958][T10113] netlink: 'syz.0.1956': attribute type 10 has an invalid length. [ 458.069075][ T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 458.516890][T10135] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1964'. [ 458.683385][T10134] netlink: 'syz.0.1964': attribute type 21 has an invalid length. [ 458.722106][T10135] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1964'. [ 458.792343][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 458.847382][T10135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.974057][T10137] netlink: 'syz.1.1965': attribute type 10 has an invalid length. [ 459.149054][T10146] netlink: 'syz.2.1968': attribute type 2 has an invalid length. [ 459.785808][T10155] FAULT_INJECTION: forcing a failure. [ 459.785808][T10155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.810536][T10155] CPU: 0 PID: 10155 Comm: syz.2.1972 Not tainted syzkaller #0 [ 459.818638][T10155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.829312][T10155] Call Trace: [ 459.833085][T10155] [ 459.836062][T10155] dump_stack_lvl+0x188/0x24e [ 459.841103][T10155] ? show_regs_print_info+0x12/0x12 [ 459.846602][T10155] ? load_image+0x410/0x410 [ 459.851189][T10155] ? __lock_acquire+0x7c40/0x7c40 [ 459.856853][T10155] ? memcpy+0x3c/0x60 [ 459.860924][T10155] should_fail_ex+0x390/0x4c0 [ 459.866247][T10155] _copy_to_user+0x2c/0x130 [ 459.871460][T10155] generic_map_lookup_batch+0x7cc/0xbf0 [ 459.877477][T10155] ? bpf_map_update_value+0x670/0x670 [ 459.882940][T10155] ? bpf_map_update_value+0x670/0x670 [ 459.889586][T10155] ? bpf_map_do_batch+0x2d5/0x5f0 [ 459.894949][T10155] ? bpf_map_update_value+0x670/0x670 [ 459.905528][T10155] bpf_map_do_batch+0x2e0/0x5f0 [ 459.911448][T10155] ? bpf_lsm_bpf+0x5/0x10 [ 459.917439][T10155] ? security_bpf+0x7a/0xa0 [ 459.922024][T10155] __sys_bpf+0x6f7/0x780 [ 459.928211][T10155] ? bpf_link_show_fdinfo+0x380/0x380 [ 459.933771][T10155] ? lock_chain_count+0x20/0x20 [ 459.938684][T10155] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 459.944748][T10155] __x64_sys_bpf+0x78/0x90 [ 459.949393][T10155] do_syscall_64+0x4c/0xa0 [ 459.953901][T10155] ? clear_bhb_loop+0x60/0xb0 [ 459.958818][T10155] ? clear_bhb_loop+0x60/0xb0 [ 459.964879][T10155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.971089][T10155] RIP: 0033:0x7fb23779e0d9 [ 459.976201][T10155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.997792][T10155] RSP: 002b:00007fb238759028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.006263][T10155] RAX: ffffffffffffffda RBX: 00007fb237a25fa0 RCX: 00007fb23779e0d9 [ 460.015619][T10155] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 460.025203][T10155] RBP: 00007fb238759090 R08: 0000000000000000 R09: 0000000000000000 [ 460.033904][T10155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.043100][T10155] R13: 00007fb237a26038 R14: 00007fb237a25fa0 R15: 00007ffe30cf6868 [ 460.051946][T10155] [ 461.366753][T10192] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1985'. [ 461.509932][T10192] bridge0: port 3(bond0) entered disabled state [ 461.963123][T10192] bridge0: port 3(bond0) entered disabled state [ 461.975989][T10192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.986948][T10192] device bond_slave_1 left promiscuous mode [ 462.019717][T10192] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 462.080977][T10192] device batadv_slave_0 left promiscuous mode [ 462.116748][T10192] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 462.200620][T10192] device dummy0 left promiscuous mode [ 462.244049][T10192] bond0 (unregistering): Released all slaves [ 462.640276][T10212] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1995'. [ 462.775414][T10212] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 463.563715][T10237] netlink: 16162 bytes leftover after parsing attributes in process `syz.1.2004'. [ 463.628345][T10240] netlink: 'syz.0.2005': attribute type 10 has an invalid length. [ 463.689548][T10240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2005'. [ 463.741359][T10240] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 463.830821][T10241] netlink: 'syz.2.2003': attribute type 16 has an invalid length. [ 463.864819][T10241] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2003'. [ 467.937660][T10288] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2022'. [ 467.952763][T10288] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 468.094539][T10288] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 468.179666][T10294] netlink: 'syz.0.2023': attribute type 10 has an invalid length. [ 468.387416][T10294] team0: Device hsr_slave_0 failed to register rx_handler [ 468.733520][T10305] netlink: 'syz.4.2030': attribute type 2 has an invalid length. [ 468.759905][T10305] netlink: 'syz.4.2030': attribute type 8 has an invalid length. [ 468.798251][T10305] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2030'. [ 468.840999][T10307] netlink: 'syz.4.2030': attribute type 2 has an invalid length. [ 468.895948][T10307] netlink: 'syz.4.2030': attribute type 8 has an invalid length. [ 468.960274][T10307] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2030'. [ 470.645520][T10327] netlink: 'syz.2.2040': attribute type 16 has an invalid length. [ 470.693851][T10327] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2040'. [ 471.200011][T10345] netlink: 'syz.4.2044': attribute type 5 has an invalid length. [ 472.025271][T10356] netlink: 'syz.2.2049': attribute type 2 has an invalid length. [ 472.070750][T10356] netlink: 'syz.2.2049': attribute type 8 has an invalid length. [ 472.095364][T10356] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2049'. [ 472.172023][T10356] netlink: 'syz.2.2049': attribute type 2 has an invalid length. [ 472.222385][T10356] netlink: 'syz.2.2049': attribute type 8 has an invalid length. [ 472.270802][T10356] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2049'. [ 473.096072][T10374] netlink: 'syz.1.2057': attribute type 5 has an invalid length. [ 473.311908][T10381] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2058'. [ 473.522415][T10378] netlink: 'syz.4.2058': attribute type 21 has an invalid length. [ 473.628189][T10381] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2058'. [ 473.694356][T10381] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 473.771836][T10381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.907240][T10386] netlink: 'syz.1.2061': attribute type 21 has an invalid length. [ 473.960051][T10386] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2061'. [ 474.039631][T10393] netlink: 'syz.2.2062': attribute type 2 has an invalid length. [ 474.070503][T10393] netlink: 'syz.2.2062': attribute type 8 has an invalid length. [ 474.079709][T10393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2062'. [ 474.133240][T10394] netlink: 'syz.2.2062': attribute type 2 has an invalid length. [ 474.148851][T10394] netlink: 'syz.2.2062': attribute type 8 has an invalid length. [ 474.158541][T10394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2062'. [ 474.663451][T10405] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2066'. [ 474.760649][T10403] netlink: 'syz.2.2066': attribute type 21 has an invalid length. [ 474.779883][T10403] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2066'. [ 474.809045][T10403] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 474.857884][T10403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.062004][T10411] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2067'. [ 475.078899][T10408] netlink: 'syz.1.2068': attribute type 3 has an invalid length. [ 475.079511][T10408] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2068'. [ 475.156922][T10414] netlink: 'syz.3.2067': attribute type 21 has an invalid length. [ 475.195993][T10411] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2067'. [ 475.275764][T10411] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 475.405060][T10411] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 475.435689][T10418] FAULT_INJECTION: forcing a failure. [ 475.435689][T10418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 475.454401][T10418] CPU: 0 PID: 10418 Comm: syz.0.2072 Not tainted syzkaller #0 [ 475.465784][T10418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.481049][T10418] Call Trace: [ 475.488272][T10418] [ 475.491659][T10418] dump_stack_lvl+0x188/0x24e [ 475.499335][T10418] ? show_regs_print_info+0x12/0x12 [ 475.506358][T10418] ? load_image+0x410/0x410 [ 475.513157][T10418] ? __lock_acquire+0x7c40/0x7c40 [ 475.520481][T10418] should_fail_ex+0x390/0x4c0 [ 475.528329][T10418] _copy_from_user+0x2c/0x170 [ 475.533793][T10418] __copy_msghdr+0x384/0x560 [ 475.541311][T10418] ___sys_sendmsg+0x210/0x360 [ 475.546517][T10418] ? __sys_sendmsg+0x2a0/0x2a0 [ 475.554221][T10418] ? __lock_acquire+0x7c40/0x7c40 [ 475.561870][T10418] __se_sys_sendmsg+0x1c3/0x2b0 [ 475.567331][T10418] ? __x64_sys_sendmsg+0x80/0x80 [ 475.572820][T10418] ? lockdep_hardirqs_on+0x94/0x140 [ 475.579446][T10418] do_syscall_64+0x4c/0xa0 [ 475.584036][T10418] ? clear_bhb_loop+0x60/0xb0 [ 475.588869][T10418] ? clear_bhb_loop+0x60/0xb0 [ 475.594013][T10418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 475.600605][T10418] RIP: 0033:0x7fe22039e0d9 [ 475.607319][T10418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.629955][T10418] RSP: 002b:00007fe22127a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 475.641339][T10418] RAX: ffffffffffffffda RBX: 00007fe220625fa0 RCX: 00007fe22039e0d9 [ 475.650939][T10418] RDX: 0000000000008045 RSI: 0000200000000040 RDI: 0000000000000003 [ 475.660458][T10418] RBP: 00007fe22127a090 R08: 0000000000000000 R09: 0000000000000000 [ 475.670212][T10418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.679842][T10418] R13: 00007fe220626038 R14: 00007fe220625fa0 R15: 00007fffeaea67f8 [ 475.690538][T10418] [ 476.172188][T10430] netlink: 'syz.2.2076': attribute type 2 has an invalid length. [ 476.203073][T10430] netlink: 'syz.2.2076': attribute type 8 has an invalid length. [ 476.727353][T10441] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 477.856070][T10457] device vlan0 entered promiscuous mode [ 477.897562][T10457] team0: Device vlan0 is up. Set it down before adding it as a team port [ 478.819967][T10479] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 478.961037][ T11] wlan1: Trigger new scan to find an IBSS to join [ 479.359338][T10492] validate_nla: 8 callbacks suppressed [ 479.359402][T10492] netlink: 'syz.2.2099': attribute type 10 has an invalid length. [ 479.406194][T10494] netlink: 'syz.0.2100': attribute type 1 has an invalid length. [ 479.417633][T10494] __nla_validate_parse: 6 callbacks suppressed [ 479.417692][T10494] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2100'. [ 479.906556][T10501] netlink: 'syz.0.2102': attribute type 2 has an invalid length. [ 479.960657][T10501] netlink: 'syz.0.2102': attribute type 8 has an invalid length. [ 480.000625][T10501] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2102'. [ 480.070700][T10503] netlink: 'syz.0.2102': attribute type 2 has an invalid length. [ 480.101441][T10503] netlink: 'syz.0.2102': attribute type 8 has an invalid length. [ 480.127928][T10503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2102'. [ 480.616450][T10511] netlink: 'syz.1.2105': attribute type 16 has an invalid length. [ 480.650598][T10511] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2105'. [ 480.696976][T10511] netlink: 'syz.1.2105': attribute type 10 has an invalid length. [ 480.961928][ T11] wlan1: Trigger new scan to find an IBSS to join [ 481.052606][T10511] device macvlan0 entered promiscuous mode [ 481.118277][T10511] team0: Port device macvlan0 added [ 481.153156][T10519] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.2107'. [ 481.413594][T10524] netlink: 'syz.4.2110': attribute type 29 has an invalid length. [ 481.574456][T10524] netlink: 'syz.4.2110': attribute type 29 has an invalid length. [ 482.279182][T10546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2116'. [ 482.392744][T10546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2116'. [ 482.881816][ T4793] wlan1: Trigger new scan to find an IBSS to join [ 483.114690][T10561] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2122'. [ 483.145880][T10557] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 483.404865][T10570] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2123'. [ 483.648428][T10571] device macvlan0 entered promiscuous mode [ 483.713707][T10571] team0: Port device macvlan0 added [ 484.357554][T10588] FAULT_INJECTION: forcing a failure. [ 484.357554][T10588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.494225][T10588] CPU: 0 PID: 10588 Comm: syz.1.2127 Not tainted syzkaller #0 [ 484.504327][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 484.522614][T10588] Call Trace: [ 484.528401][T10588] [ 484.532809][T10588] dump_stack_lvl+0x188/0x24e [ 484.538810][T10588] ? show_regs_print_info+0x12/0x12 [ 484.547906][T10588] ? load_image+0x410/0x410 [ 484.554261][T10588] ? __lock_acquire+0x7c40/0x7c40 [ 484.562071][T10588] should_fail_ex+0x390/0x4c0 [ 484.569495][T10588] _copy_from_user+0x2c/0x170 [ 484.578468][T10588] __copy_msghdr+0x384/0x560 [ 484.584435][T10588] ___sys_sendmsg+0x210/0x360 [ 484.590812][T10588] ? __sys_sendmsg+0x2a0/0x2a0 [ 484.598440][T10588] ? __lock_acquire+0x7c40/0x7c40 [ 484.608220][T10588] __se_sys_sendmsg+0x1c3/0x2b0 [ 484.614935][T10588] ? ct_nmi_exit+0x145/0x1c0 [ 484.623782][T10588] ? __x64_sys_sendmsg+0x80/0x80 [ 484.631980][T10588] ? lockdep_hardirqs_on+0x94/0x140 [ 484.640741][T10588] do_syscall_64+0x4c/0xa0 [ 484.645585][T10588] ? clear_bhb_loop+0x60/0xb0 [ 484.654900][T10588] ? clear_bhb_loop+0x60/0xb0 [ 484.665338][T10588] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.674710][T10588] RIP: 0033:0x7f591c39e0d9 [ 484.679708][T10588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.706532][T10588] RSP: 002b:00007f591a5f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.716296][T10588] RAX: ffffffffffffffda RBX: 00007f591c625fa0 RCX: 00007f591c39e0d9 [ 484.725674][T10588] RDX: 0000000000000040 RSI: 0000200000000400 RDI: 0000000000000003 [ 484.734930][T10588] RBP: 00007f591a5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 484.745222][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.755797][T10588] R13: 00007f591c626038 R14: 00007f591c625fa0 R15: 00007ffdb84eb208 [ 484.766837][T10588] [ 484.826757][T10591] validate_nla: 10 callbacks suppressed [ 484.826779][T10591] netlink: 'syz.2.2130': attribute type 2 has an invalid length. [ 484.846791][T10591] netlink: 'syz.2.2130': attribute type 8 has an invalid length. [ 484.856407][T10591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2130'. [ 484.871571][T10591] netlink: 'syz.2.2130': attribute type 2 has an invalid length. [ 484.885581][ T4793] wlan1: Trigger new scan to find an IBSS to join [ 484.907183][T10591] netlink: 'syz.2.2130': attribute type 8 has an invalid length. [ 484.925574][T10591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2130'. [ 484.961432][ T4793] wlan1: Creating new IBSS network, BSSID d2:55:1d:3f:15:c0 [ 485.230399][T10598] netlink: 'syz.3.2131': attribute type 16 has an invalid length. [ 485.361604][T10598] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2131'. [ 485.441152][T10598] FAULT_INJECTION: forcing a failure. [ 485.441152][T10598] name failslab, interval 1, probability 0, space 0, times 0 [ 485.530816][T10598] CPU: 1 PID: 10598 Comm: syz.3.2131 Not tainted syzkaller #0 [ 485.540892][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.552132][T10598] Call Trace: [ 485.557268][T10598] [ 485.565106][T10598] dump_stack_lvl+0x188/0x24e [ 485.572321][T10598] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 485.580819][T10598] ? show_regs_print_info+0x12/0x12 [ 485.588492][T10598] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 485.601991][T10598] ? dump_stack+0x5/0x12 [ 485.608929][T10598] should_fail_ex+0x390/0x4c0 [ 485.614236][T10598] should_failslab+0x5/0x20 [ 485.620307][T10598] slab_pre_alloc_hook+0x59/0x300 [ 485.628142][T10598] ? fib_nl2rule+0x330/0x1bb0 [ 485.635947][T10598] __kmem_cache_alloc_node+0x4f/0x270 [ 485.643233][T10598] ? fib_nl2rule+0x330/0x1bb0 [ 485.649212][T10598] __kmalloc+0xa3/0x240 [ 485.654658][T10598] fib_nl2rule+0x330/0x1bb0 [ 485.660064][T10598] ? __lock_acquire+0x7c40/0x7c40 [ 485.667461][T10598] ? fib_nl_newrule+0x1e40/0x1e40 [ 485.673869][T10598] ? __nla_parse+0x3c/0x50 [ 485.680070][T10598] fib_nl_newrule+0x34f/0x1e40 [ 485.687961][T10598] ? lock_acquire+0x225/0x4a0 [ 485.693432][T10598] ? fib_rules_seq_read+0xf0/0xf0 [ 485.700226][T10598] ? rcu_is_watching+0x11/0xa0 [ 485.709391][T10598] ? trace_contention_end+0x5f/0x170 [ 485.718116][T10598] ? fib_rules_seq_read+0xf0/0xf0 [ 485.726814][T10598] rtnetlink_rcv_msg+0x863/0xfb0 [ 485.732744][T10598] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 485.738842][T10598] ? rtnetlink_bind+0x80/0x80 [ 485.744405][T10598] ? mark_lock+0x94/0x320 [ 485.749892][T10598] ? __lock_acquire+0x138a/0x7c40 [ 485.756939][T10598] ? verify_lock_unused+0x140/0x140 [ 485.763483][T10598] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 485.771930][T10598] ? verify_lock_unused+0x140/0x140 [ 485.778730][T10598] ? verify_lock_unused+0x140/0x140 [ 485.786256][T10598] ? irqentry_enter+0x33/0x50 [ 485.792663][T10598] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 485.799554][T10598] netlink_rcv_skb+0x1ef/0x440 [ 485.807225][T10598] ? rtnetlink_bind+0x80/0x80 [ 485.813542][T10598] ? netlink_ack+0x1160/0x1160 [ 485.821423][T10598] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.828251][T10598] netlink_unicast+0x7ad/0x920 [ 485.834747][T10598] netlink_sendmsg+0x8ad/0xbd0 [ 485.841910][T10598] ? netlink_getsockopt+0x550/0x550 [ 485.849216][T10598] ? apparmor_socket_sendmsg+0x8a/0x330 [ 485.860926][T10598] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 485.869107][T10598] ? security_socket_sendmsg+0x7c/0xa0 [ 485.876359][T10598] ? netlink_getsockopt+0x550/0x550 [ 485.882786][T10598] ____sys_sendmsg+0x5ed/0x9a0 [ 485.888276][T10598] ? __sys_sendmsg_sock+0x30/0x30 [ 485.897320][T10598] ? __import_iovec+0x306/0x510 [ 485.906153][T10598] ? import_iovec+0x6f/0xa0 [ 485.913885][T10598] ___sys_sendmsg+0x2a2/0x360 [ 485.920637][T10598] ? __sys_sendmsg+0x2a0/0x2a0 [ 485.928120][T10598] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 485.936106][T10598] __se_sys_sendmsg+0x1c3/0x2b0 [ 485.942775][T10598] ? perf_trace_preemptirq_template+0x268/0x320 [ 485.952745][T10598] ? __x64_sys_sendmsg+0x80/0x80 [ 485.958730][T10598] ? lockdep_hardirqs_on+0x94/0x140 [ 485.967621][T10598] do_syscall_64+0x4c/0xa0 [ 485.975688][T10598] ? clear_bhb_loop+0x60/0xb0 [ 485.980840][T10598] ? clear_bhb_loop+0x60/0xb0 [ 485.986296][T10598] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.995061][T10598] RIP: 0033:0x7f77eeb9e0d9 [ 486.000152][T10598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.026616][T10598] RSP: 002b:00007f77efade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.039334][T10598] RAX: ffffffffffffffda RBX: 00007f77eee25fa0 RCX: 00007f77eeb9e0d9 [ 486.050207][T10598] RDX: 0000000000000844 RSI: 0000200000000000 RDI: 0000000000000005 [ 486.060712][T10598] RBP: 00007f77efade090 R08: 0000000000000000 R09: 0000000000000000 [ 486.074878][T10598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.084239][T10598] R13: 00007f77eee26038 R14: 00007f77eee25fa0 R15: 00007ffc9c044628 [ 486.093449][T10598] [ 486.334791][T10609] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2137'. [ 486.465984][T10609] netlink: 'syz.4.2137': attribute type 21 has an invalid length. [ 486.536368][T10612] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2137'. [ 486.589780][T10612] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 486.654254][T10620] delete_channel: no stack [ 486.672037][T10611] netlink: 'syz.2.2140': attribute type 16 has an invalid length. [ 486.732189][T10620] delete_channel: no stack [ 486.780239][T10611] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2140'. [ 486.814774][T10612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.962032][ T4793] wlan1: Creating new IBSS network, BSSID fe:09:f9:07:aa:28 [ 486.990879][T10615] netlink: 'syz.2.2140': attribute type 10 has an invalid length. [ 487.058536][T10626] netlink: 'syz.1.2144': attribute type 2 has an invalid length. [ 487.114871][T10615] device macvlan0 entered promiscuous mode [ 487.166512][T10615] team0: Port device macvlan0 added [ 487.654195][T10632] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2146'. [ 487.655029][T10628] netlink: 'syz.4.2145': attribute type 2 has an invalid length. [ 487.720855][T10628] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2145'. [ 488.725197][T10658] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2156'. [ 488.771605][T10660] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2155'. [ 489.038795][T10657] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 489.206256][T10657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 489.213064][ T41] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 490.177106][T10692] device sit0 entered promiscuous mode [ 490.259021][T10695] validate_nla: 3 callbacks suppressed [ 490.259075][T10695] netlink: 'syz.0.2169': attribute type 16 has an invalid length. [ 490.280573][T10695] __nla_validate_parse: 1 callbacks suppressed [ 490.280613][T10695] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2169'. [ 490.341222][T10684] netlink: 'syz.4.2167': attribute type 16 has an invalid length. [ 490.381788][T10684] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2167'. [ 490.670850][T10706] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2173'. [ 490.742039][T10705] netlink: 'syz.0.2173': attribute type 21 has an invalid length. [ 490.778953][T10709] netlink: 'syz.4.2174': attribute type 2 has an invalid length. [ 490.801159][T10705] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2173'. [ 490.816463][T10705] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 490.899674][T10705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.705188][T10731] netlink: 'syz.3.2184': attribute type 16 has an invalid length. [ 491.737921][T10731] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2184'. [ 492.150279][T10738] netlink: 'syz.3.2187': attribute type 2 has an invalid length. [ 492.402136][T10740] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2188'. [ 492.475687][T10745] netlink: 'syz.4.2188': attribute type 21 has an invalid length. [ 492.514842][T10740] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2188'. [ 492.539486][T10740] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 492.697225][T10740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 493.256323][T10755] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2194'. [ 493.348687][T10755] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2194'. [ 493.697229][T10768] netlink: 'syz.0.2199': attribute type 21 has an invalid length. [ 493.715406][T10769] netlink: 'syz.0.2199': attribute type 21 has an invalid length. [ 494.341096][T10781] netlink: 'syz.4.2203': attribute type 5 has an invalid length. [ 494.501906][T10784] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2204'. [ 494.633868][T10783] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 494.812119][T10783] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 496.165198][T10810] validate_nla: 1 callbacks suppressed [ 496.165231][T10810] netlink: 'syz.3.2214': attribute type 3 has an invalid length. [ 496.186954][T10810] __nla_validate_parse: 1 callbacks suppressed [ 496.186993][T10810] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2214'. [ 496.625630][T10819] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2218'. [ 496.991525][T10819] netlink: 'syz.3.2218': attribute type 21 has an invalid length. [ 497.010545][T10824] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2219'. [ 497.132344][T10817] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2218'. [ 497.159451][T10817] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 497.318400][T10817] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.539777][T10847] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2228'. [ 498.557599][T10850] FAULT_INJECTION: forcing a failure. [ 498.557599][T10850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.572604][T10847] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 498.603707][T10847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.640785][T10850] CPU: 1 PID: 10850 Comm: syz.0.2229 Not tainted syzkaller #0 [ 498.648478][T10850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.658827][T10850] Call Trace: [ 498.662277][T10850] [ 498.665268][T10850] dump_stack_lvl+0x188/0x24e [ 498.670114][T10850] ? show_regs_print_info+0x12/0x12 [ 498.675570][T10850] ? load_image+0x410/0x410 [ 498.680549][T10850] ? __lock_acquire+0x7c40/0x7c40 [ 498.685787][T10850] should_fail_ex+0x390/0x4c0 [ 498.690810][T10850] _copy_from_user+0x2c/0x170 [ 498.695990][T10850] iovec_from_user+0x143/0x360 [ 498.701387][T10850] __import_iovec+0x6c/0x510 [ 498.706266][T10850] import_iovec+0x6f/0xa0 [ 498.710863][T10850] ___sys_sendmsg+0x252/0x360 [ 498.715702][T10850] ? __sys_sendmsg+0x2a0/0x2a0 [ 498.720562][T10850] ? __lock_acquire+0x7c40/0x7c40 [ 498.725693][T10850] __se_sys_sendmsg+0x1c3/0x2b0 [ 498.730799][T10850] ? __x64_sys_sendmsg+0x80/0x80 [ 498.737036][T10850] ? lockdep_hardirqs_on+0x94/0x140 [ 498.742306][T10850] do_syscall_64+0x4c/0xa0 [ 498.747419][T10850] ? clear_bhb_loop+0x60/0xb0 [ 498.752157][T10850] ? clear_bhb_loop+0x60/0xb0 [ 498.756879][T10850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 498.764051][T10850] RIP: 0033:0x7fe22039e0d9 [ 498.771334][T10850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.792300][T10850] RSP: 002b:00007fe22127a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.801202][T10850] RAX: ffffffffffffffda RBX: 00007fe220625fa0 RCX: 00007fe22039e0d9 [ 498.809361][T10850] RDX: 0000000000008045 RSI: 0000200000000040 RDI: 0000000000000003 [ 498.818092][T10850] RBP: 00007fe22127a090 R08: 0000000000000000 R09: 0000000000000000 [ 498.830670][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.838737][T10850] R13: 00007fe220626038 R14: 00007fe220625fa0 R15: 00007fffeaea67f8 [ 498.847476][T10850] [ 498.898892][T10848] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2228'. [ 498.916539][T10848] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 498.950119][T10848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.181720][T10858] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2233'. [ 499.328493][T10865] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2234'. [ 499.383458][T10863] netlink: 'syz.1.2234': attribute type 21 has an invalid length. [ 499.431289][T10865] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2234'. [ 499.569699][T10865] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 499.656078][T10865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.727559][T10875] sock: sock_timestamping_bind_phc: sock not bind to device [ 499.777965][T10874] netlink: 'syz.2.2236': attribute type 21 has an invalid length. [ 499.880457][T10874] netlink: 'syz.2.2236': attribute type 4 has an invalid length. [ 499.889609][T10874] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2236'. [ 500.018019][T10879] netlink: 'syz.0.2239': attribute type 21 has an invalid length. [ 500.058841][T10879] netlink: 'syz.0.2239': attribute type 6 has an invalid length. [ 501.577609][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.585610][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.837883][T10900] __nla_validate_parse: 1 callbacks suppressed [ 502.837914][T10900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2243'. [ 502.877249][T10900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2243'. [ 502.909219][T10897] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2243'. [ 502.930077][T10903] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2245'. [ 502.941556][T10905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2244'. [ 502.981207][T10897] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2243'. [ 503.351339][T10921] netlink: 'syz.0.2251': attribute type 10 has an invalid length. [ 503.427651][T10923] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2250'. [ 503.491996][T10922] netlink: 'syz.4.2249': attribute type 21 has an invalid length. [ 503.526489][T10922] netlink: 'syz.4.2249': attribute type 5 has an invalid length. [ 503.559583][T10919] netlink: 'syz.2.2250': attribute type 21 has an invalid length. [ 503.592794][T10923] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2250'. [ 503.653737][T10923] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 503.703662][T10923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 504.218987][T10939] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.2255'. [ 508.119674][T10962] netlink: 'syz.4.2258': attribute type 2 has an invalid length. [ 508.131413][T10962] netlink: 'syz.4.2258': attribute type 8 has an invalid length. [ 508.142438][T10962] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2258'. [ 508.153755][T10967] netlink: 'syz.4.2258': attribute type 2 has an invalid length. [ 508.165203][T10967] netlink: 'syz.4.2258': attribute type 8 has an invalid length. [ 508.176457][T10967] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2258'. [ 508.633881][T10971] can: request_module (can-proto-0) failed. [ 508.643964][T10981] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2264'. [ 508.819331][T10979] netlink: 'syz.1.2264': attribute type 21 has an invalid length. [ 508.892645][T10979] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2264'. [ 508.964772][T10979] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 509.368383][T10979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.468593][T10987] netlink: 'syz.4.2266': attribute type 10 has an invalid length. [ 509.787242][T10987] device virt_wifi0 entered promiscuous mode [ 509.819931][T10987] team0: Port device virt_wifi0 added [ 512.767610][T11013] netlink: 'syz.3.2278': attribute type 2 has an invalid length. [ 513.288840][T11024] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2283'. [ 513.759374][T11044] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2298'. [ 513.816162][T11044] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 514.706389][T11058] netlink: 'syz.3.2302': attribute type 16 has an invalid length. [ 514.738632][T11058] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2302'. [ 514.921979][T11060] netlink: 'syz.4.2292': attribute type 2 has an invalid length. [ 515.087427][T11067] netlink: 'syz.0.2295': attribute type 2 has an invalid length. [ 517.376239][T11098] netlink: 'syz.2.2308': attribute type 2 has an invalid length. [ 517.922975][T11115] netlink: 'syz.4.2313': attribute type 2 has an invalid length. [ 518.028279][T11115] netlink: 'syz.4.2313': attribute type 8 has an invalid length. [ 518.117226][T11115] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2313'. [ 518.155563][T11116] netlink: 'syz.0.2322': attribute type 1 has an invalid length. [ 518.214649][T11106] delete_channel: no stack [ 518.292318][T11122] netlink: 'syz.2.2317': attribute type 2 has an invalid length. [ 519.145987][T11135] netlink: 'syz.3.2324': attribute type 10 has an invalid length. [ 519.197615][T11135] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2324'. [ 519.358637][T11137] netlink: 'syz.4.2323': attribute type 5 has an invalid length. [ 520.327902][ T4335] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 520.708120][T11163] netlink: 'syz.2.2332': attribute type 2 has an invalid length. [ 522.275152][T11189] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2343'. [ 522.607900][T11196] netlink: 'syz.1.2345': attribute type 2 has an invalid length. [ 522.918832][T11201] FAULT_INJECTION: forcing a failure. [ 522.918832][T11201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.011167][T11201] CPU: 1 PID: 11201 Comm: syz.3.2347 Not tainted syzkaller #0 [ 523.019357][T11201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 523.029730][T11201] Call Trace: [ 523.033167][T11201] [ 523.037739][T11201] dump_stack_lvl+0x188/0x24e [ 523.042941][T11201] ? show_regs_print_info+0x12/0x12 [ 523.048338][T11201] ? load_image+0x410/0x410 [ 523.052937][T11201] ? __might_fault+0xa6/0x120 [ 523.057698][T11201] should_fail_ex+0x390/0x4c0 [ 523.062616][T11201] copyin+0x1b/0x120 [ 523.066870][T11201] _copy_from_iter+0x447/0x1130 [ 523.072428][T11201] ? copyout_mc+0x110/0x110 [ 523.077171][T11201] ? __lock_acquire+0x1465/0x7c40 [ 523.082566][T11201] ? dev_get_by_index+0x1e/0x2d0 [ 523.088788][T11201] ? dev_get_by_index+0x1e/0x2d0 [ 523.094028][T11201] packet_sendmsg+0x3081/0x4de0 [ 523.099631][T11201] ? aa_sk_perm+0x950/0x950 [ 523.104336][T11201] ? __might_sleep+0xd0/0xd0 [ 523.109017][T11201] ? is_bpf_text_address+0x22/0x2a0 [ 523.114400][T11201] ? verify_lock_unused+0x140/0x140 [ 523.120026][T11201] ? aa_sk_perm+0x81f/0x950 [ 523.124589][T11201] ? aa_af_perm+0x340/0x340 [ 523.129496][T11201] ? packet_getsockopt+0x980/0x980 [ 523.134651][T11201] ? apparmor_socket_sendmsg+0x8a/0x330 [ 523.145649][T11201] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 523.151006][T11201] ? security_socket_sendmsg+0x7c/0xa0 [ 523.156568][T11201] ? packet_getsockopt+0x980/0x980 [ 523.161744][T11201] ____sys_sendmsg+0x5ed/0x9a0 [ 523.166583][T11201] ? __sys_sendmsg_sock+0x30/0x30 [ 523.171920][T11201] ? __import_iovec+0x306/0x510 [ 523.177074][T11201] ? import_iovec+0x6f/0xa0 [ 523.182512][T11201] ___sys_sendmsg+0x2a2/0x360 [ 523.187354][T11201] ? __sys_sendmsg+0x2a0/0x2a0 [ 523.192557][T11201] ? __lock_acquire+0x7c40/0x7c40 [ 523.197668][T11201] __se_sys_sendmsg+0x1c3/0x2b0 [ 523.202580][T11201] ? ct_nmi_exit+0x145/0x1c0 [ 523.207439][T11201] ? __x64_sys_sendmsg+0x80/0x80 [ 523.212561][T11201] ? lockdep_hardirqs_on+0x94/0x140 [ 523.217916][T11201] do_syscall_64+0x4c/0xa0 [ 523.222408][T11201] ? clear_bhb_loop+0x60/0xb0 [ 523.227735][T11201] ? clear_bhb_loop+0x60/0xb0 [ 523.232489][T11201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 523.238517][T11201] RIP: 0033:0x7f77eeb9e0d9 [ 523.242966][T11201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.263129][T11201] RSP: 002b:00007f77efade028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.271769][T11201] RAX: ffffffffffffffda RBX: 00007f77eee25fa0 RCX: 00007f77eeb9e0d9 [ 523.280159][T11201] RDX: 0000000000008045 RSI: 0000200000000040 RDI: 0000000000000003 [ 523.288192][T11201] RBP: 00007f77efade090 R08: 0000000000000000 R09: 0000000000000000 [ 523.296217][T11201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.304227][T11201] R13: 00007f77eee26038 R14: 00007f77eee25fa0 R15: 00007ffc9c044628 [ 523.312254][T11201] [ 524.017839][T11226] netlink: 'syz.3.2355': attribute type 10 has an invalid length. [ 524.130510][T11226] team0: Device vlan0 is up. Set it down before adding it as a team port [ 524.563817][T11234] netlink: 'syz.1.2358': attribute type 2 has an invalid length. [ 524.630649][T11234] netlink: 'syz.1.2358': attribute type 8 has an invalid length. [ 524.639314][T11234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2358'. [ 524.660058][T11232] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2368'. [ 524.723387][T11232] netlink: 'syz.4.2368': attribute type 21 has an invalid length. [ 524.770082][T11235] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2368'. [ 524.910564][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 524.991356][T11235] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.056039][T11237] netlink: 'syz.3.2359': attribute type 2 has an invalid length. [ 525.076478][T11237] netlink: 'syz.3.2359': attribute type 8 has an invalid length. [ 525.091813][T11237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2359'. [ 525.212677][T11236] delete_channel: no stack [ 525.943269][T11259] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2366'. [ 526.151348][T11266] netlink: 'syz.4.2371': attribute type 2 has an invalid length. [ 526.377948][T11268] netlink: 'syz.3.2372': attribute type 2 has an invalid length. [ 526.410417][T11268] netlink: 'syz.3.2372': attribute type 8 has an invalid length. [ 526.456657][T11268] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2372'. [ 526.550396][T11273] netlink: 'syz.1.2373': attribute type 10 has an invalid length. [ 526.680928][T11274] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2374'. [ 526.849622][T11271] netlink: 'syz.0.2374': attribute type 21 has an invalid length. [ 526.920494][T11274] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2374'. [ 526.998971][T11274] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 527.040882][T11274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.276875][T11284] netlink: 'syz.4.2378': attribute type 3 has an invalid length. [ 527.309209][T11284] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2378'. [ 527.475106][T11288] netlink: 'syz.4.2378': attribute type 10 has an invalid length. [ 527.748377][T11292] FAULT_INJECTION: forcing a failure. [ 527.748377][T11292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.810106][T11292] CPU: 1 PID: 11292 Comm: syz.0.2380 Not tainted syzkaller #0 [ 527.822612][T11292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.834457][T11292] Call Trace: [ 527.838353][T11292] [ 527.842256][T11292] dump_stack_lvl+0x188/0x24e [ 527.847742][T11292] ? show_regs_print_info+0x12/0x12 [ 527.854015][T11292] ? load_image+0x410/0x410 [ 527.859450][T11292] ? __lock_acquire+0x7c40/0x7c40 [ 527.866012][T11292] ? memcpy+0x3c/0x60 [ 527.871996][T11292] should_fail_ex+0x390/0x4c0 [ 527.877437][T11292] _copy_to_user+0x2c/0x130 [ 527.882897][T11292] generic_map_lookup_batch+0x829/0xbf0 [ 527.891696][T11292] ? bpf_map_update_value+0x670/0x670 [ 527.900083][T11292] ? bpf_map_do_batch+0x2d5/0x5f0 [ 527.906270][T11292] ? generic_map_lookup_batch+0xd/0xbf0 [ 527.913114][T11292] ? bpf_map_update_value+0x670/0x670 [ 527.920039][T11292] bpf_map_do_batch+0x2e0/0x5f0 [ 527.925426][T11292] ? bpf_lsm_bpf+0x5/0x10 [ 527.930370][T11292] ? security_bpf+0x7a/0xa0 [ 527.934993][T11292] __sys_bpf+0x6f7/0x780 [ 527.944669][T11292] ? bpf_link_show_fdinfo+0x380/0x380 [ 527.951289][T11292] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 527.958585][T11292] __x64_sys_bpf+0x78/0x90 [ 527.963640][T11292] do_syscall_64+0x4c/0xa0 [ 527.971292][T11292] ? clear_bhb_loop+0x60/0xb0 [ 527.976642][T11292] ? clear_bhb_loop+0x60/0xb0 [ 527.981649][T11292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.988444][T11292] RIP: 0033:0x7fe22039e0d9 [ 527.992969][T11292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.018271][T11292] RSP: 002b:00007fe22127a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 528.030907][T11292] RAX: ffffffffffffffda RBX: 00007fe220625fa0 RCX: 00007fe22039e0d9 [ 528.041019][T11292] RDX: 0000000000000038 RSI: 00002000000003c0 RDI: 0000000000000018 [ 528.049501][T11292] RBP: 00007fe22127a090 R08: 0000000000000000 R09: 0000000000000000 [ 528.057980][T11292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 528.067504][T11292] R13: 00007fe220626038 R14: 00007fe220625fa0 R15: 00007fffeaea67f8 [ 528.075833][T11292] [ 528.930512][T11312] netlink: 'syz.1.2387': attribute type 2 has an invalid length. [ 528.990796][T11312] netlink: 'syz.1.2387': attribute type 8 has an invalid length. [ 529.000063][T11312] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2387'. [ 529.332706][T11323] netlink: 'syz.0.2388': attribute type 21 has an invalid length. [ 529.479514][T11326] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.524633][T11326] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 529.650510][T11327] __nla_validate_parse: 2 callbacks suppressed [ 529.650531][T11327] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2390'. [ 529.693155][T11325] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2390'. [ 529.707715][T11325] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 529.888134][T11325] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.931416][T11330] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2393'. [ 529.985484][T11338] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2395'. [ 530.053369][T11339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2395'. [ 530.745635][T11354] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2408'. [ 530.967699][T11358] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2400'. [ 531.291631][T11363] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2402'. [ 531.996727][T11387] validate_nla: 11 callbacks suppressed [ 531.996816][T11387] netlink: 'syz.1.2412': attribute type 10 has an invalid length. [ 532.175136][T11387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2412'. [ 532.598351][T11399] netlink: 'syz.0.2415': attribute type 2 has an invalid length. [ 532.698980][T11399] netlink: 'syz.0.2415': attribute type 8 has an invalid length. [ 532.772499][T11399] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2415'. [ 533.204734][T11405] netlink: 'syz.3.2419': attribute type 39 has an invalid length. [ 533.704474][T11409] netlink: 'syz.0.2417': attribute type 16 has an invalid length. [ 533.811385][ T4286] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 534.119757][T11422] device syzkaller0 entered promiscuous mode [ 536.964741][T11437] netlink: 'syz.0.2427': attribute type 2 has an invalid length. [ 536.975904][T11437] netlink: 'syz.0.2427': attribute type 8 has an invalid length. [ 536.986113][T11437] __nla_validate_parse: 1 callbacks suppressed [ 536.986129][T11437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2427'. [ 537.010589][T11441] netlink: 'syz.4.2428': attribute type 39 has an invalid length. [ 537.037850][T11446] netlink: 'syz.4.2428': attribute type 16 has an invalid length. [ 537.060397][T11446] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2428'. [ 537.286762][T11452] sctp: [Deprecated]: syz.2.2429 (pid 11452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 537.286762][T11452] Use struct sctp_sack_info instead [ 537.328420][T11456] netlink: 'syz.0.2431': attribute type 2 has an invalid length. [ 537.817812][T11459] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2432'. [ 538.250620][T11468] netlink: 'syz.2.2434': attribute type 16 has an invalid length. [ 538.261874][T11468] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2434'. [ 539.517124][T11488] netlink: 'syz.2.2445': attribute type 2 has an invalid length. [ 539.568940][T11490] netlink: 'syz.4.2443': attribute type 2 has an invalid length. [ 539.642381][T11490] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2443'. [ 539.701061][T11491] netlink: 'syz.3.2444': attribute type 2 has an invalid length. [ 540.529788][T11427] Bluetooth: hci4: Dropping invalid advertising data [ 540.537980][T11427] Bluetooth: hci4: unknown advertising packet type: 0xdc [ 540.538017][T11427] Bluetooth: hci4: Malformed LE Event: 0x02 [ 540.631026][T11501] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2447'. [ 540.871935][T11509] netlink: 'syz.3.2450': attribute type 10 has an invalid length. [ 540.937257][T11509] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2450'. [ 543.218176][T11520] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2455'. [ 543.263500][T11520] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 543.345257][T11525] netlink: 'syz.3.2457': attribute type 2 has an invalid length. [ 543.658758][T11520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.064731][T11542] netlink: 'syz.4.2460': attribute type 2 has an invalid length. [ 545.339700][T11550] netlink: 'syz.0.2474': attribute type 2 has an invalid length. [ 546.198012][T11576] netlink: 'syz.0.2473': attribute type 2 has an invalid length. [ 548.346444][T11585] netlink: 'syz.2.2479': attribute type 2 has an invalid length. [ 549.142993][T11614] netlink: 'syz.0.2490': attribute type 5 has an invalid length. [ 549.238444][T11618] netlink: 'syz.3.2488': attribute type 10 has an invalid length. [ 549.535281][T11618] bridge0: port 2(bond0) entered blocking state [ 549.543286][T11618] bridge0: port 2(bond0) entered forwarding state [ 549.550445][T11618] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.557869][T11618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.784306][T11618] device bridge0 entered promiscuous mode [ 549.842779][T11618] team0: Port device bridge0 added [ 549.983267][T10955] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 551.280037][T10957] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 552.243482][T11630] netlink: 'syz.1.2493': attribute type 2 has an invalid length. [ 552.342794][T11632] netlink: 'syz.4.2494': attribute type 5 has an invalid length. [ 552.833576][T11648] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2500'. [ 562.966169][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.972634][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 578.961337][ T7] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2647 jiffies s: 25977 root: 0x2/. [ 578.986271][ T7] rcu: blocking rcu_node structures (internal RCU debug): [ 579.006205][ T7] Sending NMI from CPU 0 to CPUs 1: [ 579.011706][ C1] NMI backtrace for cpu 1 [ 579.011719][ C1] CPU: 1 PID: 11638 Comm: syz.2.2498 Not tainted syzkaller #0 [ 579.011735][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 579.011745][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x2a/0x60 [ 579.011797][ C1] Code: 48 8b 04 24 65 48 8b 0d 14 41 80 7e 65 8b 15 15 41 80 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 <74> 2c 8b 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b [ 579.011811][ C1] RSP: 0018:ffffc900001dfcd0 EFLAGS: 00000046 [ 579.011826][ C1] RAX: ffffffff8101179f RBX: ffff8880b8f35558 RCX: ffff88802ce18000 [ 579.011844][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 579.011854][ C1] RBP: 0000000000000000 R08: ffffc900001dfe77 R09: ffffc900001dfe40 [ 579.011866][ C1] R10: dffffc0000000000 R11: fffff5200003bfcf R12: dffffc0000000000 [ 579.011879][ C1] R13: ffff888056424e00 R14: 1ffff9200003bfd4 R15: dffffc0000000000 [ 579.011891][ C1] FS: 00007fb2387596c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 579.011907][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 579.011918][ C1] CR2: 00007fb238717d58 CR3: 00000000432c8000 CR4: 00000000003506e0 [ 579.011933][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 579.011943][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 579.011953][ C1] Call Trace: [ 579.011959][ C1] [ 579.011963][ C1] perf_misc_flags+0x4f/0xc0 [ 579.012001][ C1] perf_prepare_sample+0x12f/0x2020 [ 579.012036][ C1] ? read_lock_is_recursive+0x10/0x10 [ 579.012060][ C1] ? perf_callchain+0x190/0x190 [ 579.012088][ C1] perf_event_output_forward+0x197/0x2f0 [ 579.012113][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 579.012137][ C1] ? perf_get_page_size+0x430/0x430 [ 579.012166][ C1] ? perf_event_output_forward+0x282/0x2f0 [ 579.012191][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 579.012218][ C1] __perf_event_overflow+0x457/0x630 [ 579.012246][ C1] perf_swevent_overflow+0x19b/0x230 [ 579.012269][ C1] perf_swevent_event+0x458/0x570 [ 579.012295][ C1] ? perf_tp_event+0xc10/0xc10 [ 579.012319][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 579.012344][ C1] perf_tp_event+0x36b/0xc10 [ 579.012371][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 579.012395][ C1] ? perf_swevent_event+0x4ba/0x570 [ 579.012442][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 579.012458][ C1] ? sched_clock_cpu+0x6e/0x260 [ 579.012531][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 579.012560][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 579.012585][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 579.012611][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 579.012636][ C1] ? __irq_exit_rcu+0x147/0x230 [ 579.012676][ C1] ? irq_exit_rcu+0x20/0x20 [ 579.012693][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 579.012715][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 579.012740][ C1] trace_hardirqs_on+0x24/0x40 [ 579.012761][ C1] asm_sysvec_irq_work+0x16/0x20 [ 579.012782][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 579.012800][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 a2 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 579.012814][ C1] RSP: 0018:ffffc900001e0580 EFLAGS: 00000206 [ 579.012827][ C1] RAX: 8b3d95da0cde8a00 RBX: 1ffff9200003c0b8 RCX: 8b3d95da0cde8a00 [ 579.012840][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0 [ 579.012852][ C1] RBP: ffffc900001e0670 R08: ffffffff90b1033f R09: 1ffffffff2162067 [ 579.012864][ C1] R10: dffffc0000000000 R11: fffffbfff2162068 R12: 0000000000000246 [ 579.012876][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 579.012898][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 579.012922][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 579.012938][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 579.012966][ C1] __rcu_read_unlock+0x78/0xd0 [ 579.012984][ C1] is_bpf_text_address+0x27a/0x2a0 [ 579.013000][ C1] ? is_bpf_text_address+0x22/0x2a0 [ 579.013022][ C1] kernel_text_address+0x9c/0xd0 [ 579.013103][ C1] __kernel_text_address+0x9/0x30 [ 579.013125][ C1] unwind_get_return_address+0x49/0x80 [ 579.013146][ C1] ? stack_trace_save+0xf0/0xf0 [ 579.013187][ C1] arch_stack_walk+0xf2/0x140 [ 579.013219][ C1] stack_trace_save+0xa6/0xf0 [ 579.013239][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 579.013261][ C1] ? mark_lock+0x94/0x320 [ 579.013286][ C1] kasan_set_track+0x4b/0x70 [ 579.013308][ C1] ? kasan_set_track+0x4b/0x70 [ 579.013329][ C1] ? kasan_save_free_info+0x27/0x40 [ 579.013344][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 579.013366][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 579.013386][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 579.013402][ C1] ? delayed_put_pid+0xba/0x130 [ 579.013421][ C1] ? rcu_core+0x9a3/0x1740 [ 579.013437][ C1] ? handle_softirqs+0x291/0x910 [ 579.013451][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 579.013465][ C1] ? irq_exit_rcu+0x5/0x20 [ 579.013478][ C1] ? sysvec_apic_timer_interrupt+0xa0/0xc0 [ 579.013496][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 579.013518][ C1] ? rcu_is_watching+0x36/0xa0 [ 579.013542][ C1] ? lock_release+0xcf/0x920 [ 579.013563][ C1] ? filename_create+0x2a9/0x450 [ 579.013607][ C1] ? do_mkdirat+0xa5/0x440 [ 579.013623][ C1] ? __x64_sys_mkdirat+0x85/0x90 [ 579.013639][ C1] ? do_syscall_64+0x4c/0xa0 [ 579.013662][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 579.013700][ C1] ? percpu_ref_put+0x12/0x100 [ 579.013720][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 579.013737][ C1] kasan_save_free_info+0x27/0x40 [ 579.013752][ C1] ____kasan_slab_free+0x126/0x1f0 [ 579.013777][ C1] slab_free_freelist_hook+0x133/0x1b0 [ 579.013800][ C1] ? free_pid+0x260/0x260 [ 579.013818][ C1] ? delayed_put_pid+0xba/0x130 [ 579.013837][ C1] kmem_cache_free+0xf7/0x2a0 [ 579.013858][ C1] delayed_put_pid+0xba/0x130 [ 579.013879][ C1] rcu_core+0x9a3/0x1740 [ 579.013901][ C1] ? rcu_core+0x931/0x1740 [ 579.013921][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 579.013938][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 579.013964][ C1] ? lock_chain_count+0x20/0x20 [ 579.013988][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 579.014019][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 579.014041][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 579.014071][ C1] handle_softirqs+0x291/0x910 [ 579.014089][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 579.014107][ C1] ? do_softirq+0x210/0x210 [ 579.014121][ C1] ? hrtimer_interrupt+0x775/0x980 [ 579.014142][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 579.014160][ C1] __irq_exit_rcu+0x13b/0x230 [ 579.014175][ C1] ? irq_exit_rcu+0x20/0x20 [ 579.014196][ C1] irq_exit_rcu+0x5/0x20 [ 579.014210][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 579.014227][ C1] [ 579.014232][ C1] [ 579.014237][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 579.014259][ C1] RIP: 0010:rcu_is_watching+0x36/0xa0 [ 579.014284][ C1] Code: e8 6f 04 c4 08 89 c3 83 f8 08 73 60 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 80 f9 65 8c 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 40 32 67 00 48 c7 c3 08 58 03 00 49 03 1e 48 89 [ 579.014298][ C1] RSP: 0018:ffffc90005e8fc20 EFLAGS: 00000246 [ 579.014310][ C1] RAX: 1ffffffff18cbf31 RBX: 0000000000000001 RCX: 8b3d95da0cde8a00 [ 579.014322][ C1] RDX: 0000000000000000 RSI: ffffffff8adf5dc0 RDI: ffffffff8adf5d80 [ 579.014333][ C1] RBP: ffffc90005e8fd50 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 579.014346][ C1] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: dffffc0000000001 [ 579.014358][ C1] R13: dffffc0000000000 R14: ffffffff8c65f988 R15: dffffc0000000000 [ 579.014381][ C1] lock_release+0xcf/0x920 [ 579.014405][ C1] ? dput+0x37/0x1d0 [ 579.014431][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 579.014453][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 579.014471][ C1] ? dput+0x37/0x1d0 [ 579.014494][ C1] ? dput+0x37/0x1d0 [ 579.014520][ C1] filename_create+0x2a9/0x450 [ 579.014541][ C1] ? kern_path_create+0x50/0x50 [ 579.014563][ C1] do_mkdirat+0xa5/0x440 [ 579.014615][ C1] ? vfs_mkdir+0x570/0x570 [ 579.014637][ C1] __x64_sys_mkdirat+0x85/0x90 [ 579.014656][ C1] do_syscall_64+0x4c/0xa0 [ 579.014678][ C1] ? clear_bhb_loop+0x60/0xb0 [ 579.014699][ C1] ? clear_bhb_loop+0x60/0xb0 [ 579.014722][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 579.014742][ C1] RIP: 0033:0x7fb23779e0d9 [ 579.014757][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.014770][ C1] RSP: 002b:00007fb238759028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 579.014786][ C1] RAX: ffffffffffffffda RBX: 00007fb237a25fa0 RCX: 00007fb23779e0d9 [ 579.014797][ C1] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 579.014809][ C1] RBP: 00007fb237835024 R08: 0000000000000000 R09: 0000000000000000 [ 579.014818][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.014828][ C1] R13: 00007fb237a26038 R14: 00007fb237a25fa0 R15: 00007ffe30cf6868 [ 579.014848][ C1] [ 582.381827][T10957] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)