last executing test programs: 8.348866806s ago: executing program 1 (id=2184): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0xca00, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000000680)="b9ff03076804268c989e14f088a847e089061416e0885a0400000000000081009fa788a8", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000500)={r1, &(0x7f00000001c0)="3d3bd85ec5b5cc8bff490cfc3faa58c98add096a7d7a23eaf21b", &(0x7f0000000380)=""/241}, 0x20) 8.287730409s ago: executing program 4 (id=2185): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x7fff, 0x0, 0x6, 0x10000, r0, 0x3, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x50) socket$kcm(0x29, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x5, 0x7}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x3}, {0xc, 0x2}, {0xa, 0x1}, {0x7, 0x4}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x13, 0x0, 0x56, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000000340)=""/16, 0x67, 0x10, 0x0, 0xfffffffe, 0x10000}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x1, 0x0, 0x1, 0x4, 0x18, 0x8}, @generic={0x0, 0x8, 0x1, 0x8, 0x10}, @alu={0x0, 0x1, 0x0, 0x4, 0x8, 0x0, 0x3}], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000003c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000400)=[{0x0, 0x4, 0x4, 0x9}, {0x0, 0x5, 0xa, 0x1}, {0x2, 0x3, 0x2, 0x5}, {0x4, 0x1, 0x10, 0x1}, {0x1, 0x2, 0x6, 0xc}], 0x10, 0x2}, 0x94) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) recvmsg$unix(r5, &(0x7f0000001900)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000600)=""/160, 0xa0}, {&(0x7f00000006c0)=""/161, 0xa1}, {&(0x7f0000000780)=""/31, 0x1f}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/149, 0x95}], 0x5}, 0x40002101) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001940)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000001980)={'veth1_to_batadv\x00', 0x428d37358f28ba8}) write$cgroup_type(r5, &(0x7f00000019c0), 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001cc0)={r5, 0xe0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001a00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000001a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a80)=[0x0], 0x0, 0x5e, &(0x7f0000001ac0)=[{}], 0x8, 0x10, &(0x7f0000001b00), &(0x7f0000001b40), 0x8, 0xba, 0x8, 0x8, &(0x7f0000001b80)}}, 0x10) openat$cgroup(r6, &(0x7f0000001d00)='syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0xf, 0x0, 0x8184, 0x7fff, 0x0, r2, 0x5, '\x00', r8, r5, 0x0, 0x1, 0x3}, 0x50) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000001dc0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001e00)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000001e40), 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000002000)={r2, &(0x7f0000001e80)="5cd4b7ee3b1ccf8132ef61eb5278c6575b52431517c7bd5c1b620c2660b02ac3d4b70801bf1fd50e91055a3e5288569ac864dc85761c11a457971598822f104337b1c881d7d33fe4d64321ac82aeef1ef0035425db9d5b4f46d828498c149780f955355ad8fc1a39b969578b9c8cb74b3e57f616eceaa538f660a73123c214d644e3537ba77d48aff992", &(0x7f0000001f40)=""/161, 0x4}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002140)={@ifindex=r8, 0x1f, 0x0, 0x77, &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000002080)=[0x0], &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002100)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002180)={@fallback, r5, 0x0, 0x21, r4, @void, @void, @void, @value=r7, r9}, 0x20) r10 = openat$cgroup_subtree(r4, &(0x7f00000021c0), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000002200)={[{0x2d, 'rlimit'}, {0x2d, 'io'}, {0x2b, 'rdma'}, {0x2b, 'rdma'}, {0x2d, 'hugetlb'}, {0x2b, 'io'}, {0x2b, 'net_cls'}, {0x2d, 'rdma'}, {0x2b, 'net_prio'}, {0x2b, 'pids'}]}, 0x44) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002280)) socketpair(0x1, 0xa, 0x6, &(0x7f00000022c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002300)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002580)={&(0x7f0000002340)="be1b791e06e9fa4c80bda0a2f5f1965a55cd88c7c43a4757404c52dc639fa1a538c131725864b3f872f927268bc5dd353056c4b2effafc2ef099f3eebb18ba11544652f1cdcbe9051b321acb4ae0e52725410df68c3c558ae2b434e47495843701b49005cdb09676ac2e64b4ac81b280bd4c335e2ca62c297b377c48c14c6f46b7cd8bdcd2ef2d288b165955b1bee9f06f04716310b16f084bf17fb87416e4e95759e5f6da5eb7fab1f799bcd82937a6e6c9debb67ad4cdc47c029e32d8df100594ec6edd08301eb3a319cd2c2ef70cf05", &(0x7f0000002440)=""/10, &(0x7f0000002480)="0cd870ca068adac8eeefd38d16dcfd3c66f175577976e9db5b438f9dfee52251ffca58b6392edbd95bb569db6105ce7dfa", &(0x7f00000024c0)="842a94321923477213e66bc57fc29ccf44f98d062edd85decbfe7603c92f148b36b3a6c04e28e6b14f625cb8d9d41054766c64ee27c245ee44ab44305607edb42da8246f46aee0fd9d2f24c200f105d753c1ab88164be755e43b6f8fd0315ffce4dd07a864d890eb4c59fa525e7b1fef463b5ffa380b78dba261fe89e9bcca60537e8e61dd700906559906d47c6d7ff786c658c65e77001e356a0bc271ec126e6f54496bacaff98b70d7db2e", 0x3ff, r2}, 0x38) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002600)=@generic={&(0x7f00000025c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$ITER_CREATE(0x21, &(0x7f0000002640)={r5}, 0x8) 8.123707597s ago: executing program 4 (id=2186): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'vlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x505, 0x1}, 0x50) 7.864103319s ago: executing program 4 (id=2187): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000}, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu&\t\t') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000003280)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d02000000000000001800000000000000840000000700000062"], 0x38}, 0x41) r4 = openat$cgroup_int(r2, &(0x7f0000000100)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000080), 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400eeffb7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000050000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$kcm(0x29, 0x5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x2d}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r6}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x2a, &(0x7f0000000100)=r8, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000b, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080, 0x0, 0x1c0c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 7.683797868s ago: executing program 0 (id=2188): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_clone(0x2020200, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b04, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000640)='ns/user\x00') sendmsg$unix(r3, &(0x7f0000000700)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000540)="5d0a8e594cf7f9ed1d9446626e68c540c6385651f7f03f0eff08f8e4dbcbcf4ac9f37a5932367802a879dd6137df8b58c9df26b871370e77df216582200577a4d3524e737f7ec55c5185214c977d5947", 0x50}], 0x1, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r4, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r0, r2, r1, r0, r1, r0, r6]}}], 0x50, 0x4051}, 0x40010) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e00000010008188040f80ec59acbc041389810039000000060fe30c000000000e0027008f000000028002922d1f7e15b9e325c0daf74980a524d52c31b8ea24f1785151bdc7a448d979a9932b1798f812faa0db9c0383d409f22aca1f1fb50323d61f64", 0x64}], 0x1}, 0x40) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000080)='\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x98c2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x402200, 0x0, 0x0, 0x0, 0x0, 0x0) 7.483839297s ago: executing program 2 (id=2189): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ccd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x29, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xfffffffe}, {0x10000002}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0xa, &(0x7f0000000080)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) 5.196639185s ago: executing program 1 (id=2190): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 5.068708871s ago: executing program 2 (id=2191): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000880)=[0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000940), &(0x7f00000009c0), 0x8, 0x75, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@ifindex=r0, 0x1f, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000600)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000300), 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r5}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYRES16=r6], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', r7, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r9}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r9}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x9, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.047934832s ago: executing program 0 (id=2192): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900004100000028"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x3000000}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x68}}, 0xffffffffffffffff, 0x3e, 0xb1, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000300000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b774fffc96575caf31e199b645ae4a7a8179ddb7000000000080e20de6000000000095000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000020000000000000300"/28], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) close(0xffffffffffffffff) 5.046594282s ago: executing program 3 (id=2193): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x20000}, 0x80, 0x0}, 0x48814) 4.87596003s ago: executing program 4 (id=2194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) 4.826317122s ago: executing program 0 (id=2195): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x4}]}, @ptr={0x7, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x2e, 0x61, 0x2e, 0x0, 0x0, 0x0]}}, &(0x7f0000000140)=""/218, 0x41, 0xda}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000700)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x0]}}, &(0x7f00000002c0)=""/103, 0x28, 0x67, 0x1, 0x13c}, 0x28) 4.794077714s ago: executing program 4 (id=2196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000100), 0x120) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000000180)) (async) ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000001200)) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x5e0}, 0x50) (async) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = socket$kcm(0x2, 0x3, 0x2) (rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200"}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={0x1, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001c00)={0x400, 0x0}, 0x8) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="abeee31e7bbf88fcfa0e6eeda374c58f4aac921dfed3dcc4b2bc9d3020e996fc7d7c99071502b8c69f07d28ce2a7de0831e23ba7566dba13d842b1323c8d4cfa16a34dd9b2e785baa42d309374a46282bdbed5cada9bc7a2344909bd62f40bd2b28ed9832caab974a32c4eafa9baa71a57208097379899769ab00bb8c938bf0ad73360261c8f0c23901df7b71b99ee35260ae5f508077c0a05c6dc4a563076ba8a7f790411efa2629ae5f0d35192c8af1d02bf98db3bc3bb0767b09f0e4d3252d724b7f6960caae90cb4cc7c3218c74ac71a4437952e492757e0ceb9"], &(0x7f0000001c80)='GPL\x00', 0x94, 0xcf, &(0x7f0000001cc0)=""/207, 0x41100, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001dc0)={0x4, 0x0, 0x401, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001e00)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000001e40)=[{0x5, 0x3, 0x7, 0x3}, {0x2, 0x5, 0x2, 0x9}, {0x2, 0x3, 0x5, 0xc}, {0x1, 0x3, 0x9, 0xa}]}, 0x94) (async) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000001f40), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x0, 0x2, 0x3, 0x6, 0x9, 0xfffffffffffffff0, 0x8}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41100, 0x36, '\x00', 0x0, @fallback=0x1b, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001bc0)={0x5, 0x0, 0x610, 0x9}, 0x10, r8, r9, 0x8, &(0x7f0000001f80)=[r0, r10, r0], &(0x7f0000001fc0)=[{0x0, 0x2, 0x8}, {0x1, 0x2, 0x8, 0x3}, {0x3, 0x2, 0xc, 0x9}, {0x2, 0x4, 0x1}, {0x0, 0x3, 0xb, 0x8}, {0x0, 0x3, 0x4, 0x5}, {0x0, 0x5, 0xa, 0x2}, {0x4, 0x4, 0x10, 0x4}], 0x10, 0xfffffff5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xe, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x6}, @jmp={0x5, 0x1, 0xa, 0xb, 0x7, 0x10, 0xffffffffffffffe9}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}]}, &(0x7f0000000140)='GPL\x00', 0xec, 0x7c, &(0x7f0000000600)=""/124, 0x40f00, 0x8, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000a80)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x5, 0xd, 0x91c0, 0xb87e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) 4.687920399s ago: executing program 0 (id=2197): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) close(r1) close(r0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000080000000200000005050000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000005d3e3324592a9b4be0a40dccecb04252bf1528939747a031d152964b783d41ef124786d36f87dd24efbbc7330c188d40cd9f47eaa0bf7ed9fbff8a7e9851a0e19ca0f00aa5702c1fd0848080d9becadbba40b4d04a257651ed4e5dc0ed130a7c89107b9f55541926d95460a4a04bc8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0) 4.684901779s ago: executing program 2 (id=2198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8932, &(0x7f0000000080)) close(0x3) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) socketpair(0xa, 0x2, 0x7, &(0x7f0000000380)) r4 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f00000000c0)=0x10000000000, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x4fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.682204959s ago: executing program 3 (id=2199): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c00a, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90324fc600d00030009000100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x4}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd8, 0xd8, 0x4, [@fwd={0x6}, @union={0xa, 0x6, 0x0, 0x5, 0x0, 0xfffffff8, [{0x10, 0x1, 0x2}, {0x6, 0x4, 0x10000}, {0x7, 0x1, 0x71}, {0x8, 0x4, 0xffff}, {0x6, 0x1, 0x6}, {0xa, 0x2, 0x2}]}, @struct={0x2, 0x3, 0x0, 0x4, 0x0, 0x2, [{0x2, 0x3, 0x1}, {0x6, 0x0, 0x6}, {0xa, 0x1, 0x10}]}, @volatile={0xf, 0x0, 0x0, 0x9, 0x5}, @union={0x10, 0x2, 0x0, 0x5, 0x0, 0x2, [{0x4, 0x1, 0x2a3}, {0xe, 0x5, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4, 0x4a}}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000ac0)=""/209, 0xf4, 0xd1, 0x1, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7fffffff}, @jmp={0x5, 0x0, 0x0, 0x1, 0xa, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, r5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}]}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x51, &(0x7f0000000580)=""/81, 0x40f00, 0x40, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000c00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000c40)={0x1, 0xc, 0x101, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r1, r2, r2, r2, r2, r1, r0], 0x0, 0x10, 0x7}, 0x94) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x4, 0xa}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r8, &(0x7f0000000700)="11bb4a7e1c1387ab6cc29b3d6b4e6ef10e0f984acb0d0f84edac6f3ea7c7b9433a943b716750aa9502d76a1dc4b6b9d3029cf022c612f39c49bf8df10215e9ae63c9a0a283f7a556535e22131c8102e98b94cd5d36aa69a2311fb949c468074fd03f322b9f66977dac"}, 0x20) sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.468541109s ago: executing program 0 (id=2200): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff200000400000000000000000000003000000000200000002", @ANYRES32=0x0, @ANYRES8], 0x0, 0x56}, 0x28) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1009}, {&(0x7f00000019c0)=""/221, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000a80)=""/209, 0xd1}], 0x8}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) socketpair(0x1, 0x2, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000540)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) 4.213457811s ago: executing program 3 (id=2201): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ccd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x29, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0xfffffffe}, {0x10000002}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x88, 0xa, &(0x7f0000000080)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) 4.083853778s ago: executing program 2 (id=2202): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x8}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000700)=r2}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d80000003100b904021d080005000400e8fe55a1180015000600142603600e120900210000090401a80016000a00014006000000036010faa000cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbac3c7f4b497148599f9ce8017cbec4c2ee5a7cef4090000001fb791643a95e4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93450000000000000000", 0xd8}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) close(r2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003540)={0xffff, 0x0}, 0x8) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000980), 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003500)={&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000180)="ac24d045af9748cf6499928d3397289888b248db26aceddc986e3db65b9a3f8023fb4f4f7d8e00ae5b103ed0ceb3e6b0e4e36c991f84618df487e09cc8f2e97f7894caf46faa25151cdb557acff3befb01987e32877380573916f3b91a3901ce8941a9c6cfb0c239a8d6923e77b1737f3700db05e58312aed6cd7ce176ea675d6aef577cdf0cb73a0fcd9722c920feeecb1759e165e2342d8d64dcb5e7846eacd3329faef46865a393dcb273ab8b7bd436ba9fef23c7915e765b34a9dd381252a9d9a4cb", 0xc4}, {0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000380)}], 0x5, &(0x7f0000001440)=[{0x800, 0x108, 0x8, "2091ff94ccc450d454976ad9cd7df4478bd24b4637c9e9ae46c411578b52c4f384e899e1e9d7125b3e0780306eac54610d5562296cd0826924bd192297e789053b3e09d59d01ea9a0edf4017dc58a2a23dcee93850c9610e2d4030af7d4c3beb94e5b4f5ae7a7735c7be0d3cbab23f3b321b83d6f74b00e36ed065fae27410eff950323ffcb5116764a6179d3c1105768a79e87307902c0d61c553663e82e8f97358440074d3399acafa2b945eb76edafa2672cc2286f826e1cdf504134248ccb50bcc67082dad7717f7900efaf75d0e932d5d192628c79c36a67d64e673d7d4af87289d7d113f2206c2d385e0dc610c2b5feb787744ac650b7de679e9d1bb46394940840b4eaae557265a6f8f77016e3c3283fcafc70be9f8cb77ab7ecb18f84fe3d4aedfc45001b50da644025fae72af75a0d4127a01ac4bfaa6c80b45e03daa4db99d0af71277e6910bd1416eb89d76cf5c73153385b35001fcd928b74b56692278be9a1e745d2d9a4c0adfa7dbb4da50b86e2bb33eaec23930b8f89c8d0d2ada301a416db6a3c38f99c3433ee87f470bb48b54048479f607023840034aeedcb01bdb0799dcf552aae634b1d29aeda2b1cbafaa12782e8808c612bb3f08247b9cf03067293ee0066d0496e2628da4969065ee9cbc1da7033a5f6b59d192b32f75d777e9ffe0afb6899256733c1b24c587076a1352b775b9ba0f0462432448d8a6820135c0d0d554f1c734622f386c8d2d60ce30f548cbfa4c68472e19eb4822da03890c6d406d09619ba4a074be6ef66c454b94b6d537a12a4e4d24d1044fd002af2774dc9db879d4dedd999964f04da07bf86f59c10ac8fe3ddaac5b95d82e756429386608da4bbadaca561dffd628b469b08784ccba213ef2d75da39a609d7431a2463e0e7db543699e644dfe9b638d049cebc3d7da60ddb231aacc4323be51e1528c3e9f9259361ede91e3a587bdc5e96ca568a80935825a6480ecbe2fd256a6792921473fec954480c4fa7b3a40fe73e87b680cacb16c67e70af25186f5c9cf62a4ae23814d1ad89c7d5e471c2d18e9de07150d41750aefd1d95c368f7c09887b3e4dec8170e54f6dbbd01e1e6f4b72a4872ee6b1a349f6da77aafcee775a9569fbde6d60c38b5b623e8c277f767ff329b2d309761487c6821777496ef51f09c25dd4d9dcfa75b02f2986de2fafbc7b276c2141a935604dc7ae55e09d398e258646193f1831236dcd51aecad10bb17213f0434f00a5c36659956f164eb9fc624875d88582c8c883f4370c164ad63e49441c47ea5a775b0c75e4448ba8e91c2a0e94fd3bbe6b6caff39f636abaf21bc5f68612f2f09356104796dc390faa3583838a19c6d6a4818d390b5ca1997f8bc5d22d68d00a781d4d3d1d5108a5157019b556310bd03c4a2faa25f2729992aa54236628271a885053189fc74c24cd49f4f178e30b5fec5b3ea1a37449d84048b8328db67b748936f70badc4f59abb607bdacdc60fec1ea7dfd83d044f937edc4931251885709a22f6b434d14057f54df7dd299383c000a6dd39be339b0ef5fc891d14144a9296097912724dceb7d631beb1e73cf6959bfd94b0f7e7c16ecb9a5c567c8fe53a65996a9ce63df7ecab0e3b7f8131b15961406707ce54dd0cbbff47f7ff4a0f27ac1716a8c63b5ce74c8565bd20baff642f5639a50e4834d84964159967550804bca8465c4f343c98305744fd5d8eec3eaa6e20676495b261c313e60b0857d4e8159659ebdda6bc3e0eb12d0b103ce6864de2bcb28a1bec6b32190d04792e0c6caeee7bda77691630eb73fde16206bb8150a72fe4fb454e09e9b6b6995a21ed41e246c0be8d62a31c2ee7c2e254d4f5680aceb7bb0528ff35992f49f642da73c058858feacb8f8b455c4e3eeddf499ad38b72be74127bee6d70de2cfef336d4f8caf077b695f5c318177e77c76b0195ba77e67734e3916c3e0248d545dfcded99de91d80c5af3d639c860035734e9efa8c5c0fca8280ebc6d6c9f38ee528ba8c5e027c27f7e17c2d22bc5c1a4ccd827099c5d463f2fa46b0ba4c8add1de616335c47c1de7fbeee66e666eeb5cb3a76e39272a75980a1906474aa36b3541ad8e910211c8b5d67be36c5e265c5be38dd99cb1998a91f7f4f0927d57f54a53fa975ee15a57a0f716c4d5885d27a202b5ec77d95de21b3de124094bb06a83f355f64fd761efc5c03454f83f6d3a41b220f791c37080cb1a2ffc22a7f4b9f04a24df6d85580cd40c0ece14a6b2e49f284eabaf0a8830b5dd3d281defb172a51607632224de8a5e3b5e9fbbb764d0a5e2fe96c05409911b2adfce0460cfb0047de6761ff16ef124f9d92b279e7d23a30ceeba0b41be6a1611aa86551512922970ba598acbbc74307a6965b2bb637c6181d54ca86bbe6181b31a25b8ceb5e2d6b9166abe131570b88dfd5c413d6279940dd5f7ff32582c14cfbc5cb108c2c467eb99e2d3d391c75bd50106b2568622ec66f206f0d26918960ab3879e6ba51e5ba6f3b486b3c74151cc54db3d18e2141605525ec6b41a0066e82cee0d3a9df78ff80ab9a92020b9324f7a79556090adc711df94a1bef7c8545b7396180c2678429887080c271d5b5d71d76e0ad3d5ffc92d31aa2d50410a97f0f979012eb4b75ecd34bb599e8662a71ef36e1490ec92d5acd188b4ca53c286a4896889716dfe2ac6cf40780714c71f7ecdfbfdeb23b105d9734f80eea82af74df80fc557e774657e7fae1391d0a835a59cefe2a454ff72730a8ee5fc8a3086ac68d7d690e7626f9755ce1799e375f77676333d36467c4dd74fd1e2a48b4a544af93c5f8a12a85862fb6ed6900b658708a6f525120b1af951db42a893cf3af069"}, {0xfc8, 0x10a, 0x80000001, "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"}], 0x17c8}, 0x44050) ioctl$SIOCSIFHWADDR(r9, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000580)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0x58, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x22, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x437, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80000000}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='GPL\x00', 0xfff, 0x6a, &(0x7f0000000b40)=""/106, 0x41100, 0xc, '\x00', r12, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000d80)={0x1, 0x8}, 0x10, r10, 0x0, 0x0, &(0x7f0000000dc0)=[r4, r4, r5, r5, r4, r5], 0x0, 0x10, 0x8}, 0x94) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018008114e00212ba0d8105040a020200030f100b067c55a1bc000900b8000699040000000500160002038178a80015000400014002000e0901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 3.935661784s ago: executing program 1 (id=2203): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x48, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 3.742505174s ago: executing program 3 (id=2204): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$kcm(0xa, 0x1, 0x106) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x68020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x2}, 0x206, 0x2000000003, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x8f3, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x1006, 0x7f, 0x0, 0x1, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x8000000, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888864", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5350a0e2ad0fd2e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="76389e6a65585578f830e900000058c54feb682e25d3", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.639968458s ago: executing program 1 (id=2205): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="4c55aa62c497c61f63c18d1038c45b95953839175198dc14a11fe06893eb5551e619c82b76e516a31d63b9987f9256b06bf7cb86189dbff67b980a", @ANYRESOCT=r0, @ANYRES64=r0, @ANYRES64], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000014c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00)=r2, 0x4) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x47}, 0x80, 0x0}, 0x814) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.482888706s ago: executing program 2 (id=2206): socket$kcm(0xa, 0x3, 0x3a) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd358}, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9655, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x200}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xc40e, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xa74cb56}, 0x1, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_clone(0xb00b000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x3a) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r6 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x47, 0x0, 0x3c, 0x0, 0x0, 0x1, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000003, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x9, 0xfffffffc, 0x3, 0x9, 0x6, 0x200, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x5, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x105}, 0x108cd3, 0xa4, 0x2, 0x1, 0x800, 0x9b9b, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r8, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000280), 0x0}, 0x1f) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x7, 0x10, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r10) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r5, 0x0, 0x4040000) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x6, 0x8, 0x2, 0x80, 0x0, 0x3, 0x0, 0xb, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7e7, 0x1, @perf_bp={&(0x7f0000000300), 0x1}, 0x1, 0x5, 0x10, 0x3, 0x71, 0x7, 0x0, 0x0, 0x3ff, 0x0, 0x4}, r4, 0x2, r6, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e1205002100", 0x2c}], 0x1}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0xfe33) write$cgroup_pressure(r5, &(0x7f00000002c0)={'some', 0x20, 0x1, 0x20, 0x80}, 0x2f) 459.604259ms ago: executing program 0 (id=2207): r0 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x40000300, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xe}, 0x4040, 0x3, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, r0, 0xb) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x8001, 0x18}, 0xc) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pK \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', r4, 0x4000, r5}, 0x18) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x50) (async, rerun: 64) r8 = socket$kcm(0x2, 0x5, 0x84) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x11, &(0x7f0000000000)=r10, 0x8) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x8aa, 0x1, 0x463, 0x20, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0x0, 0x7}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5}, 0x50) (async, rerun: 64) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x18}, 0x18) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000900)='\x00') r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00'}, 0x18) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1d, 0x0, 0xf, 0x1ff, 0x10, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0xc5, 0x0, r12, 0x4, '\x00', 0x0, r10, 0x0, 0x3, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f00000009c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_val={0x18, 0xd, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000140)='GPL\x00', 0x4, 0x41, &(0x7f0000000180)=""/65, 0x41100, 0x0, '\x00', r6, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5c, 0x128b1, r2, 0x7, &(0x7f00000006c0)=[r7, r10, r11, r12, r17, r13, r14, r15, r16], &(0x7f0000000700)=[{0x4, 0x2, 0xe, 0x8}, {0x2, 0x2, 0x0, 0x9}, {0x5, 0x4, 0x7, 0xa}, {0x3, 0x1, 0xd, 0x8}, {0x4, 0x1, 0xc, 0x3}, {0x0, 0x4, 0x10, 0x7}, {0x1, 0x2, 0xe, 0x6}], 0x10, 0xfffffff8}, 0x94) 426.93186ms ago: executing program 4 (id=2208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x20}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x7, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e6026, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x8001}, 0x1422, 0x1100, 0x0, 0x5, 0x7, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181400, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0xc0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext={0x3}, 0x5685, 0x4000000000, 0xffff, 0x1, 0x3, 0x3, 0x9, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2f, &(0x7f0000000080), 0x4) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x43, 0xa225}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, r3, 0x8) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_type(r4, 0x0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x88, 0xa, &(0x7f0000000000)=r4, 0x4) openat$cgroup(0xffffffffffffffff, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) 328.806035ms ago: executing program 3 (id=2209): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r2, &(0x7f0000000580)={&(0x7f0000000300)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x20000}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000180)="ffa8", 0x2}], 0x1}, 0x48814) 211.28648ms ago: executing program 1 (id=2210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000021c0)={r0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ba00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x505, 0x1}, 0x50) 99.151065ms ago: executing program 2 (id=2211): r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071180a000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001c40)={0xffffffffffffffff, 0x4, 0x8}, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair(0x2, 0x3, 0x1, &(0x7f0000000180)) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000017b4fff07b77a56c34470000007bfe2dcc4ab4b7ffc43b672cbac7e22aa1114ad6ba1445591d7dd46d73ddc9270fdc3d564fa97c8814aa32e31a5f5c1bf973ec0dcef8a3e3cc25b7b61e48f5d35c8b32718ed79533ec23bb7aaf29d67f2f19b0496f973d8f9df13de5fca88c5d88b6671571e777a1f7cac6187f47c47ee541b6b191e8ade00000000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001280)={r1, 0x58, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1e00000002000000ff0300000500000000000000", @ANYRES32=r2, @ANYBLOB="7f0000ec2ec92c3426fa1d0577eb81a44e7287876898d0f2ba4368c5484887cb425501bd678f59fc27e3ac8ff47c4bb99ec646123eb1536329d0c34cc15cfe13fbc4601bc20f5712c837c00a431a4f313f67fa4034bce874c3aacf032e5f3e6ee68a9fe1979d545639a3e033150ade0345b11559ee2f75dddffabbc872b9377777eca42e2e26385b5b56d85d1d274b89dc89f99e022544fa4b006c59b6b1e2bb4c995e67ddc344083d6830754890d4e7f66a97b1608ee8bf4c7383e2e0c3f1f3b00dc5dbe5ce5d6d13", @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0000000002000000050000000500"/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802c69f23325f9803"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002bb132c74ab20b1561f89c210b99b6d99e062903abfd92350305153a6dfcbb2b9ca5adef003c75008e70e89812887d988a0d9ad38ef027c57cceca101a101a4be43abf146867f6ac9b629e44d8ae1b017786f5f94dbfb1dfc85238a7ae81fbb0fdcee51fc4ac3f391f769cbfeb12a780dc8389baa87c270f050aa0fc36847c49be0cc7244f11bfb8707e4b08a10830075ce7c52e3946402ac11ccd31b7e348ab4e6a9a7d3ebd38692851", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r5 = socket$kcm(0x29, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000140)={r6}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000008000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000004639580000000000000000000000000000000000c6cf9f8d1dff6aea2c60966f75573804ee39a245ef3b68d05432e4db71b7b08cb4dff69f094f925d1902d17097ebcf45262dd74af3bba8acdc891d13db54209c4270f6277bb0273e4420f0e724cd745600"/122], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 45.209328ms ago: executing program 3 (id=2212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) r1 = perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x48, 0x6, 0x0, 0x1, 0x0, 0xbd8, 0x200, 0xe, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x2000, 0x2, 0x9, 0x6, 0xfffffffffffffff9, 0x19, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x9}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0x8080a, 0x80000000, &(0x7f0000000140)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x22, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0xc, &(0x7f0000000300)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x7, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0x1, 0x5, 0xf, 0xb}, {0x5, 0x3, 0x7, 0x6}], 0x10, 0x800}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001600)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x5, [@struct={0x2, 0x7, 0x0, 0x4, 0x0, 0x6, [{0x1, 0x1, 0x1}, {0x2, 0x0, 0x2}, {0x2, 0x0, 0x3}, {0xb, 0x5, 0x80000000}, {0xd, 0x4, 0x18e}, {0x5, 0x1, 0x9}, {0x4, 0x3, 0x4}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x7}}]}, {0x0, [0x2e, 0x5f, 0x30]}}, &(0x7f0000000600)=""/4096, 0x95, 0x1000, 0x0, 0x1000, 0x10000, @value=r0}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=@bloom_filter={0x1e, 0x401, 0x2, 0x6, 0x20180, 0xffffffffffffffff, 0xa, '\x00', r3, r4, 0x1, 0x3, 0x5, 0x1}, 0x50) r6 = syz_clone(0x8000000, &(0x7f00000016c0)="dcc3f7c99efb7bae951f6ca2f6ebaa4910a6", 0x12, &(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)="4c38e99878c5b4917b2898f19f29de8fb2a65eb74e199d591f552bb7f61d4b2687426619e83a7e2a3bbc187a3a8002b17429adc2fe1e8cafd0b26fadf29317e0e4e928cf7a47e7f6ec221948d4407cae1f9559caea79fd33035a20816c6a192059bed4f70d4c1e78c944db31bf4b21038d350863d3918d97a53116e8136009721baf17de4126b90f939cad6ba99630ba73be01f63a55a48e584ffc8376e4bc8ef011fa4ed7a45abe6ddb12041618b12977458e19af") r7 = syz_open_procfs$namespace(r6, &(0x7f0000001840)='ns/ipc\x00') gettid() r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001880)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f00000018c0)='devices.allow\x00', 0x2, 0x0) socketpair(0x2, 0x1, 0x9, &(0x7f0000001900)={0xffffffffffffffff}) openat$cgroup_type(r8, &(0x7f0000001940), 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x10, 0x6, &(0x7f0000001980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, [@generic={0x62, 0x6, 0x2, 0x6, 0x87}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000019c0)='GPL\x00', 0x1000000, 0x0, 0x0, 0x41000, 0x11, '\x00', r3, @fallback=0x30, r4, 0x8, &(0x7f0000001a00)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001a40)={0x1, 0x9, 0xffff, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000001a80)=[r5, r5, r5, r8, r5, r5, r5, r5, r5, r5], &(0x7f0000001ac0)=[{0x1, 0x1, 0xe, 0x5}, {0x2, 0x3, 0xc, 0xa}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002d00)={r10, 0x0, 0x35, 0x7, &(0x7f0000001bc0)="d3e779cf97d9798fb39a01c100bf396c4f780f19722f2ef08e7a5c497ccaba41d232eef3725cf313fe07a41a5c629e203fab28d77f", &(0x7f0000001c00)=""/7, 0x1618, 0x0, 0xa6, 0x1000, &(0x7f0000001c40)="bf6d315269b64ed5d5db01ed76ef5a78473576ce72901b92d26906e163c4825974997cba2d2247d89c8ccbe565be8205e8bf776a0d7b84a214117a95185f35ea10c94a99d4b1723daae3dfc3b1a72156000b32458e76546f75425cade6f9ced3baeab6e802b507705a9a77cd4448502db7ca3a178bc62950ab89ec135ca9f9001a9dd757a7038f952ca63b80e5b325c13855a24da6bef36a19e343764941f1a9d6241aec0836", &(0x7f0000001d00)="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", 0x1, 0x0, 0x400}, 0x50) r11 = openat$cgroup_ro(r8, &(0x7f0000003080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003140)={{r5, 0xffffffffffffffff}, &(0x7f00000030c0), &(0x7f0000003100)=r10}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003200)={0x6, 0x39, &(0x7f0000002d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @exit, @call={0x85, 0x0, 0x0, 0x27}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xe6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002f80)='GPL\x00', 0x0, 0x40, &(0x7f0000002fc0)=""/64, 0x41000, 0x46, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000003000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000003040)={0x0, 0x9, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003180)=[r5, r5, r11, r5, r12], &(0x7f00000031c0)=[{0x3, 0x2, 0xf, 0x6}], 0x10, 0x6666}, 0x94) ioctl$TUNDETACHFILTER(r11, 0x401054d6, 0x0) openat$cgroup_type(r8, &(0x7f00000032c0), 0x2, 0x0) ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) ioctl$TUNSETNOCSUM(r11, 0x400454c8, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000003300)={'bond_slave_0\x00'}) openat$cgroup_ro(r8, &(0x7f0000003340)='blkio.bfq.sectors\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000033c0)=@generic={&(0x7f0000003380)='./file0\x00'}, 0x18) 0s ago: executing program 1 (id=2213): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf6103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0xfffff800, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, r7, 0x1) r8 = gettid() r9 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x900000000000000) r10 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x14}, 0x0, 0x0, 0xc2ba, 0x6, 0x4000000}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001100)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xe}, 0x10000) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab5", @ANYRES32, @ANYRES8=r11], 0xfe33) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff}) close(r12) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f00000000c0)={r12}) r13 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=[@cred={{0x1c, 0x1, 0x2, {r13, 0xee00, 0xee01}}}], 0x20, 0x4c0d5}, 0x10) kernel console output (not intermixed with test programs): idge0: port 3(batadv0) entered disabled state [ 121.759976][ T5079] device batadv0 entered promiscuous mode [ 121.770588][ T5079] bridge0: port 3(batadv0) entered blocking state [ 121.777533][ T5079] bridge0: port 3(batadv0) entered forwarding state [ 122.159482][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 122.171591][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 122.663542][ T5092] device batadv0 left promiscuous mode [ 122.682541][ T5092] bridge0: port 3(batadv0) entered disabled state [ 122.769328][ T5092] device bridge_slave_1 left promiscuous mode [ 122.792995][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.829993][ T5092] device bridge_slave_0 left promiscuous mode [ 122.848390][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.863432][ T5098] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.213'. [ 124.240914][ T5132] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 124.302409][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.331256][ T5134] FAULT_INJECTION: forcing a failure. [ 124.331256][ T5134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.430118][ T5134] CPU: 0 PID: 5134 Comm: syz.2.224 Not tainted syzkaller #0 [ 124.437933][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.448284][ T5134] Call Trace: [ 124.451693][ T5134] [ 124.454656][ T5134] dump_stack_lvl+0x188/0x24e [ 124.459742][ T5134] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 124.465936][ T5134] ? show_regs_print_info+0x12/0x12 [ 124.471176][ T5134] ? load_image+0x410/0x410 [ 124.475943][ T5134] should_fail_ex+0x390/0x4c0 [ 124.481179][ T5134] _copy_from_user+0x2c/0x170 [ 124.485882][ T5134] sctp_setsockopt+0x19a/0xf90 [ 124.490778][ T5134] ? sock_common_recvmsg+0x190/0x190 [ 124.496201][ T5134] __sys_setsockopt+0x2bf/0x3d0 [ 124.501366][ T5134] __x64_sys_setsockopt+0xb1/0xc0 [ 124.506907][ T5134] do_syscall_64+0x4c/0xa0 [ 124.511642][ T5134] ? clear_bhb_loop+0x60/0xb0 [ 124.516726][ T5134] ? clear_bhb_loop+0x60/0xb0 [ 124.522150][ T5134] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.529232][ T5134] RIP: 0033:0x7fbaeeb9e159 [ 124.534528][ T5134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.556996][ T5134] RSP: 002b:00007fbaefaf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.567619][ T5134] RAX: ffffffffffffffda RBX: 00007fbaeee25fa0 RCX: 00007fbaeeb9e159 [ 124.576929][ T5134] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000008 [ 124.585810][ T5134] RBP: 00007fbaefaf3090 R08: 0000000000000008 R09: 0000000000000000 [ 124.594699][ T5134] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.603487][ T5134] R13: 00007fbaeee26038 R14: 00007fbaeee25fa0 R15: 00007ffe95eef678 [ 124.611592][ T5134] [ 124.630586][ T5132] device bridge_slave_1 left promiscuous mode [ 124.644553][ T5140] netlink: 'syz.1.225': attribute type 3 has an invalid length. [ 124.649067][ T5132] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.720959][ T5140] netlink: 132 bytes leftover after parsing attributes in process `syz.1.225'. [ 124.857456][ T5145] netlink: 'syz.1.225': attribute type 3 has an invalid length. [ 124.988735][ T5145] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.225'. [ 125.072636][ T5143] netlink: 48 bytes leftover after parsing attributes in process `syz.4.227'. [ 125.450486][ T5155] device syzkaller0 entered promiscuous mode [ 127.781503][ T5180] netlink: 'syz.1.236': attribute type 13 has an invalid length. [ 127.790901][ T5180] netlink: 'syz.1.236': attribute type 14 has an invalid length. [ 127.799103][ T5180] netlink: 156 bytes leftover after parsing attributes in process `syz.1.236'. [ 127.867118][ T5180] delete_channel: no stack [ 128.312153][ T5212] netlink: 'syz.1.246': attribute type 10 has an invalid length. [ 128.851721][ T5222] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.249'. [ 128.967194][ T5224] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'. [ 129.123000][ T5224] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'. [ 129.253356][ T5228] netlink: 60 bytes leftover after parsing attributes in process `syz.2.250'. [ 129.290365][ T5224] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.250'. [ 129.896429][ T5242] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.254'. [ 130.419443][ T5242] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 130.449437][ T5242] syzkaller1: group set to 778 [ 130.473880][ T5251] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 130.777796][ T5268] raw_sendmsg: syz.3.262 forgot to set AF_INET. Fix it! [ 130.812835][ T5269] netlink: 'syz.0.261': attribute type 29 has an invalid length. [ 130.936235][ T5269] netlink: 'syz.0.261': attribute type 29 has an invalid length. [ 131.219178][ T5271] device syzkaller0 entered promiscuous mode [ 131.305455][ T5275] netlink: 'syz.0.261': attribute type 29 has an invalid length. [ 131.399570][ T5282] netlink: 'syz.0.261': attribute type 29 has an invalid length. [ 131.552904][ T5269] netlink: 'syz.0.261': attribute type 1 has an invalid length. [ 131.606943][ T5269] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.261'. [ 132.986610][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.993235][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.141182][ T5295] tun0: tun_chr_ioctl cmd 1074025675 [ 134.147346][ T5295] tun0: persist enabled [ 135.189090][ T5344] netlink: 'syz.0.285': attribute type 23 has an invalid length. [ 135.426005][ T5349] netlink: 'syz.2.287': attribute type 29 has an invalid length. [ 135.477418][ T5349] netlink: 'syz.2.287': attribute type 29 has an invalid length. [ 135.570991][ T5352] netlink: 'syz.2.287': attribute type 29 has an invalid length. [ 136.040017][ T5366] FAULT_INJECTION: forcing a failure. [ 136.040017][ T5366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.064047][ T5366] CPU: 0 PID: 5366 Comm: syz.1.294 Not tainted syzkaller #0 [ 136.071680][ T5366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.082370][ T5366] Call Trace: [ 136.085856][ T5366] [ 136.088892][ T5366] dump_stack_lvl+0x188/0x24e [ 136.093705][ T5366] ? show_regs_print_info+0x12/0x12 [ 136.098954][ T5366] ? load_image+0x410/0x410 [ 136.103506][ T5366] ? __lock_acquire+0x7c40/0x7c40 [ 136.108759][ T5366] ? snprintf+0xe5/0x140 [ 136.113208][ T5366] should_fail_ex+0x390/0x4c0 [ 136.118129][ T5366] _copy_to_user+0x2c/0x130 [ 136.122669][ T5366] simple_read_from_buffer+0xe3/0x150 [ 136.128235][ T5366] proc_fail_nth_read+0x1a6/0x220 [ 136.133493][ T5366] ? proc_fault_inject_write+0x310/0x310 [ 136.139676][ T5366] ? fsnotify_perm+0x248/0x550 [ 136.144952][ T5366] ? proc_fault_inject_write+0x310/0x310 [ 136.151065][ T5366] vfs_read+0x2db/0x960 [ 136.156138][ T5366] ? kernel_read+0x1e0/0x1e0 [ 136.161557][ T5366] ? __fget_files+0x28/0x460 [ 136.166600][ T5366] ? __fget_files+0x3fc/0x460 [ 136.171727][ T5366] ? __fdget_pos+0x2ae/0x360 [ 136.176437][ T5366] ? ksys_read+0x70/0x260 [ 136.180945][ T5366] ksys_read+0x14d/0x260 [ 136.185723][ T5366] ? vfs_write+0x9a0/0x9a0 [ 136.190170][ T5366] ? lockdep_hardirqs_on+0x94/0x140 [ 136.195565][ T5366] do_syscall_64+0x4c/0xa0 [ 136.200335][ T5366] ? clear_bhb_loop+0x60/0xb0 [ 136.205213][ T5366] ? clear_bhb_loop+0x60/0xb0 [ 136.210000][ T5366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.216277][ T5366] RIP: 0033:0x7fdaca35e98e [ 136.220990][ T5366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 136.241319][ T5366] RSP: 002b:00007fdacb195fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.249972][ T5366] RAX: ffffffffffffffda RBX: 00007fdacb1966c0 RCX: 00007fdaca35e98e [ 136.258317][ T5366] RDX: 000000000000000f RSI: 00007fdacb1960a0 RDI: 0000000000000005 [ 136.266602][ T5366] RBP: 00007fdacb196090 R08: 0000000000000000 R09: 0000000000000000 [ 136.274665][ T5366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.283930][ T5366] R13: 00007fdaca626038 R14: 00007fdaca625fa0 R15: 00007ffd3e4aff58 [ 136.292282][ T5366] [ 136.905115][ T5373] netlink: 'syz.0.297': attribute type 13 has an invalid length. [ 137.006208][ T5373] netlink: 152 bytes leftover after parsing attributes in process `syz.0.297'. [ 137.102688][ T5373] erspan0: refused to change device tx_queue_len [ 137.144474][ T5373] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 137.166231][ T5379] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.299'. [ 138.456549][ T5419] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.308'. [ 139.911259][ T5448] netlink: 60 bytes leftover after parsing attributes in process `syz.0.318'. [ 140.006563][ T5453] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.319'. [ 140.027354][ T5448] netlink: 60 bytes leftover after parsing attributes in process `syz.0.318'. [ 140.076229][ T5453] netlink: zone id is out of range [ 140.156621][ T5454] netlink: 60 bytes leftover after parsing attributes in process `syz.0.318'. [ 140.175265][ T5453] netlink: zone id is out of range [ 140.181031][ T5453] netlink: zone id is out of range [ 140.215186][ T5453] netlink: del zone limit has 4 unknown bytes [ 140.227915][ T5448] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.318'. [ 141.236467][ T5471] netlink: 156 bytes leftover after parsing attributes in process `syz.2.325'. [ 141.442005][ T5480] netlink: 'syz.1.327': attribute type 29 has an invalid length. [ 141.471369][ T5480] netlink: 'syz.1.327': attribute type 29 has an invalid length. [ 141.489455][ T5480] netlink: 'syz.1.327': attribute type 29 has an invalid length. [ 141.523044][ T5480] netlink: 'syz.1.327': attribute type 3 has an invalid length. [ 141.564365][ T5480] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.327'. [ 141.570584][ T5481] netlink: 'syz.1.327': attribute type 29 has an invalid length. [ 141.819441][ T5490] netlink: 'syz.2.329': attribute type 13 has an invalid length. [ 141.904409][ T5490] erspan0: refused to change device tx_queue_len [ 141.956391][ T5490] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 142.442354][ T5506] __nla_validate_parse: 1 callbacks suppressed [ 142.442372][ T5506] netlink: 10 bytes leftover after parsing attributes in process `syz.1.336'. [ 142.704627][ T5513] netlink: 227 bytes leftover after parsing attributes in process `syz.2.339'. [ 142.792942][ T4287] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 143.612661][ T5528] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.347'. [ 143.695504][ T5528] netlink: zone id is out of range [ 143.724753][ T5528] netlink: zone id is out of range [ 143.737413][ T5536] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.349'. [ 143.759372][ T5541] netlink: 'syz.1.348': attribute type 13 has an invalid length. [ 143.777140][ T5528] netlink: zone id is out of range [ 143.789327][ T5541] netlink: 152 bytes leftover after parsing attributes in process `syz.1.348'. [ 143.805629][ T5528] netlink: zone id is out of range [ 143.826994][ T5528] netlink: zone id is out of range [ 143.853331][ T5528] netlink: zone id is out of range [ 143.879490][ T5528] netlink: zone id is out of range [ 143.908603][ T5528] netlink: get zone limit has 8 unknown bytes [ 144.655152][ T5541] erspan0: refused to change device tx_queue_len [ 144.672362][ T5541] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 144.710048][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.720555][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.534496][ T5547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.542177][ T5547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.368386][ T5568] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.357'. [ 147.765788][ T5580] netlink: 'syz.1.359': attribute type 29 has an invalid length. [ 147.818714][ T5580] netlink: 'syz.1.359': attribute type 29 has an invalid length. [ 147.921583][ T5587] netlink: 'syz.1.359': attribute type 29 has an invalid length. [ 148.092736][ T5589] netlink: 'syz.0.363': attribute type 25 has an invalid length. [ 148.134232][ T5589] netlink: 'syz.0.363': attribute type 9 has an invalid length. [ 148.170840][ T5589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.363'. [ 148.226601][ T5580] netlink: 'syz.1.359': attribute type 29 has an invalid length. [ 148.368267][ T5580] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 148.434080][ T5597] tun0: tun_chr_ioctl cmd 1074025675 [ 148.439728][ T5597] tun0: persist enabled [ 148.491757][ T5580] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.359'. [ 148.920764][ T5604] netlink: 'syz.4.366': attribute type 2 has an invalid length. [ 148.952937][ T5604] netlink: 199708 bytes leftover after parsing attributes in process `syz.4.366'. [ 149.199491][ T5607] netlink: 'syz.3.367': attribute type 3 has an invalid length. [ 149.227967][ T5607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.367'. [ 152.178398][ T5633] netlink: 'syz.4.373': attribute type 21 has an invalid length. [ 152.189543][ T5633] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.373'. [ 152.205615][ T5637] ¥: port 1(team0) entered blocking state [ 152.219272][ T5637] ¥: port 1(team0) entered disabled state [ 152.265848][ T5637] device team0 entered promiscuous mode [ 152.271508][ T5637] device team_slave_0 entered promiscuous mode [ 152.322488][ T5637] device team_slave_1 entered promiscuous mode [ 152.329949][ T5637] device geneve1 entered promiscuous mode [ 152.345952][ T5638] device team0 left promiscuous mode [ 152.351383][ T5638] device team_slave_0 left promiscuous mode [ 152.361176][ T5638] device team_slave_1 left promiscuous mode [ 152.367730][ T5638] device geneve1 left promiscuous mode [ 152.379819][ T5638] ¥: port 1(team0) entered disabled state [ 152.400412][ T5645] syz.4.377[5645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.400562][ T5645] syz.4.377[5645] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.000372][ T5654] validate_nla: 1 callbacks suppressed [ 153.000411][ T5654] netlink: 'syz.4.379': attribute type 25 has an invalid length. [ 153.144697][ T5654] netlink: 'syz.4.379': attribute type 9 has an invalid length. [ 153.153191][ T5654] netlink: 40 bytes leftover after parsing attributes in process `syz.4.379'. [ 153.320014][ T5665] netlink: 132 bytes leftover after parsing attributes in process `syz.1.384'. [ 153.374786][ T5665] netlink: 132 bytes leftover after parsing attributes in process `syz.1.384'. [ 154.190518][ T5681] sock: sock_set_timeout: `syz.3.390' (pid 5681) tries to set negative timeout [ 154.685141][ T5693] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.395'. [ 155.530066][ T5709] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.401'. [ 160.557851][ T5775] delete_channel: no stack [ 160.986497][ T5778] device syzkaller0 entered promiscuous mode [ 164.833147][ T5833] netlink: 'syz.3.441': attribute type 2 has an invalid length. [ 167.717448][ T5831] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.725875][ T5831] netlink: 1 bytes leftover after parsing attributes in process `syz.0.440'. [ 168.122456][ T5865] netlink: 'syz.2.449': attribute type 4 has an invalid length. [ 168.164042][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 168.286459][ T5865] netlink: 'syz.2.449': attribute type 10 has an invalid length. [ 169.649171][ T5894] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.458'. [ 170.009705][ T5901] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.460'. [ 170.088325][ T5906] FAULT_INJECTION: forcing a failure. [ 170.088325][ T5906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.170100][ T5906] CPU: 1 PID: 5906 Comm: syz.4.463 Not tainted syzkaller #0 [ 170.177646][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.187990][ T5906] Call Trace: [ 170.191559][ T5906] [ 170.194597][ T5906] dump_stack_lvl+0x188/0x24e [ 170.199510][ T5906] ? show_regs_print_info+0x12/0x12 [ 170.204742][ T5906] ? load_image+0x410/0x410 [ 170.209269][ T5906] ? __lock_acquire+0x7c40/0x7c40 [ 170.214323][ T5906] should_fail_ex+0x390/0x4c0 [ 170.219244][ T5906] _copy_from_user+0x2c/0x170 [ 170.223942][ T5906] __sys_bpf+0x2ea/0x780 [ 170.228390][ T5906] ? bpf_link_show_fdinfo+0x380/0x380 [ 170.234056][ T5906] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 170.240424][ T5906] __x64_sys_bpf+0x78/0x90 [ 170.244876][ T5906] do_syscall_64+0x4c/0xa0 [ 170.249426][ T5906] ? clear_bhb_loop+0x60/0xb0 [ 170.254299][ T5906] ? clear_bhb_loop+0x60/0xb0 [ 170.259000][ T5906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.265001][ T5906] RIP: 0033:0x7f580ab9e159 [ 170.269623][ T5906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.289346][ T5906] RSP: 002b:00007f5808df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.297877][ T5906] RAX: ffffffffffffffda RBX: 00007f580ae25fa0 RCX: 00007f580ab9e159 [ 170.306224][ T5906] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 170.314319][ T5906] RBP: 00007f5808df6090 R08: 0000000000000000 R09: 0000000000000000 [ 170.322501][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.331058][ T5906] R13: 00007f580ae26038 R14: 00007f580ae25fa0 R15: 00007ffc8a8ad258 [ 170.339434][ T5906] [ 171.355418][ T5912] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 173.571230][ T5930] netlink: 'syz.0.471': attribute type 21 has an invalid length. [ 173.626656][ T5930] netlink: 128 bytes leftover after parsing attributes in process `syz.0.471'. [ 173.721736][ T5930] netlink: 'syz.0.471': attribute type 4 has an invalid length. [ 174.593723][ T5951] FAULT_INJECTION: forcing a failure. [ 174.593723][ T5951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.638388][ T5951] CPU: 0 PID: 5951 Comm: syz.2.477 Not tainted syzkaller #0 [ 174.646457][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 174.659602][ T5951] Call Trace: [ 174.663708][ T5951] [ 174.666745][ T5951] dump_stack_lvl+0x188/0x24e [ 174.671467][ T5951] ? show_regs_print_info+0x12/0x12 [ 174.676804][ T5951] ? load_image+0x410/0x410 [ 174.681513][ T5951] ? __lock_acquire+0x7c40/0x7c40 [ 174.686637][ T5951] ? snprintf+0xe5/0x140 [ 174.691440][ T5951] should_fail_ex+0x390/0x4c0 [ 174.696339][ T5951] _copy_to_user+0x2c/0x130 [ 174.701072][ T5951] simple_read_from_buffer+0xe3/0x150 [ 174.706650][ T5951] proc_fail_nth_read+0x1a6/0x220 [ 174.712244][ T5951] ? proc_fault_inject_write+0x310/0x310 [ 174.718800][ T5951] ? fsnotify_perm+0x248/0x550 [ 174.723952][ T5951] ? proc_fault_inject_write+0x310/0x310 [ 174.729895][ T5951] vfs_read+0x2db/0x960 [ 174.734363][ T5951] ? kernel_read+0x1e0/0x1e0 [ 174.739777][ T5951] ? __fget_files+0x28/0x460 [ 174.744505][ T5951] ? __fget_files+0x3fc/0x460 [ 174.749806][ T5951] ? __fdget_pos+0x2ae/0x360 [ 174.754588][ T5951] ? ksys_read+0x70/0x260 [ 174.759578][ T5951] ksys_read+0x14d/0x260 [ 174.763860][ T5951] ? vfs_write+0x9a0/0x9a0 [ 174.768676][ T5951] ? lockdep_hardirqs_on+0x94/0x140 [ 174.774130][ T5951] do_syscall_64+0x4c/0xa0 [ 174.778907][ T5951] ? clear_bhb_loop+0x60/0xb0 [ 174.783796][ T5951] ? clear_bhb_loop+0x60/0xb0 [ 174.788700][ T5951] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.794888][ T5951] RIP: 0033:0x7fbaeeb5e98e [ 174.800038][ T5951] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.821416][ T5951] RSP: 002b:00007fbaefad1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.831680][ T5951] RAX: ffffffffffffffda RBX: 00007fbaefad26c0 RCX: 00007fbaeeb5e98e [ 174.839943][ T5951] RDX: 000000000000000f RSI: 00007fbaefad20a0 RDI: 0000000000000006 [ 174.848136][ T5951] RBP: 00007fbaefad2090 R08: 0000000000000000 R09: 0000000000000000 [ 174.857029][ T5951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.865267][ T5951] R13: 00007fbaeee26128 R14: 00007fbaeee26090 R15: 00007ffe95eef678 [ 174.873486][ T5951] [ 175.078805][ T5955] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.480'. [ 175.094366][ T5956] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.480'. [ 175.590855][ T5969] FAULT_INJECTION: forcing a failure. [ 175.590855][ T5969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.611574][ T5969] CPU: 0 PID: 5969 Comm: syz.4.483 Not tainted syzkaller #0 [ 175.619360][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 175.630228][ T5969] Call Trace: [ 175.633528][ T5969] [ 175.636475][ T5969] dump_stack_lvl+0x188/0x24e [ 175.641202][ T5969] ? show_regs_print_info+0x12/0x12 [ 175.646781][ T5969] ? load_image+0x410/0x410 [ 175.651491][ T5969] ? __lock_acquire+0x7c40/0x7c40 [ 175.656837][ T5969] should_fail_ex+0x390/0x4c0 [ 175.661827][ T5969] _copy_from_user+0x2c/0x170 [ 175.666660][ T5969] __sys_bpf+0x2ea/0x780 [ 175.671040][ T5969] ? bpf_link_show_fdinfo+0x380/0x380 [ 175.677158][ T5969] ? lock_chain_count+0x20/0x20 [ 175.682419][ T5969] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 175.688622][ T5969] __x64_sys_bpf+0x78/0x90 [ 175.693084][ T5969] do_syscall_64+0x4c/0xa0 [ 175.697566][ T5969] ? clear_bhb_loop+0x60/0xb0 [ 175.702756][ T5969] ? clear_bhb_loop+0x60/0xb0 [ 175.707584][ T5969] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.713588][ T5969] RIP: 0033:0x7f580ab9e159 [ 175.718304][ T5969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.738131][ T5969] RSP: 002b:00007f5808df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.746924][ T5969] RAX: ffffffffffffffda RBX: 00007f580ae25fa0 RCX: 00007f580ab9e159 [ 175.755181][ T5969] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 175.763266][ T5969] RBP: 00007f5808df6090 R08: 0000000000000000 R09: 0000000000000000 [ 175.771528][ T5969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.779897][ T5969] R13: 00007f580ae26038 R14: 00007f580ae25fa0 R15: 00007ffc8a8ad258 [ 175.788286][ T5969] [ 176.279288][ T5978] netlink: 'syz.0.486': attribute type 4 has an invalid length. [ 176.399863][ T5978] netlink: 168 bytes leftover after parsing attributes in process `syz.0.486'. [ 176.493534][ T5988] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.490'. [ 176.541420][ T5988] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 177.563128][ T6025] FAULT_INJECTION: forcing a failure. [ 177.563128][ T6025] name failslab, interval 1, probability 0, space 0, times 0 [ 177.678541][ T6025] CPU: 0 PID: 6025 Comm: syz.2.501 Not tainted syzkaller #0 [ 177.686077][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.696247][ T6025] Call Trace: [ 177.699560][ T6025] [ 177.702602][ T6025] dump_stack_lvl+0x188/0x24e [ 177.707594][ T6025] ? show_regs_print_info+0x12/0x12 [ 177.713142][ T6025] ? load_image+0x410/0x410 [ 177.718019][ T6025] ? __lock_acquire+0x7c40/0x7c40 [ 177.723091][ T6025] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 177.729202][ T6025] should_fail_ex+0x390/0x4c0 [ 177.733924][ T6025] should_failslab+0x5/0x20 [ 177.738668][ T6025] slab_pre_alloc_hook+0x59/0x300 [ 177.743823][ T6025] ? lockdep_hardirqs_on+0x94/0x140 [ 177.749151][ T6025] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 177.754741][ T6025] __kmem_cache_alloc_node+0x4f/0x270 [ 177.760514][ T6025] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 177.766377][ T6025] __kmalloc+0xa3/0x240 [ 177.770888][ T6025] bpf_prog_test_run_skb+0x23e/0x18e0 [ 177.776313][ T6025] ? __fget_files+0x28/0x460 [ 177.780943][ T6025] ? __fget_files+0x3fc/0x460 [ 177.785939][ T6025] ? cpu_online+0xa0/0xa0 [ 177.790488][ T6025] bpf_prog_test_run+0x31c/0x390 [ 177.795625][ T6025] __sys_bpf+0x62b/0x780 [ 177.799895][ T6025] ? bpf_link_show_fdinfo+0x380/0x380 [ 177.805504][ T6025] ? lock_chain_count+0x20/0x20 [ 177.811746][ T6025] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 177.818905][ T6025] __x64_sys_bpf+0x78/0x90 [ 177.823500][ T6025] do_syscall_64+0x4c/0xa0 [ 177.828308][ T6025] ? clear_bhb_loop+0x60/0xb0 [ 177.833017][ T6025] ? clear_bhb_loop+0x60/0xb0 [ 177.837710][ T6025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.843705][ T6025] RIP: 0033:0x7fbaeeb9e159 [ 177.848736][ T6025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.869758][ T6025] RSP: 002b:00007fbaefaf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 177.878372][ T6025] RAX: ffffffffffffffda RBX: 00007fbaeee25fa0 RCX: 00007fbaeeb9e159 [ 177.886459][ T6025] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 177.895197][ T6025] RBP: 00007fbaefaf3090 R08: 0000000000000000 R09: 0000000000000000 [ 177.903480][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.911656][ T6025] R13: 00007fbaeee26038 R14: 00007fbaeee25fa0 R15: 00007ffe95eef678 [ 177.919881][ T6025] [ 178.577434][ T6044] netlink: 'syz.3.502': attribute type 10 has an invalid length. [ 178.618008][ T6044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.502'. [ 178.667146][ T6044] batman_adv: batadv0: Adding interface: virt_wifi0 [ 178.722960][ T6044] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.857564][ T6044] batman_adv: batadv0: Interface activated: virt_wifi0 [ 179.432209][ T6071] netlink: 128 bytes leftover after parsing attributes in process `syz.1.512'. [ 179.485672][ T6071] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 179.488046][ T6079] netlink: 'syz.3.513': attribute type 29 has an invalid length. [ 179.550842][ T6071] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.596519][ T6078] netlink: 'syz.2.515': attribute type 39 has an invalid length. [ 179.625664][ T6078] device macvlan0 entered promiscuous mode [ 179.666184][ T6079] netlink: 'syz.3.513': attribute type 29 has an invalid length. [ 179.989340][ T6095] FAULT_INJECTION: forcing a failure. [ 179.989340][ T6095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.008114][ T6095] CPU: 1 PID: 6095 Comm: syz.2.518 Not tainted syzkaller #0 [ 180.015732][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 180.026167][ T6095] Call Trace: [ 180.029613][ T6095] [ 180.033981][ T6095] dump_stack_lvl+0x188/0x24e [ 180.038908][ T6095] ? show_regs_print_info+0x12/0x12 [ 180.044310][ T6095] ? load_image+0x410/0x410 [ 180.048942][ T6095] ? __lock_acquire+0x7c40/0x7c40 [ 180.054427][ T6095] should_fail_ex+0x390/0x4c0 [ 180.059440][ T6095] _copy_from_user+0x2c/0x170 [ 180.065302][ T6095] bpf_prog_test_run_skb+0x263/0x18e0 [ 180.070868][ T6095] ? __fget_files+0x28/0x460 [ 180.075587][ T6095] ? __fget_files+0x3fc/0x460 [ 180.080404][ T6095] ? cpu_online+0xa0/0xa0 [ 180.084840][ T6095] bpf_prog_test_run+0x31c/0x390 [ 180.090953][ T6095] __sys_bpf+0x62b/0x780 [ 180.096310][ T6095] ? bpf_link_show_fdinfo+0x380/0x380 [ 180.101900][ T6095] ? lock_chain_count+0x20/0x20 [ 180.106801][ T6095] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 180.113183][ T6095] __x64_sys_bpf+0x78/0x90 [ 180.117611][ T6095] do_syscall_64+0x4c/0xa0 [ 180.122130][ T6095] ? clear_bhb_loop+0x60/0xb0 [ 180.127225][ T6095] ? clear_bhb_loop+0x60/0xb0 [ 180.132354][ T6095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 180.138445][ T6095] RIP: 0033:0x7fbaeeb9e159 [ 180.143643][ T6095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.166053][ T6095] RSP: 002b:00007fbaefaf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 180.177453][ T6095] RAX: ffffffffffffffda RBX: 00007fbaeee25fa0 RCX: 00007fbaeeb9e159 [ 180.185816][ T6095] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 180.194710][ T6095] RBP: 00007fbaefaf3090 R08: 0000000000000000 R09: 0000000000000000 [ 180.205076][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.214132][ T6095] R13: 00007fbaeee26038 R14: 00007fbaeee25fa0 R15: 00007ffe95eef678 [ 180.222225][ T6095] [ 180.400471][ T6094] netlink: 50255 bytes leftover after parsing attributes in process `syz.3.520'. [ 180.787443][ T6105] netlink: 152 bytes leftover after parsing attributes in process `syz.2.523'. [ 180.859806][ T6105] bond0: (slave bond_slave_0): Releasing backup interface [ 180.951803][ T6105] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 181.025098][ T6110] netlink: 132 bytes leftover after parsing attributes in process `syz.1.524'. [ 181.680087][ T6132] netlink: 'syz.1.531': attribute type 10 has an invalid length. [ 181.696306][ T6132] device netdevsim0 entered promiscuous mode [ 181.715263][ T6131] netlink: 'syz.3.529': attribute type 16 has an invalid length. [ 181.736598][ T6131] netlink: 156 bytes leftover after parsing attributes in process `syz.3.529'. [ 183.574506][ T6165] netlink: 'syz.2.538': attribute type 6 has an invalid length. [ 183.779825][ T6166] netlink: 152 bytes leftover after parsing attributes in process `syz.1.541'. [ 183.866263][ T6166] bond0: (slave bond_slave_0): Releasing backup interface [ 183.931033][ T6166] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 184.037857][ T6171] netlink: 'syz.0.542': attribute type 13 has an invalid length. [ 184.064298][ T6171] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.542'. [ 184.678254][ T6179] netlink: 'syz.1.546': attribute type 21 has an invalid length. [ 184.696949][ T6179] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 185.508263][ T6199] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.551'. [ 186.619630][ T6214] netlink: 'syz.0.555': attribute type 5 has an invalid length. [ 187.990927][ T6225] netlink: 56 bytes leftover after parsing attributes in process `syz.0.560'. [ 188.578659][ T6242] device syzkaller0 entered promiscuous mode [ 191.031526][ T6273] netlink: 'syz.2.570': attribute type 5 has an invalid length. [ 191.075932][ T6278] netlink: 'syz.4.572': attribute type 2 has an invalid length. [ 191.093592][ T6278] netlink: 'syz.4.572': attribute type 1 has an invalid length. [ 191.122633][ T6278] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.572'. [ 191.260532][ T6284] netlink: 'syz.3.574': attribute type 13 has an invalid length. [ 191.279763][ T6284] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.574'. [ 191.707174][ T6294] netlink: 'syz.0.578': attribute type 21 has an invalid length. [ 194.188669][ T6336] netlink: 'syz.3.588': attribute type 5 has an invalid length. [ 194.431804][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.438215][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.486891][ T6380] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.600'. [ 195.714715][ T6380] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.600'. [ 195.756932][ T6381] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.600'. [ 195.834522][ T6382] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.600'. [ 196.381975][ T6395] netlink: 'syz.3.606': attribute type 27 has an invalid length. [ 196.499381][ T6397] netlink: 'syz.1.607': attribute type 2 has an invalid length. [ 196.545979][ T6398] netlink: 14 bytes leftover after parsing attributes in process `syz.1.607'. [ 197.123471][ T6397] netlink: 'syz.1.607': attribute type 1 has an invalid length. [ 197.552080][ T6425] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.611'. [ 197.721664][ T6418] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 197.836214][ T6425] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 197.877623][ T6425] CPU: 0 PID: 6425 Comm: syz.3.611 Not tainted syzkaller #0 [ 197.885310][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.895490][ T6425] Call Trace: [ 197.898890][ T6425] [ 197.901853][ T6425] dump_stack_lvl+0x188/0x24e [ 197.906683][ T6425] ? show_regs_print_info+0x12/0x12 [ 197.912165][ T6425] ? load_image+0x410/0x410 [ 197.916828][ T6425] sysfs_warn_dup+0x8a/0xa0 [ 197.921681][ T6425] sysfs_do_create_link_sd+0xc0/0x110 [ 197.927164][ T6425] device_add+0x83b/0x1050 [ 197.931856][ T6425] wiphy_register+0x1d8b/0x2aa0 [ 197.936958][ T6425] ? cfg80211_event_work+0x40/0x40 [ 197.942411][ T6425] ? minstrel_ht_alloc+0x894/0xa20 [ 197.947820][ T6425] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 197.954090][ T6425] ieee80211_register_hw+0x2d48/0x39f0 [ 197.959704][ T6425] ? ieee80211_register_hw+0xee1/0x39f0 [ 197.965305][ T6425] ? ieee80211_register_hw+0xee1/0x39f0 [ 197.970971][ T6425] ? ieee80211_tasklet_handler+0x20/0x20 [ 197.976881][ T6425] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 197.983141][ T6425] ? __debug_object_init+0xed/0x440 [ 197.988359][ T6425] ? memset+0x1e/0x40 [ 197.992723][ T6425] ? __hrtimer_init+0x189/0x270 [ 197.998011][ T6425] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 198.004474][ T6425] ? memcpy+0x3c/0x60 [ 198.008944][ T6425] hwsim_new_radio_nl+0xab7/0xc90 [ 198.014299][ T6425] genl_family_rcv_msg_doit+0x22f/0x350 [ 198.020436][ T6425] ? end_current_label_crit_section+0x170/0x170 [ 198.026962][ T6425] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 198.032875][ T6425] ? bpf_lsm_capable+0x5/0x10 [ 198.038008][ T6425] ? security_capable+0x85/0xb0 [ 198.042981][ T6425] genl_rcv_msg+0x601/0x790 [ 198.047590][ T6425] ? genl_bind+0x360/0x360 [ 198.052014][ T6425] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 198.058363][ T6425] netlink_rcv_skb+0x1ef/0x440 [ 198.063352][ T6425] ? genl_bind+0x360/0x360 [ 198.067801][ T6425] ? netlink_ack+0x1160/0x1160 [ 198.072749][ T6425] ? down_read+0x1a8/0x2d0 [ 198.077304][ T6425] genl_rcv+0x24/0x40 [ 198.082087][ T6425] netlink_unicast+0x7ad/0x920 [ 198.086909][ T6425] netlink_sendmsg+0x8ad/0xbd0 [ 198.091878][ T6425] ? netlink_getsockopt+0x550/0x550 [ 198.097193][ T6425] ? apparmor_socket_sendmsg+0x8a/0x330 [ 198.102753][ T6425] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 198.108052][ T6425] ? security_socket_sendmsg+0x7c/0xa0 [ 198.113727][ T6425] ? netlink_getsockopt+0x550/0x550 [ 198.119455][ T6425] ____sys_sendmsg+0x5ed/0x9a0 [ 198.124614][ T6425] ? __sys_sendmsg_sock+0x30/0x30 [ 198.129747][ T6425] ? __import_iovec+0x306/0x510 [ 198.134910][ T6425] ? import_iovec+0x6f/0xa0 [ 198.140278][ T6425] ___sys_sendmsg+0x2a2/0x360 [ 198.145077][ T6425] ? __lock_acquire+0x7c40/0x7c40 [ 198.150490][ T6425] ? __sys_sendmsg+0x2a0/0x2a0 [ 198.155784][ T6425] __se_sys_sendmsg+0x1c3/0x2b0 [ 198.162252][ T6425] ? __x64_sys_sendmsg+0x80/0x80 [ 198.167434][ T6425] ? lockdep_hardirqs_on+0x94/0x140 [ 198.172775][ T6425] do_syscall_64+0x4c/0xa0 [ 198.177384][ T6425] ? clear_bhb_loop+0x60/0xb0 [ 198.182244][ T6425] ? clear_bhb_loop+0x60/0xb0 [ 198.187232][ T6425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.193350][ T6425] RIP: 0033:0x7f57fcd9e159 [ 198.197790][ T6425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.217771][ T6425] RSP: 002b:00007f57fdb82028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.226288][ T6425] RAX: ffffffffffffffda RBX: 00007f57fd026090 RCX: 00007f57fcd9e159 [ 198.234371][ T6425] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 198.242355][ T6425] RBP: 00007f57fce3503b R08: 0000000000000000 R09: 0000000000000000 [ 198.250649][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.258681][ T6425] R13: 00007f57fd026128 R14: 00007f57fd026090 R15: 00007ffea13622f8 [ 198.266893][ T6425] [ 198.389186][ T6427] netlink: 'syz.2.613': attribute type 1 has an invalid length. [ 201.549812][ T6521] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.629'. [ 201.624077][ T4273] Bluetooth: hci3: command 0x0406 tx timeout [ 201.630379][ T4273] Bluetooth: hci0: command 0x0406 tx timeout [ 201.638024][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 201.645832][ T4282] Bluetooth: hci1: command 0x0406 tx timeout [ 201.652050][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 202.056381][ T6525] netlink: 'syz.3.628': attribute type 2 has an invalid length. [ 202.161127][ T6525] netlink: 'syz.3.628': attribute type 1 has an invalid length. [ 202.206348][ T6525] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.628'. [ 204.286429][ T6581] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.646'. [ 206.068440][ T6605] netlink: 'syz.1.652': attribute type 29 has an invalid length. [ 206.134555][ T6605] netlink: 'syz.1.652': attribute type 29 has an invalid length. [ 206.263964][ T6606] netlink: 'syz.1.652': attribute type 29 has an invalid length. [ 206.286298][ T6605] netlink: 'syz.1.652': attribute type 29 has an invalid length. [ 206.756249][ T6623] delete_channel: no stack [ 206.988124][ T6634] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.662'. [ 213.563578][ T6695] netlink: 132 bytes leftover after parsing attributes in process `syz.4.677'. [ 213.757924][ T6703] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.679'. [ 217.254836][ T6738] netlink: 128 bytes leftover after parsing attributes in process `syz.0.691'. [ 217.301759][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 217.340535][ T6738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 217.414490][ T6740] netlink: 'syz.3.693': attribute type 29 has an invalid length. [ 217.422774][ T6740] netlink: 'syz.3.693': attribute type 29 has an invalid length. [ 217.492095][ T6740] netlink: 'syz.3.693': attribute type 29 has an invalid length. [ 217.534089][ T6742] netlink: 'syz.3.693': attribute type 29 has an invalid length. [ 217.576522][ T6742] netlink: 'syz.3.693': attribute type 29 has an invalid length. [ 217.600057][ T6740] netlink: 'syz.3.693': attribute type 29 has an invalid length. [ 217.633158][ T6742] netlink: 'syz.3.693': attribute type 29 has an invalid length. [ 217.677592][ T6740] netlink: 'syz.3.693': attribute type 29 has an invalid length. [ 217.729905][ T6742] netlink: 'syz.3.693': attribute type 29 has an invalid length. [ 217.738299][ T6765] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.696'. [ 217.764284][ T6742] netlink: 'syz.3.693': attribute type 29 has an invalid length. [ 218.203614][ T6773] netlink: 152 bytes leftover after parsing attributes in process `syz.4.699'. [ 218.987454][ T6787] : port 1(ip6gretap0) entered blocking state [ 219.027648][ T6787] : port 1(ip6gretap0) entered disabled state [ 219.061904][ T6787] device ip6gretap0 entered promiscuous mode [ 219.112923][ T6794] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.704'. [ 219.128773][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.704'. [ 219.609430][ T6800] netlink: 55 bytes leftover after parsing attributes in process `syz.4.706'. [ 220.253010][ T6811] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.709'. [ 221.847464][ T6854] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.724'. [ 222.886604][ T6877] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.730'. [ 224.469095][ T6921] validate_nla: 72 callbacks suppressed [ 224.469116][ T6921] netlink: 'syz.2.742': attribute type 16 has an invalid length. [ 224.494425][ T6921] netlink: 152 bytes leftover after parsing attributes in process `syz.2.742'. [ 224.571628][ T6921] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 224.986633][ T6926] netlink: 128 bytes leftover after parsing attributes in process `syz.0.743'. [ 225.025259][ T6926] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 225.070596][ T6933] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.744'. [ 225.125120][ T6926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.660265][ T6942] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.745'. [ 225.743405][ T6943] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.745'. [ 225.833508][ T6945] wlan0: mtu less than device minimum [ 225.855903][ T6948] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.745'. [ 226.916413][ T6982] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.758'. [ 227.464501][ T6988] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.759'. [ 227.537141][ T6988] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 227.563919][ T6988] CPU: 0 PID: 6988 Comm: syz.0.759 Not tainted syzkaller #0 [ 227.571567][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.582176][ T6988] Call Trace: [ 227.585501][ T6988] [ 227.588471][ T6988] dump_stack_lvl+0x188/0x24e [ 227.593300][ T6988] ? show_regs_print_info+0x12/0x12 [ 227.598734][ T6988] ? load_image+0x410/0x410 [ 227.603384][ T6988] sysfs_warn_dup+0x8a/0xa0 [ 227.608205][ T6988] sysfs_do_create_link_sd+0xc0/0x110 [ 227.614087][ T6988] device_add+0x83b/0x1050 [ 227.619536][ T6988] wiphy_register+0x1d8b/0x2aa0 [ 227.625696][ T6988] ? cfg80211_event_work+0x40/0x40 [ 227.631547][ T6988] ? minstrel_ht_alloc+0x894/0xa20 [ 227.637444][ T6988] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 227.643743][ T6988] ieee80211_register_hw+0x2d48/0x39f0 [ 227.649849][ T6988] ? ieee80211_register_hw+0xee1/0x39f0 [ 227.655805][ T6988] ? ieee80211_register_hw+0xee1/0x39f0 [ 227.661431][ T6988] ? ieee80211_tasklet_handler+0x20/0x20 [ 227.667395][ T6988] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 227.673424][ T6988] ? __debug_object_init+0xed/0x440 [ 227.678758][ T6988] ? memset+0x1e/0x40 [ 227.683094][ T6988] ? __hrtimer_init+0x189/0x270 [ 227.687955][ T6988] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 227.693904][ T6988] hwsim_new_radio_nl+0xab7/0xc90 [ 227.699083][ T6988] genl_family_rcv_msg_doit+0x22f/0x350 [ 227.706583][ T6988] ? end_current_label_crit_section+0x170/0x170 [ 227.714182][ T6988] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 227.720230][ T6988] ? bpf_lsm_capable+0x5/0x10 [ 227.724973][ T6988] ? security_capable+0x85/0xb0 [ 227.729863][ T6988] genl_rcv_msg+0x601/0x790 [ 227.734686][ T6988] ? rcu_is_watching+0x11/0xa0 [ 227.739757][ T6988] ? genl_bind+0x360/0x360 [ 227.744274][ T6988] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 227.750629][ T6988] netlink_rcv_skb+0x1ef/0x440 [ 227.755586][ T6988] ? genl_bind+0x360/0x360 [ 227.760720][ T6988] ? netlink_ack+0x1160/0x1160 [ 227.765681][ T6988] ? down_read+0x1a8/0x2d0 [ 227.770301][ T6988] genl_rcv+0x24/0x40 [ 227.774401][ T6988] netlink_unicast+0x7ad/0x920 [ 227.779361][ T6988] netlink_sendmsg+0x8ad/0xbd0 [ 227.784492][ T6988] ? netlink_getsockopt+0x550/0x550 [ 227.789699][ T6988] ? apparmor_socket_sendmsg+0x8a/0x330 [ 227.795260][ T6988] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 227.800546][ T6988] ? security_socket_sendmsg+0x7c/0xa0 [ 227.806384][ T6988] ? netlink_getsockopt+0x550/0x550 [ 227.811742][ T6988] ____sys_sendmsg+0x5ed/0x9a0 [ 227.816629][ T6988] ? __sys_sendmsg_sock+0x30/0x30 [ 227.821845][ T6988] ? __import_iovec+0x306/0x510 [ 227.826962][ T6988] ? import_iovec+0x6f/0xa0 [ 227.831496][ T6988] ___sys_sendmsg+0x2a2/0x360 [ 227.836952][ T6988] ? __sys_sendmsg+0x2a0/0x2a0 [ 227.841855][ T6988] ? rcu_is_watching+0x11/0xa0 [ 227.846690][ T6988] __se_sys_sendmsg+0x1c3/0x2b0 [ 227.851735][ T6988] ? __x64_sys_sendmsg+0x80/0x80 [ 227.856793][ T6988] ? lockdep_hardirqs_on+0x94/0x140 [ 227.862090][ T6988] do_syscall_64+0x4c/0xa0 [ 227.866517][ T6988] ? clear_bhb_loop+0x60/0xb0 [ 227.871239][ T6988] ? clear_bhb_loop+0x60/0xb0 [ 227.876063][ T6988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.882006][ T6988] RIP: 0033:0x7f3bc8b9e159 [ 227.887605][ T6988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.908312][ T6988] RSP: 002b:00007f3bc9a28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.917243][ T6988] RAX: ffffffffffffffda RBX: 00007f3bc8e26180 RCX: 00007f3bc8b9e159 [ 227.925643][ T6988] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 227.933800][ T6988] RBP: 00007f3bc8c3503b R08: 0000000000000000 R09: 0000000000000000 [ 227.941983][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.950167][ T6988] R13: 00007f3bc8e26218 R14: 00007f3bc8e26180 R15: 00007ffc344855f8 [ 227.958375][ T6988] [ 230.175764][ T7008] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.765'. [ 230.710802][ T7027] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.771'. [ 230.849655][ T7031] netlink: 6 bytes leftover after parsing attributes in process `syz.3.772'. [ 231.235765][ T7040] netlink: 152 bytes leftover after parsing attributes in process `syz.3.776'. [ 234.449840][ T7080] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.790'. [ 237.371475][ T7080] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 237.443889][ T7080] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 237.453712][ T7080] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 237.502287][ T7091] device wlan1 entered promiscuous mode [ 237.616231][ T7097] netlink: 10 bytes leftover after parsing attributes in process `syz.0.795'. [ 239.760818][ T7140] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.808'. [ 239.875457][ T7141] netlink: 'syz.0.807': attribute type 2 has an invalid length. [ 239.914380][ T7141] netlink: 'syz.0.807': attribute type 8 has an invalid length. [ 239.930624][ T7141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.807'. [ 239.948012][ T7145] netlink: 'syz.0.807': attribute type 2 has an invalid length. [ 239.960183][ T7145] netlink: 'syz.0.807': attribute type 8 has an invalid length. [ 239.970743][ T7145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.807'. [ 242.678059][ T7152] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.809'. [ 242.804431][ T7155] : port 1(ip6gretap0) entered blocking state [ 242.834662][ T7155] : port 1(ip6gretap0) entered disabled state [ 242.851598][ T7155] device ip6gretap0 entered promiscuous mode [ 242.926427][ T7162] device ip6gretap0 left promiscuous mode [ 242.957405][ T7162] : port 1(ip6gretap0) entered disabled state [ 243.495291][ T7168] netlink: 'syz.2.816': attribute type 21 has an invalid length. [ 243.928606][ T7183] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.820'. [ 244.539374][ T7195] netlink: 'syz.3.824': attribute type 9 has an invalid length. [ 244.578910][ T7195] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.824'. [ 248.112840][ T7232] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.835'. [ 248.525619][ T7248] netlink: 'syz.0.840': attribute type 4 has an invalid length. [ 248.959737][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.844'. [ 248.987996][ T7262] netlink: 152 bytes leftover after parsing attributes in process `syz.0.844'. [ 249.036386][ T7262] netlink: 'syz.0.844': attribute type 10 has an invalid length. [ 249.073595][ T7262] netlink: 55 bytes leftover after parsing attributes in process `syz.0.844'. [ 249.759265][ T7273] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.846'. [ 251.502136][ T7273] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 251.524493][ T7273] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 251.560882][ T7273] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 251.801671][ T7286] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 251.920747][ T7296] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.852'. [ 253.326032][ T7331] delete_channel: no stack [ 254.004891][ T7330] delete_channel: no stack [ 254.262404][ T7347] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.868'. [ 254.546000][ T7350] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.866'. [ 255.157062][ T7369] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.873'. [ 255.166803][ T7369] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 255.182316][ T7369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 255.608521][ T7387] netlink: 'syz.2.878': attribute type 6 has an invalid length. [ 255.639759][ T7387] netlink: 113500 bytes leftover after parsing attributes in process `syz.2.878'. [ 255.893563][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.900448][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.473046][ T7400] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.882'. [ 257.100734][ T7417] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.888'. [ 257.536340][ T7431] netlink: 60 bytes leftover after parsing attributes in process `syz.1.892'. [ 257.545702][ T7431] netlink: 60 bytes leftover after parsing attributes in process `syz.1.892'. [ 257.555900][ T7431] netlink: 60 bytes leftover after parsing attributes in process `syz.1.892'. [ 260.684176][ T7405] delete_channel: no stack [ 261.405190][ T7464] __nla_validate_parse: 1 callbacks suppressed [ 261.405229][ T7464] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.899'. [ 262.417789][ T7476] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.904'. [ 262.476890][ T7476] netlink: 44 bytes leftover after parsing attributes in process `syz.3.904'. [ 266.007613][ T7510] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.914'. [ 266.192013][ T7507] netlink: 'syz.4.913': attribute type 27 has an invalid length. [ 266.256020][ T7507] netlink: 'syz.4.913': attribute type 4 has an invalid length. [ 266.368274][ T7507] netlink: 152 bytes leftover after parsing attributes in process `syz.4.913'. [ 266.972680][ T7538] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.918'. [ 267.076936][ T7540] netlink: 128 bytes leftover after parsing attributes in process `syz.3.919'. [ 267.098611][ T7537] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.920'. [ 267.184185][ T7540] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 267.204318][ T7537] openvswitch: netlink: Flow actions attr not present in new flow. [ 267.261737][ T7540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.539924][ T7549] netlink: 'syz.0.922': attribute type 11 has an invalid length. [ 267.568770][ T7549] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.922'. [ 267.658140][ T7548] netlink: 'syz.0.922': attribute type 3 has an invalid length. [ 267.719445][ T7548] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.922'. [ 270.290160][ T7547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.913034][ T7573] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.931'. [ 271.650497][ T7579] netlink: 'syz.1.933': attribute type 2 has an invalid length. [ 271.675742][ T7579] netlink: 'syz.1.933': attribute type 8 has an invalid length. [ 271.683531][ T7579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.933'. [ 275.389251][ T7633] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.947'. [ 279.637077][ T7692] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.966'. [ 280.550407][ T7725] netlink: 'syz.0.973': attribute type 29 has an invalid length. [ 280.702275][ T7725] netlink: 'syz.0.973': attribute type 29 has an invalid length. [ 280.781780][ T7726] netlink: 'syz.0.973': attribute type 29 has an invalid length. [ 281.063270][ T7735] netlink: 'syz.4.975': attribute type 21 has an invalid length. [ 281.089479][ T7735] netlink: 'syz.4.975': attribute type 1 has an invalid length. [ 281.117797][ T7735] netlink: 144 bytes leftover after parsing attributes in process `syz.4.975'. [ 284.459552][ T7753] netlink: 'syz.4.980': attribute type 13 has an invalid length. [ 284.493922][ T7753] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.980'. [ 284.821959][ T7759] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.983'. [ 284.826328][ T7761] netlink: 'syz.1.984': attribute type 2 has an invalid length. [ 285.432617][ T7773] netlink: 'syz.0.986': attribute type 6 has an invalid length. [ 285.481346][ T7773] netlink: 168 bytes leftover after parsing attributes in process `syz.0.986'. [ 285.507250][ T7778] netlink: 'syz.3.988': attribute type 2 has an invalid length. [ 285.523116][ T7778] netlink: 'syz.3.988': attribute type 8 has an invalid length. [ 285.536832][ T7778] netlink: 132 bytes leftover after parsing attributes in process `syz.3.988'. [ 285.558790][ T7773] netlink: 132 bytes leftover after parsing attributes in process `syz.0.986'. [ 289.180309][ T7805] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.998'. [ 289.260334][ T7807] netlink: 'syz.2.999': attribute type 27 has an invalid length. [ 289.571117][ T7811] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1000'. [ 290.892860][ T7837] netlink: 95 bytes leftover after parsing attributes in process `syz.1.1007'. [ 293.511254][ T7850] netlink: 'syz.2.1010': attribute type 2 has an invalid length. [ 293.697451][ T7863] netlink: 'syz.3.1013': attribute type 29 has an invalid length. [ 293.726403][ T7861] netlink: 'syz.3.1013': attribute type 29 has an invalid length. [ 293.728947][ T7863] netlink: 'syz.3.1013': attribute type 29 has an invalid length. [ 293.832297][ T7868] netlink: 'syz.3.1013': attribute type 29 has an invalid length. [ 294.018228][ T7875] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1016'. [ 294.584759][ T7892] netlink: 'syz.3.1020': attribute type 27 has an invalid length. [ 297.462791][ T7892] bond0: (slave bond_slave_0): Releasing backup interface [ 297.740960][ T7911] netlink: 'syz.4.1024': attribute type 17 has an invalid length. [ 297.756153][ T7911] netlink: 'syz.4.1024': attribute type 16 has an invalid length. [ 297.770176][ T7911] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1024'. [ 298.102735][ T41] tipc: Subscription rejected, illegal request [ 298.195448][ T7925] netlink: 'syz.3.1026': attribute type 2 has an invalid length. [ 298.914225][ T7936] netlink: 'syz.2.1030': attribute type 29 has an invalid length. [ 298.929903][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 300.910134][ T7936] netlink: 'syz.2.1030': attribute type 29 has an invalid length. [ 300.925358][ T7936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 301.050083][ T7948] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1032'. [ 301.279328][ T7953] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1033'. [ 301.322378][ T7953] : renamed from caif0 [ 301.964008][ T7970] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1038'. [ 302.510283][ T7953] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 302.532313][ T7961] netlink: 'syz.4.1037': attribute type 27 has an invalid length. [ 302.587550][ T7961] bond0: (slave bond_slave_0): Releasing backup interface [ 303.392785][ T8008] netlink: 'syz.3.1043': attribute type 9 has an invalid length. [ 303.553961][ T8008] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1043'. [ 306.418955][ T8021] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1048'. [ 306.801648][ T8031] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.1050'. [ 306.874561][ T8031] openvswitch: netlink: Flow actions attr not present in new flow. [ 307.659986][ T8054] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1058'. [ 308.128092][ T8066] netlink: 'syz.1.1060': attribute type 9 has an invalid length. [ 308.162150][ T8066] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1060'. [ 308.765703][ T8077] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1064'. [ 309.441158][ T8085] netlink: 'syz.3.1067': attribute type 10 has an invalid length. [ 311.714194][ T8107] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1073'. [ 312.033652][ T4282] Bluetooth: hci4: ISO packet for unknown connection handle 1 [ 312.259916][ T8117] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1079'. [ 312.745493][ T8128] sock: sock_timestamping_bind_phc: sock not bind to device [ 312.959116][ T8128] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1081'. [ 317.308161][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.314879][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.240988][ T8220] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1102'. [ 322.879793][ T8232] netlink: 'syz.0.1104': attribute type 3 has an invalid length. [ 322.947952][ T8232] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1104'. [ 325.370652][ T8250] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1110'. [ 328.669805][ T8265] device syzkaller0 entered promiscuous mode [ 328.721693][ T8274] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1117'. [ 331.032050][ T8274] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 331.041646][ T8274] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 331.051330][ T8274] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 331.218536][ T8305] netlink: 'syz.2.1123': attribute type 29 has an invalid length. [ 331.259234][ T8305] netlink: 'syz.2.1123': attribute type 29 has an invalid length. [ 331.342764][ T8308] netlink: 'syz.2.1123': attribute type 29 has an invalid length. [ 332.309804][ T8332] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1131'. [ 334.262133][ T8332] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 334.299617][ T8332] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 334.313670][ T8332] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 334.383315][ T8342] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 334.436277][ T8342] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 334.445974][ T8342] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 334.455517][ T8342] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 334.465165][ T8342] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 334.474485][ T8342] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 334.484775][ T8342] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 334.495868][ T8342] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 334.506557][ T8342] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 334.516658][ T8342] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 334.674477][ T8352] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1134'. [ 335.579458][ T8347] netlink: 'syz.3.1136': attribute type 39 has an invalid length. [ 335.777900][ T8365] netlink: 'syz.4.1138': attribute type 10 has an invalid length. [ 335.913534][ T8365] team0: Port device geneve1 added [ 335.965473][ T8365] netlink: 'syz.4.1138': attribute type 27 has an invalid length. [ 335.973409][ T8365] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1138'. [ 336.736694][ T8393] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1145'. [ 337.070858][ T8402] netlink: 'syz.1.1148': attribute type 10 has an invalid length. [ 337.164379][ T8402] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 337.272221][ T8402] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 337.413327][ T8408] netlink: 'syz.3.1149': attribute type 10 has an invalid length. [ 339.642111][ T8408] device veth0_macvtap left promiscuous mode [ 339.927824][ T8423] netlink: 38 bytes leftover after parsing attributes in process `syz.1.1152'. [ 339.948658][ T8423] net_ratelimit: 3257 callbacks suppressed [ 339.948674][ T8423] openvswitch: netlink: Flow key attr not present in new flow. [ 340.135030][ T8432] netlink: 'syz.0.1153': attribute type 10 has an invalid length. [ 340.186410][ T8432] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.250968][ T8432] bond0: (slave team0): Enslaving as an active interface with an up link [ 340.369327][ T8437] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1154'. [ 341.162118][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 341.272508][ T8456] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1154'. [ 341.373018][ T8461] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1160'. [ 342.637731][ T8493] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1167'. [ 344.902151][ T8487] netlink: 'syz.1.1166': attribute type 10 has an invalid length. [ 344.912815][ T8487] device veth0_macvtap left promiscuous mode [ 345.596995][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1172'. [ 345.856070][ T8507] can: request_module (can-proto-0) failed. [ 346.030584][ T8520] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1174'. [ 346.185772][ T8523] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1176'. [ 347.136159][ T8551] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1182'. [ 349.572450][ T8545] netlink: 'syz.3.1181': attribute type 10 has an invalid length. [ 349.580893][ T8545] device lo left promiscuous mode [ 349.586606][ T8545] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 349.616544][ T8545] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 349.677497][ T8551] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 349.830751][ T4282] Bluetooth: hci2: ISO packet for unknown connection handle 9 [ 349.891544][ T8560] netlink: 'syz.4.1184': attribute type 1 has an invalid length. [ 349.985832][ T8560] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.1184'. [ 350.475576][ T8581] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1192'. [ 354.540271][ T8610] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1198'. [ 354.596715][ T8610] netlink: 'syz.0.1198': attribute type 1 has an invalid length. [ 354.629535][ T8610] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1198'. [ 354.763075][ T8607] netlink: 'syz.2.1196': attribute type 10 has an invalid length. [ 355.029229][ T8625] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1204'. [ 359.261767][ T8677] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1220'. [ 359.447874][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1222'. [ 359.491494][ T8683] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1222'. [ 360.458863][ T8690] FAULT_INJECTION: forcing a failure. [ 360.458863][ T8690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.553173][ T8690] CPU: 1 PID: 8690 Comm: syz.0.1223 Not tainted syzkaller #0 [ 360.560893][ T8690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.571686][ T8690] Call Trace: [ 360.575077][ T8690] [ 360.578300][ T8690] dump_stack_lvl+0x188/0x24e [ 360.583305][ T8690] ? show_regs_print_info+0x12/0x12 [ 360.588548][ T8690] ? load_image+0x410/0x410 [ 360.593625][ T8690] ? __lock_acquire+0x7c40/0x7c40 [ 360.598791][ T8690] should_fail_ex+0x390/0x4c0 [ 360.603779][ T8690] _copy_to_user+0x2c/0x130 [ 360.608849][ T8690] bpf_test_finish+0x266/0x600 [ 360.614189][ T8690] ? convert_skb_to___skb+0x420/0x420 [ 360.619983][ T8690] ? bpf_prog_test_run_skb+0x597/0x18e0 [ 360.625853][ T8690] bpf_prog_test_run_skb+0x1129/0x18e0 [ 360.632533][ T8690] ? cpu_online+0xa0/0xa0 [ 360.638201][ T8690] bpf_prog_test_run+0x31c/0x390 [ 360.644564][ T8690] __sys_bpf+0x62b/0x780 [ 360.649694][ T8690] ? bpf_link_show_fdinfo+0x380/0x380 [ 360.656244][ T8690] ? lock_chain_count+0x20/0x20 [ 360.663146][ T8690] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 360.669276][ T8690] __x64_sys_bpf+0x78/0x90 [ 360.674085][ T8690] do_syscall_64+0x4c/0xa0 [ 360.679106][ T8690] ? clear_bhb_loop+0x60/0xb0 [ 360.684343][ T8690] ? clear_bhb_loop+0x60/0xb0 [ 360.689895][ T8690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.696529][ T8690] RIP: 0033:0x7f3bc8b9e159 [ 360.701185][ T8690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.724750][ T8690] RSP: 002b:00007f3bc9a6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.734073][ T8690] RAX: ffffffffffffffda RBX: 00007f3bc8e25fa0 RCX: 00007f3bc8b9e159 [ 360.742912][ T8690] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 360.751643][ T8690] RBP: 00007f3bc9a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 360.760703][ T8690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.770162][ T8690] R13: 00007f3bc8e26038 R14: 00007f3bc8e25fa0 R15: 00007ffc344855f8 [ 360.779617][ T8690] [ 365.852330][ T8683] netlink: 'syz.4.1222': attribute type 10 has an invalid length. [ 365.860548][ T8683] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1222'. [ 366.063100][ T8699] netlink: 'syz.2.1226': attribute type 21 has an invalid length. [ 366.095485][ T8699] netlink: 'syz.2.1226': attribute type 1 has an invalid length. [ 366.582870][ T8717] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1231'. [ 366.594834][ T8717] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1231'. [ 366.615477][ T8717] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1231'. [ 366.639381][ T8717] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1231'. [ 366.658300][ T8723] FAULT_INJECTION: forcing a failure. [ 366.658300][ T8723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.659242][ T8717] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1231'. [ 366.679203][ T8723] CPU: 0 PID: 8723 Comm: syz.1.1234 Not tainted syzkaller #0 [ 366.689705][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.700669][ T8723] Call Trace: [ 366.704315][ T8723] [ 366.707286][ T8723] dump_stack_lvl+0x188/0x24e [ 366.712022][ T8723] ? show_regs_print_info+0x12/0x12 [ 366.717338][ T8723] ? load_image+0x410/0x410 [ 366.717371][ T8723] ? __lock_acquire+0x7c40/0x7c40 [ 366.717402][ T8723] should_fail_ex+0x390/0x4c0 [ 366.717432][ T8723] _copy_to_user+0x2c/0x130 [ 366.717455][ T8723] bpf_test_finish+0x4a2/0x600 [ 366.717486][ T8723] ? convert_skb_to___skb+0x420/0x420 [ 366.749941][ T8723] ? __build_skb+0x24b/0x3b0 [ 366.754664][ T8723] bpf_prog_test_run_skb+0x1129/0x18e0 [ 366.760185][ T8723] ? cpu_online+0xa0/0xa0 [ 366.764779][ T8723] bpf_prog_test_run+0x31c/0x390 [ 366.769764][ T8723] __sys_bpf+0x62b/0x780 [ 366.774054][ T8723] ? bpf_link_show_fdinfo+0x380/0x380 [ 366.779482][ T8723] ? lock_chain_count+0x20/0x20 [ 366.784566][ T8723] __x64_sys_bpf+0x78/0x90 [ 366.789295][ T8723] do_syscall_64+0x4c/0xa0 [ 366.793846][ T8723] ? clear_bhb_loop+0x60/0xb0 [ 366.798924][ T8723] ? clear_bhb_loop+0x60/0xb0 [ 366.803726][ T8723] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.809769][ T8723] RIP: 0033:0x7fdaca39e159 [ 366.814528][ T8723] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.834303][ T8723] RSP: 002b:00007fdacb196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 366.842840][ T8723] RAX: ffffffffffffffda RBX: 00007fdaca625fa0 RCX: 00007fdaca39e159 [ 366.850850][ T8723] RDX: 0000000000000050 RSI: 00002000000005c0 RDI: 000000000000000a [ 366.858981][ T8723] RBP: 00007fdacb196090 R08: 0000000000000000 R09: 0000000000000000 [ 366.859509][ T8727] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1235'. [ 366.867137][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.867157][ T8723] R13: 00007fdaca626038 R14: 00007fdaca625fa0 R15: 00007ffd3e4aff58 [ 366.867183][ T8723] [ 367.146229][ T8731] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1236'. [ 367.611313][ T8740] netlink: 'syz.0.1239': attribute type 25 has an invalid length. [ 367.669158][ T8740] netlink: 'syz.0.1239': attribute type 3 has an invalid length. [ 367.751492][ T8740] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1239'. [ 370.484852][ T8731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.532680][ T8731] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 370.559116][ T8731] bond0 (unregistering): Released all slaves [ 370.574901][ T8741] netlink: 'syz.0.1239': attribute type 21 has an invalid length. [ 370.583251][ T8741] netlink: 'syz.0.1239': attribute type 7 has an invalid length. [ 370.593666][ T8749] bridge0: port 2(batadv0) entered blocking state [ 370.604501][ T8749] bridge0: port 2(batadv0) entered disabled state [ 370.632767][ T8749] device batadv0 entered promiscuous mode [ 370.655986][ T8749] bridge0: port 2(batadv0) entered blocking state [ 370.662670][ T8749] bridge0: port 2(batadv0) entered forwarding state [ 370.778242][ T5397] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 370.788275][ T5397] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 371.071674][ T8756] netlink: 'syz.2.1241': attribute type 3 has an invalid length. [ 371.111895][ T4282] Bluetooth: hci4: ACL packet too small [ 371.124290][ T8756] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1241'. [ 371.327283][ T8767] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1241'. [ 371.398230][ T8756] netlink: 'syz.2.1241': attribute type 10 has an invalid length. [ 371.428443][ T8770] FAULT_INJECTION: forcing a failure. [ 371.428443][ T8770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.460207][ T8756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1241'. [ 371.486551][ T8770] CPU: 0 PID: 8770 Comm: syz.0.1247 Not tainted syzkaller #0 [ 371.493995][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.504082][ T8770] Call Trace: [ 371.507384][ T8770] [ 371.510343][ T8770] dump_stack_lvl+0x188/0x24e [ 371.515296][ T8770] ? show_regs_print_info+0x12/0x12 [ 371.520537][ T8770] ? load_image+0x410/0x410 [ 371.525082][ T8770] ? __lock_acquire+0x7c40/0x7c40 [ 371.530183][ T8770] ? snprintf+0xe5/0x140 [ 371.534455][ T8770] should_fail_ex+0x390/0x4c0 [ 371.539254][ T8770] _copy_to_user+0x2c/0x130 [ 371.543776][ T8770] simple_read_from_buffer+0xe3/0x150 [ 371.549163][ T8770] proc_fail_nth_read+0x1a6/0x220 [ 371.554287][ T8770] ? proc_fault_inject_write+0x310/0x310 [ 371.560078][ T8770] ? fsnotify_perm+0x248/0x550 [ 371.564941][ T8770] ? proc_fault_inject_write+0x310/0x310 [ 371.570853][ T8770] vfs_read+0x2db/0x960 [ 371.575306][ T8770] ? kernel_read+0x1e0/0x1e0 [ 371.580125][ T8770] ? __fget_files+0x28/0x460 [ 371.584928][ T8770] ? __fget_files+0x3fc/0x460 [ 371.589853][ T8770] ? __fdget_pos+0x2ae/0x360 [ 371.594730][ T8770] ? ksys_read+0x70/0x260 [ 371.599162][ T8770] ksys_read+0x14d/0x260 [ 371.603704][ T8770] ? vfs_write+0x9a0/0x9a0 [ 371.608157][ T8770] ? lockdep_hardirqs_on+0x94/0x140 [ 371.613457][ T8770] do_syscall_64+0x4c/0xa0 [ 371.617882][ T8770] ? clear_bhb_loop+0x60/0xb0 [ 371.622745][ T8770] ? clear_bhb_loop+0x60/0xb0 [ 371.627442][ T8770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.633476][ T8770] RIP: 0033:0x7f3bc8b5e98e [ 371.638330][ T8770] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 371.658310][ T8770] RSP: 002b:00007f3bc9a69fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 371.666997][ T8770] RAX: ffffffffffffffda RBX: 00007f3bc9a6a6c0 RCX: 00007f3bc8b5e98e [ 371.675175][ T8770] RDX: 000000000000000f RSI: 00007f3bc9a6a0a0 RDI: 0000000000000007 [ 371.683873][ T8770] RBP: 00007f3bc9a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 371.692128][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.701089][ T8770] R13: 00007f3bc8e26038 R14: 00007f3bc8e25fa0 R15: 00007ffc344855f8 [ 371.709136][ T8770] [ 371.743336][ T8756] device team0 entered promiscuous mode [ 371.763364][ T8756] device team_slave_0 entered promiscuous mode [ 371.794013][ T8756] device team_slave_1 entered promiscuous mode [ 371.826736][ T8756] device geneve1 entered promiscuous mode [ 371.838896][ T8780] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1249'. [ 371.869620][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.894491][ T8756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 371.903098][ T8756] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 374.185938][ T8833] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1263'. [ 376.173034][ T8819] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.1258'. [ 376.182985][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1258'. [ 376.202290][ T8833] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 376.225690][ T8833] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 376.274022][ T8833] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 377.129778][ T8858] netlink: 'syz.4.1273': attribute type 21 has an invalid length. [ 377.935202][ T8870] can: request_module (can-proto-0) failed. [ 377.949233][ T8869] can: request_module (can-proto-0) failed. [ 378.230396][ T8880] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1278'. [ 378.748546][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.755173][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.814634][ T8893] netlink: 'syz.2.1281': attribute type 10 has an invalid length. [ 378.858727][ T8893] device virt_wifi0 entered promiscuous mode [ 378.905702][ T8893] team0: Port device virt_wifi0 added [ 379.030181][ T8900] netlink: 'syz.3.1284': attribute type 10 has an invalid length. [ 379.242452][ T8911] netlink: 'syz.4.1286': attribute type 21 has an invalid length. [ 379.269073][ T8911] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1286'. [ 379.308096][ T8911] netlink: 'syz.4.1286': attribute type 4 has an invalid length. [ 379.345983][ T8911] netlink: 'syz.4.1286': attribute type 3 has an invalid length. [ 379.381452][ T8911] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1286'. [ 380.060439][ T8939] ¥: port 1(team0) entered blocking state [ 380.067517][ T8939] ¥: port 1(team0) entered disabled state [ 380.101422][ T8939] device team0 entered promiscuous mode [ 380.108795][ T8939] device team_slave_0 entered promiscuous mode [ 380.119620][ T8939] device team_slave_1 entered promiscuous mode [ 380.127150][ T8939] device geneve1 entered promiscuous mode [ 380.139688][ T8942] device team0 left promiscuous mode [ 380.167616][ T8941] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1296'. [ 380.201590][ T8942] device team_slave_0 left promiscuous mode [ 380.249353][ T8942] device team_slave_1 left promiscuous mode [ 380.288863][ T8942] device geneve1 left promiscuous mode [ 380.305158][ T8942] ¥: port 1(team0) entered disabled state [ 380.534155][ T8956] netlink: 'syz.1.1298': attribute type 21 has an invalid length. [ 380.542319][ T8956] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1298'. [ 380.551947][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 380.562481][ T8960] netlink: 'syz.4.1300': attribute type 13 has an invalid length. [ 380.852829][ T8963] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1302'. [ 381.266331][ T8979] netlink: 'syz.0.1307': attribute type 9 has an invalid length. [ 381.298851][ T8979] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1307'. [ 381.353673][ T8982] netlink: 'syz.1.1309': attribute type 6 has an invalid length. [ 381.667930][ T8993] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1312'. [ 381.817460][ T8995] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1310'. [ 387.941003][ T9080] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 387.982642][ T9080] device syzkaller0 entered promiscuous mode [ 388.522138][ T9118] FAULT_INJECTION: forcing a failure. [ 388.522138][ T9118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.567608][ T9118] CPU: 1 PID: 9118 Comm: syz.2.1341 Not tainted syzkaller #0 [ 388.575348][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.585834][ T9118] Call Trace: [ 388.589315][ T9118] [ 388.592375][ T9118] dump_stack_lvl+0x188/0x24e [ 388.597105][ T9118] ? show_regs_print_info+0x12/0x12 [ 388.602443][ T9118] ? load_image+0x410/0x410 [ 388.607083][ T9118] ? __lock_acquire+0x7c40/0x7c40 [ 388.612523][ T9118] should_fail_ex+0x390/0x4c0 [ 388.617257][ T9118] _copy_from_user+0x2c/0x170 [ 388.622120][ T9118] btf_new_fd+0x326/0x760 [ 388.626771][ T9118] __sys_bpf+0x612/0x780 [ 388.631089][ T9118] ? bpf_link_show_fdinfo+0x380/0x380 [ 388.636621][ T9118] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 388.643097][ T9118] __x64_sys_bpf+0x78/0x90 [ 388.647810][ T9118] do_syscall_64+0x4c/0xa0 [ 388.652420][ T9118] ? clear_bhb_loop+0x60/0xb0 [ 388.657114][ T9118] ? clear_bhb_loop+0x60/0xb0 [ 388.661823][ T9118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.668271][ T9118] RIP: 0033:0x7fbaeeb9e159 [ 388.672981][ T9118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.692919][ T9118] RSP: 002b:00007fbaefad2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.702425][ T9118] RAX: ffffffffffffffda RBX: 00007fbaeee26090 RCX: 00007fbaeeb9e159 [ 388.710690][ T9118] RDX: 0000000000000020 RSI: 0000200000000580 RDI: 0000000000000012 [ 388.719255][ T9118] RBP: 00007fbaefad2090 R08: 0000000000000000 R09: 0000000000000000 [ 388.727336][ T9118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.735591][ T9118] R13: 00007fbaeee26128 R14: 00007fbaeee26090 R15: 00007ffe95eef678 [ 388.743921][ T9118] [ 394.703308][ T9135] validate_nla: 1 callbacks suppressed [ 394.703329][ T9135] netlink: 'syz.2.1346': attribute type 3 has an invalid length. [ 394.764162][ T9135] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1346'. [ 395.069305][ T9141] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1348'. [ 395.293168][ T9154] FAULT_INJECTION: forcing a failure. [ 395.293168][ T9154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.328314][ T9156] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1354'. [ 395.351778][ T9154] CPU: 1 PID: 9154 Comm: syz.2.1353 Not tainted syzkaller #0 [ 395.359381][ T9154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.369657][ T9154] Call Trace: [ 395.373137][ T9154] [ 395.376471][ T9154] dump_stack_lvl+0x188/0x24e [ 395.381202][ T9154] ? show_regs_print_info+0x12/0x12 [ 395.386446][ T9154] ? load_image+0x410/0x410 [ 395.391166][ T9154] ? __lock_acquire+0x7c40/0x7c40 [ 395.396231][ T9154] ? snprintf+0xe5/0x140 [ 395.400690][ T9154] should_fail_ex+0x390/0x4c0 [ 395.405671][ T9154] _copy_to_user+0x2c/0x130 [ 395.410207][ T9154] simple_read_from_buffer+0xe3/0x150 [ 395.415894][ T9154] proc_fail_nth_read+0x1a6/0x220 [ 395.421149][ T9154] ? proc_fault_inject_write+0x310/0x310 [ 395.426825][ T9154] ? fsnotify_perm+0x248/0x550 [ 395.431718][ T9154] ? proc_fault_inject_write+0x310/0x310 [ 395.437647][ T9154] vfs_read+0x2db/0x960 [ 395.441952][ T9154] ? kernel_read+0x1e0/0x1e0 [ 395.446938][ T9154] ? __fget_files+0x28/0x460 [ 395.451659][ T9154] ? __fget_files+0x3fc/0x460 [ 395.456384][ T9154] ? __fdget_pos+0x2ae/0x360 [ 395.461626][ T9154] ? ksys_read+0x70/0x260 [ 395.466097][ T9154] ksys_read+0x14d/0x260 [ 395.470467][ T9154] ? vfs_write+0x9a0/0x9a0 [ 395.475020][ T9154] ? syscall_enter_from_user_mode+0x2a/0x80 [ 395.480987][ T9154] do_syscall_64+0x4c/0xa0 [ 395.485540][ T9154] ? clear_bhb_loop+0x60/0xb0 [ 395.490248][ T9154] ? clear_bhb_loop+0x60/0xb0 [ 395.495261][ T9154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.501387][ T9154] RIP: 0033:0x7fbaeeb5e98e [ 395.505840][ T9154] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 395.526085][ T9154] RSP: 002b:00007fbaefaf2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 395.534732][ T9154] RAX: ffffffffffffffda RBX: 00007fbaefaf36c0 RCX: 00007fbaeeb5e98e [ 395.542845][ T9154] RDX: 000000000000000f RSI: 00007fbaefaf30a0 RDI: 0000000000000009 [ 395.550945][ T9154] RBP: 00007fbaefaf3090 R08: 0000000000000000 R09: 0000000000000000 [ 395.559046][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.567321][ T9154] R13: 00007fbaeee26038 R14: 00007fbaeee25fa0 R15: 00007ffe95eef678 [ 395.575516][ T9154] [ 396.033482][ T9170] netlink: 'syz.1.1358': attribute type 21 has an invalid length. [ 396.049219][ T9167] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.1356'. [ 396.080357][ T9167] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.1356'. [ 396.150678][ T9167] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.1356'. [ 396.629737][ T9183] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1363'. [ 400.056276][ T9207] netlink: 'syz.3.1372': attribute type 21 has an invalid length. [ 404.727746][ T9268] netlink: 'syz.4.1387': attribute type 10 has an invalid length. [ 405.027112][ T9268] team0: Device wg1 is of different type [ 405.150427][ T9278] netlink: 'syz.0.1390': attribute type 21 has an invalid length. [ 405.942058][ T9305] netlink: 'syz.4.1399': attribute type 39 has an invalid length. [ 409.056941][ T9305] device hsr_slave_0 left promiscuous mode [ 409.223654][ T9313] netlink: 'syz.3.1400': attribute type 13 has an invalid length. [ 409.243890][ T9313] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1400'. [ 409.337188][ T9313] erspan0: refused to change device tx_queue_len [ 409.374450][ T9313] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 410.567194][ T9344] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1413'. [ 410.610381][ T9345] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1413'. [ 416.494409][ T9392] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1426'. [ 416.499984][ T9388] netlink: 'syz.0.1428': attribute type 3 has an invalid length. [ 416.519416][ T9388] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1428'. [ 416.806634][ T9403] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 416.827716][ T9403] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 416.842583][ T9403] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1430'. [ 420.515901][ T9438] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1441'. [ 420.979390][ T9448] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1442'. [ 427.002603][ T9498] : port 1(ip6gretap0) entered blocking state [ 427.022067][ T9498] : port 1(ip6gretap0) entered disabled state [ 427.081764][ T9498] device ip6gretap0 entered promiscuous mode [ 431.362854][ T9543] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1468'. [ 431.431089][ T9541] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1468'. [ 431.889130][ T9559] netlink: 'syz.4.1471': attribute type 21 has an invalid length. [ 432.810957][ T9582] netlink: 'syz.0.1478': attribute type 13 has an invalid length. [ 432.844147][ T9582] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1478'. [ 435.317014][ T9582] erspan0: refused to change device tx_queue_len [ 435.323502][ T9586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1478'. [ 435.848546][ T9622] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1487'. [ 436.153006][ T9614] device syzkaller0 entered promiscuous mode [ 439.803609][ T9628] netlink: 'syz.3.1489': attribute type 10 has an invalid length. [ 439.943725][ T9628] team0: Device gre0 is of different type [ 440.189294][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.195950][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.421877][ T9658] device lo entered promiscuous mode [ 443.474180][ T9658] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 443.988814][ T9661] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1499'. [ 447.295690][ T9688] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1504'. [ 447.313111][ T9690] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1505'. [ 447.347304][ T9690] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 447.383490][ T9690] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.232530][ T9746] netlink: 'syz.2.1522': attribute type 39 has an invalid length. [ 454.532472][ T9758] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1526'. [ 459.233265][ T9786] device sit0 entered promiscuous mode [ 459.498827][ T9800] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1537'. [ 460.142658][ T9822] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1543'. [ 460.159167][ T9824] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1545'. [ 460.216076][ T9828] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1546'. [ 460.744097][ T9841] device sit0 entered promiscuous mode [ 460.979006][ T9849] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1553'. [ 461.003054][ T9849] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1553'. [ 461.102494][ T9849] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1553'. [ 461.143664][ T9849] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1553'. [ 461.609872][ T9868] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1557'. [ 462.021622][ T9882] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1560'. [ 463.725553][ T9911] device sit0 entered promiscuous mode [ 463.739863][ T9920] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1575'. [ 464.326435][ T9941] netlink: 'syz.0.1581': attribute type 5 has an invalid length. [ 464.560190][ T9948] netlink: 'syz.4.1584': attribute type 29 has an invalid length. [ 464.588741][ T9948] netlink: 'syz.4.1584': attribute type 29 has an invalid length. [ 464.608992][ T9948] netlink: 'syz.4.1584': attribute type 29 has an invalid length. [ 464.628255][ T9948] netlink: 'syz.4.1584': attribute type 29 has an invalid length. [ 464.641299][ T9948] netlink: 'syz.4.1584': attribute type 29 has an invalid length. [ 464.658457][ T9945] netlink: 'syz.0.1583': attribute type 2 has an invalid length. [ 464.674143][ T9945] netlink: 'syz.0.1583': attribute type 8 has an invalid length. [ 464.947975][ T9955] netlink: 'syz.2.1586': attribute type 10 has an invalid length. [ 465.291676][ T9968] __nla_validate_parse: 4 callbacks suppressed [ 465.291710][ T9968] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1592'. [ 465.319016][ T9967] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1591'. [ 465.491767][ T9973] netlink: 'syz.0.1593': attribute type 29 has an invalid length. [ 466.485043][ T9995] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1600'. [ 466.587575][T10000] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1602'. [ 468.815991][T10016] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1606'. [ 468.973842][T10020] netlink: 'syz.0.1607': attribute type 11 has an invalid length. [ 468.990487][T10020] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1607'. [ 469.011049][T10020] device wlan1 left promiscuous mode [ 469.040943][T10020] team0: Port device wlan1 added [ 469.096784][T10020] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1607'. [ 469.156819][T10019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.781183][T10046] validate_nla: 5 callbacks suppressed [ 469.781203][T10046] netlink: 'syz.4.1614': attribute type 10 has an invalid length. [ 469.936575][T10049] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1616'. [ 470.084974][T10046] team0 (unregistering): Port device team_slave_0 removed [ 470.153606][T10046] team0 (unregistering): Port device team_slave_1 removed [ 470.216107][T10046] team0 (unregistering): Port device geneve1 removed [ 470.617589][T10051] netlink: 'syz.1.1617': attribute type 1 has an invalid length. [ 470.688477][T10051] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1617'. [ 470.897977][T10062] netlink: 8281 bytes leftover after parsing attributes in process `syz.0.1619'. [ 471.178318][T10075] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1621'. [ 471.382633][T10082] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1623'. [ 471.431263][T10083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1623'. [ 472.288764][T10106] netlink: 'syz.3.1628': attribute type 21 has an invalid length. [ 472.406690][T10106] netlink: 'syz.3.1628': attribute type 7 has an invalid length. [ 472.727023][T10114] netlink: 'syz.1.1631': attribute type 10 has an invalid length. [ 473.090313][T10114] team0 (unregistering): Port device team_slave_0 removed [ 473.181580][T10114] team0 (unregistering): Port device team_slave_1 removed [ 473.309645][T10114] team0 (unregistering): Port device geneve1 removed [ 473.602741][T10126] device pim6reg1 entered promiscuous mode [ 473.633380][T10135] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1636'. [ 473.646245][T10135] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 473.771646][T10135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 473.794935][T10137] netlink: 'syz.0.1636': attribute type 2 has an invalid length. [ 473.812298][T10137] netlink: 'syz.0.1636': attribute type 8 has an invalid length. [ 473.821409][T10137] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1636'. [ 473.832780][T10121] ¥: port 1(dummy0) entered blocking state [ 473.839800][T10121] ¥: port 1(dummy0) entered disabled state [ 473.851803][T10121] device dummy0 entered promiscuous mode [ 474.429782][T10144] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.1639'. [ 474.451356][T10144] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.1639'. [ 474.480574][T10144] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.1639'. [ 474.534086][T10149] netlink: 'syz.0.1640': attribute type 1 has an invalid length. [ 474.793736][T10149] netlink: 'syz.0.1640': attribute type 2 has an invalid length. [ 475.163508][T10172] netlink: 'syz.2.1645': attribute type 7 has an invalid length. [ 475.210139][T10172] netlink: 'syz.2.1645': attribute type 7 has an invalid length. [ 476.157027][T10188] netlink: 'syz.0.1649': attribute type 10 has an invalid length. [ 476.186213][T10186] __nla_validate_parse: 2 callbacks suppressed [ 476.186235][T10186] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1650'. [ 476.499177][T10188] bond0: (slave team0): Releasing backup interface [ 476.593963][T10188] team0 (unregistering): Port device team_slave_0 removed [ 476.641545][T10188] team0 (unregistering): Port device team_slave_1 removed [ 476.681925][T10188] team0 (unregistering): Port device geneve1 removed [ 476.748182][T10188] team0 (unregistering): Port device wlan1 removed [ 476.891241][T10197] netlink: 'syz.4.1653': attribute type 3 has an invalid length. [ 476.904802][T10197] netlink: 'syz.4.1653': attribute type 1 has an invalid length. [ 476.923595][T10197] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1653'. [ 476.974230][T10199] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1652'. [ 477.447298][T10222] netlink: 'syz.4.1659': attribute type 29 has an invalid length. [ 477.473662][T10222] netlink: 'syz.4.1659': attribute type 29 has an invalid length. [ 477.498283][T10228] netlink: 'syz.4.1659': attribute type 29 has an invalid length. [ 478.878674][T10267] device bond_slave_1 entered promiscuous mode [ 479.563072][T10285] netlink: 'syz.0.1676': attribute type 25 has an invalid length. [ 479.679191][T10285] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1676'. [ 480.365088][T10302] netlink: 'syz.2.1677': attribute type 39 has an invalid length. [ 480.744606][T10306] delete_channel: no stack [ 481.004251][T10315] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1684'. [ 481.091356][T10315] device hsr_slave_0 left promiscuous mode [ 481.232683][T10330] netlink: 'syz.0.1687': attribute type 10 has an invalid length. [ 481.243107][T10315] device hsr_slave_1 left promiscuous mode [ 481.274034][T10330] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1687'. [ 481.299498][T10330] openvswitch: netlink: Flow key attr not present in new flow. [ 481.378317][T10333] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1687'. [ 481.408086][T10333] device hsr_slave_1 left promiscuous mode [ 481.561910][T10334] netlink: 'syz.4.1688': attribute type 19 has an invalid length. [ 481.604214][T10334] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.1688'. [ 482.228083][T10366] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.1698'. [ 482.247009][T10366] netlink: zone id is out of range [ 482.263149][T10366] netlink: zone id is out of range [ 482.274361][T10366] netlink: zone id is out of range [ 482.279680][T10366] netlink: zone id is out of range [ 482.308701][T10366] netlink: zone id is out of range [ 482.317856][T10366] netlink: zone id is out of range [ 482.328052][T10366] netlink: zone id is out of range [ 482.338198][T10366] netlink: zone id is out of range [ 482.350983][T10366] netlink: zone id is out of range [ 483.081901][T10383] netlink: 'syz.4.1702': attribute type 3 has an invalid length. [ 483.091532][T10383] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1702'. [ 485.054994][T10388] netlink: 'syz.0.1703': attribute type 21 has an invalid length. [ 485.072601][T10388] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1703'. [ 485.136620][T10388] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1703'. [ 485.354123][T10404] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1709'. [ 485.754110][T10423] tipc: Started in network mode [ 485.781118][T10423] tipc: Node identity 9215a268, cluster identity 4711 [ 485.794327][T10423] tipc: Node number set to 2450891368 [ 486.260984][T10438] netlink: 'syz.1.1719': attribute type 39 has an invalid length. [ 486.492282][T10451] netlink: 'syz.0.1722': attribute type 10 has an invalid length. [ 486.505490][T10451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1722'. [ 486.516130][T10451] batman_adv: batadv0: Adding interface: veth0_vlan [ 486.522940][T10451] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.570395][T10451] batman_adv: batadv0: Interface activated: veth0_vlan [ 486.620736][T10460] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1724'. [ 487.134367][T10480] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.1730'. [ 487.164969][T10480] net_ratelimit: 3545 callbacks suppressed [ 487.164995][T10480] netlink: zone id is out of range [ 487.251737][T10480] netlink: zone id is out of range [ 487.257499][T10480] netlink: zone id is out of range [ 487.269864][T10480] netlink: zone id is out of range [ 487.279775][T10480] netlink: zone id is out of range [ 487.349557][T10480] netlink: zone id is out of range [ 487.388944][T10480] netlink: zone id is out of range [ 487.408634][T10480] netlink: zone id is out of range [ 487.415693][T10480] netlink: zone id is out of range [ 487.428889][T10480] netlink: zone id is out of range [ 487.672930][T10489] netlink: 'syz.0.1732': attribute type 2 has an invalid length. [ 487.697148][T10489] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1732'. [ 487.849849][T10490] netlink: 'syz.0.1732': attribute type 10 has an invalid length. [ 487.927735][T10495] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1734'. [ 488.388737][T10508] netlink: 'syz.4.1738': attribute type 8 has an invalid length. [ 488.420011][T10508] netlink: 'syz.4.1738': attribute type 4 has an invalid length. [ 488.433979][T10508] netlink: 'syz.4.1738': attribute type 7 has an invalid length. [ 488.456996][T10508] netlink: 'syz.4.1738': attribute type 8 has an invalid length. [ 488.533049][T10508] netlink: 'syz.4.1738': attribute type 7 has an invalid length. [ 488.563077][T10508] netlink: 125876 bytes leftover after parsing attributes in process `syz.4.1738'. [ 488.868414][T10518] netlink: 'syz.1.1742': attribute type 9 has an invalid length. [ 488.929327][T10518] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1742'. [ 490.987486][T10551] sctp: [Deprecated]: syz.0.1749 (pid 10551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 490.987486][T10551] Use struct sctp_sack_info instead [ 492.360959][T10565] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1752'. [ 492.399364][T10565] device bridge_slave_1 entered promiscuous mode [ 493.343065][T10591] netlink: 'syz.4.1763': attribute type 9 has an invalid length. [ 493.361445][T10591] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.1763'. [ 493.381562][T10585] netlink: 'syz.1.1760': attribute type 10 has an invalid length. [ 493.407043][T10585] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1760'. [ 493.471983][T10591] netlink: 'syz.4.1763': attribute type 9 has an invalid length. [ 493.544065][T10591] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.1763'. [ 493.936316][T10618] netlink: 40015 bytes leftover after parsing attributes in process `syz.3.1767'. [ 494.836384][T10648] netlink: 'syz.1.1773': attribute type 10 has an invalid length. [ 495.657092][T10666] netlink: 'syz.4.1776': attribute type 10 has an invalid length. [ 495.703939][T10666] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1776'. [ 495.769400][T10680] netlink: 'syz.2.1779': attribute type 39 has an invalid length. [ 496.531278][T10700] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1784'. [ 496.556272][T10703] netlink: 'syz.2.1788': attribute type 3 has an invalid length. [ 496.616021][T10703] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.1788'. [ 496.650845][T10710] delete_channel: no stack [ 496.674512][T10710] delete_channel: no stack [ 497.350421][T10709] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1788'. [ 497.353404][T10700] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 497.382929][T10700] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 497.393456][T10700] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 498.057896][T10746] netlink: 'syz.0.1797': attribute type 10 has an invalid length. [ 498.101971][T10746] batman_adv: batadv0: Adding interface: netdevsim0 [ 498.124777][T10746] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.159625][T10746] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 498.205117][T10753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1800'. [ 498.473339][T10763] netlink: 'syz.1.1803': attribute type 1 has an invalid length. [ 498.500577][T10763] netlink: 'syz.1.1803': attribute type 3 has an invalid length. [ 498.534109][T10763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1803'. [ 499.179690][T10795] FAULT_INJECTION: forcing a failure. [ 499.179690][T10795] name failslab, interval 1, probability 0, space 0, times 0 [ 499.212102][T10795] CPU: 1 PID: 10795 Comm: syz.3.1812 Not tainted syzkaller #0 [ 499.219643][T10795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 499.229895][T10795] Call Trace: [ 499.233192][T10795] [ 499.236324][T10795] dump_stack_lvl+0x188/0x24e [ 499.241049][T10795] ? show_regs_print_info+0x12/0x12 [ 499.246367][T10795] ? load_image+0x410/0x410 [ 499.250876][T10795] ? __might_sleep+0xd0/0xd0 [ 499.255555][T10795] ? __lock_acquire+0x7c40/0x7c40 [ 499.260587][T10795] ? aa_file_perm+0x3ea/0xf00 [ 499.265282][T10795] ? verify_lock_unused+0x140/0x140 [ 499.270501][T10795] should_fail_ex+0x390/0x4c0 [ 499.275646][T10795] should_failslab+0x5/0x20 [ 499.280245][T10795] slab_pre_alloc_hook+0x59/0x300 [ 499.285470][T10795] ? aa_path_link+0x8a0/0x8a0 [ 499.290194][T10795] kmem_cache_alloc_node+0x5a/0x310 [ 499.295408][T10795] ? __alloc_skb+0xf9/0x7d0 [ 499.299983][T10795] __alloc_skb+0xf9/0x7d0 [ 499.304345][T10795] ppp_write+0xb0/0x3e0 [ 499.308538][T10795] ? vfs_write+0x2c7/0x9a0 [ 499.312971][T10795] ? ppp_read+0x860/0x860 [ 499.317306][T10795] vfs_write+0x2dc/0x9a0 [ 499.321568][T10795] ? file_end_write+0x250/0x250 [ 499.326442][T10795] ? __fget_files+0x28/0x460 [ 499.331042][T10795] ? __fget_files+0x3fc/0x460 [ 499.335765][T10795] ? __fdget_pos+0x1d4/0x360 [ 499.340383][T10795] ? ksys_write+0x70/0x260 [ 499.344820][T10795] ksys_write+0x14d/0x260 [ 499.349160][T10795] ? __ia32_sys_read+0x80/0x80 [ 499.353927][T10795] ? lockdep_hardirqs_on+0x94/0x140 [ 499.359310][T10795] do_syscall_64+0x4c/0xa0 [ 499.363740][T10795] ? clear_bhb_loop+0x60/0xb0 [ 499.368429][T10795] ? clear_bhb_loop+0x60/0xb0 [ 499.373199][T10795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.379180][T10795] RIP: 0033:0x7f57fcd9e159 [ 499.383594][T10795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.404117][T10795] RSP: 002b:00007f57fdba3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.412822][T10795] RAX: ffffffffffffffda RBX: 00007f57fd025fa0 RCX: 00007f57fcd9e159 [ 499.420884][T10795] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000005 [ 499.428945][T10795] RBP: 00007f57fdba3090 R08: 0000000000000000 R09: 0000000000000000 [ 499.437005][T10795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.444971][T10795] R13: 00007f57fd026038 R14: 00007f57fd025fa0 R15: 00007ffea13622f8 [ 499.452960][T10795] [ 499.480477][T10800] device vcan0 entered promiscuous mode [ 499.504414][T10800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 499.744114][T10819] netlink: 'syz.4.1819': attribute type 3 has an invalid length. [ 499.782484][T10819] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1819'. [ 499.823086][ T4282] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 499.895971][T10826] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1820'. [ 499.948968][T10826] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1820'. [ 500.019414][T10827] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1820'. [ 500.061680][T10826] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1820'. [ 500.121802][T10826] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1820'. [ 500.140073][T10837] netlink: 'syz.4.1821': attribute type 3 has an invalid length. [ 500.164472][T10826] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1820'. [ 500.192118][T10839] netlink: 'syz.4.1821': attribute type 3 has an invalid length. [ 500.206450][T10837] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1821'. [ 500.265958][T10837] netlink: 'syz.4.1821': attribute type 3 has an invalid length. [ 500.520609][T10848] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.528702][T10848] IPv6: NLM_F_CREATE should be set when creating new route [ 500.536367][T10848] IPv6: NLM_F_CREATE should be set when creating new route [ 500.543890][T10848] IPv6: NLM_F_CREATE should be set when creating new route [ 501.151512][T10876] netlink: 'syz.0.1832': attribute type 16 has an invalid length. [ 501.170784][T10876] netlink: 'syz.0.1832': attribute type 3 has an invalid length. [ 501.627403][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.633857][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.011462][T10891] __nla_validate_parse: 63 callbacks suppressed [ 504.011485][T10891] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1837'. [ 504.175372][T10891] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 505.238480][T10921] netlink: 'syz.2.1843': attribute type 33 has an invalid length. [ 505.253070][T10921] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1843'. [ 505.439758][T10929] netlink: 'syz.0.1846': attribute type 29 has an invalid length. [ 505.484784][T10929] netlink: 'syz.0.1846': attribute type 29 has an invalid length. [ 508.929223][T10954] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1851'. [ 508.982275][T10962] netlink: 'syz.3.1852': attribute type 2 has an invalid length. [ 509.183257][T10970] delete_channel: no stack [ 509.206348][T10970] delete_channel: no stack [ 510.001458][T10988] netlink: 'syz.3.1861': attribute type 3 has an invalid length. [ 510.020511][T10988] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1861'. [ 513.486641][T11012] netlink: 'syz.3.1867': attribute type 2 has an invalid length. [ 513.564571][T11019] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1870'. [ 513.680963][T11028] delete_channel: no stack [ 513.808095][T11028] delete_channel: no stack [ 516.938272][T11060] syz.1.1877[11060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.942249][T11060] syz.1.1877[11060] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.090137][T11060] netlink: 'syz.1.1877': attribute type 21 has an invalid length. [ 517.181129][T11062] syz.1.1877[11062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.181807][T11062] syz.1.1877[11062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 517.640794][T11073] netlink: 'syz.4.1881': attribute type 3 has an invalid length. [ 517.753951][T11073] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1881'. [ 521.584342][T11099] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1888'. [ 521.676651][T11104] delete_channel: no stack [ 521.796472][T11104] delete_channel: no stack [ 521.930064][T11111] netlink: 192156 bytes leftover after parsing attributes in process `syz.2.1891'. [ 521.990103][T11111] net_ratelimit: 3543 callbacks suppressed [ 521.990125][T11111] netlink: zone id is out of range [ 522.046473][T11111] netlink: zone id is out of range [ 522.051710][T11111] netlink: zone id is out of range [ 522.434918][T11122] syz.0.1894[11122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.435422][T11122] syz.0.1894[11122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.576010][T11123] netlink: 'syz.0.1894': attribute type 21 has an invalid length. [ 522.633086][T11128] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1897'. [ 522.689419][T11130] syz.0.1894[11130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.689523][T11130] syz.0.1894[11130] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 522.915529][T11137] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1898'. [ 526.269849][T11162] netlink: 'syz.3.1901': attribute type 29 has an invalid length. [ 526.304696][T11162] netlink: 'syz.3.1901': attribute type 29 has an invalid length. [ 527.474832][T11179] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1908'. [ 527.550485][T11180] netlink: 'syz.3.1909': attribute type 29 has an invalid length. [ 527.581536][T11180] netlink: 'syz.3.1909': attribute type 29 has an invalid length. [ 527.810852][T11194] delete_channel: no stack [ 527.817698][T11194] delete_channel: no stack [ 530.922429][T11193] netlink: 'syz.3.1909': attribute type 29 has an invalid length. [ 531.772372][T11274] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1919'. [ 531.799160][T11274] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 531.826947][T11274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.847774][T11284] sctp: [Deprecated]: syz.4.1918 (pid 11284) Use of int in maxseg socket option. [ 531.847774][T11284] Use struct sctp_assoc_value instead [ 533.476515][T11322] syz.2.1923[11322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.476664][T11322] syz.2.1923[11322] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.535117][T11327] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1925'. [ 533.657324][T11322] netlink: 'syz.2.1923': attribute type 21 has an invalid length. [ 533.727722][T11331] delete_channel: no stack [ 533.733089][T11331] delete_channel: no stack [ 533.859263][T11326] syz.2.1923[11326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.869768][T11326] syz.2.1923[11326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 540.151553][T11361] netlink: 126324 bytes leftover after parsing attributes in process `syz.4.1936'. [ 540.360961][T11385] delete_channel: no stack [ 540.410463][T11385] delete_channel: no stack [ 541.606214][T11409] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1946'. [ 541.622301][T11409] tc_dump_action: action bad kind [ 541.822861][T11419] delete_channel: no stack [ 541.863988][T11419] delete_channel: no stack [ 545.036495][T11443] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1953'. [ 545.096087][T11443] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 545.224657][T11447] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1958'. [ 545.315307][T11449] netlink: 'syz.3.1959': attribute type 10 has an invalid length. [ 545.413723][T11449] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1959'. [ 545.829915][T11459] delete_channel: no stack [ 545.874978][T11459] delete_channel: no stack [ 546.408527][T11457] netlink: 'syz.1.1961': attribute type 1 has an invalid length. [ 546.443922][T11457] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1961'. [ 549.519601][T11449] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 549.658571][T11449] batman_adv: batadv0: Removing interface: virt_wifi0 [ 549.882355][T11461] netlink: 'syz.3.1959': attribute type 10 has an invalid length. [ 550.218005][T11492] netlink: 'syz.1.1970': attribute type 10 has an invalid length. [ 554.563607][T11547] netlink: 'syz.3.1988': attribute type 10 has an invalid length. [ 554.618072][T11547] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 554.630665][T11544] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 555.569572][T11577] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1996'. [ 555.749207][T11577] delete_channel: no stack [ 555.794471][T11577] delete_channel: no stack [ 559.468595][T11645] IPv6: …: Disabled Multicast RS [ 560.908889][T11652] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2013'. [ 561.111703][T11665] delete_channel: no stack [ 561.187986][T11665] delete_channel: no stack [ 563.071136][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.077667][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.901098][T11658] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2014'. [ 563.922089][T11658] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 563.938670][T11658] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 563.959053][T11657] netlink: 'syz.2.2012': attribute type 33 has an invalid length. [ 563.968476][T11657] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2012'. [ 563.983624][T11652] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 563.993146][T11661] netlink: 'syz.1.2016': attribute type 10 has an invalid length. [ 564.033976][T11652] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 564.073915][T11652] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 564.940591][T11699] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2024'. [ 565.114687][T11699] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.2024'. [ 565.450351][T11708] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2027'. [ 565.748811][T11722] netlink: 'syz.2.2030': attribute type 10 has an invalid length. [ 565.821130][T11719] netlink: 'syz.1.2029': attribute type 29 has an invalid length. [ 568.949912][T11731] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2033'. [ 568.968040][T11719] netlink: 'syz.1.2029': attribute type 29 has an invalid length. [ 569.472813][T11765] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2041'. [ 571.175878][T11794] delete_channel: no stack [ 571.770560][T11813] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.2052'. [ 571.861522][T11813] openvswitch: netlink: Flow actions attr not present in new flow. [ 572.836140][T11813] netlink: 'syz.1.2052': attribute type 2 has an invalid length. [ 572.935210][T11816] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2053'. [ 574.201384][T11855] sctp: [Deprecated]: syz.1.2062 (pid 11855) Use of struct sctp_assoc_value in delayed_ack socket option. [ 574.201384][T11855] Use struct sctp_sack_info instead [ 574.238634][T11856] sctp: [Deprecated]: syz.1.2062 (pid 11856) Use of struct sctp_assoc_value in delayed_ack socket option. [ 574.238634][T11856] Use struct sctp_sack_info instead [ 574.488827][T11861] netlink: 'syz.3.2064': attribute type 3 has an invalid length. [ 574.523081][T11861] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2064'. [ 575.753360][T11877] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2069'. [ 577.627484][T11877] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 577.674040][T11877] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 577.697108][T11877] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 577.737057][T11883] netlink: 'syz.3.2071': attribute type 15 has an invalid length. [ 577.769626][T11883] netlink: 'syz.3.2071': attribute type 16 has an invalid length. [ 577.798806][T11883] netlink: 'syz.3.2071': attribute type 4 has an invalid length. [ 577.820333][T11883] netlink: 'syz.3.2071': attribute type 6 has an invalid length. [ 577.836725][T11883] netlink: 'syz.3.2071': attribute type 15 has an invalid length. [ 577.845357][T11883] netlink: 'syz.3.2071': attribute type 16 has an invalid length. [ 577.856165][T11883] netlink: 'syz.3.2071': attribute type 20 has an invalid length. [ 577.872511][T11883] netlink: 'syz.3.2071': attribute type 21 has an invalid length. [ 577.881129][T11883] netlink: 'syz.3.2071': attribute type 23 has an invalid length. [ 577.934877][T11883] netlink: 13226 bytes leftover after parsing attributes in process `syz.3.2071'. [ 578.303679][T11908] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2076'. [ 578.395054][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2076'. [ 578.524886][T11913] device syzkaller0 entered promiscuous mode [ 583.417378][T11938] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2084'. [ 583.590546][T11941] netlink: 'syz.2.2083': attribute type 11 has an invalid length. [ 583.666865][T11941] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2083'. [ 583.696480][T11946] netlink: 'syz.2.2083': attribute type 11 has an invalid length. [ 583.726983][T11946] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2083'. [ 583.765736][T11940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.841347][T11969] validate_nla: 5 callbacks suppressed [ 584.841364][T11969] netlink: 'syz.4.2089': attribute type 5 has an invalid length. [ 584.861495][T11969] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2089'. [ 584.983006][T11983] netlink: 'syz.2.2094': attribute type 3 has an invalid length. [ 584.996687][T11983] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2094'. [ 585.271589][T11992] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2098'. [ 588.202335][T11992] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 588.225957][T11992] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 588.276541][T11992] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 588.520076][T12007] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 588.554765][T12010] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2102'. [ 589.371602][T12016] device syzkaller0 entered promiscuous mode [ 591.373579][T12050] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2111'. [ 595.858250][T12050] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 595.878015][T12050] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 595.914857][T12050] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 596.049249][T12059] netlink: 'syz.4.2114': attribute type 10 has an invalid length. [ 596.091395][T12059] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2114'. [ 596.692906][T12102] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2123'. [ 599.852071][T12116] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2125'. [ 603.918565][T12172] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 604.087113][T12181] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2143'. [ 604.114224][T12181] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2143'. [ 604.147416][T12182] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2143'. [ 604.325721][T12186] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2144'. [ 604.795232][T12209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2150'. [ 604.939087][T12209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2150'. [ 605.044431][T12216] netlink: 'syz.2.2150': attribute type 21 has an invalid length. [ 605.060178][T12216] netlink: 'syz.2.2150': attribute type 1 has an invalid length. [ 605.083644][T12216] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2150'. [ 605.110723][T12211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2150'. [ 605.131682][T12221] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2150'. [ 605.240747][T12223] netlink: 'syz.4.2152': attribute type 13 has an invalid length. [ 605.249673][T12223] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.2152'. [ 608.486421][T12237] netlink: zone id is out of range [ 608.632175][T12238] netlink: 'syz.2.2155': attribute type 3 has an invalid length. [ 608.904367][T12240] netlink: zone id is out of range [ 609.963991][T12265] __nla_validate_parse: 3 callbacks suppressed [ 609.964011][T12265] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2160'. [ 610.061327][T12274] netlink: 'syz.0.2160': attribute type 2 has an invalid length. [ 610.218684][T12265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.295114][T12265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.358849][T12265] bond0 (unregistering): Released all slaves [ 610.423488][T12269] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2160'. [ 615.932186][T12359] netlink: 'syz.0.2188': attribute type 39 has an invalid length. [ 618.282930][T12359] device macvlan0 entered promiscuous mode [ 619.017643][T12399] netlink: 'syz.3.2199': attribute type 1 has an invalid length. [ 619.034275][T12399] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.2199'. [ 619.298094][T12404] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2200'. [ 619.873384][T12417] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2202'. [ 623.140532][T12426] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2206'. [ 623.575354][T12446] ================================================================== [ 623.583667][T12446] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 623.591618][T12446] Write of size 72 at addr ffff88803ab64f90 by task syz.1.2213/12446 [ 623.599833][T12446] [ 623.602392][T12446] CPU: 1 PID: 12446 Comm: syz.1.2213 Not tainted syzkaller #0 [ 623.610111][T12446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.620535][T12446] Call Trace: [ 623.623939][T12446] [ 623.626917][T12446] dump_stack_lvl+0x188/0x24e [ 623.631898][T12446] ? __lock_acquire+0x7c40/0x7c40 [ 623.636944][T12446] ? show_regs_print_info+0x12/0x12 [ 623.642363][T12446] ? load_image+0x410/0x410 [ 623.646894][T12446] ? __virt_addr_valid+0x467/0x540 [ 623.652105][T12446] ? __bpf_get_stackid+0x6c9/0x920 [ 623.657223][T12446] print_report+0xa8/0x210 [ 623.661738][T12446] kasan_report+0x10b/0x140 [ 623.666392][T12446] ? __bpf_get_stackid+0x6c9/0x920 [ 623.671784][T12446] kasan_check_range+0x235/0x290 [ 623.676814][T12446] ? __bpf_get_stackid+0x6c9/0x920 [ 623.682044][T12446] memcpy+0x3c/0x60 [ 623.685865][T12446] __bpf_get_stackid+0x6c9/0x920 [ 623.690850][T12446] bpf_get_stackid_pe+0x33f/0x400 [ 623.695891][T12446] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 623.701468][T12446] bpf_overflow_handler+0x50b/0x790 [ 623.706693][T12446] ? bpf_overflow_handler+0xd9/0x790 [ 623.712091][T12446] ? perf_swevent_overflow+0x230/0x230 [ 623.717562][T12446] ? ct_irq_exit_irqson+0x113/0x170 [ 623.722777][T12446] ? __perf_event_account_interrupt+0x187/0x280 [ 623.729034][T12446] __perf_event_overflow+0x457/0x630 [ 623.734356][T12446] perf_swevent_event+0x315/0x570 [ 623.739660][T12446] ? perf_tp_event+0xc10/0xc10 [ 623.744434][T12446] ? perf_tp_event+0xa8e/0xc10 [ 623.749296][T12446] ___perf_sw_event+0x498/0x6d0 [ 623.754165][T12446] ? ___perf_sw_event+0x184/0x6d0 [ 623.759207][T12446] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 623.765647][T12446] ? __lock_acquire+0x1465/0x7c40 [ 623.770685][T12446] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 623.776849][T12446] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 623.783070][T12446] ? lock_chain_count+0x20/0x20 [ 623.788115][T12446] __perf_sw_event+0x135/0x260 [ 623.792892][T12446] do_user_addr_fault+0x497/0xb20 [ 623.797995][T12446] ? trace_hardirqs_off_finish+0x86/0x180 [ 623.803940][T12446] exc_page_fault+0x60/0x100 [ 623.808651][T12446] ? __might_fault+0xa6/0x120 [ 623.813344][T12446] asm_exc_page_fault+0x22/0x30 [ 623.818249][T12446] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 623.824895][T12446] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 623.844973][T12446] RSP: 0018:ffffc9000df87958 EFLAGS: 00050206 [ 623.851683][T12446] RAX: ffffffff8413e001 RBX: ffffc9001bfb1000 RCX: 000000000000de73 [ 623.859788][T12446] RDX: 000000000000fe33 RSI: 0000200000002000 RDI: ffffc9001bfb2fc0 [ 623.867778][T12446] RBP: ffffc9000df87a90 R08: ffffc9001bfc0e32 R09: 1ffff920037f81c6 [ 623.876015][T12446] R10: dffffc0000000000 R11: fffff520037f81c7 R12: 1ffff92001bf0f83 [ 623.884187][T12446] R13: 0000200000000040 R14: 000000000000fe33 R15: 00007ffffffef1cd [ 623.892199][T12446] ? _copy_from_iter+0x251/0x1130 [ 623.897432][T12446] _copy_from_iter+0x2a9/0x1130 [ 623.902315][T12446] ? __lock_acquire+0x7c40/0x7c40 [ 623.907497][T12446] ? copyout_mc+0x110/0x110 [ 623.912275][T12446] ? do_raw_spin_unlock+0x11d/0x230 [ 623.917478][T12446] ? _raw_spin_unlock+0x24/0x40 [ 623.922332][T12446] ? find_vmap_area+0xf8/0x110 [ 623.927103][T12446] ? __phys_addr_symbol+0x2b/0x70 [ 623.932133][T12446] ? __check_object_size+0x4f6/0xa70 [ 623.937511][T12446] netlink_sendmsg+0x755/0xbd0 [ 623.942402][T12446] ? netlink_getsockopt+0x550/0x550 [ 623.947629][T12446] ? apparmor_socket_sendmsg+0x8a/0x330 [ 623.953190][T12446] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 623.958622][T12446] ? security_socket_sendmsg+0x7c/0xa0 [ 623.964212][T12446] sock_write_iter+0x2d5/0x3e0 [ 623.969028][T12446] ? sock_read_iter+0x3a0/0x3a0 [ 623.974105][T12446] ? common_file_perm+0x171/0x1c0 [ 623.979332][T12446] vfs_write+0x482/0x9a0 [ 623.983588][T12446] ? file_end_write+0x250/0x250 [ 623.988474][T12446] ? __fget_files+0x3fc/0x460 [ 623.993455][T12446] ? __fdget_pos+0x1d4/0x360 [ 623.998177][T12446] ? ksys_write+0x70/0x260 [ 624.002800][T12446] ksys_write+0x14d/0x260 [ 624.007246][T12446] ? __ia32_sys_read+0x80/0x80 [ 624.012132][T12446] ? lockdep_hardirqs_on+0x94/0x140 [ 624.017434][T12446] do_syscall_64+0x4c/0xa0 [ 624.022036][T12446] ? clear_bhb_loop+0x60/0xb0 [ 624.026981][T12446] ? clear_bhb_loop+0x60/0xb0 [ 624.031759][T12446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.037956][T12446] RIP: 0033:0x7fdaca39e159 [ 624.042385][T12446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.062197][T12446] RSP: 002b:00007fdacb196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 624.070631][T12446] RAX: ffffffffffffffda RBX: 00007fdaca625fa0 RCX: 00007fdaca39e159 [ 624.078719][T12446] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 000000000000000f [ 624.086890][T12446] RBP: 00007fdaca43503b R08: 0000000000000000 R09: 0000000000000000 [ 624.094980][T12446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.103071][T12446] R13: 00007fdaca626038 R14: 00007fdaca625fa0 R15: 00007ffd3e4aff58 [ 624.111242][T12446] [ 624.114349][T12446] [ 624.116969][T12446] Allocated by task 12446: [ 624.121380][T12446] kasan_set_track+0x4b/0x70 [ 624.126009][T12446] __kasan_kmalloc+0x8e/0xa0 [ 624.130715][T12446] __kmalloc_node+0xb2/0x240 [ 624.135351][T12446] bpf_map_area_alloc+0x47/0xe0 [ 624.140312][T12446] prealloc_elems_and_freelist+0x86/0x1c0 [ 624.146035][T12446] stack_map_alloc+0x386/0x510 [ 624.151251][T12446] map_create+0x524/0xff0 [ 624.155678][T12446] __sys_bpf+0x38b/0x780 [ 624.159923][T12446] __x64_sys_bpf+0x78/0x90 [ 624.164614][T12446] do_syscall_64+0x4c/0xa0 [ 624.169118][T12446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.175337][T12446] [ 624.177802][T12446] Last potentially related work creation: [ 624.183600][T12446] kasan_save_stack+0x3a/0x60 [ 624.188558][T12446] __kasan_record_aux_stack+0xb2/0xc0 [ 624.194213][T12446] call_rcu+0x14f/0x950 [ 624.198402][T12446] __nf_register_net_hook+0x787/0x910 [ 624.203949][T12446] nf_register_net_hook+0xae/0x190 [ 624.209151][T12446] nf_register_net_hooks+0x40/0x1a0 [ 624.214436][T12446] nf_ct_netns_do_get+0x3bc/0x5b0 [ 624.219459][T12446] nf_ct_netns_inet_get+0x1f/0x150 [ 624.224666][T12446] nf_conncount_init+0x123/0x380 [ 624.229603][T12446] ovs_ct_init+0x312/0x480 [ 624.234122][T12446] ovs_init_net+0x1e2/0x240 [ 624.238621][T12446] ops_init+0x360/0x5e0 [ 624.242777][T12446] setup_net+0x4f2/0xbd0 [ 624.247064][T12446] copy_net_ns+0x33e/0x5b0 [ 624.251482][T12446] create_new_namespaces+0x3ce/0x700 [ 624.256787][T12446] copy_namespaces+0x3ae/0x410 [ 624.261546][T12446] copy_process+0x199b/0x4070 [ 624.266399][T12446] kernel_clone+0x24b/0x900 [ 624.270910][T12446] __x64_sys_clone+0x1a7/0x220 [ 624.276027][T12446] do_syscall_64+0x4c/0xa0 [ 624.280458][T12446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 624.286395][T12446] [ 624.288711][T12446] Second to last potentially related work creation: [ 624.295461][T12446] kasan_save_stack+0x3a/0x60 [ 624.300140][T12446] __kasan_record_aux_stack+0xb2/0xc0 [ 624.305508][T12446] call_rcu+0x14f/0x950 [ 624.309665][T12446] nf_unregister_net_hooks+0xc7/0x130 [ 624.315037][T12446] cleanup_net+0x703/0xba0 [ 624.320002][T12446] process_one_work+0x8ab/0x1160 [ 624.324966][T12446] worker_thread+0xaf5/0x12a0 [ 624.329737][T12446] kthread+0x29d/0x330 [ 624.333800][T12446] ret_from_fork+0x1f/0x30 [ 624.338324][T12446] [ 624.340687][T12446] The buggy address belongs to the object at ffff88803ab64f80 [ 624.340687][T12446] which belongs to the cache kmalloc-cg-64 of size 64 [ 624.354853][T12446] The buggy address is located 16 bytes inside of [ 624.354853][T12446] 64-byte region [ffff88803ab64f80, ffff88803ab64fc0) [ 624.367955][T12446] [ 624.370270][T12446] The buggy address belongs to the physical page: [ 624.377121][T12446] page:ffffea0000ead900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3ab64 [ 624.387384][T12446] memcg:ffff88802867d801 [ 624.391728][T12446] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 624.399299][T12446] raw: 00fff00000000200 ffffea0000c13ac0 dead000000000003 ffff888017442780 [ 624.408078][T12446] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802867d801 [ 624.416657][T12446] page dumped because: kasan: bad access detected [ 624.423085][T12446] page_owner tracks the page as allocated [ 624.428816][T12446] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 10859, tgid 10858 (syz.4.1826), ts 501141736360, free_ts 501141095905 [ 624.448186][T12446] post_alloc_hook+0x173/0x1a0 [ 624.453398][T12446] get_page_from_freelist+0x206b/0x2180 [ 624.459471][T12446] __alloc_pages+0x1ec/0x4f0 [ 624.464150][T12446] alloc_slab_page+0x5d/0x180 [ 624.468825][T12446] new_slab+0x87/0x2d0 [ 624.473053][T12446] ___slab_alloc+0xbc5/0x1240 [ 624.477920][T12446] __kmem_cache_alloc_node+0x126/0x270 [ 624.483468][T12446] __kmalloc_node+0xa2/0x240 [ 624.488068][T12446] kvmalloc_node+0x6c/0x180 [ 624.492748][T12446] nf_hook_entries_grow+0x31a/0x760 [ 624.498135][T12446] __nf_register_net_hook+0x2c9/0x910 [ 624.503611][T12446] nf_register_net_hook+0xae/0x190 [ 624.508906][T12446] nf_register_net_hooks+0x40/0x1a0 [ 624.514111][T12446] nf_defrag_ipv6_enable+0x83/0x110 [ 624.519405][T12446] nf_ct_netns_do_get+0x1e4/0x5b0 [ 624.524688][T12446] nf_ct_netns_inet_get+0x3b/0x150 [ 624.529810][T12446] page last free stack trace: [ 624.534475][T12446] free_unref_page_prepare+0x8e5/0x9e0 [ 624.539958][T12446] free_unref_page+0x2e/0x3f0 [ 624.544722][T12446] qlist_free_all+0x76/0xe0 [ 624.549348][T12446] kasan_quarantine_reduce+0x144/0x160 [ 624.554803][T12446] __kasan_kmalloc+0x1e/0xa0 [ 624.559504][T12446] alloc_workqueue+0x1f3/0x14a0 [ 624.564715][T12446] tipc_topsrv_init_net+0x3d1/0x870 [ 624.569957][T12446] ops_init+0x360/0x5e0 [ 624.574127][T12446] setup_net+0x4f2/0xbd0 [ 624.578385][T12446] copy_net_ns+0x33e/0x5b0 [ 624.582812][T12446] create_new_namespaces+0x3ce/0x700 [ 624.588286][T12446] copy_namespaces+0x3ae/0x410 [ 624.593157][T12446] copy_process+0x199b/0x4070 [ 624.598040][T12446] kernel_clone+0x24b/0x900 [ 624.602716][T12446] __x64_sys_clone+0x1a7/0x220 [ 624.607649][T12446] do_syscall_64+0x4c/0xa0 [ 624.612342][T12446] [ 624.614660][T12446] Memory state around the buggy address: [ 624.620476][T12446] ffff88803ab64e80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 624.629060][T12446] ffff88803ab64f00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 624.637833][T12446] >ffff88803ab64f80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 624.646427][T12446] ^ [ 624.652061][T12446] ffff88803ab65000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 624.660306][T12446] ffff88803ab65080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 624.668445][T12446] ================================================================== [ 624.676882][T12446] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 624.684072][T12446] CPU: 1 PID: 12446 Comm: syz.1.2213 Not tainted syzkaller #0 [ 624.691627][T12446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 624.701678][T12446] Call Trace: [ 624.704954][T12446] [ 624.707890][T12446] dump_stack_lvl+0x188/0x24e [ 624.712715][T12446] ? memcpy+0x3c/0x60 [ 624.716697][T12446] ? show_regs_print_info+0x12/0x12 [ 624.722075][T12446] ? load_image+0x410/0x410 [ 624.726674][T12446] panic+0x2d3/0x710 [ 624.730752][T12446] ? bpf_jit_dump+0xd0/0xd0 [ 624.735265][T12446] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 624.741532][T12446] ? _raw_spin_unlock+0x40/0x40 [ 624.746425][T12446] ? print_memory_metadata+0x314/0x400 [ 624.751920][T12446] check_panic_on_warn+0x80/0xa0 [ 624.756971][T12446] ? __bpf_get_stackid+0x6c9/0x920 [ 624.762276][T12446] end_report+0x66/0x110 [ 624.766524][T12446] kasan_report+0x118/0x140 [ 624.771035][T12446] ? __bpf_get_stackid+0x6c9/0x920 [ 624.776237][T12446] kasan_check_range+0x235/0x290 [ 624.781396][T12446] ? __bpf_get_stackid+0x6c9/0x920 [ 624.786522][T12446] memcpy+0x3c/0x60 [ 624.790418][T12446] __bpf_get_stackid+0x6c9/0x920 [ 624.795367][T12446] bpf_get_stackid_pe+0x33f/0x400 [ 624.800774][T12446] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 624.806336][T12446] bpf_overflow_handler+0x50b/0x790 [ 624.811806][T12446] ? bpf_overflow_handler+0xd9/0x790 [ 624.817178][T12446] ? perf_swevent_overflow+0x230/0x230 [ 624.822635][T12446] ? ct_irq_exit_irqson+0x113/0x170 [ 624.828028][T12446] ? __perf_event_account_interrupt+0x187/0x280 [ 624.834280][T12446] __perf_event_overflow+0x457/0x630 [ 624.839662][T12446] perf_swevent_event+0x315/0x570 [ 624.844795][T12446] ? perf_tp_event+0xc10/0xc10 [ 624.849621][T12446] ? perf_tp_event+0xa8e/0xc10 [ 624.854605][T12446] ___perf_sw_event+0x498/0x6d0 [ 624.859480][T12446] ? ___perf_sw_event+0x184/0x6d0 [ 624.864567][T12446] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 624.871006][T12446] ? __lock_acquire+0x1465/0x7c40 [ 624.876057][T12446] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 624.882147][T12446] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 624.887904][T12446] ? lock_chain_count+0x20/0x20 [ 624.892771][T12446] __perf_sw_event+0x135/0x260 [ 624.897545][T12446] do_user_addr_fault+0x497/0xb20 [ 624.902605][T12446] ? trace_hardirqs_off_finish+0x86/0x180 [ 624.908416][T12446] exc_page_fault+0x60/0x100 [ 624.913466][T12446] ? __might_fault+0xa6/0x120 [ 624.918159][T12446] asm_exc_page_fault+0x22/0x30 [ 624.923024][T12446] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 624.929659][T12446] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 624.949449][T12446] RSP: 0018:ffffc9000df87958 EFLAGS: 00050206 [ 624.955529][T12446] RAX: ffffffff8413e001 RBX: ffffc9001bfb1000 RCX: 000000000000de73 [ 624.963960][T12446] RDX: 000000000000fe33 RSI: 0000200000002000 RDI: ffffc9001bfb2fc0 [ 624.972113][T12446] RBP: ffffc9000df87a90 R08: ffffc9001bfc0e32 R09: 1ffff920037f81c6 [ 624.980358][T12446] R10: dffffc0000000000 R11: fffff520037f81c7 R12: 1ffff92001bf0f83 [ 624.988331][T12446] R13: 0000200000000040 R14: 000000000000fe33 R15: 00007ffffffef1cd [ 624.996589][T12446] ? _copy_from_iter+0x251/0x1130 [ 625.001787][T12446] _copy_from_iter+0x2a9/0x1130 [ 625.006826][T12446] ? __lock_acquire+0x7c40/0x7c40 [ 625.012036][T12446] ? copyout_mc+0x110/0x110 [ 625.016741][T12446] ? do_raw_spin_unlock+0x11d/0x230 [ 625.022229][T12446] ? _raw_spin_unlock+0x24/0x40 [ 625.027405][T12446] ? find_vmap_area+0xf8/0x110 [ 625.032197][T12446] ? __phys_addr_symbol+0x2b/0x70 [ 625.037246][T12446] ? __check_object_size+0x4f6/0xa70 [ 625.042703][T12446] netlink_sendmsg+0x755/0xbd0 [ 625.047677][T12446] ? netlink_getsockopt+0x550/0x550 [ 625.053361][T12446] ? apparmor_socket_sendmsg+0x8a/0x330 [ 625.059002][T12446] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 625.064287][T12446] ? security_socket_sendmsg+0x7c/0xa0 [ 625.069934][T12446] sock_write_iter+0x2d5/0x3e0 [ 625.074696][T12446] ? sock_read_iter+0x3a0/0x3a0 [ 625.079647][T12446] ? common_file_perm+0x171/0x1c0 [ 625.084714][T12446] vfs_write+0x482/0x9a0 [ 625.089016][T12446] ? file_end_write+0x250/0x250 [ 625.094754][T12446] ? __fget_files+0x3fc/0x460 [ 625.099441][T12446] ? __fdget_pos+0x1d4/0x360 [ 625.104032][T12446] ? ksys_write+0x70/0x260 [ 625.108485][T12446] ksys_write+0x14d/0x260 [ 625.112841][T12446] ? __ia32_sys_read+0x80/0x80 [ 625.117711][T12446] ? lockdep_hardirqs_on+0x94/0x140 [ 625.123089][T12446] do_syscall_64+0x4c/0xa0 [ 625.127597][T12446] ? clear_bhb_loop+0x60/0xb0 [ 625.132570][T12446] ? clear_bhb_loop+0x60/0xb0 [ 625.137254][T12446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 625.143332][T12446] RIP: 0033:0x7fdaca39e159 [ 625.147763][T12446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.167743][T12446] RSP: 002b:00007fdacb196028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 625.176280][T12446] RAX: ffffffffffffffda RBX: 00007fdaca625fa0 RCX: 00007fdaca39e159 [ 625.184618][T12446] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 000000000000000f [ 625.192872][T12446] RBP: 00007fdaca43503b R08: 0000000000000000 R09: 0000000000000000 [ 625.201040][T12446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.209157][T12446] R13: 00007fdaca626038 R14: 00007fdaca625fa0 R15: 00007ffd3e4aff58 [ 625.217319][T12446] [ 625.220743][T12446] Kernel Offset: disabled [ 625.225113][T12446] Rebooting in 86400 seconds..