last executing test programs: 8.404335181s ago: executing program 0 (id=980): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='}))*-&.\'\x17\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) socket$kcm(0x10, 0x400000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000600)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x27b38}]}, &(0x7f0000000800)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000240)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000940)={'wlan1\x00', @random="010021201000"}) 7.857304426s ago: executing program 0 (id=984): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r0, 0x5, 0x27, 0x0, 0x0, 0x0, 0x21000d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000cc0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r1], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3], 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r5, 0x0, 0xe, 0x0, &(0x7f0000000a00)='\x00'/14, 0x0, 0x7e6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000c80)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x10b8}, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x20000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xb59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e400002000100000000000000ff0200000000000000000001ffaaaaaa"], 0xfdef) close(r7) recvmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000e00)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce81020329"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x18}, 0x0) close(r4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000c00)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba0900fc160af3653c001ac00400022208000200050001002c000000eab556a705251e61c9c100000000000ffed000032e301bb4d89b4af300ffffc6c9533e7d873c5397", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 4.650076974s ago: executing program 0 (id=987): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8937, &(0x7f00000003c0)={'batadv_slave_1\x00', @random="010000201000"}) r1 = perf_event_open(&(0x7f0000001d40)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="1400000037000b0f925a2a22feab3c3d0ea2c2e4", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x5, 0x5, 0x0, &(0x7f0000001ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000001f00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000001f80)={0x5, 0x80, 0x37, 0x0, 0x0, 0x0, 0x0, 0x7683, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87dc, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x800000, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x3, 0x3a) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003300)="2e00000011008188040f80ec59acbc0413a1f8480b0000", 0x17}], 0x1}, 0x40000) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2, &(0x7f0000000040)=@raw=[@alu={0x7, 0x1, 0x3, 0x0, 0x9, 0x2, 0x1}, @call={0x85, 0x0, 0x0, 0xa5}], &(0x7f0000000080)='GPL\x00', 0x6, 0xe2, &(0x7f00000000c0)=""/226, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x9, 0x9, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)=[{0x0, 0x4, 0xd, 0x9}, {0x4, 0x2, 0x3, 0xc}, {0x4, 0x1, 0xd}, {0x1, 0x5, 0xd, 0xa}]}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r4, r5, 0x0, r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x1, 0x8, &(0x7f0000003400)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000003480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.5992639s ago: executing program 1 (id=988): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000040)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/169, 0xa9}], 0x1, &(0x7f00000001c0)=""/168, 0xa8}, 0x10000) r1 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x2000) sendmsg$kcm(r1, &(0x7f0000001580)={&(0x7f0000001340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @private=0xa010102}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000013c0)="896d713b47002bcfef8770a52f98b3ee88f80a9a8ab59120d474134aad2011dad12145985341dd6e598c7a3cbbb0943fe97b0fba3d22597b471fba24c0ff964072ea3e7e4c223f499eacccbcb99889081cd9856a595dd48a769f5b17ae2672b6c4c149e1d04f16a52824968dd3a0277d8975b94ae9561c", 0x77}, {&(0x7f0000001440)="7afd4702d966253d3ab0a0caf5be559913eb2f414d868ebeb5daad189a3481370f5c918c3f19193048453428288868d65fc1b3d755ecec33f83b34fdcd672a6607d66aa81022aebeb8b8b224eab2e5c1cdadd66101a174fdfc3d2aac7bbf1084c4c8dbfc1030fb3dd75c0c0a0cb8658242386b2e0aa0c7d695e53c8346e984a528ee0c0751a33181b4f0b6ce9bf49b879840970da3ca48616b6ea2100da77cd0a930ce6c5419fa", 0xa7}, {&(0x7f0000001500)="db80a5ca58b5370807c36a7662d84312c16d56cf918386140f79dd542a36b13c807417db476a9127d9964e7b6109b717500b", 0x32}], 0x3}, 0x4001) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000015c0)={0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x1d, 0x9, &(0x7f0000001600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @ldst={0x2, 0x3, 0x2, 0x5, 0x1, 0x50, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xa}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000001680)='GPL\x00', 0x4, 0x2c, &(0x7f00000016c0)=""/44, 0x40f00, 0x5, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x0, 0x8, 0x7, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000017c0)=[{0x2, 0x2, 0x4, 0xa}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000019c0)={@cgroup=0xffffffffffffffff, 0x26, 0x0, 0xea9c, &(0x7f00000018c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001900)=[0x0, 0x0, 0x0], &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a40)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001d40)={0xffffffffffffffff, 0xe0, &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000001b40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001b80), &(0x7f0000001bc0), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000001c00)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001a00)={@map=r6, r2, 0xf, 0x28, r3, @void, @void, @void, @value=r7, r5}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=@arena={0x21, 0x0, 0x0, 0xa, 0x20400, r6, 0x3e8a, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001f40)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r9, 0x6, '\x00', r8, r0, 0x5, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000020c0)={0x6, 0x10, &(0x7f0000001e00)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8d7d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x7, 0x0, 0x4, 0x2, 0x5, 0xae, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000001e80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x62, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001f00)={0x3, 0x9, 0x1, 0x7}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000002040)=[r9, r10, r9, r9, r11], &(0x7f0000002080)=[{0x0, 0x3, 0x3, 0xc}, {0x3, 0x2, 0x6, 0x2}, {0x4, 0x5, 0xc, 0xc}, {0x1, 0x1, 0xc, 0x3}], 0x10, 0x9}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002440)={&(0x7f0000002180)="aebb7c3ad8a14bdea97a41c2104c1d7af8a3c9e223d9bf0c39453ea3403472e54703a069696a8a0b53e39003a5ccfc0ea27475e8f3d727d9c2224e2fd3684587f086331ec4eb2f1f91f3d0fb031fbda35308d5da365eee81a66bd8be44d52246e07ce2244bcf8d0df832621866ff00c529fbced5cf7fb0be49bd026f4968c1cf99b2ce2d7cca2d83", &(0x7f0000002240)=""/97, &(0x7f00000022c0)="77fa84e5ade4bfb7ea8695f2ac53050fcf7c57e15007a7130ed4993ce2479ab465c6d8b8c7f77cebba4c3804a30484eb08dde25db95d5c47521b2e2c5eccfa6cbeda2748d9dc13b48b276277e269f264764cbf17f134b6ee916072dfd1e315bcc0069ec279372d893e8ddadb85f4bc7b1e9c0870cd745eacecd24c0861f1a0553e933db5226d86dd8fcd979ac7c8b534655eb59dd1b18443fbaedf81075ef2e473459288ea8f288ee89783822658bf0bf7d5b0a1c59daec799bf001e6b16107e888676ab90b32470e0fdfeacadefc88b81b5a64eb56a47204b1c3ada6366b4f620d7dfcf42d12d9f4a97bfac4d81b6e00a59f58a5b8c2066", &(0x7f00000023c0)="358aca92de90cc8addcb32f4eac093d7ac305567f961f3915920747ed99cd811ad522c384fd317ca44d3c5ab3082c6148cfda25b9da1904fc935495001df36699728e86d351c3b9fb4df5255faa1b4fadf2b961c2ff559b7fd7ed7702154bcc186882235aafd6fdfdb396816b6", 0xfffffe00, r6, 0x4}, 0x38) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002480)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x6, '\x00', r8, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002680)={0x1b, 0x0, 0x0, 0x7, 0x0, r9, 0x800, '\x00', r8, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x19, &(0x7f0000002500)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @exit, @call={0x85, 0x0, 0x0, 0xb9}, @alu={0x4, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffff, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffe0, 0x8}], &(0x7f0000002600)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x3, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002640)={0x4, 0xb, 0x5, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002700)=[r11, r13, r10, r10, r6, r9, r6], &(0x7f0000002740)=[{0x2, 0x3, 0x5, 0xb}, {0x4, 0x3, 0x2, 0x8}, {0x2, 0x1, 0xf, 0xa}, {0x0, 0x5, 0xe, 0x5}, {0x5, 0x5, 0xc, 0x2}, {0x5, 0x4, 0xd, 0x9}, {0x1, 0x3, 0x9, 0x6}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003a00)={r3, 0x0, 0x82, 0x1000, &(0x7f0000002880)="b94f687d4a4cd63a460e325983c3c8360f08ab4dbfe8c3dd6972b5614f4d9048c0fa4f309efc8cb2262308a7832107b5adcc736f78a403979b6e72b8b19f04428ac64e7ae416b8b3f6f24e5c2e35b99f5992cf4d2cc33ad545f1bcbb4b01f236ffddb92dbfb35683741431e5ab5ef776f22139db6cba9e20a54bdc825177c833f57c", &(0x7f0000002940)=""/4096, 0x0, 0x0, 0x19, 0x74, &(0x7f0000003940)="abc4b6258781cccb7a54f3024d8a9518813e9a48422e45d6bf", &(0x7f0000003980)="cf13d771a1e112b8e6d95c5e84fe9d4838b3a846bc7208b06b24ea958b8f8d54494a604058c6a63ed8e392fb4b98d97fb05b83d41c7f343d7456789a7443a77c57852d26de022e7e93accd36abd94e92e4749a82885dd4eda65536afa954e50cd6fab3d679d3051cbcde9e969decf545398c96d2", 0x5, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003b80)={r13, &(0x7f0000003a80)="35f3822bcc56098d20f62424bea1e83b891e9b006a964ba12b0f14f7a3a8a7b115e0790b03e1fcababf9d42626ed4b4f04a2c87cddf50e113d6455ee659becb90a38578e1e55f3736d55b1fda969ce1c756c5643f468882085a1bd831391133446554835abb923fdde49b6b953e827285c20f58338a09d96d137657c3b7fd187d844d849d797a9221872e4fd64b4f02c0feb5f0ef0068380d3226b871191dcb57009261d0922da9acafc4222", &(0x7f0000003b40)=""/50}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003bc0)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0xffffffff, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r14 = syz_clone(0x41540, &(0x7f0000003d00)="bcb862b3de1178aeed313b597921d62966f0b3bb00a491e00cdab595c05e37cbe30ffdc84b789db5414411149ada3469d5dd5550762572b97136c199a7037cd44b86d544801dc07164eeb8ed955e84f6b3cb3b610ed17b7944869db5dfafbf92fbf0e97408d9c0076401a73abba9e7aacf280b765436c2eb462e7fd86c94e35ab14f8f597b5cab2204a8aa", 0x8b, &(0x7f0000003dc0), &(0x7f0000003e00), &(0x7f0000003e40)="e1965f12d5bfe53d00bd643b3076a4a75fc621dca1278b43b547e536ed92b871a61cbf946cc7588792db725c04cbf4e905a7c003ddabaaab8ae6e692a62fa9aea83c60c2e4335e581e1425f5aebe68eefee48a3cb399bf9789bfc66267de9f85cdb4eeded02d6894c1dc2b05ed9a36a5439b130b47ba23bb23455c7106b7f7703695b064a6204a94778add04105b3885e49b2219e8a7045ce4121a4453b63dd1593d852ea6dc0c5b56168c3fba3c") perf_event_open(&(0x7f0000003c80)={0x4, 0x80, 0x8, 0x8, 0x40, 0x3, 0x0, 0x9, 0x8, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000003c40), 0x4}, 0x421d, 0x0, 0x9, 0x4, 0x5, 0xc107, 0x7f, 0x0, 0x10000000, 0x0, 0xb}, r14, 0x5, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004100)={r2, 0x0, 0x59, 0x56, &(0x7f0000003f00)="c516b4ddafc965ec2836e1caabbd7bb8f7fb03760766ded489263b8d478c944b0316c6602ad4af4f4c2cefbac093826d8e8aae08e8fd07186533d2b00c6a7913b4cd51f1d7b5c7d79cfbf37417da0300f40c8d808033c95857", &(0x7f0000003f80)=""/86, 0x0, 0x0, 0x7f, 0x52, &(0x7f0000004000)="73785bce0495f51784479951c017222db822b20aa1346046997a33f5e0179aa8ad55a195f75cd20011defc5b23ad0dd6e1da564c33176b796982393d51207ba04d251bbaf319a9791a2f1fcf6205487ce7cb57ddc91b00bc167949659881ba5ccd6a235241b0cd1a5085ff4ac2f4b1eee7307fd788abdddf0373ec000e9e38", &(0x7f0000004080)="fec258a1dfed2e1cf75609cee42a456e394a8308b25a5949d0d8d9d51609bd81bd0a20d4ac61b19678c8720e075ac5f24aa39a56fd14371a21e2ed726932c40faf695aa9d4ac10d1c8aa54bd68057e4dc033", 0x4, 0x0, 0xffffffff}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000004180), 0x4) r15 = openat$cgroup_ro(r4, &(0x7f00000041c0)='cpuset.effective_mems\x00', 0x0, 0x0) openat$cgroup_int(r15, &(0x7f0000004200)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) openat$cgroup_procs(r4, &(0x7f0000004240)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) 4.511897839s ago: executing program 0 (id=989): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='rdma.current\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000780)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)="aed4", 0x2}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f00000006c0)=@generic={&(0x7f0000000700)='./file0\x00', r2}, 0x18) sendmsg$kcm(r1, &(0x7f0000003240)={&(0x7f0000000f00)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000003280)=[{0xe0, 0x111, 0x6, "53e281e866ef897f5078985ec82d8f4c61dda9064c70ce70e67a4187f64082bc051bfd963c9d14474795bc7a39820c059edca306844a185404288e7f66ba640685d04aa82511673ae554c4273f9d019b6f03cb521ddeb1338437da39fa409bd70b1766f9c1dacbd59e48dd079beb76015c69129be8fa7fed77e97954f132fdd1b6c08bd3dde516d474f151675cece28abb76072863bd0a7b29df61cca9614249f6e44fdd2734b1cafc9cc649f975007fed9590f3667e9d1804e34bd584c5def437ae64373b45b90b929308bd"}, {0x1010, 0x116, 0x3, "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"}, {0x58, 0x85, 0x4, "f3ca9bfd4d1cf4b7d567fb6f65b2fc72ff009943942bbc615623ea9a4ecffc9f50dd26403bec15748daf44914b3c8153d2b909ef37f44d00"/71}, {0xd8, 0x118, 0x2, "ca83dd98467489c7929c9fc5ce81356bc7ed4058bf0015de762846522babe1c14d7773b3f2a0b2c25e5005e2ccd4d3480a579d807ff3bb7ff246fce1ae57780769002f6f69c0f77ce14e19ce3a81dac88ac5de973ea7bbd332ffe1299fd102d09d3760532c859ae1660d972ec15acbb6c994760681246f886487b193a4652070757c68a756eec4cfd10dce5358ac558e1db5bfc01137b3d4a4f7a238f4fd3aaea702126e239baec4b7719bac77313f27fcdbdf18a739ec1fd6afbfe7019e0e777dfc916580"}, {0xe8, 0x114, 0xe, "bbd94ff2c58c7905a6036464e6f54c886d623368bfb8c762249177b04c8a550b8775404ddf4c6ece65e24abcab61f6f988f65079858198612f2c7b87fab457b3d800a558813827c3558f8c7f8dc6a64b226acca1162018c8a3f6aa4723ff27ae8db194e81815d8a7da1b5ea1442aff036465aa35b09e7834f1658fea7472f10bbe9d93db0571cfa41f85973b8239cbca786e701d956734e11fb9442f85727e0a080b2a1d35558266275f7ef7db79950ff848c9eca6853d54169080e724eb8c24a58e5944523011cc6ce337a087f11c8ffe64"}, {0x30, 0x109, 0x0, "b26cde9e992076aaf7fdb4d85cf3a11c8a84cf03133e19648e1397325e"}, {0xf8, 0x111, 0x8, "f67fcc8bbb4d8314954a9f7ed2fbd073fc50e0e9f8b2daa63031f54702a539f0ffe8991e5a75f88d921b24a1e0dd05cf96307d823603448e570a95538f4add8fed93cef9df1104e996ecb1769321304e7bc15242e749bb4c961f3ca217c25d035872ca38237c194e73f7116c41951a1c23f7e3978fb443eee29d32346a06aa6419b56ecc72d4562b8be4393c74e856e30865cc036c44e5541871ee01b90ad12d703274de5c2771e5f01046c0f57dbcfecbd0f7b3d36c092b52cb2483edad78c7bca826788350f83ed7602b548c5414f81a3bcf125fe53a1eb87a507be16e95a2a23b6b5ef3033c"}, {0x78, 0x113, 0xe7, "c16f8ab5fce7404d637a1ac03dd416781ee4f200e50167005c679e86d5ba4f9e998aa0dbc1ead9bc3492bce2aab02585e19bebcfa36bdf9c4a14135d8badac508ff52170bed142207dc0f5ad0982505432f5ea462d6682125021b05ef000ada15fa26c"}], 0x14a8}, 0x24040040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x4, 0x3, 0x2, 0xb, 0x8000}]}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000980)={0x0, 0xffffff2d, &(0x7f00000009c0)=[{&(0x7f0000000a00)="0401020028000b05d25a806f8c6394f90424fc600d00030009230100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={0x1, 0x58, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0xb, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0x7, 0x8, 0x7, 0x839986d53aa9eb10, 0x10}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, @jmp={0x5, 0x1, 0x4, 0x3, 0x6, 0x80, 0x1}, @generic={0x4, 0x6, 0x5, 0x7f, 0xf}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000bc0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x60, '\x00', r5, 0x25, r1, 0x8, &(0x7f0000000cc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000d00)={0x3, 0x1, 0x5, 0x1c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[r1, r1, r1, r1], &(0x7f0000000d80), 0x10, 0x7fff}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x78}, 0x40000120) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)="140000002e000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) 3.763678435s ago: executing program 3 (id=994): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000a00)={&(0x7f0000000a40)=@l2tp6={0xa, 0xe0, 0x10001, @local, 0x48, 0x7fffffe}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000b00)='D', 0x1}], 0x1, 0x0, 0x0, 0xfc00}, 0x30008041) 3.725027829s ago: executing program 3 (id=995): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x2, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000080"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$ENABLE_STATS(0x20, &(0x7f00000007c0), 0x4) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfff) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x0) close(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x748, 0x0, 0x9, 0x0, 0x40800, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r5, 0x0) 3.643820168s ago: executing program 1 (id=996): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r0, 0x5, 0x27, 0x0, 0x0, 0x0, 0x21000d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000cc0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r1], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3], 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r5, 0x0, 0xe, 0x0, &(0x7f0000000a00)='\x00'/14, 0x0, 0x7e6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000c80)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x10b8}, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x20000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xb59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e400002000100000000000000ff0200000000000000000001ffaaaaaa"], 0xfdef) close(r7) recvmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000e00)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce81020329"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x18}, 0x0) close(r4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000c00)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba0900fc160af3653c001ac00400022208000200050001002c000000eab556a705251e61c9c100000000000ffed000032e301bb4d89b4af300ffffc6c9533e7d873c5397", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 3.33170304s ago: executing program 2 (id=997): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='}))*-&.\'\x17\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) socket$kcm(0x10, 0x400000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000600)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x27b38}]}, &(0x7f0000000800)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000240)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000940)={'wlan1\x00', @random="010021201000"}) 3.32161617s ago: executing program 0 (id=1005): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="bf160000000000001801000000756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180200000a0000010000000000000000180200000a0000020000000000000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00'}, 0x94) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x17b397b4dcd54698}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0xd, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="650a0000000000006111640000000000180000000000000000000023b1fb7fa81afc54d725609cdade41e10000000000950000c53acb68c50daf2df19b502a69780000000000"], &(0x7f0000000c40)='GPL\x00'}, 0x80) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="140000002e000b12d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x2000d084) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000060000000000000002d0008091117400000000009500000000000000"], &(0x7f0000001300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeff9}, 0x94) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000940), 0x4) perf_event_open(&(0x7f0000000c80)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYRES32=r7, @ANYRES32=r5, @ANYBLOB="0100000002"], 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r9, 0xffffffffffffffff}, &(0x7f0000000e40), &(0x7f0000000e80)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ec0)={{r8}, &(0x7f0000000f00), &(0x7f0000000f40)}, 0x20) r11 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x0, r3}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000a00)={r7, r0, 0x0, r11}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0x5, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000030000000000000009000000850000002e00000085000000a000000095"], &(0x7f0000001080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r12, 0x0, 0xe40, 0xe40, &(0x7f0000001140)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000001180)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYRES32=r10, @ANYRESHEX=r4, @ANYRESDEC=r12], 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r14, 0xfffff000, 0xe, 0x0, &(0x7f0000000900)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x5) 3.240804459s ago: executing program 3 (id=998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f00000003c0)={'batadv_slave_1\x00', @random="010000201000"}) r2 = perf_event_open(&(0x7f0000001d40)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x2, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="1400000037000b0f925a2a22feab3c3d0ea2c2e4", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008800) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x5, 0x5, 0x0, &(0x7f0000001ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000001f00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000001f80)={0x5, 0x80, 0x37, 0x0, 0x0, 0x0, 0x0, 0x7683, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87dc, 0x0, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x800000, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x3, 0x3a) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003300)="2e00000011008188040f80ec59acbc0413a1f8480b0000", 0x17}], 0x1}, 0x40000) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x2, &(0x7f0000000040)=@raw=[@alu={0x7, 0x1, 0x3, 0x0, 0x9, 0x2, 0x1}, @call={0x85, 0x0, 0x0, 0xa5}], &(0x7f0000000080)='GPL\x00', 0x6, 0xe2, &(0x7f00000000c0)=""/226, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x9, 0x9, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000240)=[{0x0, 0x4, 0xd, 0x9}, {0x4, 0x2, 0x3, 0xc}, {0x4, 0x1, 0xd}, {0x1, 0x5, 0xd, 0xa}]}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r5, r6, 0x0, r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x1, 0x8, &(0x7f0000003400)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @call={0x85, 0x0, 0x0, 0x1}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000003480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.113339451s ago: executing program 1 (id=999): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000080)=r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fa, &(0x7f0000000900)={'sit0\x00', @random="0000230c1100"}) 2.93432386s ago: executing program 2 (id=1000): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x106) socketpair(0x2b, 0x3, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@in6={0xa, 0x3ffd, 0xfffffffa, @mcast2}, 0x80, 0x0}, 0x20000001) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) write$cgroup_type(r0, 0x0, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000440)=@raw=[@generic={0xb7, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x63, 0xa, 0x2, 0xffc8}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.84081885s ago: executing program 3 (id=1001): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x15, 0x2000000000000216, &(0x7f00000011c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x7, 0xc, &(0x7f0000001340)=ANY=[], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x1000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x3, 0x80, 0x3, 0x9, 0x4, 0xfd, 0x0, 0x7, 0x14004, 0x7, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x7, 0x9}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa23, 0x4, 0x0, 0xd, 0x0, 0x80000001}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x17443037dc221d7f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x4a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x402, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000780)={'wlan1\x00', @random="046e55f57900"}) syz_clone(0x23000200, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000300)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000340)=0x101, 0x12) 2.73540476s ago: executing program 1 (id=1002): write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0xfffffeed) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xfe, 0x0, 0x9b, 0xd4, 0x0, 0x3, 0xac014699fad33c4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x4, @perf_config_ext={0x3ff, 0x8bdc}, 0x0, 0xc8, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = syz_clone(0x80100000, &(0x7f0000000280)="7e5fe89a8803fadb3012c946b3f4a9ad827263ec083c38be1e7cc7e800fbc851f667d7a51d12be525496259181a9bc711a482d80dcec98b507d8cb773f85edb809c5e5d47131de56d59e", 0x4a, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)="bc1053bc1c0145038e6ee6759223067c70c1993841ebbbdb2dac901d227829f82340ee1e48a62411c9eef82854f09d3a000b6e9fffb644752113597e6438b219bd6349c0ee2a813918f59a6b958da41de8b2bed8bd195092e8d2ed2952d2415bf875cdcb64179f9fa2a526076ec4f3a6e08550f005e9a3ee51ce3dce43e5a27ef047c98e516f0b84185972d58737a0143710a39541a0c7c56fedf845fa28d8eb92bdbc17da6ec952275f221b71c8566e7d66") perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x9, 0x3, 0x0, 0x0, 0x7, 0x208, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}, 0x0, 0x9, 0x4, 0x0, 0xe, 0x6, 0x1, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, r2, 0xf, 0xffffffffffffffff, 0xa) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x15, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x14, 0x0, 0x0) 2.560025338s ago: executing program 2 (id=1003): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x2e}, 0x1}}, 0x80, 0x0}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f0000000040)) 2.243380531s ago: executing program 3 (id=1004): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x2, [{0x1, 0x5}]}, @func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x3d}, 0x28) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000208500000086000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0xa) r4 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000580)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x9c000000, @empty, 0x4}}, 0x43, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x40) sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) 2.163301019s ago: executing program 2 (id=1006): r0 = perf_event_open(&(0x7f0000000b00)={0x2, 0xffffffffffffffdf, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f00000000000000f6ffffff0900000012000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000400"/28], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xfffffffffffffdf5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) recvmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4107, 0x100b}], 0x1}, 0x2020) r9 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x280000, 0x4, 0x10009, 0x6}], 0x10, 0xfffffff6}, 0x94) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90224fc60100c0b4002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091"], 0xfe33) 2.161973529s ago: executing program 1 (id=1007): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x2, r0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000080"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$ENABLE_STATS(0x20, &(0x7f00000007c0), 0x4) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfff) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="1400000017000b63d25a80648c2594f952a3c92b", 0x14}], 0x1}, 0x0) close(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x748, 0x0, 0x9, 0x0, 0x40800, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r5, 0x0) 1.914202684s ago: executing program 2 (id=1008): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000780)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4490, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f00000006c0)=@generic={&(0x7f0000000700)='./file0\x00'}, 0x18) sendmsg$kcm(r1, &(0x7f0000003240)={&(0x7f0000000f00)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000001140), 0x0, &(0x7f0000003280)=[{0xe0, 0x111, 0x6, "53e281e866ef897f5078985ec82d8f4c61dda9064c70ce70e67a4187f64082bc051bfd963c9d14474795bc7a39820c059edca306844a185404288e7f66ba640685d04aa82511673ae554c4273f9d019b6f03cb521ddeb1338437da39fa409bd70b1766f9c1dacbd59e48dd079beb76015c69129be8fa7fed77e97954f132fdd1b6c08bd3dde516d474f151675cece28abb76072863bd0a7b29df61cca9614249f6e44fdd2734b1cafc9cc649f975007fed9590f3667e9d1804e34bd584c5def437ae64373b45b90b929308bd"}, {0x1010, 0x116, 0x3, "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"}, {0x58, 0x85, 0x4, "f3ca9bfd4d1cf4b7d567fb6f65b2fc72ff009943942bbc615623ea9a4ecffc9f50dd26403bec15748daf44914b3c8153d2b909ef37f44d00"/71}, {0xd8, 0x118, 0x2, "ca83dd98467489c7929c9fc5ce81356bc7ed4058bf0015de762846522babe1c14d7773b3f2a0b2c25e5005e2ccd4d3480a579d807ff3bb7ff246fce1ae57780769002f6f69c0f77ce14e19ce3a81dac88ac5de973ea7bbd332ffe1299fd102d09d3760532c859ae1660d972ec15acbb6c994760681246f886487b193a4652070757c68a756eec4cfd10dce5358ac558e1db5bfc01137b3d4a4f7a238f4fd3aaea702126e239baec4b7719bac77313f27fcdbdf18a739ec1fd6afbfe7019e0e777dfc916580"}, {0xe8, 0x114, 0xe, "bbd94ff2c58c7905a6036464e6f54c886d623368bfb8c762249177b04c8a550b8775404ddf4c6ece65e24abcab61f6f988f65079858198612f2c7b87fab457b3d800a558813827c3558f8c7f8dc6a64b226acca1162018c8a3f6aa4723ff27ae8db194e81815d8a7da1b5ea1442aff036465aa35b09e7834f1658fea7472f10bbe9d93db0571cfa41f85973b8239cbca786e701d956734e11fb9442f85727e0a080b2a1d35558266275f7ef7db79950ff848c9eca6853d54169080e724eb8c24a58e5944523011cc6ce337a087f11c8ffe64"}, {0x30, 0x109, 0x0, "b26cde9e992076aaf7fdb4d85cf3a11c8a84cf03133e19648e1397325e"}, {0xf8, 0x111, 0x8, "f67fcc8bbb4d8314954a9f7ed2fbd073fc50e0e9f8b2daa63031f54702a539f0ffe8991e5a75f88d921b24a1e0dd05cf96307d823603448e570a95538f4add8fed93cef9df1104e996ecb1769321304e7bc15242e749bb4c961f3ca217c25d035872ca38237c194e73f7116c41951a1c23f7e3978fb443eee29d32346a06aa6419b56ecc72d4562b8be4393c74e856e30865cc036c44e5541871ee01b90ad12d703274de5c2771e5f01046c0f57dbcfecbd0f7b3d36c092b52cb2483edad78c7bca826788350f83ed7602b548c5414f81a3bcf125fe53a1eb87a507be16e95a2a23b6b5ef3033c"}, {0x78, 0x113, 0xe7, "c16f8ab5fce7404d637a1ac03dd416781ee4f200e50167005c679e86d5ba4f9e998aa0dbc1ead9bc3492bce2aab02585e19bebcfa36bdf9c4a14135d8badac508ff52170bed142207dc0f5ad0982505432f5ea462d6682125021b05ef000ada15fa26c"}], 0x14a8}, 0x24040040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffdfffd}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x4, 0x3, 0x2, 0xb, 0x8000}]}, &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000980)={0x0, 0xffffff2d, &(0x7f00000009c0)=[{&(0x7f0000000a00)="0401020028000b05d25a806f8c6394f90424fc600d00030009230100ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) 122.825317ms ago: executing program 0 (id=1009): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e80)={r0, 0x5, 0x27, 0x0, 0x0, 0x0, 0x21000d01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8}, 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000cc0)=ANY=[@ANYRESDEC=r2, @ANYRES8=r1], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r3], 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x14, &(0x7f0000000880)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r5, 0x0, 0xe, 0x0, &(0x7f0000000a00)='\x00'/14, 0x0, 0x7e6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000c80)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x10b8}, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x20000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xb59}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e400002000100000000000000ff0200000000000000000001ffaaaaaa"], 0xfdef) close(r7) recvmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000e00)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce81020329"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x18}, 0x0) close(r4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000c00)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba0900fc160af3653c001ac00400022208000200050001002c000000eab556a705251e61c9c100000000000ffed000032e301bb4d89b4af300ffffc6c9533e7d873c5397", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 80.133682ms ago: executing program 3 (id=1010): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xa, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2101, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x1, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x9, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x80000000, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1000000000000001, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={r3, r1, 0x0, 0x1, &(0x7f0000000b00)='\x00'}, 0x30) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x604000000000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05143a13600e12080005007a010401a8001600200003", 0x37}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000780), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/ipc\x00') sendmsg$unix(r6, &(0x7f0000000480)={&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000280)="803caec2e35c5064a15e2fc7be347e5b15bb4ae4bb7c60963f1a3f3dc58ac397fa96bf14fcff3634c636fa866e935de7f242ba589e46204996937712b053dff832062a83193fd4d15f811eefbd29ef70bf6a78044309a9207b87b080e21cb4", 0x5f}, {&(0x7f0000000300)}, {&(0x7f0000000340)="aa25d04ea49af129de15f909686a9e7a5bfb297e70769d58b97a988279d2398aa6b69c40ffd00dba88210f596ded1224e1887a115c5ded2b099d74665169c6ffc075f959d1e69c8bae767790c5b407f1ef5e5e04f46511f30533c68f08c33ff2654515ff4eab9e83a870ae2541a6cdb1bcd52a9c168e519ac07a566256745db34f5bbdb8b3d786fa11380711916e067ae745fee5e63504cf3eacc463ffd4cd2e3fc3c0aac75d56ce29ca5ac591ae24d4b5640def91f09432e42d1aac6583fc98884daa7f05b2eb077e1205c70480191f98ad461b4d4dbdf78e5c9f", 0xdb}], 0x3, 0x0, 0x0, 0x8800}, 0x20008010) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000001, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffff7fffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x541b, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX=r5, @ANYRES16=r0, @ANYRESOCT=r5], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x11, 0x1, &(0x7f0000000080)=@raw=[@ldst={0x0, 0x0, 0x0, 0xf, 0xa, 0xffffffffffffffc0, 0xffffffffffffffff}], &(0x7f0000002280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 77.409002ms ago: executing program 2 (id=1011): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x3, 0xe, 0x5, 0x5, 0x0, 0x7, 0x40002, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext, 0x4000, 0x9, 0x58, 0x1, 0x9, 0x6, 0x0, 0x0, 0x5, 0x0, 0x10000}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x2, r0, 0x0) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f5e4d237c447fcb9328554d2b8a1cb05a120345fe97d32a20f1b6ccd102beff3503037686502ca7a5cd0a27123f1e3fa61426c9be240a5189c1603a56eb927f339ce3cca9f77811e2e602b153bd439a898460888d66e0815531ad882409832d23d4fcd1e9ca3c40c67246370d46d881ef0948d4c30ed058a93d6d03d44012f9749742da18bde99b7d70eb98ef8b2802f4952ee37d0c09a5887e358740979ea"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x0) close(r2) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000880)}, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x4802, 0x40, 0x0, 0x8, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6023b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_config_ext={0x9, 0x80}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x10, 0x1c, &(0x7f0000001a00)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b000000000000000000000000801fe2d666d8465d5649c5b37740a39f903ba244293cf2065d473d2c822e7039221d2da574e68a4345932d1f8e8e82ecf6f289d12db381c388f9c98045f72ad6301210dbbfae53f37543a5e8516d8533228e71cff9f0a0ff10d8910d38240630b6", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000000940)={&(0x7f0000000980)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000a00)="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", 0x4f6}, {&(0x7f0000000f00)="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", 0x54c}], 0x2, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @local}}}], 0x20}, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f00000014c0), 0x4) sendmsg$kcm(r4, &(0x7f0000001500)={&(0x7f0000001540)=@l2tp6={0xa, 0x1100, 0x2, @mcast1}, 0x80, 0x0}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x3, &(0x7f0000001700)=ANY=[], &(0x7f0000001740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001780)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000017c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="180800001500000000000000000000000005000000000000950000000000000000"], &(0x7f0000001940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 0s ago: executing program 1 (id=1012): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='}))*-&.\'\x17\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0xe900) socket$kcm(0x10, 0x400000002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000600)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x12) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x80, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x27b38}]}, &(0x7f0000000800)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000240)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000940)={'wlan1\x00', @random="010021201000"}) kernel console output (not intermixed with test programs): R13: 00007fb4bca26038 R14: 00007fb4bca25fa0 R15: 00007ffe4fd0ba58 [ 140.034408][ T6764] [ 140.107732][ T6766] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.269'. [ 140.209556][ T6766] bridge_slave_1: default FDB implementation only supports local addresses [ 140.569166][ T6777] netlink: 'syz.3.275': attribute type 1 has an invalid length. [ 140.805862][ T6788] FAULT_INJECTION: forcing a failure. [ 140.805862][ T6788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.825451][ T6788] CPU: 0 PID: 6788 Comm: syz.1.279 Not tainted syzkaller #0 [ 140.832826][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 140.842928][ T6788] Call Trace: [ 140.846251][ T6788] [ 140.849229][ T6788] dump_stack_lvl+0x18c/0x250 [ 140.853972][ T6788] ? show_regs_print_info+0x20/0x20 [ 140.859241][ T6788] ? load_image+0x420/0x420 [ 140.863798][ T6788] ? __might_fault+0xaa/0x120 [ 140.868506][ T6788] ? __lock_acquire+0x7eb0/0x7eb0 [ 140.873576][ T6788] should_fail_ex+0x394/0x4c0 [ 140.878305][ T6788] _copy_from_user+0x2f/0xe0 [ 140.882925][ T6788] ___sys_sendmsg+0x1c7/0x360 [ 140.887638][ T6788] ? __sys_sendmsg+0x2b0/0x2b0 [ 140.892449][ T6788] ? __lock_acquire+0x7eb0/0x7eb0 [ 140.897524][ T6788] __se_sys_sendmsg+0x1d0/0x2c0 [ 140.902404][ T6788] ? __x64_sys_sendmsg+0x80/0x80 [ 140.907418][ T6788] ? lockdep_hardirqs_on+0x98/0x150 [ 140.912649][ T6788] do_syscall_64+0x55/0xb0 [ 140.917094][ T6788] ? clear_bhb_loop+0x40/0x90 [ 140.921802][ T6788] ? clear_bhb_loop+0x40/0x90 [ 140.926516][ T6788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.932456][ T6788] RIP: 0033:0x7fa707da94d9 [ 140.936903][ T6788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.956545][ T6788] RSP: 002b:00007fa705ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.965012][ T6788] RAX: ffffffffffffffda RBX: 00007fa708025fa0 RCX: 00007fa707da94d9 [ 140.973037][ T6788] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 140.981055][ T6788] RBP: 00007fa705ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 140.989061][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.997073][ T6788] R13: 00007fa708026038 R14: 00007fa708025fa0 R15: 00007fffe0875fd8 [ 141.005111][ T6788] [ 141.320241][ T6792] netlink: 'syz.2.282': attribute type 3 has an invalid length. [ 141.400624][ T6794] netlink: 'syz.0.280': attribute type 1 has an invalid length. [ 141.455576][ T6797] bridge_slave_1: default FDB implementation only supports local addresses [ 141.896227][ T6808] bond0: (slave bond_slave_0): Releasing backup interface [ 141.960878][ T6808] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 142.794780][ T6836] FAULT_INJECTION: forcing a failure. [ 142.794780][ T6836] name failslab, interval 1, probability 0, space 0, times 0 [ 142.820120][ T6836] CPU: 1 PID: 6836 Comm: syz.3.297 Not tainted syzkaller #0 [ 142.827520][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 142.837639][ T6836] Call Trace: [ 142.840962][ T6836] [ 142.843937][ T6836] dump_stack_lvl+0x18c/0x250 [ 142.848676][ T6836] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 142.854458][ T6836] ? show_regs_print_info+0x20/0x20 [ 142.859728][ T6836] ? load_image+0x420/0x420 [ 142.864319][ T6836] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 142.870383][ T6836] should_fail_ex+0x394/0x4c0 [ 142.875132][ T6836] should_failslab+0x9/0x20 [ 142.879708][ T6836] slab_pre_alloc_hook+0x59/0x300 [ 142.884809][ T6836] ? lockdep_hardirqs_on+0x98/0x150 [ 142.890095][ T6836] kmem_cache_alloc+0x5a/0x2d0 [ 142.894955][ T6836] ? skb_clone+0x1eb/0x370 [ 142.899462][ T6836] skb_clone+0x1eb/0x370 [ 142.903789][ T6836] __netlink_deliver_tap+0x411/0x7f0 [ 142.909163][ T6836] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.914429][ T6836] netlink_deliver_tap+0x19c/0x1b0 [ 142.919613][ T6836] netlink_unicast+0x82f/0x9e0 [ 142.924476][ T6836] netlink_sendmsg+0x8d0/0xbf0 [ 142.929324][ T6836] ? netlink_getsockopt+0x590/0x590 [ 142.934588][ T6836] ? apparmor_socket_sendmsg+0x8e/0x330 [ 142.940219][ T6836] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 142.945573][ T6836] ? security_socket_sendmsg+0x80/0xa0 [ 142.951104][ T6836] ? netlink_getsockopt+0x590/0x590 [ 142.956363][ T6836] ____sys_sendmsg+0x61b/0x980 [ 142.961184][ T6836] ? __asan_memset+0x22/0x40 [ 142.965828][ T6836] ? __sys_sendmsg_sock+0x30/0x30 [ 142.970893][ T6836] ? __import_iovec+0x5f2/0x850 [ 142.975791][ T6836] ? import_iovec+0x73/0xa0 [ 142.980429][ T6836] ___sys_sendmsg+0x2a6/0x360 [ 142.985143][ T6836] ? __sys_sendmsg+0x2b0/0x2b0 [ 142.989989][ T6836] __se_sys_sendmsg+0x1d0/0x2c0 [ 142.994873][ T6836] ? __x64_sys_sendmsg+0x80/0x80 [ 142.999880][ T6836] do_syscall_64+0x55/0xb0 [ 143.004334][ T6836] ? clear_bhb_loop+0x40/0x90 [ 143.009048][ T6836] ? clear_bhb_loop+0x40/0x90 [ 143.013757][ T6836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.019681][ T6836] RIP: 0033:0x7fb4bc7a94d9 [ 143.024211][ T6836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.043849][ T6836] RSP: 002b:00007fb4bd702028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.052320][ T6836] RAX: ffffffffffffffda RBX: 00007fb4bca26090 RCX: 00007fb4bc7a94d9 [ 143.060342][ T6836] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000011 [ 143.068382][ T6836] RBP: 00007fb4bd702090 R08: 0000000000000000 R09: 0000000000000000 [ 143.076419][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.084428][ T6836] R13: 00007fb4bca26128 R14: 00007fb4bca26090 R15: 00007ffe4fd0ba58 [ 143.092448][ T6836] [ 143.315485][ T6844] validate_nla: 2 callbacks suppressed [ 143.315525][ T6844] netlink: 'syz.0.300': attribute type 3 has an invalid length. [ 143.336834][ T6844] __nla_validate_parse: 11 callbacks suppressed [ 143.336869][ T6844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.300'. [ 143.740956][ T6847] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 143.762313][ T6847] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.302'. [ 143.783345][ T6847] netlink: 9 bytes leftover after parsing attributes in process `syz.3.302'. [ 143.862436][ T6853] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.303'. [ 143.938042][ T6853] netlink: 152 bytes leftover after parsing attributes in process `syz.1.303'. [ 143.968853][ T6853] bond0: (slave bond_slave_0): Releasing backup interface [ 143.994263][ T6853] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 144.677964][ T6875] netlink: 'syz.2.314': attribute type 3 has an invalid length. [ 144.706264][ T6875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.314'. [ 144.965043][ T6878] netlink: 'syz.3.315': attribute type 1 has an invalid length. [ 144.973740][ T6878] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.315'. [ 144.988536][ T6878] netlink: 9 bytes leftover after parsing attributes in process `syz.3.315'. [ 145.203656][ T6888] netlink: 'syz.0.316': attribute type 3 has an invalid length. [ 145.214726][ T6888] netlink: 132 bytes leftover after parsing attributes in process `syz.0.316'. [ 145.464102][ T6895] netlink: 'syz.0.320': attribute type 3 has an invalid length. [ 145.472214][ T6895] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.320'. [ 147.291512][ T6278] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 147.414964][ T6925] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 148.998323][ T6940] netlink: 'syz.1.336': attribute type 3 has an invalid length. [ 149.018848][ T6940] __nla_validate_parse: 2 callbacks suppressed [ 149.018866][ T6940] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.336'. [ 149.725847][ T6958] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 149.734706][ T6958] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.342'. [ 149.750369][ T6958] netlink: 9 bytes leftover after parsing attributes in process `syz.3.342'. [ 150.241035][ T6967] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.344'. [ 150.250934][ T6967] bridge_slave_1: default FDB implementation only supports local addresses [ 151.436262][ T6990] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 151.450444][ T6990] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.353'. [ 151.468066][ T6990] netlink: 9 bytes leftover after parsing attributes in process `syz.3.353'. [ 153.020342][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.042211][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.057538][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.103292][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.113849][ T7016] netlink: 'syz.2.359': attribute type 1 has an invalid length. [ 153.128814][ T7016] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.359'. [ 153.147674][ T7022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.149618][ T7016] netlink: 9 bytes leftover after parsing attributes in process `syz.2.359'. [ 153.170993][ T7022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.188113][ T7028] ªªªªª4: renamed from erspan0 (while UP) [ 153.566883][ T7032] netlink: 'syz.1.366': attribute type 1 has an invalid length. [ 153.583321][ T7032] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.366'. [ 153.613459][ T7032] netlink: 9 bytes leftover after parsing attributes in process `syz.1.366'. [ 155.668962][ T7062] netlink: 'syz.3.374': attribute type 3 has an invalid length. [ 155.677320][ T7062] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.374'. [ 156.144563][ T7065] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.376'. [ 156.168854][ T7065] bridge_slave_1: default FDB implementation only supports local addresses [ 156.578937][ T7070] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 156.610088][ T7070] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.378'. [ 156.633443][ T7070] netlink: 9 bytes leftover after parsing attributes in process `syz.3.378'. [ 156.790706][ T7074] netlink: 'syz.1.381': attribute type 3 has an invalid length. [ 156.801890][ T7074] netlink: 132 bytes leftover after parsing attributes in process `syz.1.381'. [ 156.883955][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.943033][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.002179][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.121469][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.213349][ T7080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.229320][ T7080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.831904][ T7086] netlink: 'syz.3.386': attribute type 3 has an invalid length. [ 157.857039][ T7086] netlink: 132 bytes leftover after parsing attributes in process `syz.3.386'. [ 158.535368][ T7102] netlink: 'syz.0.389': attribute type 21 has an invalid length. [ 158.565736][ T7102] netlink: 'syz.0.389': attribute type 6 has an invalid length. [ 158.596683][ T7102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.389'. [ 158.661245][ T7103] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.388'. [ 158.708922][ T7103] bridge_slave_1: default FDB implementation only supports local addresses [ 158.877968][ T7105] FAULT_INJECTION: forcing a failure. [ 158.877968][ T7105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.944930][ T7105] CPU: 0 PID: 7105 Comm: syz.1.390 Not tainted syzkaller #0 [ 158.952359][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 158.962509][ T7105] Call Trace: [ 158.965873][ T7105] [ 158.968880][ T7105] dump_stack_lvl+0x18c/0x250 [ 158.973672][ T7105] ? show_regs_print_info+0x20/0x20 [ 158.979167][ T7105] ? load_image+0x420/0x420 [ 158.983770][ T7105] ? __might_fault+0xaa/0x120 [ 158.988533][ T7105] ? __lock_acquire+0x7eb0/0x7eb0 [ 158.993680][ T7105] should_fail_ex+0x394/0x4c0 [ 158.998471][ T7105] _copy_from_iter+0x1cd/0x1290 [ 159.003433][ T7105] ? rcu_is_watching+0x15/0xb0 [ 159.008645][ T7105] ? copyout_mc+0x70/0x70 [ 159.013092][ T7105] ? __virt_addr_valid+0x10c/0x380 [ 159.018295][ T7105] ? __virt_addr_valid+0x10c/0x380 [ 159.023505][ T7105] ? __virt_addr_valid+0x10c/0x380 [ 159.028719][ T7105] ? __check_object_size+0x4fc/0xa40 [ 159.034115][ T7105] netlink_sendmsg+0x76b/0xbf0 [ 159.039001][ T7105] ? netlink_getsockopt+0x590/0x590 [ 159.044295][ T7105] ? apparmor_socket_sendmsg+0x8e/0x330 [ 159.049930][ T7105] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 159.055277][ T7105] ? security_socket_sendmsg+0x80/0xa0 [ 159.060797][ T7105] ? netlink_getsockopt+0x590/0x590 [ 159.066082][ T7105] ____sys_sendmsg+0x61b/0x980 [ 159.070943][ T7105] ? __asan_memset+0x22/0x40 [ 159.075600][ T7105] ? __sys_sendmsg_sock+0x30/0x30 [ 159.080680][ T7105] ? __import_iovec+0x5f2/0x850 [ 159.085633][ T7105] ? import_iovec+0x73/0xa0 [ 159.090241][ T7105] ___sys_sendmsg+0x2a6/0x360 [ 159.095161][ T7105] ? get_pid_task+0x20/0x1e0 [ 159.099821][ T7105] ? __sys_sendmsg+0x2b0/0x2b0 [ 159.104745][ T7105] ? __lock_acquire+0x7eb0/0x7eb0 [ 159.109897][ T7105] __se_sys_sendmsg+0x1d0/0x2c0 [ 159.114812][ T7105] ? __x64_sys_sendmsg+0x80/0x80 [ 159.119848][ T7105] ? lockdep_hardirqs_on+0x98/0x150 [ 159.125298][ T7105] do_syscall_64+0x55/0xb0 [ 159.129771][ T7105] ? clear_bhb_loop+0x40/0x90 [ 159.134500][ T7105] ? clear_bhb_loop+0x40/0x90 [ 159.139247][ T7105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.145206][ T7105] RIP: 0033:0x7fa707da94d9 [ 159.149676][ T7105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.169345][ T7105] RSP: 002b:00007fa705ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.177834][ T7105] RAX: ffffffffffffffda RBX: 00007fa708025fa0 RCX: 00007fa707da94d9 [ 159.185888][ T7105] RDX: 0000000000000000 RSI: 0000200000002d40 RDI: 0000000000000007 [ 159.193944][ T7105] RBP: 00007fa705ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.201996][ T7105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.210043][ T7105] R13: 00007fa708026038 R14: 00007fa708025fa0 R15: 00007fffe0875fd8 [ 159.218112][ T7105] [ 159.408421][ T7107] netlink: 'syz.0.391': attribute type 1 has an invalid length. [ 159.428802][ T7107] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.391'. [ 159.448960][ T7107] netlink: 9 bytes leftover after parsing attributes in process `syz.0.391'. [ 159.724763][ T7112] FAULT_INJECTION: forcing a failure. [ 159.724763][ T7112] name failslab, interval 1, probability 0, space 0, times 0 [ 159.773889][ T7112] CPU: 1 PID: 7112 Comm: syz.0.394 Not tainted syzkaller #0 [ 159.781307][ T7112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 159.791446][ T7112] Call Trace: [ 159.794796][ T7112] [ 159.797795][ T7112] dump_stack_lvl+0x18c/0x250 [ 159.802568][ T7112] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 159.809257][ T7112] ? show_regs_print_info+0x20/0x20 [ 159.814559][ T7112] ? load_image+0x420/0x420 [ 159.819205][ T7112] should_fail_ex+0x394/0x4c0 [ 159.823990][ T7112] should_failslab+0x9/0x20 [ 159.828575][ T7112] slab_pre_alloc_hook+0x59/0x300 [ 159.833654][ T7112] ? find_exception+0x175/0xa30 [ 159.838578][ T7112] kmem_cache_alloc+0x5a/0x2d0 [ 159.843409][ T7112] ? dst_alloc+0x105/0x170 [ 159.847899][ T7112] dst_alloc+0x105/0x170 [ 159.852235][ T7112] ip_route_output_key_hash_rcu+0x14a2/0x2350 [ 159.858389][ T7112] ? ip_route_output_key_hash+0x13d/0x330 [ 159.864165][ T7112] ip_route_output_key_hash+0x1f3/0x330 [ 159.869892][ T7112] ? ip_route_input_rcu+0x3120/0x3120 [ 159.875335][ T7112] ? _raw_spin_unlock+0x40/0x40 [ 159.880269][ T7112] tcp_v4_connect+0x6bd/0x17e0 [ 159.885107][ T7112] ? __stack_depot_save+0x575/0x660 [ 159.890427][ T7112] ? tcp_twsk_unique+0x970/0x970 [ 159.895498][ T7112] __inet_stream_connect+0x290/0xf50 [ 159.900984][ T7112] ? inet_dgram_connect+0x340/0x340 [ 159.906292][ T7112] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 159.911571][ T7112] tcp_sendmsg_locked+0x44ee/0x4ab0 [ 159.917024][ T7112] ? mark_lock+0x94/0x320 [ 159.921954][ T7112] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 159.928297][ T7112] ? lock_chain_count+0x20/0x20 [ 159.933261][ T7112] ? tcp_set_state+0x6c0/0x6c0 [ 159.938267][ T7112] ? do_raw_spin_unlock+0x121/0x230 [ 159.943596][ T7112] tcp_sendmsg+0x2f/0x50 [ 159.947965][ T7112] smc_sendmsg+0x24b/0x4d0 [ 159.952461][ T7112] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 159.957835][ T7112] ? security_socket_sendmsg+0x80/0xa0 [ 159.963349][ T7112] ? smc_getsockopt+0x3a0/0x3a0 [ 159.968258][ T7112] ____sys_sendmsg+0x61b/0x980 [ 159.973099][ T7112] ? __asan_memset+0x22/0x40 [ 159.977753][ T7112] ? __sys_sendmsg_sock+0x30/0x30 [ 159.982825][ T7112] ? __import_iovec+0x3fa/0x850 [ 159.987779][ T7112] ? import_iovec+0x73/0xa0 [ 159.992366][ T7112] ___sys_sendmsg+0x2a6/0x360 [ 159.997096][ T7112] ? get_pid_task+0x20/0x1e0 [ 160.001766][ T7112] ? __sys_sendmsg+0x2b0/0x2b0 [ 160.006645][ T7112] ? __lock_acquire+0x7eb0/0x7eb0 [ 160.011803][ T7112] __se_sys_sendmsg+0x1d0/0x2c0 [ 160.016721][ T7112] ? __x64_sys_sendmsg+0x80/0x80 [ 160.021766][ T7112] ? lockdep_hardirqs_on+0x98/0x150 [ 160.027028][ T7112] do_syscall_64+0x55/0xb0 [ 160.031503][ T7112] ? clear_bhb_loop+0x40/0x90 [ 160.036242][ T7112] ? clear_bhb_loop+0x40/0x90 [ 160.041182][ T7112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 160.047131][ T7112] RIP: 0033:0x7fb49b3a94d9 [ 160.051633][ T7112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.071297][ T7112] RSP: 002b:00007fb49c195028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.079766][ T7112] RAX: ffffffffffffffda RBX: 00007fb49b625fa0 RCX: 00007fb49b3a94d9 [ 160.087782][ T7112] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 160.095827][ T7112] RBP: 00007fb49c195090 R08: 0000000000000000 R09: 0000000000000000 [ 160.103848][ T7112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.111874][ T7112] R13: 00007fb49b626038 R14: 00007fb49b625fa0 R15: 00007ffd4ef1f8e8 [ 160.119945][ T7112] [ 160.189718][ T7114] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 160.843956][ T7125] netlink: 'syz.0.397': attribute type 3 has an invalid length. [ 160.858869][ T7125] __nla_validate_parse: 1 callbacks suppressed [ 160.858904][ T7125] netlink: 132 bytes leftover after parsing attributes in process `syz.0.397'. [ 160.984876][ T7133] netlink: 'syz.3.407': attribute type 3 has an invalid length. [ 161.008792][ T7133] netlink: 132 bytes leftover after parsing attributes in process `syz.3.407'. [ 161.437032][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.489208][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.537604][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.571231][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.610337][ T7144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.658410][ T7144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.121340][ T7152] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 162.124072][ T7156] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.403'. [ 162.142722][ T7152] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.404'. [ 162.172980][ T7152] netlink: 9 bytes leftover after parsing attributes in process `syz.3.404'. [ 162.215269][ T7156] bridge_slave_1: default FDB implementation only supports local addresses [ 162.543649][ T7157] netlink: 10 bytes leftover after parsing attributes in process `syz.1.406'. [ 162.583398][ T7169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.409'. [ 162.780566][ T7173] netlink: 'syz.0.411': attribute type 3 has an invalid length. [ 162.826040][ T7173] netlink: 132 bytes leftover after parsing attributes in process `syz.0.411'. [ 164.124218][ T7188] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 164.135053][ T7188] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.416'. [ 164.159599][ T7188] netlink: 9 bytes leftover after parsing attributes in process `syz.0.416'. [ 164.941581][ T7206] bridge_slave_1: default FDB implementation only supports local addresses [ 165.226015][ T7210] netlink: 'syz.2.424': attribute type 10 has an invalid length. [ 165.252854][ T7210] batman_adv: batadv0: Adding interface: geneve1 [ 165.275351][ T7210] batman_adv: batadv0: The MTU of interface geneve1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.348680][ T7210] batman_adv: batadv0: Interface activated: geneve1 [ 165.890793][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.925213][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.947160][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.975253][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.001564][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.067193][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.079737][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.108680][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.138705][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.168696][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.188674][ T7224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.228664][ T7224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.569601][ T7238] netlink: 'syz.2.434': attribute type 3 has an invalid length. [ 166.593843][ T7238] __nla_validate_parse: 1 callbacks suppressed [ 166.593882][ T7238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.434'. [ 166.986516][ T7247] syzkaller0: entered promiscuous mode [ 167.003794][ T7247] syzkaller0: entered allmulticast mode [ 167.033623][ T7251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.050460][ T7251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.066666][ T7251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.082047][ T7251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.101634][ T7251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.115828][ T7251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.187416][ T7247] rxe_eth0 speed is unknown, defaulting to 1000 [ 167.374943][ T7261] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.440'. [ 167.411635][ T7261] bridge_slave_1: default FDB implementation only supports local addresses [ 167.471969][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.499306][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.540077][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.578850][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.626965][ T7263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.693306][ T7263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.628413][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.642303][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.655541][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.671175][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.684501][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.707418][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.967154][ T7282] netlink: 'syz.1.450': attribute type 3 has an invalid length. [ 168.993308][ T7282] netlink: 132 bytes leftover after parsing attributes in process `syz.1.450'. [ 172.297425][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.308112][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.323186][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.334033][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.348714][ T7310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.359860][ T7310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.386154][ T7317] netlink: 128 bytes leftover after parsing attributes in process `syz.1.460'. [ 172.430490][ T7317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.465783][ T7343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.477014][ T7343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.487002][ T7343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.498402][ T7343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.509379][ T7343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.527254][ T7343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.856703][ T7356] netlink: 'syz.1.473': attribute type 9 has an invalid length. [ 174.018327][ T7356] netlink: 162756 bytes leftover after parsing attributes in process `syz.1.473'. [ 174.047911][ T7352] rxe_eth0 speed is unknown, defaulting to 1000 [ 174.302281][ T7360] netlink: 'syz.1.473': attribute type 9 has an invalid length. [ 174.374042][ T7360] netlink: 197792 bytes leftover after parsing attributes in process `syz.1.473'. [ 174.460303][ T7346] syz.3.472 (7346) used greatest stack depth: 19240 bytes left [ 175.127686][ T7372] FAULT_INJECTION: forcing a failure. [ 175.127686][ T7372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.141249][ T7372] CPU: 1 PID: 7372 Comm: syz.0.479 Not tainted syzkaller #0 [ 175.148590][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 175.158682][ T7372] Call Trace: [ 175.162010][ T7372] [ 175.164964][ T7372] dump_stack_lvl+0x18c/0x250 [ 175.169683][ T7372] ? show_regs_print_info+0x20/0x20 [ 175.174914][ T7372] ? load_image+0x420/0x420 [ 175.179448][ T7372] ? __might_fault+0xaa/0x120 [ 175.184151][ T7372] ? __lock_acquire+0x7eb0/0x7eb0 [ 175.189207][ T7372] should_fail_ex+0x394/0x4c0 [ 175.193913][ T7372] _copy_to_iter+0x1ce/0x1110 [ 175.198639][ T7372] ? __virt_addr_valid+0x10c/0x380 [ 175.203786][ T7372] ? __lock_acquire+0x7eb0/0x7eb0 [ 175.208848][ T7372] ? lockdep_hardirqs_on+0x98/0x150 [ 175.214071][ T7372] ? iov_iter_init+0x1e0/0x1e0 [ 175.218893][ T7372] ? __virt_addr_valid+0x10c/0x380 [ 175.224037][ T7372] ? __virt_addr_valid+0x10c/0x380 [ 175.229189][ T7372] ? __virt_addr_valid+0x10c/0x380 [ 175.234333][ T7372] ? __check_object_size+0x4fc/0xa40 [ 175.239654][ T7372] __skb_datagram_iter+0xdb/0x780 [ 175.244721][ T7372] ? skb_copy_datagram_iter+0x200/0x200 [ 175.250307][ T7372] skb_copy_datagram_iter+0xb1/0x200 [ 175.255628][ T7372] ping_recvmsg+0x1e0/0x1170 [ 175.260356][ T7372] ? ping_common_sendmsg+0x2a0/0x2a0 [ 175.265673][ T7372] ? aa_sk_perm+0x7bb/0x8e0 [ 175.270215][ T7372] sock_common_recvmsg+0xfa/0x190 [ 175.275448][ T7372] ? sock_common_getsockopt+0xb0/0xb0 [ 175.280844][ T7372] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 175.286163][ T7372] ? security_socket_recvmsg+0x89/0xb0 [ 175.291672][ T7372] ? sock_common_getsockopt+0xb0/0xb0 [ 175.297066][ T7372] ____sys_recvmsg+0x2bd/0x5d0 [ 175.301896][ T7372] ? __sys_recvmsg_sock+0x50/0x50 [ 175.306959][ T7372] ? import_iovec+0x73/0xa0 [ 175.311496][ T7372] ___sys_recvmsg+0x214/0x590 [ 175.316205][ T7372] ? __sys_recvmsg+0x2a0/0x2a0 [ 175.320998][ T7372] ? ksys_write+0x1d2/0x260 [ 175.325632][ T7372] ? __fget_files+0x3fc/0x460 [ 175.330357][ T7372] __x64_sys_recvmsg+0x21e/0x2f0 [ 175.335329][ T7372] ? ___sys_recvmsg+0x590/0x590 [ 175.340226][ T7372] ? lockdep_hardirqs_on+0x98/0x150 [ 175.345468][ T7372] do_syscall_64+0x55/0xb0 [ 175.349919][ T7372] ? clear_bhb_loop+0x40/0x90 [ 175.354650][ T7372] ? clear_bhb_loop+0x40/0x90 [ 175.359362][ T7372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.365289][ T7372] RIP: 0033:0x7fb49b3a94d9 [ 175.369735][ T7372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.389363][ T7372] RSP: 002b:00007fb49c195028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 175.397826][ T7372] RAX: ffffffffffffffda RBX: 00007fb49b625fa0 RCX: 00007fb49b3a94d9 [ 175.405824][ T7372] RDX: 0000000040000080 RSI: 0000200000000800 RDI: 0000000000000003 [ 175.413814][ T7372] RBP: 00007fb49c195090 R08: 0000000000000000 R09: 0000000000000000 [ 175.421807][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.429818][ T7372] R13: 00007fb49b626038 R14: 00007fb49b625fa0 R15: 00007ffd4ef1f8e8 [ 175.437834][ T7372] [ 175.597830][ T7376] netlink: 'syz.0.480': attribute type 3 has an invalid length. [ 175.611732][ T7376] netlink: 'syz.0.480': attribute type 6 has an invalid length. [ 175.623871][ T7376] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.480'. [ 175.746703][ T7378] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 175.789347][ T7378] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.481'. [ 175.800371][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.800442][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.800454][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.800469][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.800492][ T7380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.800507][ T7380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.062500][ T7378] netlink: 9 bytes leftover after parsing attributes in process `syz.2.481'. [ 176.861879][ T7395] netlink: 180 bytes leftover after parsing attributes in process `syz.2.486'. [ 176.898904][ T7398] Driver unsupported XDP return value 0 on prog (id 368) dev N/A, expect packet loss! [ 177.164152][ T7403] syzkaller0: entered promiscuous mode [ 177.182597][ T7403] syzkaller0: entered allmulticast mode [ 177.256002][ T7409] rxe_eth0 speed is unknown, defaulting to 1000 [ 177.445559][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.477762][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.507459][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.567252][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.605696][ T7418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.637067][ T7418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.908388][ T7421] netlink: 'syz.0.493': attribute type 10 has an invalid length. [ 177.929989][ T7421] netlink: 40 bytes leftover after parsing attributes in process `syz.0.493'. [ 177.944789][ T7421] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 177.969391][ T7421] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.004086][ T7421] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 178.347105][ T7426] netlink: 'syz.2.495': attribute type 1 has an invalid length. [ 178.361490][ T7426] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.495'. [ 178.371933][ T7426] netlink: 9 bytes leftover after parsing attributes in process `syz.2.495'. [ 178.866734][ T7434] FAULT_INJECTION: forcing a failure. [ 178.866734][ T7434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.892677][ T7434] CPU: 1 PID: 7434 Comm: syz.2.498 Not tainted syzkaller #0 [ 178.900059][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 178.910162][ T7434] Call Trace: [ 178.913490][ T7434] [ 178.916458][ T7434] dump_stack_lvl+0x18c/0x250 [ 178.921205][ T7434] ? show_regs_print_info+0x20/0x20 [ 178.926457][ T7434] ? load_image+0x420/0x420 [ 178.931015][ T7434] ? __might_fault+0xaa/0x120 [ 178.935760][ T7434] ? __lock_acquire+0x7eb0/0x7eb0 [ 178.940847][ T7434] should_fail_ex+0x394/0x4c0 [ 178.945587][ T7434] _copy_from_user+0x2f/0xe0 [ 178.950233][ T7434] ___sys_sendmsg+0x1c7/0x360 [ 178.954963][ T7434] ? get_pid_task+0x20/0x1e0 [ 178.959618][ T7434] ? __sys_sendmsg+0x2b0/0x2b0 [ 178.964454][ T7434] ? __lock_acquire+0x7eb0/0x7eb0 [ 178.969567][ T7434] __se_sys_sendmsg+0x1d0/0x2c0 [ 178.974473][ T7434] ? __x64_sys_sendmsg+0x80/0x80 [ 178.979483][ T7434] ? lockdep_hardirqs_on+0x98/0x150 [ 178.984769][ T7434] do_syscall_64+0x55/0xb0 [ 178.989241][ T7434] ? clear_bhb_loop+0x40/0x90 [ 178.993980][ T7434] ? clear_bhb_loop+0x40/0x90 [ 178.998714][ T7434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.004704][ T7434] RIP: 0033:0x7f48f45a94d9 [ 179.009172][ T7434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.028825][ T7434] RSP: 002b:00007f48f541a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.037276][ T7434] RAX: ffffffffffffffda RBX: 00007f48f4825fa0 RCX: 00007f48f45a94d9 [ 179.045297][ T7434] RDX: 0000000000000000 RSI: 0000200000004f40 RDI: 0000000000000003 [ 179.053293][ T7434] RBP: 00007f48f541a090 R08: 0000000000000000 R09: 0000000000000000 [ 179.061290][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.069388][ T7434] R13: 00007f48f4826038 R14: 00007f48f4825fa0 R15: 00007ffcd179eab8 [ 179.077487][ T7434] [ 180.641602][ T7436] netlink: 180 bytes leftover after parsing attributes in process `syz.2.499'. [ 180.858987][ T7441] netlink: 'syz.3.500': attribute type 27 has an invalid length. [ 180.867389][ T7441] netlink: 'syz.3.500': attribute type 3 has an invalid length. [ 180.877318][ T7444] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.501'. [ 180.878421][ T7441] netlink: 132 bytes leftover after parsing attributes in process `syz.3.500'. [ 180.904073][ T7444] bridge_slave_1: default FDB implementation only supports local addresses [ 181.733182][ T7453] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 181.801739][ T7453] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.504'. [ 181.863401][ T7453] netlink: 9 bytes leftover after parsing attributes in process `syz.3.504'. [ 182.614812][ T7461] netlink: 128 bytes leftover after parsing attributes in process `syz.0.507'. [ 182.668932][ T7461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.743912][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.794702][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.811992][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.837792][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.869878][ T7463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.881103][ T7463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.891505][ T7467] netlink: 180 bytes leftover after parsing attributes in process `syz.3.510'. [ 183.242753][ T7481] netlink: 'syz.1.513': attribute type 3 has an invalid length. [ 183.264406][ T7481] netlink: 132 bytes leftover after parsing attributes in process `syz.1.513'. [ 183.358040][ T7483] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 183.374301][ T7483] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.514'. [ 183.388653][ T7461] syz.0.507 (7461) used greatest stack depth: 19160 bytes left [ 183.425745][ T7483] netlink: 9 bytes leftover after parsing attributes in process `syz.3.514'. [ 183.712187][ T7484] rxe_eth0 speed is unknown, defaulting to 1000 [ 183.799947][ T7497] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.516'. [ 183.858393][ T7497] bridge_slave_1: default FDB implementation only supports local addresses [ 184.860420][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.888639][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.898532][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.944127][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.968820][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.998811][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.682767][ T7520] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 185.721201][ T7520] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.524'. [ 185.811862][ T7520] netlink: 9 bytes leftover after parsing attributes in process `syz.1.524'. [ 185.849426][ T7522] netlink: 'syz.3.523': attribute type 25 has an invalid length. [ 185.857237][ T7522] netlink: 'syz.3.523': attribute type 29 has an invalid length. [ 185.939991][ T7518] netlink: 166900 bytes leftover after parsing attributes in process `syz.3.523'. [ 186.208007][ T7525] netlink: 'syz.0.525': attribute type 3 has an invalid length. [ 186.238849][ T7525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.525'. [ 186.843171][ T7540] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.529'. [ 186.894041][ T7540] bridge_slave_1: default FDB implementation only supports local addresses [ 186.950851][ T7539] netlink: 'syz.1.528': attribute type 6 has an invalid length. [ 186.974390][ T7539] netlink: 164 bytes leftover after parsing attributes in process `syz.1.528'. [ 187.666972][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.734474][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.786154][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.868087][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.931128][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.968788][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.237124][ T7557] netlink: 'syz.3.535': attribute type 1 has an invalid length. [ 188.454736][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.479826][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.510981][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.535683][ T7566] netlink: 'syz.1.537': attribute type 27 has an invalid length. [ 188.578962][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.597459][ T7566] netlink: 'syz.1.537': attribute type 3 has an invalid length. [ 188.678812][ T7566] __nla_validate_parse: 2 callbacks suppressed [ 188.678829][ T7566] netlink: 132 bytes leftover after parsing attributes in process `syz.1.537'. [ 188.719350][ T7564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.795496][ T7568] FAULT_INJECTION: forcing a failure. [ 188.795496][ T7568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.822955][ T7564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.833125][ T7568] CPU: 1 PID: 7568 Comm: syz.0.539 Not tainted syzkaller #0 [ 188.840486][ T7568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 188.850601][ T7568] Call Trace: [ 188.853923][ T7568] [ 188.856902][ T7568] dump_stack_lvl+0x18c/0x250 [ 188.861640][ T7568] ? show_regs_print_info+0x20/0x20 [ 188.866879][ T7568] ? load_image+0x420/0x420 [ 188.871421][ T7568] ? __lock_acquire+0x7eb0/0x7eb0 [ 188.876485][ T7568] should_fail_ex+0x394/0x4c0 [ 188.881205][ T7568] _copy_to_user+0x2f/0xa0 [ 188.885649][ T7568] simple_read_from_buffer+0xe7/0x150 [ 188.891056][ T7568] proc_fail_nth_read+0x1e8/0x260 [ 188.896116][ T7568] ? proc_fault_inject_write+0x360/0x360 [ 188.901806][ T7568] ? proc_fault_inject_write+0x360/0x360 [ 188.907535][ T7568] vfs_read+0x298/0x990 [ 188.911763][ T7568] ? kernel_read+0x1e0/0x1e0 [ 188.916420][ T7568] ? __fget_files+0x28/0x460 [ 188.921045][ T7568] ? __fget_files+0x3fc/0x460 [ 188.925768][ T7568] ? __fdget_pos+0x2a3/0x330 [ 188.930391][ T7568] ? ksys_read+0x74/0x260 [ 188.934755][ T7568] ksys_read+0x151/0x260 [ 188.939042][ T7568] ? vfs_write+0x9a0/0x9a0 [ 188.943494][ T7568] ? syscall_enter_from_user_mode+0x2e/0x80 [ 188.949420][ T7568] do_syscall_64+0x55/0xb0 [ 188.953871][ T7568] ? clear_bhb_loop+0x40/0x90 [ 188.958581][ T7568] ? clear_bhb_loop+0x40/0x90 [ 188.963313][ T7568] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.969396][ T7568] RIP: 0033:0x7fb49b369d0e [ 188.973861][ T7568] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 188.993598][ T7568] RSP: 002b:00007fb49c194fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.002053][ T7568] RAX: ffffffffffffffda RBX: 00007fb49c1956c0 RCX: 00007fb49b369d0e [ 189.010070][ T7568] RDX: 000000000000000f RSI: 00007fb49c1950a0 RDI: 0000000000000009 [ 189.018259][ T7568] RBP: 00007fb49c195090 R08: 0000000000000000 R09: 0000000000000000 [ 189.026253][ T7568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.034252][ T7568] R13: 00007fb49b626038 R14: 00007fb49b625fa0 R15: 00007ffd4ef1f8e8 [ 189.042288][ T7568] [ 189.578546][ T7583] netlink: 5 bytes leftover after parsing attributes in process `syz.3.542'. [ 190.380302][ T7595] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.545'. [ 190.410294][ T7595] bridge_slave_1: default FDB implementation only supports local addresses [ 190.595888][ T7597] netlink: 'syz.0.547': attribute type 1 has an invalid length. [ 190.616891][ T7600] netlink: 'syz.3.548': attribute type 3 has an invalid length. [ 190.627487][ T7597] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.547'. [ 190.637022][ T7600] netlink: 132 bytes leftover after parsing attributes in process `syz.3.548'. [ 190.700353][ T7597] netlink: 9 bytes leftover after parsing attributes in process `syz.0.547'. [ 191.335213][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.362488][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.374333][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.385430][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.401022][ T7609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.438140][ T7609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.459854][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.517790][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.557237][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.579304][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.600263][ T7610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.623172][ T7610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.771885][ T7614] netlink: 'syz.0.551': attribute type 27 has an invalid length. [ 191.819124][ T7614] netlink: 'syz.0.551': attribute type 3 has an invalid length. [ 191.827155][ T7614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.551'. [ 192.032161][ T7622] netlink: 'syz.3.554': attribute type 1 has an invalid length. [ 192.049979][ T7622] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.554'. [ 192.079324][ T7622] netlink: 9 bytes leftover after parsing attributes in process `syz.3.554'. [ 192.352788][ T7630] netlink: 'syz.0.557': attribute type 1 has an invalid length. [ 192.361939][ T7630] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.557'. [ 192.649574][ T7635] netlink: 'syz.0.567': attribute type 1 has an invalid length. [ 192.830643][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.872883][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.898803][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.958815][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.023389][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.048795][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.152078][ T7647] netlink: 'syz.3.563': attribute type 10 has an invalid length. [ 193.388868][ T7650] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 193.667617][ T7664] netlink: 'syz.0.571': attribute type 1 has an invalid length. [ 193.753762][ T7668] netlink: 'syz.1.572': attribute type 1 has an invalid length. [ 193.763239][ T7668] __nla_validate_parse: 6 callbacks suppressed [ 193.763276][ T7668] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.572'. [ 193.793535][ T7668] netlink: 9 bytes leftover after parsing attributes in process `syz.1.572'. [ 193.806944][ T7669] netlink: 'syz.3.569': attribute type 12 has an invalid length. [ 193.816683][ T7669] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.569'. [ 193.941058][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.951950][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.962322][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.973231][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.983907][ T7674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.994751][ T7674] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.085268][ T7677] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 194.454637][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.461207][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.883912][ T7681] netlink: 40 bytes leftover after parsing attributes in process `syz.2.577'. [ 194.969416][ T7681] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 195.029131][ T7681] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.114355][ T7694] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.580'. [ 195.154043][ T7681] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 195.247839][ T7696] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.581'. [ 195.264303][ T7696] netlink: 9 bytes leftover after parsing attributes in process `syz.3.581'. [ 195.303166][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.318130][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.341298][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.354539][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.367127][ T7700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.382848][ T7700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.581214][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.586'. [ 195.783323][ T7713] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.588'. [ 195.805395][ T7713] netlink: 9 bytes leftover after parsing attributes in process `syz.2.588'. [ 196.501561][ T7738] FAULT_INJECTION: forcing a failure. [ 196.501561][ T7738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.536445][ T7738] CPU: 0 PID: 7738 Comm: syz.3.597 Not tainted syzkaller #0 [ 196.543862][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 196.553976][ T7738] Call Trace: [ 196.557302][ T7738] [ 196.560278][ T7738] dump_stack_lvl+0x18c/0x250 [ 196.565006][ T7738] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.571229][ T7738] ? show_regs_print_info+0x20/0x20 [ 196.576481][ T7738] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 196.582714][ T7738] should_fail_ex+0x394/0x4c0 [ 196.587461][ T7738] _copy_to_user+0x2f/0xa0 [ 196.591971][ T7738] simple_read_from_buffer+0xe7/0x150 [ 196.592989][ T7740] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 196.597469][ T7738] proc_fail_nth_read+0x1e8/0x260 [ 196.597528][ T7738] ? proc_fault_inject_write+0x360/0x360 [ 196.597567][ T7738] ? fsnotify_perm+0x271/0x5e0 [ 196.597594][ T7738] ? proc_fault_inject_write+0x360/0x360 [ 196.597629][ T7738] vfs_read+0x298/0x990 [ 196.631418][ T7738] ? kernel_read+0x1e0/0x1e0 [ 196.636099][ T7738] ? __fget_files+0x28/0x460 [ 196.640840][ T7738] ? __fget_files+0x3fc/0x460 [ 196.645591][ T7738] ? __fdget_pos+0x2a3/0x330 [ 196.650245][ T7738] ? ksys_read+0x74/0x260 [ 196.654673][ T7738] ksys_read+0x151/0x260 [ 196.658990][ T7738] ? vfs_write+0x9a0/0x9a0 [ 196.663502][ T7738] ? lockdep_hardirqs_on+0x98/0x150 [ 196.668753][ T7738] do_syscall_64+0x55/0xb0 [ 196.673232][ T7738] ? clear_bhb_loop+0x40/0x90 [ 196.677972][ T7738] ? clear_bhb_loop+0x40/0x90 [ 196.682715][ T7738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.688668][ T7738] RIP: 0033:0x7fb4bc769d0e [ 196.693132][ T7738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.712796][ T7738] RSP: 002b:00007fb4bd722fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.721272][ T7738] RAX: ffffffffffffffda RBX: 00007fb4bd7236c0 RCX: 00007fb4bc769d0e [ 196.729302][ T7738] RDX: 000000000000000f RSI: 00007fb4bd7230a0 RDI: 0000000000000007 [ 196.737332][ T7738] RBP: 00007fb4bd723090 R08: 0000000000000000 R09: 0000000000000000 [ 196.745361][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.753387][ T7738] R13: 00007fb4bca26038 R14: 00007fb4bca25fa0 R15: 00007ffe4fd0ba58 [ 196.761431][ T7738] [ 196.863446][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.877482][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.913180][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.967724][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.014201][ T7746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.031640][ T7746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.199165][ T7761] sit0: entered allmulticast mode [ 197.322879][ T7763] validate_nla: 9 callbacks suppressed [ 197.322898][ T7763] netlink: 'syz.0.604': attribute type 3 has an invalid length. [ 197.584461][ T7768] netlink: 'syz.0.607': attribute type 1 has an invalid length. [ 197.622276][ T7774] netlink: 'syz.3.609': attribute type 10 has an invalid length. [ 197.824770][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.845540][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.861256][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.875589][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.898198][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.920809][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.947369][ T7787] netlink: 'syz.2.614': attribute type 11 has an invalid length. [ 198.307393][ T7798] netlink: 'syz.3.625': attribute type 9 has an invalid length. [ 198.442131][ T7804] netlink: 'syz.2.619': attribute type 10 has an invalid length. [ 198.655220][ T7808] netlink: 'syz.0.620': attribute type 3 has an invalid length. [ 198.980127][ T7810] __nla_validate_parse: 12 callbacks suppressed [ 198.980170][ T7810] netlink: 166900 bytes leftover after parsing attributes in process `syz.2.621'. [ 199.053839][ T7813] netlink: 'syz.2.621': attribute type 25 has an invalid length. [ 199.108766][ T7813] netlink: 'syz.2.621': attribute type 29 has an invalid length. [ 199.137793][ T7810] netlink: 5 bytes leftover after parsing attributes in process `syz.2.621'. [ 199.179336][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.190199][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.202177][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.213649][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.223784][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.235103][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.280464][ T7818] netlink: 166900 bytes leftover after parsing attributes in process `syz.0.626'. [ 199.306238][ T7818] netlink: 'syz.0.626': attribute type 25 has an invalid length. [ 199.344096][ T7818] netlink: 'syz.0.626': attribute type 29 has an invalid length. [ 199.357588][ T7823] netlink: 5 bytes leftover after parsing attributes in process `syz.0.626'. [ 199.497114][ T7828] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.629'. [ 199.533165][ T7828] netlink: 9 bytes leftover after parsing attributes in process `syz.2.629'. [ 199.632118][ T7832] sit0: entered allmulticast mode [ 202.364238][ T7858] validate_nla: 3 callbacks suppressed [ 202.364254][ T7858] netlink: 'syz.3.636': attribute type 2 has an invalid length. [ 202.389180][ T7858] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 202.396994][ T7858] netlink: 9 bytes leftover after parsing attributes in process `syz.3.636'. [ 202.795455][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.808010][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.832777][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.859304][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.873647][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.884554][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.899231][ T7862] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.637'. [ 202.922030][ T7867] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.641'. [ 202.938513][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 203.092565][ T7869] netlink: 'syz.2.642': attribute type 3 has an invalid length. [ 203.218504][ T7874] netlink: 'syz.1.643': attribute type 10 has an invalid length. [ 203.624436][ T7884] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 204.078925][ T7898] netlink: 'syz.2.653': attribute type 10 has an invalid length. [ 204.190783][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.202243][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.214895][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.232448][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.244972][ T7903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.256484][ T7903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.583114][ T7916] __nla_validate_parse: 4 callbacks suppressed [ 204.583135][ T7916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.660'. [ 204.626201][ T7916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.660'. [ 204.684092][ T7917] netlink: 14 bytes leftover after parsing attributes in process `syz.3.661'. [ 204.726620][ T7917] netlink: del zone limit has 4 unknown bytes [ 204.733939][ T7918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.660'. [ 204.765069][ T7916] netlink: 60 bytes leftover after parsing attributes in process `syz.0.660'. [ 204.817489][ T7916] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.660'. [ 204.869243][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.660'. [ 205.018496][ T7921] netlink: 180 bytes leftover after parsing attributes in process `syz.2.662'. [ 205.241759][ T7926] netlink: 'syz.0.664': attribute type 10 has an invalid length. [ 205.416377][ T7938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.427933][ T7938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.443199][ T7938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.463897][ T7938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.491740][ T7938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.519150][ T7938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.597816][ T7943] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 205.617846][ T7943] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.669'. [ 205.627888][ T7943] netlink: 9 bytes leftover after parsing attributes in process `syz.2.669'. [ 205.826257][ T7953] bridge_slave_1: default FDB implementation only supports local addresses [ 206.042794][ T7955] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 206.087706][ T7957] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 206.560376][ T7964] FAULT_INJECTION: forcing a failure. [ 206.560376][ T7964] name failslab, interval 1, probability 0, space 0, times 0 [ 206.604580][ T7964] CPU: 0 PID: 7964 Comm: syz.2.678 Not tainted syzkaller #0 [ 206.611966][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 206.622079][ T7964] Call Trace: [ 206.625490][ T7964] [ 206.628464][ T7964] dump_stack_lvl+0x18c/0x250 [ 206.633201][ T7964] ? sctp_sendmsg+0x1519/0x27b0 [ 206.638113][ T7964] ? ___sys_sendmsg+0x2a6/0x360 [ 206.643015][ T7964] ? show_regs_print_info+0x20/0x20 [ 206.648277][ T7964] ? load_image+0x420/0x420 [ 206.652882][ T7964] should_fail_ex+0x394/0x4c0 [ 206.657609][ T7964] should_failslab+0x9/0x20 [ 206.662132][ T7964] slab_pre_alloc_hook+0x59/0x300 [ 206.667170][ T7964] ? sctp_add_bind_addr+0x8c/0x360 [ 206.672315][ T7964] __kmem_cache_alloc_node+0x53/0x260 [ 206.677742][ T7964] ? sctp_add_bind_addr+0x8c/0x360 [ 206.682915][ T7964] kmalloc_trace+0x2a/0xe0 [ 206.687402][ T7964] sctp_add_bind_addr+0x8c/0x360 [ 206.692415][ T7964] sctp_copy_local_addr_list+0x31b/0x4e0 [ 206.698131][ T7964] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 206.703911][ T7964] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 206.710129][ T7964] ? sctp_v6_is_any+0x64/0x70 [ 206.714859][ T7964] ? sctp_copy_one_addr+0x8c/0x350 [ 206.720037][ T7964] sctp_bind_addr_copy+0xb3/0x3c0 [ 206.725117][ T7964] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 206.731517][ T7964] sctp_connect_new_asoc+0x2f9/0x6a0 [ 206.736896][ T7964] ? __sctp_connect+0xd80/0xd80 [ 206.741801][ T7964] ? __local_bh_enable_ip+0x13a/0x1c0 [ 206.747230][ T7964] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 206.752837][ T7964] ? security_sctp_bind_connect+0x89/0xb0 [ 206.758631][ T7964] sctp_sendmsg+0x1519/0x27b0 [ 206.763402][ T7964] ? sctp_getsockopt+0xb60/0xb60 [ 206.768417][ T7964] ? aa_sk_perm+0x7bb/0x8e0 [ 206.773005][ T7964] ? aa_af_perm+0x330/0x330 [ 206.777575][ T7964] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 206.784057][ T7964] ? sock_rps_record_flow+0x19/0x3f0 [ 206.789408][ T7964] ? inet_sendmsg+0xce/0x2a0 [ 206.794052][ T7964] ? inet_send_prepare+0x250/0x250 [ 206.799220][ T7964] ____sys_sendmsg+0x61b/0x980 [ 206.804042][ T7964] ? __asan_memset+0x22/0x40 [ 206.808689][ T7964] ? __sys_sendmsg_sock+0x30/0x30 [ 206.813781][ T7964] ? __import_iovec+0x5f2/0x850 [ 206.818689][ T7964] ? import_iovec+0x73/0xa0 [ 206.823255][ T7964] ___sys_sendmsg+0x2a6/0x360 [ 206.827975][ T7964] ? get_pid_task+0x20/0x1e0 [ 206.832623][ T7964] ? __sys_sendmsg+0x2b0/0x2b0 [ 206.837461][ T7964] ? __lock_acquire+0x7eb0/0x7eb0 [ 206.842575][ T7964] __se_sys_sendmsg+0x1d0/0x2c0 [ 206.847518][ T7964] ? __x64_sys_sendmsg+0x80/0x80 [ 206.852563][ T7964] ? lockdep_hardirqs_on+0x98/0x150 [ 206.857846][ T7964] do_syscall_64+0x55/0xb0 [ 206.862329][ T7964] ? clear_bhb_loop+0x40/0x90 [ 206.867068][ T7964] ? clear_bhb_loop+0x40/0x90 [ 206.871827][ T7964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.877783][ T7964] RIP: 0033:0x7f48f45a94d9 [ 206.882243][ T7964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.901937][ T7964] RSP: 002b:00007f48f541a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.910409][ T7964] RAX: ffffffffffffffda RBX: 00007f48f4825fa0 RCX: 00007f48f45a94d9 [ 206.918460][ T7964] RDX: 00000000000000c9 RSI: 0000200000002380 RDI: 0000000000000003 [ 206.926482][ T7964] RBP: 00007f48f541a090 R08: 0000000000000000 R09: 0000000000000000 [ 206.934505][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.942536][ T7964] R13: 00007f48f4826038 R14: 00007f48f4825fa0 R15: 00007ffcd179eab8 [ 206.950584][ T7964] [ 207.483411][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.508812][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.528685][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.548691][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.568690][ T7977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.598733][ T7977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.776562][ T7980] netlink: 'syz.0.682': attribute type 9 has an invalid length. [ 208.007609][ T7985] netlink: 'syz.3.684': attribute type 10 has an invalid length. [ 208.417798][ T7990] netlink: 'syz.1.686': attribute type 1 has an invalid length. [ 208.609107][ T7993] netlink: 'syz.2.687': attribute type 9 has an invalid length. [ 208.636244][ T7997] FAULT_INJECTION: forcing a failure. [ 208.636244][ T7997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.689692][ T7997] CPU: 0 PID: 7997 Comm: syz.3.688 Not tainted syzkaller #0 [ 208.697116][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 208.707255][ T7997] Call Trace: [ 208.710619][ T7997] [ 208.713621][ T7997] dump_stack_lvl+0x18c/0x250 [ 208.718402][ T7997] ? show_regs_print_info+0x20/0x20 [ 208.723695][ T7997] ? load_image+0x420/0x420 [ 208.728334][ T7997] ? __lock_acquire+0x7eb0/0x7eb0 [ 208.733485][ T7997] should_fail_ex+0x394/0x4c0 [ 208.738281][ T7997] _copy_to_user+0x2f/0xa0 [ 208.742806][ T7997] simple_read_from_buffer+0xe7/0x150 [ 208.748302][ T7997] proc_fail_nth_read+0x1e8/0x260 [ 208.753473][ T7997] ? proc_fault_inject_write+0x360/0x360 [ 208.759228][ T7997] ? fsnotify_perm+0x271/0x5e0 [ 208.764090][ T7997] ? proc_fault_inject_write+0x360/0x360 [ 208.769910][ T7997] vfs_read+0x298/0x990 [ 208.774186][ T7997] ? kernel_read+0x1e0/0x1e0 [ 208.778875][ T7997] ? __fget_files+0x28/0x460 [ 208.783559][ T7997] ? __fget_files+0x3fc/0x460 [ 208.788403][ T7997] ? __fdget_pos+0x2a3/0x330 [ 208.793166][ T7997] ? ksys_read+0x74/0x260 [ 208.797634][ T7997] ksys_read+0x151/0x260 [ 208.801986][ T7997] ? vfs_write+0x9a0/0x9a0 [ 208.806521][ T7997] ? syscall_enter_from_user_mode+0x2e/0x80 [ 208.812516][ T7997] do_syscall_64+0x55/0xb0 [ 208.817109][ T7997] ? clear_bhb_loop+0x40/0x90 [ 208.821876][ T7997] ? clear_bhb_loop+0x40/0x90 [ 208.826656][ T7997] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 208.832634][ T7997] RIP: 0033:0x7fb4bc769d0e [ 208.837128][ T7997] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.856832][ T7997] RSP: 002b:00007fb4bd722fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.865359][ T7997] RAX: ffffffffffffffda RBX: 00007fb4bd7236c0 RCX: 00007fb4bc769d0e [ 208.873431][ T7997] RDX: 000000000000000f RSI: 00007fb4bd7230a0 RDI: 0000000000000007 [ 208.881661][ T7997] RBP: 00007fb4bd723090 R08: 0000000000000000 R09: 0000000000000000 [ 208.889825][ T7997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.897886][ T7997] R13: 00007fb4bca26038 R14: 00007fb4bca25fa0 R15: 00007ffe4fd0ba58 [ 208.906008][ T7997] [ 209.228843][ T8004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.248016][ T8004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.264839][ T8004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.277490][ T8004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.314143][ T8004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.325423][ T8004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.560405][ T8014] netlink: 'syz.1.693': attribute type 10 has an invalid length. [ 209.593434][ T8019] __nla_validate_parse: 9 callbacks suppressed [ 209.593453][ T8019] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.694'. [ 209.621385][ T8019] bridge_slave_1: default FDB implementation only supports local addresses [ 209.670684][ T8018] netlink: 180 bytes leftover after parsing attributes in process `syz.0.695'. [ 209.995032][ T8026] netlink: 132 bytes leftover after parsing attributes in process `syz.2.698'. [ 210.107667][ T8028] netlink: 149044 bytes leftover after parsing attributes in process `syz.0.699'. [ 210.298253][ T8033] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 210.306567][ T8033] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.701'. [ 210.321672][ T8033] netlink: 9 bytes leftover after parsing attributes in process `syz.0.701'. [ 210.701573][ T8036] batman_adv: The newly added mac address (00:20:10:60:00:00) already exists on: batadv_slave_0 [ 210.736144][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.831799][ T8038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.842848][ T8038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.853409][ T8038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.865306][ T8038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.877896][ T8038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.894479][ T8038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.994581][ T8043] netlink: 'syz.1.705': attribute type 10 has an invalid length. [ 211.146221][ T8045] netlink: 180 bytes leftover after parsing attributes in process `syz.3.707'. [ 211.401913][ T8049] netlink: 'syz.1.708': attribute type 1 has an invalid length. [ 211.412620][ T8049] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.708'. [ 211.422983][ T8049] netlink: 9 bytes leftover after parsing attributes in process `syz.1.708'. [ 211.717496][ T8062] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.711'. [ 211.828731][ T8062] bridge_slave_1: default FDB implementation only supports local addresses [ 211.891686][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 211.893708][ T5796] Bluetooth: hci1: command 0x0406 tx timeout [ 211.904387][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 211.904446][ T5792] Bluetooth: hci2: command 0x0406 tx timeout [ 212.007640][ T8066] batman_adv: The newly added mac address (00:20:10:60:00:00) already exists on: batadv_slave_0 [ 212.106822][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.117894][ T8066] batman_adv: The newly added mac address (00:20:10:60:00:00) already exists on: batadv_slave_0 [ 212.181596][ T8066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.282297][ T8073] netlink: 'syz.1.716': attribute type 10 has an invalid length. [ 212.627407][ T8075] bridge0: port 3(ip6gretap0) entered blocking state [ 212.652608][ T8075] bridge0: port 3(ip6gretap0) entered disabled state [ 212.670731][ T8075] ip6gretap0: entered allmulticast mode [ 212.702425][ T8075] ip6gretap0: entered promiscuous mode [ 212.730829][ T8075] bridge0: port 3(ip6gretap0) entered blocking state [ 212.738274][ T8075] bridge0: port 3(ip6gretap0) entered forwarding state [ 213.142887][ T8082] netlink: 'syz.1.720': attribute type 1 has an invalid length. [ 214.219563][ T8102] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 215.021974][ T8120] netlink: 'syz.1.735': attribute type 9 has an invalid length. [ 215.042101][ T8120] __nla_validate_parse: 6 callbacks suppressed [ 215.042118][ T8120] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.735'. [ 215.136301][ T8125] netlink: 'syz.1.735': attribute type 9 has an invalid length. [ 215.160039][ T8125] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.735'. [ 215.289056][ T8128] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.737'. [ 215.298377][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.737'. [ 215.392281][ T8132] netlink: 'syz.0.738': attribute type 10 has an invalid length. [ 216.080412][ T8145] netlink: 180 bytes leftover after parsing attributes in process `syz.1.741'. [ 216.707718][ T8162] netlink: 'syz.2.746': attribute type 3 has an invalid length. [ 216.744798][ T8162] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.746'. [ 217.030165][ T8167] netlink: 'syz.3.749': attribute type 10 has an invalid length. [ 217.636025][ T8176] netlink: 'syz.1.752': attribute type 1 has an invalid length. [ 217.653708][ T8176] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.752'. [ 217.664771][ T8176] netlink: 9 bytes leftover after parsing attributes in process `syz.1.752'. [ 217.902214][ T8178] netlink: 180 bytes leftover after parsing attributes in process `syz.0.753'. [ 218.067123][ T8184] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 218.090231][ T8184] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.756'. [ 218.139066][ T8187] netlink: 'syz.2.757': attribute type 25 has an invalid length. [ 218.315683][ T8192] validate_nla: 1 callbacks suppressed [ 218.315704][ T8192] netlink: 'syz.2.759': attribute type 10 has an invalid length. [ 219.517405][ T8213] FAULT_INJECTION: forcing a failure. [ 219.517405][ T8213] name failslab, interval 1, probability 0, space 0, times 0 [ 219.563752][ T8213] CPU: 0 PID: 8213 Comm: syz.3.766 Not tainted syzkaller #0 [ 219.571156][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 219.581371][ T8213] Call Trace: [ 219.584696][ T8213] [ 219.587707][ T8213] dump_stack_lvl+0x18c/0x250 [ 219.592458][ T8213] ? sctp_sendmsg+0x1519/0x27b0 [ 219.597372][ T8213] ? ___sys_sendmsg+0x2a6/0x360 [ 219.602275][ T8213] ? show_regs_print_info+0x20/0x20 [ 219.607528][ T8213] ? load_image+0x420/0x420 [ 219.612109][ T8213] should_fail_ex+0x394/0x4c0 [ 219.616853][ T8213] should_failslab+0x9/0x20 [ 219.621411][ T8213] slab_pre_alloc_hook+0x59/0x300 [ 219.626506][ T8213] ? sctp_add_bind_addr+0x8c/0x360 [ 219.631674][ T8213] __kmem_cache_alloc_node+0x53/0x260 [ 219.637099][ T8213] ? sctp_add_bind_addr+0x8c/0x360 [ 219.642268][ T8213] kmalloc_trace+0x2a/0xe0 [ 219.646758][ T8213] sctp_add_bind_addr+0x8c/0x360 [ 219.651781][ T8213] sctp_copy_local_addr_list+0x31b/0x4e0 [ 219.657474][ T8213] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 219.663255][ T8213] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 219.669418][ T8213] ? sctp_v6_is_any+0x64/0x70 [ 219.674152][ T8213] ? sctp_copy_one_addr+0x8c/0x350 [ 219.679330][ T8213] sctp_bind_addr_copy+0xb3/0x3c0 [ 219.684416][ T8213] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 219.690814][ T8213] sctp_connect_new_asoc+0x2f9/0x6a0 [ 219.696167][ T8213] ? __sctp_connect+0xd80/0xd80 [ 219.701103][ T8213] ? __local_bh_enable_ip+0x13a/0x1c0 [ 219.706535][ T8213] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 219.712137][ T8213] ? security_sctp_bind_connect+0x89/0xb0 [ 219.717927][ T8213] sctp_sendmsg+0x1519/0x27b0 [ 219.722677][ T8213] ? sctp_getsockopt+0xb60/0xb60 [ 219.727685][ T8213] ? aa_sk_perm+0x7bb/0x8e0 [ 219.732263][ T8213] ? aa_af_perm+0x330/0x330 [ 219.736825][ T8213] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 219.743301][ T8213] ? sock_rps_record_flow+0x19/0x3f0 [ 219.748656][ T8213] ? inet_sendmsg+0xce/0x2a0 [ 219.753323][ T8213] ? inet_send_prepare+0x250/0x250 [ 219.758496][ T8213] ____sys_sendmsg+0x61b/0x980 [ 219.763330][ T8213] ? __asan_memset+0x22/0x40 [ 219.767983][ T8213] ? __sys_sendmsg_sock+0x30/0x30 [ 219.773066][ T8213] ? __import_iovec+0x5f2/0x850 [ 219.778008][ T8213] ? import_iovec+0x73/0xa0 [ 219.782574][ T8213] ___sys_sendmsg+0x2a6/0x360 [ 219.787316][ T8213] ? __sys_sendmsg+0x2b0/0x2b0 [ 219.792179][ T8213] ? trace_call_bpf+0xc3/0x6c0 [ 219.797046][ T8213] __se_sys_sendmsg+0x1d0/0x2c0 [ 219.801973][ T8213] ? perf_trace_preemptirq_template+0x269/0x330 [ 219.808286][ T8213] ? __x64_sys_sendmsg+0x80/0x80 [ 219.813310][ T8213] ? lockdep_hardirqs_on+0x98/0x150 [ 219.818567][ T8213] do_syscall_64+0x55/0xb0 [ 219.823040][ T8213] ? clear_bhb_loop+0x40/0x90 [ 219.827784][ T8213] ? clear_bhb_loop+0x40/0x90 [ 219.832528][ T8213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 219.838480][ T8213] RIP: 0033:0x7fb4bc7a94d9 [ 219.842950][ T8213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.862700][ T8213] RSP: 002b:00007fb4bd723028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.871185][ T8213] RAX: ffffffffffffffda RBX: 00007fb4bca25fa0 RCX: 00007fb4bc7a94d9 [ 219.879207][ T8213] RDX: 0000000030008041 RSI: 0000200000000a00 RDI: 0000000000000003 [ 219.887239][ T8213] RBP: 00007fb4bd723090 R08: 0000000000000000 R09: 0000000000000000 [ 219.895357][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.903381][ T8213] R13: 00007fb4bca26038 R14: 00007fb4bca25fa0 R15: 00007ffe4fd0ba58 [ 219.911431][ T8213] [ 219.977629][ T8215] netlink: 'syz.0.764': attribute type 9 has an invalid length. [ 220.177930][ T8216] netlink: 'syz.0.764': attribute type 9 has an invalid length. [ 220.280636][ T8216] __nla_validate_parse: 5 callbacks suppressed [ 220.280655][ T8216] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.764'. [ 220.464328][ T8223] netlink: 180 bytes leftover after parsing attributes in process `syz.1.768'. [ 220.479323][ T8225] netlink: 'syz.2.769': attribute type 10 has an invalid length. [ 220.655801][ T8220] netlink: 204744 bytes leftover after parsing attributes in process `syz.3.767'. [ 220.726509][ T8229] netlink: 'syz.2.770': attribute type 10 has an invalid length. [ 220.775017][ T8229] team0: Device vxcan1 is of different type [ 221.094491][ T8235] netlink: 'syz.0.772': attribute type 10 has an invalid length. [ 221.102798][ T8228] netlink: 'syz.1.771': attribute type 1 has an invalid length. [ 221.111354][ T8228] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.771'. [ 221.139524][ T8228] netlink: 9 bytes leftover after parsing attributes in process `syz.1.771'. [ 221.181176][ T8235] FAULT_INJECTION: forcing a failure. [ 221.181176][ T8235] name failslab, interval 1, probability 0, space 0, times 0 [ 221.238687][ T8235] CPU: 0 PID: 8235 Comm: syz.0.772 Not tainted syzkaller #0 [ 221.246071][ T8235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 221.256185][ T8235] Call Trace: [ 221.259514][ T8235] [ 221.262492][ T8235] dump_stack_lvl+0x18c/0x250 [ 221.267234][ T8235] ? show_regs_print_info+0x20/0x20 [ 221.272494][ T8235] ? load_image+0x420/0x420 [ 221.277062][ T8235] ? __might_sleep+0xe0/0xe0 [ 221.281739][ T8235] ? __lock_acquire+0x7eb0/0x7eb0 [ 221.286835][ T8235] should_fail_ex+0x394/0x4c0 [ 221.291603][ T8235] should_failslab+0x9/0x20 [ 221.296264][ T8235] slab_pre_alloc_hook+0x59/0x300 [ 221.301364][ T8235] ? fib_create_info+0xa8d/0x2390 [ 221.306451][ T8235] ? fib_create_info+0xa8d/0x2390 [ 221.312056][ T8235] __kmem_cache_alloc_node+0x53/0x260 [ 221.317503][ T8235] ? fib_create_info+0xa8d/0x2390 [ 221.322586][ T8235] __kmalloc+0xa7/0x240 [ 221.326831][ T8235] fib_create_info+0xa8d/0x2390 [ 221.331859][ T8235] fib_table_insert+0xc6/0x1b00 [ 221.336874][ T8235] ? __lock_acquire+0x7eb0/0x7eb0 [ 221.341974][ T8235] ? l3mdev_fib_table+0x18/0x160 [ 221.346978][ T8235] ? fib_new_table+0x10a/0x2d0 [ 221.351800][ T8235] fib_magic+0x2ce/0x3b0 [ 221.356088][ T8235] ? fib_add_ifaddr+0x5d0/0x5d0 [ 221.360990][ T8235] ? lockdep_rtnl_is_held+0x26/0x30 [ 221.366217][ T8235] ? ip_mc_up+0x283/0x300 [ 221.370588][ T8235] fib_add_ifaddr+0x3e6/0x5d0 [ 221.375320][ T8235] fib_netdev_event+0x389/0x490 [ 221.380204][ T8235] notifier_call_chain+0x18f/0x380 [ 221.385446][ T8235] dev_open+0x110/0x190 [ 221.389629][ T8235] ? netdev_notify_peers+0x180/0x180 [ 221.394967][ T8235] ? rcu_is_watching+0x15/0xb0 [ 221.399787][ T8235] ? team_add_slave+0x2a2/0x28a0 [ 221.404767][ T8235] ? __kmalloc+0xe5/0x240 [ 221.409136][ T8235] team_add_slave+0x703/0x28a0 [ 221.413956][ T8235] ? team_netpoll_cleanup+0xf0/0xf0 [ 221.419188][ T8235] ? __dev_change_flags+0x4d2/0x6a0 [ 221.424421][ T8235] ? dev_get_flags+0x1c0/0x1c0 [ 221.429228][ T8235] ? printk_sprint+0x460/0x460 [ 221.434036][ T8235] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 221.439967][ T8235] ? mutex_is_locked+0x12/0x40 [ 221.444760][ T8235] do_setlink+0xda4/0x3f00 [ 221.449229][ T8235] ? load_image+0x420/0x420 [ 221.453776][ T8235] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 221.459962][ T8235] ? stack_trace_save+0xaa/0x100 [ 221.464930][ T8235] ? stack_trace_snprint+0xf0/0xf0 [ 221.470105][ T8235] ? __nla_validate+0x50/0x50 [ 221.474838][ T8235] ? validate_linkmsg+0x719/0x910 [ 221.479929][ T8235] rtnl_newlink+0x1848/0x2170 [ 221.484655][ T8235] ? rtnl_newlink+0x501/0x2170 [ 221.489471][ T8235] ? rtnl_setlink+0x4e0/0x4e0 [ 221.494291][ T8235] ? __rwlock_init+0x150/0x150 [ 221.499118][ T8235] ? do_raw_spin_unlock+0x121/0x230 [ 221.504380][ T8235] ? __mutex_lock+0x978/0xce0 [ 221.509088][ T8235] ? __mutex_lock+0x4d2/0xce0 [ 221.513854][ T8235] ? rtnl_setlink+0x4e0/0x4e0 [ 221.518590][ T8235] rtnetlink_rcv_msg+0x843/0xf90 [ 221.523571][ T8235] ? rtnetlink_rcv_msg+0x220/0xf90 [ 221.528724][ T8235] ? rtnetlink_bind+0x80/0x80 [ 221.533441][ T8235] ? kasan_quarantine_put+0xd8/0x220 [ 221.538768][ T8235] ? lockdep_hardirqs_on+0x98/0x150 [ 221.544023][ T8235] ? perf_trace_preemptirq_template+0xac/0x330 [ 221.550222][ T8235] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 221.556240][ T8235] ? lock_chain_count+0x20/0x20 [ 221.561139][ T8235] ? __local_bh_enable_ip+0x13a/0x1c0 [ 221.566544][ T8235] ? lockdep_hardirqs_on+0x98/0x150 [ 221.571771][ T8235] ? __local_bh_enable_ip+0x13a/0x1c0 [ 221.577168][ T8235] ? _local_bh_enable+0xa0/0xa0 [ 221.582052][ T8235] ? __dev_queue_xmit+0x1481/0x3a30 [ 221.587303][ T8235] ? __dev_queue_xmit+0x6d1/0x3a30 [ 221.592465][ T8235] ? ref_tracker_free+0x686/0x830 [ 221.597534][ T8235] netlink_rcv_skb+0x235/0x4c0 [ 221.602332][ T8235] ? rtnetlink_bind+0x80/0x80 [ 221.607046][ T8235] ? netlink_ack+0x1160/0x1160 [ 221.611867][ T8235] ? __lock_acquire+0x7eb0/0x7eb0 [ 221.616935][ T8235] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.622166][ T8235] netlink_unicast+0x856/0x9e0 [ 221.626984][ T8235] netlink_sendmsg+0x8d0/0xbf0 [ 221.631881][ T8235] ? netlink_getsockopt+0x590/0x590 [ 221.637123][ T8235] ? apparmor_socket_sendmsg+0x8e/0x330 [ 221.643060][ T8235] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 221.648404][ T8235] ? security_socket_sendmsg+0x80/0xa0 [ 221.653995][ T8235] ? netlink_getsockopt+0x590/0x590 [ 221.659315][ T8235] ____sys_sendmsg+0x61b/0x980 [ 221.664125][ T8235] ? __asan_memset+0x22/0x40 [ 221.668748][ T8235] ? __sys_sendmsg_sock+0x30/0x30 [ 221.673793][ T8235] ? __import_iovec+0x5f2/0x850 [ 221.678686][ T8235] ? import_iovec+0x73/0xa0 [ 221.683226][ T8235] ___sys_sendmsg+0x2a6/0x360 [ 221.687934][ T8235] ? get_pid_task+0x20/0x1e0 [ 221.692560][ T8235] ? __sys_sendmsg+0x2b0/0x2b0 [ 221.697372][ T8235] ? __lock_acquire+0x7eb0/0x7eb0 [ 221.702452][ T8235] __se_sys_sendmsg+0x1d0/0x2c0 [ 221.707338][ T8235] ? __x64_sys_sendmsg+0x80/0x80 [ 221.712315][ T8235] ? lockdep_hardirqs_on+0x98/0x150 [ 221.717541][ T8235] do_syscall_64+0x55/0xb0 [ 221.721990][ T8235] ? clear_bhb_loop+0x40/0x90 [ 221.726787][ T8235] ? clear_bhb_loop+0x40/0x90 [ 221.731503][ T8235] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.737435][ T8235] RIP: 0033:0x7fb49b3a94d9 [ 221.741907][ T8235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.761545][ T8235] RSP: 002b:00007fb49c195028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.769992][ T8235] RAX: ffffffffffffffda RBX: 00007fb49b625fa0 RCX: 00007fb49b3a94d9 [ 221.777990][ T8235] RDX: 0000000000080840 RSI: 00002000000002c0 RDI: 0000000000000003 [ 221.785984][ T8235] RBP: 00007fb49c195090 R08: 0000000000000000 R09: 0000000000000000 [ 221.793980][ T8235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.801976][ T8235] R13: 00007fb49b626038 R14: 00007fb49b625fa0 R15: 00007ffd4ef1f8e8 [ 221.809991][ T8235] [ 221.874984][ T8235] team0: Device vxcan1 is of different type [ 221.892888][ T8243] netlink: 'syz.3.774': attribute type 21 has an invalid length. [ 222.462747][ T8254] netlink: 'syz.3.778': attribute type 10 has an invalid length. [ 222.593271][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.614221][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.634511][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.650561][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.677454][ T8259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.698707][ T8259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.853250][ T8267] netlink: 'syz.1.783': attribute type 10 has an invalid length. [ 222.905793][ T8267] veth0_macvtap: left promiscuous mode [ 223.045841][ T8273] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.784'. [ 223.088481][ T8273] netlink: 9 bytes leftover after parsing attributes in process `syz.2.784'. [ 223.163088][ T8278] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.786'. [ 223.184734][ T8278] netlink: 9 bytes leftover after parsing attributes in process `syz.0.786'. [ 223.394683][ T8272] validate_nla: 2 callbacks suppressed [ 223.394704][ T8272] netlink: 'syz.3.785': attribute type 10 has an invalid length. [ 223.413973][ T8272] netlink: 2 bytes leftover after parsing attributes in process `syz.3.785'. [ 223.424084][ T8272] bond0: entered promiscuous mode [ 223.432375][ T8272] bond_slave_1: entered promiscuous mode [ 223.441882][ T8272] bridge0: port 3(bond0) entered blocking state [ 223.449084][ T8272] bridge0: port 3(bond0) entered disabled state [ 223.455944][ T8272] bond0: entered allmulticast mode [ 223.462137][ T8272] bond_slave_1: entered allmulticast mode [ 223.486548][ T8272] bridge0: port 3(bond0) entered blocking state [ 223.493221][ T8272] bridge0: port 3(bond0) entered forwarding state [ 223.772874][ T8283] netlink: 'syz.3.788': attribute type 10 has an invalid length. [ 224.102927][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.128747][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.157068][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.178887][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.200338][ T8297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.215262][ T8297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.270530][ T8301] netlink: 'syz.0.795': attribute type 1 has an invalid length. [ 224.492558][ T8310] netlink: 'syz.1.800': attribute type 10 has an invalid length. [ 224.610891][ T8308] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 224.716763][ T8315] netlink: 'syz.0.801': attribute type 10 has an invalid length. [ 224.737861][ T8315] veth0_macvtap: left promiscuous mode [ 225.142920][ T8327] ªªªªªª: renamed from vlan0 (while UP) [ 225.443450][ T8330] FAULT_INJECTION: forcing a failure. [ 225.443450][ T8330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.479417][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.482147][ T8330] CPU: 0 PID: 8330 Comm: syz.1.813 Not tainted syzkaller #0 [ 225.497362][ T8330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 225.500811][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.507457][ T8330] Call Trace: [ 225.507473][ T8330] [ 225.517980][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.520586][ T8330] dump_stack_lvl+0x18c/0x250 [ 225.520635][ T8330] ? show_regs_print_info+0x20/0x20 [ 225.527603][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.534024][ T8330] ? load_image+0x420/0x420 [ 225.534069][ T8330] ? __might_fault+0xaa/0x120 [ 225.534100][ T8330] ? __lock_acquire+0x7eb0/0x7eb0 [ 225.534141][ T8330] should_fail_ex+0x394/0x4c0 [ 225.572976][ T8330] _copy_from_user+0x2f/0xe0 [ 225.577640][ T8330] ___sys_sendmsg+0x1c7/0x360 [ 225.582375][ T8330] ? __sys_sendmsg+0x2b0/0x2b0 [ 225.587219][ T8330] ? __lock_acquire+0x7eb0/0x7eb0 [ 225.592334][ T8330] __se_sys_sendmsg+0x1d0/0x2c0 [ 225.597236][ T8330] ? __x64_sys_sendmsg+0x80/0x80 [ 225.602240][ T8330] ? lockdep_hardirqs_on+0x98/0x150 [ 225.607486][ T8330] do_syscall_64+0x55/0xb0 [ 225.611944][ T8330] ? clear_bhb_loop+0x40/0x90 [ 225.616663][ T8330] ? clear_bhb_loop+0x40/0x90 [ 225.621388][ T8330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.627336][ T8330] RIP: 0033:0x7fa707da94d9 [ 225.631813][ T8330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.651467][ T8330] RSP: 002b:00007fa705ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.659922][ T8330] RAX: ffffffffffffffda RBX: 00007fa708025fa0 RCX: 00007fa707da94d9 [ 225.667924][ T8330] RDX: 0000000000000000 RSI: 0000200000000b00 RDI: 000000000000000a [ 225.675929][ T8330] RBP: 00007fa705ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 225.683932][ T8330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.691953][ T8330] R13: 00007fa708026038 R14: 00007fa708025fa0 R15: 00007fffe0875fd8 [ 225.700008][ T8330] [ 225.718290][ T8335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.748752][ T8335] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.084637][ T8341] netlink: 'syz.1.808': attribute type 1 has an invalid length. [ 226.112580][ T8341] __nla_validate_parse: 6 callbacks suppressed [ 226.112617][ T8341] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.808'. [ 226.141367][ T8341] netlink: 9 bytes leftover after parsing attributes in process `syz.1.808'. [ 226.229143][ T8344] netlink: 'syz.0.809': attribute type 10 has an invalid length. [ 226.315501][ T8346] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.818'. [ 226.348868][ T8346] openvswitch: netlink: Flow key attribute not present in set flow. [ 226.632689][ T8353] netlink: 'syz.0.811': attribute type 10 has an invalid length. [ 226.741998][ T8353] team0: Port device virt_wifi0 added [ 226.777141][ T8351] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 226.787125][ T8351] macvlan0: entered promiscuous mode [ 226.828280][ T8351] macvlan0: entered allmulticast mode [ 226.844926][ T8351] veth1_vlan: entered allmulticast mode [ 226.854510][ T8351] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 226.870300][ T8353] syz.0.811 (8353) used greatest stack depth: 18968 bytes left [ 227.398370][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.432666][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.444428][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.455545][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.465562][ T8364] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.477748][ T8364] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.650805][ T8374] veth0_macvtap: left promiscuous mode [ 228.294751][ T8387] netlink: 180 bytes leftover after parsing attributes in process `syz.1.822'. [ 228.535518][ T8391] validate_nla: 2 callbacks suppressed [ 228.535559][ T8391] netlink: 'syz.3.823': attribute type 1 has an invalid length. [ 228.568465][ T8391] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.823'. [ 228.579209][ T8391] netlink: 'syz.3.823': attribute type 1 has an invalid length. [ 228.834035][ T8402] netlink: 'syz.2.828': attribute type 21 has an invalid length. [ 228.858638][ T8404] FAULT_INJECTION: forcing a failure. [ 228.858638][ T8404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.911428][ T8404] CPU: 1 PID: 8404 Comm: syz.3.829 Not tainted syzkaller #0 [ 228.918831][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 228.928948][ T8404] Call Trace: [ 228.932269][ T8404] [ 228.935229][ T8404] dump_stack_lvl+0x18c/0x250 [ 228.939949][ T8404] ? show_regs_print_info+0x20/0x20 [ 228.945191][ T8404] ? load_image+0x420/0x420 [ 228.949753][ T8404] ? __might_fault+0xaa/0x120 [ 228.954466][ T8404] ? __lock_acquire+0x7eb0/0x7eb0 [ 228.959530][ T8404] should_fail_ex+0x394/0x4c0 [ 228.964266][ T8404] _copy_from_iter+0x1cd/0x1290 [ 228.969172][ T8404] ? copyout_mc+0x70/0x70 [ 228.973550][ T8404] ? __virt_addr_valid+0x10c/0x380 [ 228.978706][ T8404] ? __virt_addr_valid+0x10c/0x380 [ 228.983860][ T8404] ? __virt_addr_valid+0x10c/0x380 [ 228.989012][ T8404] ? __check_object_size+0x4fc/0xa40 [ 228.994330][ T8404] rawv6_send_hdrinc+0x7aa/0x1660 [ 228.999410][ T8404] ? txopt_get+0x3f0/0x3f0 [ 229.003870][ T8404] ? txopt_get+0x344/0x3f0 [ 229.008341][ T8404] ? fl6_sock_lookup+0xc0/0xc0 [ 229.013171][ T8404] rawv6_sendmsg+0x12f6/0x17c0 [ 229.018022][ T8404] ? compat_rawv6_ioctl+0x70/0x70 [ 229.023106][ T8404] ? aa_sk_perm+0x7bb/0x8e0 [ 229.027662][ T8404] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 229.034121][ T8404] ? aa_sock_msg_perm+0x94/0x150 [ 229.039104][ T8404] ? inet_sendmsg+0x7e/0x2a0 [ 229.043730][ T8404] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 229.049057][ T8404] ? inet_send_prepare+0x250/0x250 [ 229.054211][ T8404] ____sys_sendmsg+0x61b/0x980 [ 229.059019][ T8404] ? __asan_memset+0x22/0x40 [ 229.063674][ T8404] ? __sys_sendmsg_sock+0x30/0x30 [ 229.068725][ T8404] ? __import_iovec+0x5f2/0x850 [ 229.073651][ T8404] ? import_iovec+0x73/0xa0 [ 229.078186][ T8404] ___sys_sendmsg+0x2a6/0x360 [ 229.082897][ T8404] ? __sys_sendmsg+0x2b0/0x2b0 [ 229.087707][ T8404] ? trace_call_bpf+0xc3/0x6c0 [ 229.092555][ T8404] __se_sys_sendmsg+0x1d0/0x2c0 [ 229.097440][ T8404] ? perf_trace_preemptirq_template+0x269/0x330 [ 229.103738][ T8404] ? __x64_sys_sendmsg+0x80/0x80 [ 229.108730][ T8404] ? lockdep_hardirqs_on+0x98/0x150 [ 229.113989][ T8404] do_syscall_64+0x55/0xb0 [ 229.118441][ T8404] ? clear_bhb_loop+0x40/0x90 [ 229.123166][ T8404] ? clear_bhb_loop+0x40/0x90 [ 229.127918][ T8404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 229.133870][ T8404] RIP: 0033:0x7fb4bc7a94d9 [ 229.138321][ T8404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.158391][ T8404] RSP: 002b:00007fb4bd723028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.166851][ T8404] RAX: ffffffffffffffda RBX: 00007fb4bca25fa0 RCX: 00007fb4bc7a94d9 [ 229.174850][ T8404] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 229.182850][ T8404] RBP: 00007fb4bd723090 R08: 0000000000000000 R09: 0000000000000000 [ 229.190863][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.199118][ T8404] R13: 00007fb4bca26038 R14: 00007fb4bca25fa0 R15: 00007ffe4fd0ba58 [ 229.207142][ T8404] [ 229.338430][ T8406] netlink: 'syz.0.831': attribute type 3 has an invalid length. [ 229.357927][ T8406] netlink: 132 bytes leftover after parsing attributes in process `syz.0.831'. [ 229.556202][ T8412] netlink: 'syz.2.832': attribute type 10 has an invalid length. [ 229.741629][ T8419] netlink: 'syz.3.833': attribute type 29 has an invalid length. [ 229.773402][ T8419] netlink: 'syz.3.833': attribute type 3 has an invalid length. [ 229.786973][ T8420] netlink: 'syz.1.834': attribute type 1 has an invalid length. [ 229.808927][ T8420] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.834'. [ 229.824061][ T8419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.833'. [ 229.826790][ T8420] netlink: 9 bytes leftover after parsing attributes in process `syz.1.834'. [ 229.915338][ T8424] netlink: 'syz.2.835': attribute type 10 has an invalid length. [ 230.011568][ T8424] team0: Port device virt_wifi0 added [ 230.126604][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.140803][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.150958][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.161583][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.172812][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.183567][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.227244][ T8429] netlink: 'syz.1.837': attribute type 10 has an invalid length. [ 230.423621][ T8438] team0: Device vxcan1 is of different type [ 230.495624][ T8443] hsr0: entered promiscuous mode [ 230.525900][ T8443] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 230.556961][ T8443] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 230.579667][ T8443] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 230.602295][ T8443] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 230.794600][ T8449] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.845'. [ 231.033970][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.044916][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.056275][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.067821][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.078157][ T8461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.089545][ T8461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.302435][ T8465] team0: Port device virt_wifi0 added [ 232.124133][ T8475] syz.2.852 (8475) used obsolete PPPIOCDETACH ioctl [ 232.253565][ T8478] __nla_validate_parse: 1 callbacks suppressed [ 232.253590][ T8478] netlink: 40 bytes leftover after parsing attributes in process `syz.3.854'. [ 232.754966][ T8487] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.857'. [ 232.794341][ T8487] netlink: 9 bytes leftover after parsing attributes in process `syz.2.857'. [ 232.799850][ T8488] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.856'. [ 232.857962][ T8488] bridge_slave_1: default FDB implementation only supports local addresses [ 233.298403][ T8499] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.861'. [ 233.460804][ T8504] netlink: 132 bytes leftover after parsing attributes in process `syz.2.862'. [ 233.800084][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.832750][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.862008][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.903308][ T8517] validate_nla: 15 callbacks suppressed [ 233.903375][ T8517] netlink: 'syz.3.868': attribute type 1 has an invalid length. [ 233.924713][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.927562][ T8517] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.868'. [ 233.946779][ T8517] netlink: 9 bytes leftover after parsing attributes in process `syz.3.868'. [ 233.960757][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.977224][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.193827][ T8526] netlink: 'syz.2.872': attribute type 10 has an invalid length. [ 234.218695][ T8529] netlink: 'syz.3.871': attribute type 10 has an invalid length. [ 234.242042][ T8529] veth0_macvtap: left promiscuous mode [ 234.501221][ T8539] netlink: 'syz.3.877': attribute type 21 has an invalid length. [ 234.758533][ T8545] netlink: 'syz.0.878': attribute type 29 has an invalid length. [ 234.792150][ T8545] netlink: 'syz.0.878': attribute type 3 has an invalid length. [ 234.803520][ T8545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.878'. [ 235.075761][ T8549] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 235.089435][ T8549] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.880'. [ 235.107684][ T8551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.135410][ T8551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.146675][ T8551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.160395][ T8551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.171204][ T8551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.182527][ T8551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.483096][ T8559] netlink: 'syz.2.884': attribute type 1 has an invalid length. [ 235.585160][ T8563] netlink: 'syz.0.886': attribute type 10 has an invalid length. [ 236.258188][ T8591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.269191][ T8591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.280473][ T8591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.291982][ T8591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.308245][ T8582] netlink: 'syz.0.892': attribute type 1 has an invalid length. [ 236.314543][ T8591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.348901][ T8591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.311522][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.352882][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.394224][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.432958][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.448068][ T8615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.468183][ T8615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.546445][ T8618] __nla_validate_parse: 9 callbacks suppressed [ 237.546472][ T8618] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.905'. [ 237.588963][ T8618] netlink: 9 bytes leftover after parsing attributes in process `syz.0.905'. [ 238.076493][ T8626] netlink: 15986 bytes leftover after parsing attributes in process `syz.1.908'. [ 238.414910][ T8632] netlink: 6 bytes leftover after parsing attributes in process `syz.0.911'. [ 238.444092][ T8632] openvswitch: netlink: Flow actions attr not present in new flow. [ 238.702691][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.713737][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.724725][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.736155][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.743480][ T8640] netlink: 132 bytes leftover after parsing attributes in process `syz.0.913'. [ 238.763948][ T8642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.786414][ T8642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.966025][ T8646] validate_nla: 8 callbacks suppressed [ 238.966066][ T8646] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 238.999210][ T8646] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.915'. [ 239.021007][ T8646] netlink: 9 bytes leftover after parsing attributes in process `syz.3.915'. [ 239.147395][ T8648] netlink: 'syz.2.916': attribute type 1 has an invalid length. [ 239.163796][ T8648] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.916'. [ 239.190904][ T8648] netlink: 9 bytes leftover after parsing attributes in process `syz.2.916'. [ 240.463405][ T8678] FAULT_INJECTION: forcing a failure. [ 240.463405][ T8678] name failslab, interval 1, probability 0, space 0, times 0 [ 240.493560][ T8678] CPU: 1 PID: 8678 Comm: syz.3.924 Not tainted syzkaller #0 [ 240.500944][ T8678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 240.511054][ T8678] Call Trace: [ 240.514366][ T8678] [ 240.517320][ T8678] dump_stack_lvl+0x18c/0x250 [ 240.522040][ T8678] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.528241][ T8678] ? show_regs_print_info+0x20/0x20 [ 240.533522][ T8678] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.539766][ T8678] should_fail_ex+0x394/0x4c0 [ 240.544538][ T8678] should_failslab+0x9/0x20 [ 240.549078][ T8678] slab_pre_alloc_hook+0x59/0x300 [ 240.554133][ T8678] kmem_cache_alloc_lru+0x4d/0x2c0 [ 240.559276][ T8678] ? __d_alloc+0x31/0x710 [ 240.563639][ T8678] __d_alloc+0x31/0x710 [ 240.567826][ T8678] d_alloc_parallel+0xe0/0x1590 [ 240.572709][ T8678] ? verify_lock_unused+0x140/0x140 [ 240.577947][ T8678] ? lockdep_softirqs_off+0x440/0x440 [ 240.583363][ T8678] ? lockdep_softirqs_off+0x440/0x440 [ 240.588777][ T8678] ? d_hash_and_lookup+0x1b0/0x1b0 [ 240.593946][ T8678] ? __init_waitqueue_head+0xa8/0x140 [ 240.599367][ T8678] __lookup_slow+0x138/0x400 [ 240.603992][ T8678] ? lookup_one_len+0x2e0/0x2e0 [ 240.608886][ T8678] ? down_read+0x1ac/0x2e0 [ 240.613334][ T8678] lookup_slow+0x53/0x70 [ 240.617609][ T8678] link_path_walk+0x97c/0xe40 [ 240.622333][ T8678] ? handle_lookup_down+0x130/0x130 [ 240.627597][ T8678] path_openat+0x291/0x3270 [ 240.632180][ T8678] ? verify_lock_unused+0x140/0x140 [ 240.637412][ T8678] ? do_filp_open+0x430/0x430 [ 240.642121][ T8678] ? perf_trace_lock_acquire+0x105/0x400 [ 240.647790][ T8678] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 240.653553][ T8678] do_filp_open+0x1f2/0x430 [ 240.658093][ T8678] ? vfs_tmpfile+0x620/0x620 [ 240.662721][ T8678] ? noop_direct_IO+0x20/0x20 [ 240.667452][ T8678] ? _raw_spin_unlock+0x28/0x40 [ 240.672348][ T8678] ? alloc_fd+0x590/0x640 [ 240.676718][ T8678] do_sys_openat2+0x134/0x1d0 [ 240.681437][ T8678] ? do_sys_open+0xe0/0xe0 [ 240.685899][ T8678] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.692123][ T8678] __x64_sys_openat+0x139/0x160 [ 240.697022][ T8678] do_syscall_64+0x55/0xb0 [ 240.701468][ T8678] ? clear_bhb_loop+0x40/0x90 [ 240.706190][ T8678] ? clear_bhb_loop+0x40/0x90 [ 240.710936][ T8678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 240.716866][ T8678] RIP: 0033:0x7fb4bc769d0e [ 240.721394][ T8678] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 240.741174][ T8678] RSP: 002b:00007fb4bd701ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.749652][ T8678] RAX: ffffffffffffffda RBX: 00007fb4bd7026c0 RCX: 00007fb4bc769d0e [ 240.757667][ T8678] RDX: 0000000000000002 RSI: 00007fb4bd701f90 RDI: ffffffffffffff9c [ 240.765961][ T8678] RBP: 00007fb4bd702090 R08: 0000000000000000 R09: 0000000000000000 [ 240.774067][ T8678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.782161][ T8678] R13: 00007fb4bca26128 R14: 00007fb4bca26090 R15: 00007ffe4fd0ba58 [ 240.790191][ T8678] [ 240.994306][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.005237][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.017052][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.032719][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.043118][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.054060][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.091600][ T8690] netlink: 'syz.1.927': attribute type 3 has an invalid length. [ 241.099671][ T8690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.927'. [ 241.580295][ T8697] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 241.980954][ T8706] netlink: 'syz.3.935': attribute type 10 has an invalid length. [ 242.675461][ T8711] netlink: 'syz.2.936': attribute type 1 has an invalid length. [ 242.708940][ T8711] __nla_validate_parse: 2 callbacks suppressed [ 242.708980][ T8711] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.936'. [ 242.765946][ T8711] netlink: 9 bytes leftover after parsing attributes in process `syz.2.936'. [ 242.867486][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.890397][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.912315][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.956003][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.976665][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.004815][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.383070][ T8724] netlink: 'syz.2.940': attribute type 3 has an invalid length. [ 243.428774][ T8724] netlink: 132 bytes leftover after parsing attributes in process `syz.2.940'. [ 243.991077][ T8739] netlink: 'syz.2.946': attribute type 1 has an invalid length. [ 244.028687][ T8739] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.946'. [ 244.058460][ T8739] netlink: 9 bytes leftover after parsing attributes in process `syz.2.946'. [ 244.085226][ T8743] netlink: 'syz.3.948': attribute type 1 has an invalid length. [ 244.093859][ T8744] netlink: 'syz.0.947': attribute type 10 has an invalid length. [ 244.109962][ T8743] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.948'. [ 244.124664][ T8743] netlink: 9 bytes leftover after parsing attributes in process `syz.3.948'. [ 244.493094][ T8750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.543743][ T8750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.597333][ T8750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.652874][ T8750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.683764][ T8750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.717034][ T8750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.022514][ T8755] netlink: 10 bytes leftover after parsing attributes in process `syz.3.953'. [ 245.241456][ T8759] netlink: 'syz.3.954': attribute type 3 has an invalid length. [ 245.265266][ T8759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.954'. [ 245.514165][ T8768] tap0: tun_chr_ioctl cmd 1074025677 [ 245.539170][ T8768] tap0: linktype set to 776 [ 245.554721][ T8768] tap0: tun_chr_ioctl cmd 2147767520 [ 245.764783][ T8778] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 245.818218][ T8778] netlink: 'syz.3.957': attribute type 2 has an invalid length. [ 245.977641][ T8780] netlink: 'syz.0.958': attribute type 1 has an invalid length. [ 246.008967][ T8780] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.958'. [ 246.138028][ T8784] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 246.563135][ T8789] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 246.600446][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.617495][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.627922][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.640737][ T8794] netlink: 'syz.1.963': attribute type 29 has an invalid length. [ 246.647763][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.667272][ T8793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.678242][ T8793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.698853][ T8794] netlink: 'syz.1.963': attribute type 29 has an invalid length. [ 247.060513][ T8800] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 247.791043][ T8814] FAULT_INJECTION: forcing a failure. [ 247.791043][ T8814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.813294][ T8814] CPU: 1 PID: 8814 Comm: syz.2.972 Not tainted syzkaller #0 [ 247.820691][ T8814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 247.830824][ T8814] Call Trace: [ 247.834145][ T8814] [ 247.837102][ T8814] dump_stack_lvl+0x18c/0x250 [ 247.841823][ T8814] ? show_regs_print_info+0x20/0x20 [ 247.847065][ T8814] ? load_image+0x420/0x420 [ 247.851611][ T8814] ? __might_fault+0xaa/0x120 [ 247.856325][ T8814] ? __lock_acquire+0x7eb0/0x7eb0 [ 247.861410][ T8814] should_fail_ex+0x394/0x4c0 [ 247.866130][ T8814] _copy_from_user+0x2f/0xe0 [ 247.870805][ T8814] __sys_bpf+0x23e/0x890 [ 247.875310][ T8814] ? bpf_link_show_fdinfo+0x560/0x560 [ 247.880751][ T8814] ? lock_chain_count+0x20/0x20 [ 247.885640][ T8814] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 247.891673][ T8814] __x64_sys_bpf+0x7c/0x90 [ 247.896133][ T8814] do_syscall_64+0x55/0xb0 [ 247.900620][ T8814] ? clear_bhb_loop+0x40/0x90 [ 247.905427][ T8814] ? clear_bhb_loop+0x40/0x90 [ 247.910162][ T8814] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.916119][ T8814] RIP: 0033:0x7f48f45a94d9 [ 247.920564][ T8814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.940232][ T8814] RSP: 002b:00007f48f541a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 247.948697][ T8814] RAX: ffffffffffffffda RBX: 00007f48f4825fa0 RCX: 00007f48f45a94d9 [ 247.956714][ T8814] RDX: 0000000000000028 RSI: 00002000000015c0 RDI: 0000000000000012 [ 247.964739][ T8814] RBP: 00007f48f541a090 R08: 0000000000000000 R09: 0000000000000000 [ 247.973009][ T8814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.981030][ T8814] R13: 00007f48f4826038 R14: 00007f48f4825fa0 R15: 00007ffcd179eab8 [ 247.989099][ T8814] [ 250.058141][ T8819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.073736][ T8819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.084687][ T8819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.101378][ T8819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.111926][ T8819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.122983][ T8819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.255198][ T8827] validate_nla: 3 callbacks suppressed [ 250.255216][ T8827] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 250.319441][ T8827] netlink: 'syz.0.975': attribute type 29 has an invalid length. [ 250.369312][ T8824] FAULT_INJECTION: forcing a failure. [ 250.369312][ T8824] name failslab, interval 1, probability 0, space 0, times 0 [ 250.369437][ T8831] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 250.408906][ T8824] CPU: 1 PID: 8824 Comm: syz.0.975 Not tainted syzkaller #0 [ 250.416309][ T8824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 250.426452][ T8824] Call Trace: [ 250.429883][ T8824] [ 250.432871][ T8824] dump_stack_lvl+0x18c/0x250 [ 250.437636][ T8824] ? show_regs_print_info+0x20/0x20 [ 250.442909][ T8824] ? load_image+0x420/0x420 [ 250.447464][ T8824] ? __might_sleep+0xe0/0xe0 [ 250.452098][ T8824] ? __lock_acquire+0x7eb0/0x7eb0 [ 250.457150][ T8824] ? rcu_is_watching+0x15/0xb0 [ 250.461958][ T8824] should_fail_ex+0x394/0x4c0 [ 250.466680][ T8824] should_failslab+0x9/0x20 [ 250.471241][ T8824] slab_pre_alloc_hook+0x59/0x300 [ 250.476303][ T8824] kmem_cache_alloc_node+0x5e/0x320 [ 250.481552][ T8824] ? __might_fault+0xc6/0x120 [ 250.486256][ T8824] ? __alloc_skb+0x103/0x2c0 [ 250.490898][ T8824] __alloc_skb+0x103/0x2c0 [ 250.495348][ T8824] netlink_dump+0x1ee/0xec0 [ 250.499879][ T8824] ? lockdep_hardirqs_on+0x98/0x150 [ 250.505106][ T8824] ? iov_iter_init+0x1e0/0x1e0 [ 250.509906][ T8824] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 250.515836][ T8824] ? _raw_spin_unlock+0x40/0x40 [ 250.520726][ T8824] ? __skb_try_recv_from_queue+0x58f/0x730 [ 250.526595][ T8824] ? netlink_lookup+0x200/0x200 [ 250.531503][ T8824] ? skb_copy_datagram_iter+0x200/0x200 [ 250.537102][ T8824] ? refcount_dec_and_test+0x4f/0x70 [ 250.542426][ T8824] netlink_recvmsg+0x693/0xe60 [ 250.547242][ T8824] ? netlink_sendmsg+0xbf0/0xbf0 [ 250.552205][ T8824] ? aa_sk_perm+0x7bb/0x8e0 [ 250.556765][ T8824] ? aa_af_perm+0x330/0x330 [ 250.561305][ T8824] ? __lock_acquire+0x135d/0x7eb0 [ 250.566542][ T8824] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 250.571931][ T8824] ? security_socket_recvmsg+0x89/0xb0 [ 250.577435][ T8824] ? netlink_sendmsg+0xbf0/0xbf0 [ 250.582437][ T8824] ____sys_recvmsg+0x2bd/0x5d0 [ 250.587262][ T8824] ? __sys_recvmsg_sock+0x50/0x50 [ 250.592419][ T8824] ? import_iovec+0x73/0xa0 [ 250.596988][ T8824] ___sys_recvmsg+0x214/0x590 [ 250.601796][ T8824] ? __sys_recvmsg+0x2a0/0x2a0 [ 250.606600][ T8824] ? ksys_write+0x1d2/0x260 [ 250.611161][ T8824] ? __fget_files+0x3fc/0x460 [ 250.615961][ T8824] __x64_sys_recvmsg+0x21e/0x2f0 [ 250.620968][ T8824] ? ___sys_recvmsg+0x590/0x590 [ 250.625962][ T8824] ? lockdep_hardirqs_on+0x98/0x150 [ 250.631196][ T8824] do_syscall_64+0x55/0xb0 [ 250.635645][ T8824] ? clear_bhb_loop+0x40/0x90 [ 250.640361][ T8824] ? clear_bhb_loop+0x40/0x90 [ 250.645079][ T8824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 250.651005][ T8824] RIP: 0033:0x7fb49b3a94d9 [ 250.655453][ T8824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.675105][ T8824] RSP: 002b:00007fb49c195028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 250.683664][ T8824] RAX: ffffffffffffffda RBX: 00007fb49b625fa0 RCX: 00007fb49b3a94d9 [ 250.691681][ T8824] RDX: 0000000000010002 RSI: 0000200000001a00 RDI: 0000000000000003 [ 250.699696][ T8824] RBP: 00007fb49c195090 R08: 0000000000000000 R09: 0000000000000000 [ 250.707785][ T8824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.715793][ T8824] R13: 00007fb49b626038 R14: 00007fb49b625fa0 R15: 00007ffd4ef1f8e8 [ 250.723863][ T8824] [ 250.877698][ T8832] delete_channel: no stack [ 251.706604][ T8853] __nla_validate_parse: 8 callbacks suppressed [ 251.706625][ T8853] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.983'. [ 254.973284][ T8874] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 254.984066][ T8874] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.989'. [ 254.998833][ T8874] netlink: 9 bytes leftover after parsing attributes in process `syz.0.989'. [ 255.105085][ T8880] netlink: 'syz.2.991': attribute type 10 has an invalid length. [ 255.911386][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.918915][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.243630][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.283954][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.311042][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.322289][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.334094][ T8898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.346575][ T8898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.306150][ T8916] netlink: 'syz.2.1006': attribute type 11 has an invalid length. [ 257.321565][ T8916] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 257.335739][ T8916] netlink: 'syz.2.1006': attribute type 1 has an invalid length. [ 257.347093][ T8916] netlink: 'syz.2.1006': attribute type 2 has an invalid length. [ 257.361564][ T8916] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.1006'. [ 257.632297][ T8928] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 257.648873][ T8928] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1008'. [ 257.660237][ T8928] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1008'. [ 259.544728][ C1] [ 259.544739][ C1] ================================ [ 259.544745][ C1] WARNING: inconsistent lock state [ 259.544763][ C1] syzkaller #0 Not tainted [ 259.544773][ C1] -------------------------------- [ 259.544778][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 259.544786][ C1] syz.3.1010/8936 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 259.544807][ C1] ffffffff8e297dd8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0 [ 259.544868][ C1] {INITIAL USE} state was registered at: [ 259.544875][ C1] lock_acquire+0x19e/0x420 [ 259.544898][ C1] _raw_write_lock_irq+0xaf/0xf0 [ 259.544919][ C1] kernfs_rename_ns+0x5e4/0x830 [ 259.544935][ C1] sysfs_rename_link_ns+0x175/0x1b0 [ 259.544956][ C1] device_rename+0x110/0x1e0 [ 259.544975][ C1] dev_change_name+0x308/0x8e0 [ 259.545004][ C1] do_setlink+0x9b6/0x3f00 [ 259.545024][ C1] rtnl_newlink+0x1848/0x2170 [ 259.545042][ C1] rtnetlink_rcv_msg+0x843/0xf90 [ 259.545062][ C1] netlink_rcv_skb+0x235/0x4c0 [ 259.545079][ C1] netlink_unicast+0x856/0x9e0 [ 259.545107][ C1] netlink_sendmsg+0x8d0/0xbf0 [ 259.545124][ C1] __sys_sendto+0x4a9/0x6b0 [ 259.545140][ C1] __x64_sys_sendto+0xde/0xf0 [ 259.545157][ C1] do_syscall_64+0x55/0xb0 [ 259.545181][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.545213][ C1] irq event stamp: 3270 [ 259.545219][ C1] hardirqs last enabled at (3269): [] perf_swevent_event+0x476/0x570 [ 259.545249][ C1] hardirqs last disabled at (3270): [] exc_debug+0x73/0x140 [ 259.545280][ C1] softirqs last enabled at (2894): [] netlink_insert+0x10d0/0x13e0 [ 259.545315][ C1] softirqs last disabled at (2888): [] release_sock+0x2f/0x1c0 [ 259.545343][ C1] [ 259.545343][ C1] other info that might help us debug this: [ 259.545349][ C1] Possible unsafe locking scenario: [ 259.545349][ C1] [ 259.545353][ C1] CPU0 [ 259.545356][ C1] ---- [ 259.545360][ C1] lock(kernfs_rename_lock); [ 259.545372][ C1] [ 259.545375][ C1] lock(kernfs_rename_lock); [ 259.545386][ C1] [ 259.545386][ C1] *** DEADLOCK *** [ 259.545386][ C1] [ 259.545390][ C1] no locks held by syz.3.1010/8936. [ 259.545398][ C1] [ 259.545398][ C1] stack backtrace: [ 259.545404][ C1] CPU: 1 PID: 8936 Comm: syz.3.1010 Not tainted syzkaller #0 [ 259.545421][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 259.545431][ C1] Call Trace: [ 259.545438][ C1] <#DB> [ 259.545452][ C1] dump_stack_lvl+0x18c/0x250 [ 259.545508][ C1] ? show_regs_print_info+0x20/0x20 [ 259.545587][ C1] ? print_usage_bug+0x43d/0x6a0 [ 259.545625][ C1] ? verify_lock_unused+0x15/0x140 [ 259.545681][ C1] lock_acquire+0x2c2/0x420 [ 259.545741][ C1] ? kernfs_path_from_node+0x88/0xbd0 [ 259.545793][ C1] ? read_lock_is_recursive+0x20/0x20 [ 259.545878][ C1] ? trace_event_raw_event_lock+0x240/0x240 [ 259.545908][ C1] ? look_up_lock_class+0x75/0x140 [ 259.545964][ C1] _raw_read_lock_irqsave+0xbc/0x100 [ 259.545989][ C1] ? kernfs_path_from_node+0x88/0xbd0 [ 259.546038][ C1] ? _raw_read_lock+0x50/0x50 [ 259.546058][ C1] ? rcu_is_watching+0x15/0xb0 [ 259.546089][ C1] ? get_mem_cgroup_from_mm+0x38/0x290 [ 259.546115][ C1] ? lock_release+0xb5/0x8c0 [ 259.546155][ C1] ? percpu_ref_tryget+0x15/0x180 [ 259.546210][ C1] kernfs_path_from_node+0x88/0xbd0 [ 259.546248][ C1] ? __lock_acquire+0x7eb0/0x7eb0 [ 259.546302][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 259.546342][ C1] ? kernfs_name+0x140/0x140 [ 259.546386][ C1] ? get_mem_cgroup_from_mm+0x38/0x290 [ 259.546432][ C1] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 259.546482][ C1] get_mm_memcg_path+0xb9/0x360 [ 259.546542][ C1] __mmap_lock_do_trace_start_locking+0xe6/0x2f0 [ 259.546603][ C1] ? __bpf_trace_mmap_lock_acquire_returned+0x230/0x230 [ 259.546814][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 259.546871][ C1] ? _raw_spin_unlock+0x28/0x40 [ 259.546924][ C1] stack_map_get_build_id_offset+0x661/0x810 [ 259.546985][ C1] ? pcpu_freelist_pop+0x12a/0x190 [ 259.547030][ C1] ? __pcpu_freelist_pop+0x810/0x810 [ 259.547070][ C1] ? __bpf_get_stackid+0x980/0x980 [ 259.547115][ C1] ? get_perf_callchain+0x3f8/0x510 [ 259.547177][ C1] __bpf_get_stackid+0x5ac/0x980 [ 259.547252][ C1] bpf_get_stackid+0x131/0x1f0 [ 259.547304][ C1] bpf_prog_12712c88fd19bd5b+0x29/0x2d [ 259.547332][ C1] bpf_overflow_handler+0x1fc/0x510 [ 259.547381][ C1] ? bpf_overflow_handler+0xde/0x510 [ 259.547410][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 259.547432][ C1] ? lock_release+0xb5/0x8c0 [ 259.547492][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 259.547536][ C1] __perf_event_overflow+0x461/0x660 [ 259.547595][ C1] perf_swevent_event+0x319/0x570 [ 259.547635][ C1] ? perf_tp_event+0x1550/0x1550 [ 259.547725][ C1] perf_bp_event+0x319/0x430 [ 259.547779][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 259.547957][ C1] ? lock_acquire+0x2c2/0x420 [ 259.548058][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 259.548111][ C1] notifier_call_chain+0x18f/0x380 [ 259.548154][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 259.548191][ C1] atomic_notifier_call_chain+0xda/0x180 [ 259.548228][ C1] notify_die+0x145/0x1a0 [ 259.548269][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 259.548336][ C1] ? rcu_is_watching+0x15/0xb0 [ 259.548377][ C1] notify_debug+0x2e/0x50 [ 259.548399][ C1] exc_debug+0xde/0x140 [ 259.548445][ C1] asm_exc_debug+0x1e/0x40 [ 259.548466][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 259.548490][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 259.548505][ C1] RSP: 0018:ffffc90003a8f958 EFLAGS: 00050206 [ 259.548519][ C1] RAX: ffffffff842cf101 RBX: 000000000000fe33 RCX: 000000000000f973 [ 259.548530][ C1] RDX: 0000000000000001 RSI: 00002000000007c0 RDI: ffffc90003bbf4c0 [ 259.548545][ C1] RBP: ffffc90003a8fa90 R08: ffffc90003bcee32 R09: 1ffff92000779dc6 [ 259.548560][ C1] R10: dffffc0000000000 R11: fffff52000779dc7 R12: ffffc90003bbf000 [ 259.548573][ C1] R13: 0000200000000300 R14: ffffc90003a8fc18 R15: 1ffff92000751f83 [ 259.548632][ C1] ? _copy_from_iter+0x161/0x1290 [ 259.548684][ C1] [ 259.548689][ C1] [ 259.548693][ C1] _copy_from_iter+0x242/0x1290 [ 259.548732][ C1] ? __rwlock_init+0x150/0x150 [ 259.548777][ C1] ? copyout_mc+0x70/0x70 [ 259.548796][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 259.548838][ C1] ? _raw_spin_unlock+0x28/0x40 [ 259.548857][ C1] ? find_vmap_area+0xfc/0x110 [ 259.548896][ C1] ? __check_object_size+0x4fc/0xa40 [ 259.548938][ C1] netlink_sendmsg+0x76b/0xbf0 [ 259.549010][ C1] ? netlink_getsockopt+0x590/0x590 [ 259.549047][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 259.549088][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 259.549109][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 259.549155][ C1] sock_write_iter+0x2dc/0x420 [ 259.549195][ C1] ? sock_read_iter+0x3f0/0x3f0 [ 259.549273][ C1] ? common_file_perm+0x198/0x1f0 [ 259.549337][ C1] vfs_write+0x474/0x9a0 [ 259.549396][ C1] ? file_end_write+0x250/0x250 [ 259.549451][ C1] ? __fget_files+0x3fc/0x460 [ 259.549526][ C1] ? __fdget_pos+0x1d8/0x330 [ 259.549547][ C1] ? ksys_write+0x74/0x260 [ 259.549589][ C1] ksys_write+0x151/0x260 [ 259.549634][ C1] ? __ia32_sys_read+0x90/0x90 [ 259.549685][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 259.549724][ C1] do_syscall_64+0x55/0xb0 [ 259.549745][ C1] ? clear_bhb_loop+0x40/0x90 [ 259.549766][ C1] ? clear_bhb_loop+0x40/0x90 [ 259.549801][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.549822][ C1] RIP: 0033:0x7fb4bc7a94d9 [ 259.549842][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.549855][ C1] RSP: 002b:00007fb4bd723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.549870][ C1] RAX: ffffffffffffffda RBX: 00007fb4bca25fa0 RCX: 00007fb4bc7a94d9 [ 259.549882][ C1] RDX: 000000000000fe33 RSI: 0000200000000300 RDI: 0000000000000007 [ 259.549891][ C1] RBP: 00007fb4bc83804e R08: 0000000000000000 R09: 0000000000000000 [ 259.549900][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.549908][ C1] R13: 00007fb4bca26038 R14: 00007fb4bca25fa0 R15: 00007ffe4fd0ba58 [ 259.550001][ C1]