last executing test programs: 22.696366461s ago: executing program 4 (id=3696): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) perf_event_open$cgroup(&(0x7f00000017c0)={0x1, 0x80, 0x4, 0x0, 0xe, 0xcc, 0x0, 0x7, 0x40012, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000001780), 0x4}, 0x404, 0x8, 0x6, 0x3, 0x8, 0x6, 0x1, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r0, 0x4) r2 = socket$kcm(0x21, 0x2, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x98ffffff}, 0x4000880) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001100)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200061019000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000800) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}], 0x10}, 0xfc40) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 22.241490212s ago: executing program 4 (id=3699): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xe, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYRES32, @ANYBLOB="0000000004000000050000000500"/28], 0x50) perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x3100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x22, &(0x7f0000000280)=ANY=[], 0x128}, 0x8010) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000002) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5d, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7b, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc9, &(0x7f00000001c0)=""/201, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x0, 0x3}, 0x10, r2, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x2, 0x3, 0xc, 0x6}, {0x5, 0x5, 0x8}, {0x3, 0x1, 0x1, 0x1}], 0x10, 0x3}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000100)={'veth0_to_batadv', 0x32, 0x35}, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000340), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 20.761825748s ago: executing program 4 (id=3706): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0xf6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 16.575664001s ago: executing program 4 (id=3713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000002280)={'syzkaller0\x00'}) 16.283687919s ago: executing program 4 (id=3716): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xe, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYRES32, @ANYBLOB="0000000004000000050000000500"/28], 0x50) perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x3100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x22, &(0x7f0000000280)=ANY=[], 0x128}, 0x8010) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000002) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5d, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7b, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc9, &(0x7f00000001c0)=""/201, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x0, 0x3}, 0x10, r2, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x2, 0x3, 0xc, 0x6}, {0x5, 0x5, 0x8}, {0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000100)={'veth0_to_batadv', 0x32, 0x35}, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000340), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 15.300179423s ago: executing program 4 (id=3721): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 6) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 12.903710462s ago: executing program 1 (id=3729): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000002c80)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002980)=""/230, 0xe6}, {&(0x7f0000002a80)=""/111, 0x6f}, {&(0x7f0000002b00)=""/90, 0x5a}], 0x3, &(0x7f0000002bc0)}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x40000000, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0xc) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000f40700000000000000082327aafdd0aa02"], 0x48) socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0x2, 0xffffff9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7, 0xc000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5a18, 0x7}, 0x14002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r8, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5}) setsockopt$sock_attach_bpf(r7, 0x0, 0x1a, 0x0, 0x1c) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) socketpair(0x38, 0x2, 0x5, &(0x7f0000000000)) r10 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8014) 12.237597138s ago: executing program 0 (id=3731): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xe, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYRES32, @ANYBLOB="0000000004000000050000000500"/28], 0x50) perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x3100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x22, &(0x7f0000000280)=ANY=[], 0x128}, 0x8010) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000002) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5d, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7b, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc9, &(0x7f00000001c0)=""/201, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x0, 0x3}, 0x10, r2, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x2, 0x3, 0xc, 0x6}, {0x5, 0x5, 0x8}, {0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000100)={'veth0_to_batadv', 0x32, 0x35}, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000340), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 11.547388396s ago: executing program 1 (id=3733): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xfed0) openat$tun(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x300, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000240)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x9, 0x0, 0x0, 0x7602, 0x0, 0x28085, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000080)}, 0x1, 0x0, 0xa958, 0x2}, r2, 0xd, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0x27ef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.9410699s ago: executing program 0 (id=3735): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0020000000000000000000006a4b58cd0cd9c1ab15663a0c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a001000000002800000", 0x2c}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 9.683846041s ago: executing program 0 (id=3737): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0020000000000000000000006a4b58cd0cd9c1ab15663a0c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d9000000000851000000300000018"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f00000004000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a001000000002800000", 0x2c}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 9.683391131s ago: executing program 3 (id=3738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140020003600e41b0000900ac0006e01100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10090, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r2, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb00000000003f000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000003c0)}, 0x8001) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415", 0x3}, {&(0x7f0000000740)}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0x26}], 0x3}, 0x200ce0c0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x20040080) r7 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x82, &(0x7f0000000000), 0x8) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000000c0)=0x1) r8 = bpf$MAP_CREATE(0xc00, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3000000}, [@btf_id={0x18, 0xa, 0x3, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000005c0)=""/222, 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x1003, r8}, 0x38) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001bc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) 8.255171186s ago: executing program 0 (id=3739): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r1, 0x0, 0x4000040) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='-,\x00') sendmsg$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2, 0x200000000000006, 0x0) perf_event_open(0x0, 0x0, 0x1, r3, 0x0) ioctl$TUNGETVNETLE(r3, 0x8953, &(0x7f0000000040)) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000), 0x8) close(r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040), 0x4) socket$kcm(0x2, 0x200000000000003, 0x106) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000740)="bb", 0x1}], 0x1}, 0x40040) 8.11358095s ago: executing program 3 (id=3740): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32=0x1, @ANYBLOB="a0fb1bcf516a54e898fb96d2100000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff58, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020027000b35d25a806f8c6394f90224fc602f1b01000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r4, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={r2, 0x0, 0xc, 0x1000, &(0x7f0000000200)="bb8875ab7143f621b339dd17", &(0x7f00000012c0)=""/4096, 0x873, 0x0, 0x5c, 0xa7, &(0x7f00000022c0)="3fa73878bb863e9b2790ea7c7dd629552b4a98316c0c5895d0338fce064059fb6a135870df1ec7b3a7c98170db50d7d8f9376b000d1eddb27b17f561934c18c85b3557e1ac293e2860af3fe18c2356f7d2cafbef6f4c95e133a121a2", &(0x7f0000002340)="400e2825c068a9115a59b2a64f8bcef359e0f56fd4858f2084aa843f6facd9341d568bd949228d10b22c35bc110e6c4bfd4346de119a7222fb59f65197d273f9ffed9a6f555adc34732ea5e1d465635c741b479b699a865fcb8d7a97eb834d9d6e497626886129b7bbed84e985f069575cd4ddfadc722be4e0c3efef6c5d5faf4a951df0932e71bc6d8de6f780f3234cadd6711b0d5b6aaafd4806c5425f84296cb3866c319164", 0x3, 0x0, 0x8}, 0x50) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5c00000013006bcc9e3b6f5c441d0000007ea60864160af36514000cc00800020007000200060001c003000000000000fd", 0x31}, {&(0x7f00000005c0)="924c7396c1fea27ae669b738e0cb6fefac6208c9823a14bd252234a4417598d697f2f4eb001ea95ca779ac35341503dbcc07f04fe9b0225f258bc4e807ed2b3c3db3ea562f54e3fddb2b06be2db322035f2b1face549479121492709d2408689f144720ed0306e376ee3e3308247a3beab006dc949b2bdfda513514cd47b81170200000045e26928f1e3cb049a4805488919110b3073ab5aca13c2bb95d3750b650bc549f49d2ef73bb857ded8525f3b7106ae146ed88e956cb6a31320c5d3aa384a153a4c4ec27e5f979a53ce98f2cb52b2c6e1dd2120cc88deadb6c120238bc05f812a0fe662218767f08c7d4f96ed41324b004c8f192887493fb2705b780e966c114c369d9b73d0df6e6e2b3ec29a1140b48cb71e4e8c55ea1311d2c291dc2a9a32f3d68bee3945abb5aaf90566e25ffee83bc12cbb3c8da16a3585abc8f60eab85836ea2dfb0f9e841d444755ff80488e96fc74bc686f9954795e4d09127263de410b046", 0x166}, {&(0x7f0000000440)="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", 0x10e}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4008052) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x23, &(0x7f0000000040), 0x12b) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) 7.891252255s ago: executing program 1 (id=3742): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000400)=@raw=[@generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x0, 0xe, 0xfffffffffffffdb7, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x40000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.514446444s ago: executing program 1 (id=3743): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000002c80)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000002b80)=[{&(0x7f0000002980)=""/230, 0xe6}, {&(0x7f0000002a80)=""/111, 0x6f}, {&(0x7f0000002b00)=""/90, 0x5a}], 0x3, &(0x7f0000002bc0)}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x40000000, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="140000000000000029"], 0x18}, 0xc) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="00000000f40700000000000000082327aafdd0aa02"], 0x48) socket$kcm(0xa, 0x3, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext, 0x10c002, 0x2, 0xffffff9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7, 0xc000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5a18, 0x7}, 0x14002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r8, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r9, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5}) setsockopt$sock_attach_bpf(r7, 0x0, 0x1a, 0x0, 0x1c) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) socketpair(0x38, 0x2, 0x5, &(0x7f0000000000)) r10 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000001340)=[{&(0x7f00000001c0)="2e00000010008188040f46ecdb4cb9cca7480ef40f000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x8014) 7.337991339s ago: executing program 3 (id=3745): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb2, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xe, &(0x7f0000000540)=ANY=[@ANYRESOCT=r0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYRES32, @ANYBLOB="0000000004000000050000000500"/28], 0x50) perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_clone(0x3100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x22, &(0x7f0000000280)=ANY=[], 0x128}, 0x8010) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000002) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5d, 0x0, 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x7b, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc9, &(0x7f00000001c0)=""/201, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x0, 0x3}, 0x10, r2, 0x0, 0x3, 0x0, &(0x7f0000000980)=[{0x2, 0x3, 0xc, 0x6}, {0x5, 0x5, 0x8}, {0x0, 0x3, 0xd, 0xc}], 0x10, 0x3}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r2, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_netprio_ifpriomap(r5, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000100)={'veth0_to_batadv', 0x32, 0x35}, 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000340), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) 7.113489364s ago: executing program 0 (id=3746): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES32, @ANYBLOB="0020000000000000000000006a4b58cd0cd9c1ab15663a0c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18070000000000000000", @ANYBLOB="0000000000000000b70000000000850000000c000000b70000001d0c8cd310af0896bc77108fce4d90000000008510000003000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000380)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d00", 0x16}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x31, 0x0, &(0x7f0000000000)="b9ff0300600d698cff9e14f008004de7f9c7646b0b06e3e1360000003200135437f6442017128c4407ca814f7bb551fe5f", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 6.5070111s ago: executing program 3 (id=3747): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffece) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xffbf) 5.873435305s ago: executing program 0 (id=3749): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000000000009500a500000000003e62782f6b62fe583a205a2a93679f78609d6ca7f05ba88e8460d0693a8e47c2857ff1c02f24ca929b6aec07a02b58cbd88131bb0d547c9bab43442e4535f88409162afd1ed8ff5a113677be48432632a733fb0c58fcdba24799f692860f292f268d00eac7dd739212a24e74fef584daca158d64b64536a0c21a0ab5a3e038038aaef7bd2ea0621eb7be6fc89005be16748d73f3a1887006e10ed1fb7d9eb609d12ae5bcfd530400e18f6ad05fe15db26a4951f34aa257313b453b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffece) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xffbf) 5.853114096s ago: executing program 1 (id=3750): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8040) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x22, &(0x7f00000000c0)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000850000000500000095000000000000009504a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848120000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x40400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000006c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni-avx2\x00'}, 0x80, 0x0}, 0xc0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) 5.085426444s ago: executing program 2 (id=3751): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x2, &(0x7f0000000040)=r1, 0x5) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) syz_clone(0x8400a000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3}, 0xc) close(r4) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000300), &(0x7f00000003c0)=r4}, 0x20) (fail_nth: 1) 4.287405494s ago: executing program 2 (id=3752): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x19, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6020, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)}, 0x4000010) r7 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000400), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00%\x00'], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) 3.368723347s ago: executing program 2 (id=3753): close(0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) 2.42829276s ago: executing program 2 (id=3754): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000400)=@raw=[@generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x0, 0xe, 0xfffffffffffffdb7, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x40000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.239063685s ago: executing program 2 (id=3755): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000900)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000000100000400000020000000", @ANYRES32=0x1, @ANYBLOB="a0fb1bcf516a54e898fb96d2100000000000000000000000010000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x1}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff58, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020027000b35d25a806f8c6394f90224fc602f1b01000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r4, 0xfffffffffffffd62, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002400)={r2, 0x0, 0xc, 0x1000, &(0x7f0000000200)="bb8875ab7143f621b339dd17", &(0x7f00000012c0)=""/4096, 0x873, 0x0, 0x5c, 0xa7, &(0x7f00000022c0)="3fa73878bb863e9b2790ea7c7dd629552b4a98316c0c5895d0338fce064059fb6a135870df1ec7b3a7c98170db50d7d8f9376b000d1eddb27b17f561934c18c85b3557e1ac293e2860af3fe18c2356f7d2cafbef6f4c95e133a121a2", &(0x7f0000002340)="400e2825c068a9115a59b2a64f8bcef359e0f56fd4858f2084aa843f6facd9341d568bd949228d10b22c35bc110e6c4bfd4346de119a7222fb59f65197d273f9ffed9a6f555adc34732ea5e1d465635c741b479b699a865fcb8d7a97eb834d9d6e497626886129b7bbed84e985f069575cd4ddfadc722be4e0c3efef6c5d5faf4a951df0932e71bc6d8de6f780f3234cadd6711b0d5b6aaafd4806c5425f84296cb3866c319164", 0x3, 0x0, 0x8}, 0x50) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="5c00000013006bcc9e3b6f5c441d0000007ea60864160af36514000cc00800020007000200060001c003000000000000fd", 0x31}, {&(0x7f00000005c0)="924c7396c1fea27ae669b738e0cb6fefac6208c9823a14bd252234a4417598d697f2f4eb001ea95ca779ac35341503dbcc07f04fe9b0225f258bc4e807ed2b3c3db3ea562f54e3fddb2b06be2db322035f2b1face549479121492709d2408689f144720ed0306e376ee3e3308247a3beab006dc949b2bdfda513514cd47b81170200000045e26928f1e3cb049a4805488919110b3073ab5aca13c2bb95d3750b650bc549f49d2ef73bb857ded8525f3b7106ae146ed88e956cb6a31320c5d3aa384a153a4c4ec27e5f979a53ce98f2cb52b2c6e1dd2120cc88deadb6c120238bc05f812a0fe662218767f08c7d4f96ed41324b004c8f192887493fb2705b780e966c114c369d9b73d0df6e6e2b3ec29a1140b48cb71e4e8c55ea1311d2c291dc2a9a32f3d68bee3945abb5aaf90566e25ffee83bc12cbb3c8da16a3585abc8f60eab85836ea2dfb0f9e841d444755ff80488e96fc74bc686f9954795e4d09127263de410b046", 0x166}, {&(0x7f0000000440)="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", 0x10e}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x4008052) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x29, 0x23, &(0x7f0000000040), 0x12b) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) 1.130207012s ago: executing program 1 (id=3756): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x20004080) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00Za', @ANYRES32=0x0], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.115802362s ago: executing program 3 (id=3757): close(0xffffffffffffffff) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x4000040) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000180), 0x43) 945.689646ms ago: executing program 2 (id=3758): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 96.025307ms ago: executing program 3 (id=3759): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003507d25a806f8c6394f90524fc600d001141090005004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[], 0xfefb) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0324fc600b003540280009", 0x1b}], 0x1}, 0xe000) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) sendmsg$inet(r4, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="c109000000000000001d1e020e", 0xd}, {&(0x7f0000000240)="0563", 0x2}], 0x2}, 0x20040000) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe00006a"], 0xfe33) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8d}, 0x48) r6 = socket$kcm(0xa, 0x2, 0x73) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x4) setsockopt$sock_attach_bpf(r6, 0x29, 0x11, &(0x7f0000000140)=r5, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) 0s ago: executing program 32 (id=3721): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 6) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) kernel console output (not intermixed with test programs): evsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.345768][T14110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.355305][T14110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.370784][T14110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.399182][T14385] netlink: 'syz.3.2940': attribute type 10 has an invalid length. [ 638.429519][T14385] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2940'. [ 638.668767][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.700634][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.732366][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 638.817161][ T4512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.838888][ T4512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.848133][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 640.449107][T14420] netlink: 'syz.2.2948': attribute type 1 has an invalid length. [ 640.609106][T14429] device batadv0 entered promiscuous mode [ 641.046800][T14111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 641.057976][T14111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 641.067077][T14111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 641.077151][T14111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 641.085143][T14111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 641.093208][T14111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 641.220340][T14442] netlink: 'syz.2.2951': attribute type 2 has an invalid length. [ 641.925985][ T1069] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.328019][ T1069] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.418668][T14464] netlink: 'syz.4.2956': attribute type 10 has an invalid length. [ 642.499812][T14464] __nla_validate_parse: 4 callbacks suppressed [ 642.499833][T14464] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2956'. [ 642.648193][ T1069] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.748753][T14469] netlink: 'syz.2.2959': attribute type 19 has an invalid length. [ 642.763393][T14469] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.2959'. [ 643.050699][ T1069] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.120373][ T4281] Bluetooth: hci3: command 0x0409 tx timeout [ 643.542242][T14489] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2962'. [ 643.634933][T14489] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2962'. [ 643.670771][T14482] netlink: 'syz.4.2962': attribute type 1 has an invalid length. [ 643.688660][T14436] chnl_net:caif_netlink_parms(): no params data found [ 643.711924][T14482] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2962'. [ 644.092962][ T1069] device ip6gretap0 left promiscuous mode [ 644.098857][ T1069] : port 1(ip6gretap0) entered disabled state [ 644.146806][T14506] netlink: 'syz.3.2965': attribute type 10 has an invalid length. [ 644.175373][T14506] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2965'. [ 644.272088][T14505] netlink: 'syz.4.2967': attribute type 19 has an invalid length. [ 644.301121][T14505] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.2967'. [ 644.575240][T14436] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.640143][T14436] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.672201][T14436] device bridge_slave_0 entered promiscuous mode [ 644.879065][T14436] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.903247][T14436] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.989507][T14436] device bridge_slave_1 entered promiscuous mode [ 645.175613][T14527] netlink: 'syz.4.2970': attribute type 10 has an invalid length. [ 645.215310][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 645.576509][T14527] team0: Device wg1 is of different type [ 646.011029][T14436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.293907][T14436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.728667][T14436] team0: Port device team_slave_0 added [ 646.915925][T14436] team0: Port device team_slave_1 added [ 647.017023][T14558] netlink: 'syz.0.2976': attribute type 1 has an invalid length. [ 647.027251][T14558] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2976'. [ 647.206312][T14558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2976'. [ 647.247804][T14561] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2976'. [ 647.280737][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 647.839883][T14436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.862362][T14436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.889239][T14436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.140454][T14436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.148018][T14436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.229501][T14436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.362671][T14571] netlink: 'syz.0.2980': attribute type 10 has an invalid length. [ 648.435363][T14571] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2980'. [ 648.480625][T14577] netlink: 'syz.3.2982': attribute type 1 has an invalid length. [ 648.489129][T14577] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2982'. [ 648.515377][T14571] device bond0 entered promiscuous mode [ 648.529544][T14571] device bond_slave_0 entered promiscuous mode [ 648.536456][T14571] device bond_slave_1 entered promiscuous mode [ 648.551990][T14571] bridge0: port 3(bond0) entered blocking state [ 648.571968][T14571] bridge0: port 3(bond0) entered disabled state [ 648.598441][T14571] bridge0: port 3(bond0) entered blocking state [ 648.604923][T14571] bridge0: port 3(bond0) entered forwarding state [ 648.646685][T14577] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2982'. [ 648.708721][T14581] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2982'. [ 648.787931][ T1069] device hsr_slave_0 left promiscuous mode [ 648.898316][ T1069] device hsr_slave_1 left promiscuous mode [ 648.988529][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.003206][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.055531][ T1069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.109978][ T1069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.153989][ T1069] bridge0: port 3(bond0) entered disabled state [ 649.226891][ T1069] device bridge_slave_1 left promiscuous mode [ 649.245858][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.264977][T14598] netlink: 'syz.4.2985': attribute type 29 has an invalid length. [ 649.278136][T14594] netlink: 'syz.4.2985': attribute type 1 has an invalid length. [ 649.291115][ T1069] device bridge_slave_0 left promiscuous mode [ 649.297396][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.305654][T14594] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2985'. [ 649.359892][T14111] Bluetooth: hci3: command 0x0419 tx timeout [ 649.433144][T14599] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2985'. [ 649.507808][ T1069] device veth1_macvtap left promiscuous mode [ 649.521753][ T1069] device veth0_macvtap left promiscuous mode [ 649.576350][ T1069] device veth1_vlan left promiscuous mode [ 649.594766][ T1069] device veth0_vlan left promiscuous mode [ 650.107504][T14613] netlink: 'syz.2.2989': attribute type 1 has an invalid length. [ 650.148734][T14617] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2989'. [ 650.150209][T14613] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2989'. [ 650.521520][ T1069] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 650.861487][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 650.914774][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 650.959201][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.968304][ T1069] device bond_slave_1 left promiscuous mode [ 651.012359][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.022990][ T1069] device bond_slave_0 left promiscuous mode [ 651.437696][ T1069] team0 (unregistering): Port device bridge0 removed [ 651.487681][ T1069] bond0 (unregistering): Released all slaves [ 651.623198][T14436] device hsr_slave_0 entered promiscuous mode [ 651.641850][T14436] device hsr_slave_1 entered promiscuous mode [ 651.667798][T14436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.708924][T14436] Cannot create hsr debugfs directory [ 651.727797][T14598] netlink: 'syz.4.2985': attribute type 29 has an invalid length. [ 651.741415][T14594] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2985'. [ 651.792035][T14615] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2989'. [ 651.854768][T14627] netlink: 'syz.0.2992': attribute type 5 has an invalid length. [ 652.669567][T14638] netlink: 'syz.3.2993': attribute type 10 has an invalid length. [ 652.746020][T14636] netlink: 'syz.4.2994': attribute type 1 has an invalid length. [ 652.754803][T14643] netlink: 'syz.4.2994': attribute type 29 has an invalid length. [ 652.809994][T14641] netlink: 'syz.2.2995': attribute type 10 has an invalid length. [ 652.827615][T14643] netlink: 'syz.4.2994': attribute type 29 has an invalid length. [ 653.727197][T14436] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 653.825181][T14436] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 654.158954][T14661] __nla_validate_parse: 5 callbacks suppressed [ 654.159010][T14661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3001'. [ 654.222664][T14436] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 654.244163][T14436] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 654.742565][T14686] netlink: 'syz.0.3003': attribute type 5 has an invalid length. [ 654.793284][T14685] netlink: 'syz.2.3005': attribute type 10 has an invalid length. [ 655.072948][T14693] netlink: 'syz.3.3006': attribute type 1 has an invalid length. [ 655.191154][T14693] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3006'. [ 655.591144][T14685] device wg1 entered promiscuous mode [ 655.596972][T14685] team0: Device wg1 is of different type [ 655.666278][T14690] netlink: 'syz.3.3006': attribute type 29 has an invalid length. [ 655.800933][T14695] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3006'. [ 655.981215][T14436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.020240][T14693] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3006'. [ 656.072632][T14690] netlink: 'syz.3.3006': attribute type 29 has an invalid length. [ 656.128847][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 656.167220][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 656.195016][T14436] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.225441][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 656.286542][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 656.316815][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.324101][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.361892][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 656.405242][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 656.420726][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 656.435286][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.442545][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.505147][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 656.522254][T14707] netlink: 'syz.3.3007': attribute type 29 has an invalid length. [ 656.582876][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 656.704026][T14709] netlink: 'syz.0.3010': attribute type 10 has an invalid length. [ 656.732379][T14709] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3010'. [ 656.851624][T14707] netlink: 'syz.3.3007': attribute type 29 has an invalid length. [ 656.862745][T14710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3007'. [ 656.948841][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 656.975928][T14703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3007'. [ 656.988183][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 657.019108][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 657.088674][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 657.142617][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 657.194490][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 657.266170][T14436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 657.398344][T14436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 657.463463][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 657.488472][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 657.539006][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 657.634682][T14733] netlink: 'syz.3.3022': attribute type 5 has an invalid length. [ 659.540291][T14752] netlink: 'syz.0.3024': attribute type 19 has an invalid length. [ 659.548461][T14752] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.3024'. [ 659.771188][T14436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.789340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 659.807803][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 660.064454][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 660.101309][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 660.224914][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 660.234831][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 660.267853][T14436] device veth0_vlan entered promiscuous mode [ 660.277556][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 660.307083][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 660.358676][T14436] device veth1_vlan entered promiscuous mode [ 660.427805][T14772] netlink: 'syz.3.3017': attribute type 10 has an invalid length. [ 660.504448][T14771] netlink: 'syz.0.3018': attribute type 1 has an invalid length. [ 660.607054][T14773] netlink: 'syz.0.3018': attribute type 29 has an invalid length. [ 660.620155][T14771] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3018'. [ 660.665731][T14772] team0: Device wg1 is of different type [ 660.729626][T14780] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3018'. [ 660.763344][T14773] netlink: 'syz.0.3018': attribute type 29 has an invalid length. [ 660.798456][T14771] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3018'. [ 660.858054][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 660.899280][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 660.928860][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 660.979165][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 661.011112][T14436] device veth0_macvtap entered promiscuous mode [ 661.052230][T14436] device veth1_macvtap entered promiscuous mode [ 661.125754][T14792] netlink: 'syz.2.3019': attribute type 29 has an invalid length. [ 661.128225][T14787] netlink: 'syz.2.3019': attribute type 1 has an invalid length. [ 661.145483][T14436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.220972][T14436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.243999][T14787] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3019'. [ 661.295138][T14436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.357170][T14436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.411296][T14436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 661.509765][T14436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.628829][T14436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.640903][T14792] netlink: 'syz.2.3019': attribute type 29 has an invalid length. [ 661.665037][T14436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.742730][T14787] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3019'. [ 661.764705][T14436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.801443][T14436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.863504][T14436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 661.926564][T14436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 661.965789][T14436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.020122][T14436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.159839][T14795] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3019'. [ 662.169008][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 662.240739][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 662.450658][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 662.520314][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 662.547664][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 662.569094][T14436] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.585532][T14436] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.625161][T14436] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.657471][T14436] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.877527][ T4344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.892936][ T4344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.912037][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 662.948863][ T4512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.957564][ T4512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.975473][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 663.316764][T14821] netlink: 'syz.0.3031': attribute type 1 has an invalid length. [ 663.364980][T14824] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3031'. [ 663.374356][T14821] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3031'. [ 663.450007][T14825] netlink: 'syz.2.3033': attribute type 19 has an invalid length. [ 663.463303][T14821] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3031'. [ 664.022603][T14832] netlink: 'syz.3.3035': attribute type 10 has an invalid length. [ 664.092431][T14111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 664.118953][T14111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 664.142618][T14111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 664.153839][T14111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 664.169587][T14111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 664.177223][T14111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 664.284651][ T4512] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.703662][ T4512] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.978618][ T4512] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.220171][ T4512] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.285825][T14862] __nla_validate_parse: 2 callbacks suppressed [ 665.285865][T14862] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3040'. [ 665.329060][T14855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3040'. [ 665.405307][T14859] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3040'. [ 665.472878][T14839] chnl_net:caif_netlink_parms(): no params data found [ 666.185690][T14881] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3045'. [ 666.240043][ T4281] Bluetooth: hci2: command 0x0409 tx timeout [ 666.273153][ T4512] device ip6gretap0 left promiscuous mode [ 666.279130][ T4512] : port 1(ip6gretap0) entered disabled state [ 666.392089][T14879] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3045'. [ 666.472017][T14839] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.489419][T14839] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.507964][T14886] validate_nla: 4 callbacks suppressed [ 666.508029][T14886] netlink: 'syz.2.3046': attribute type 1 has an invalid length. [ 666.522073][T14839] device bridge_slave_0 entered promiscuous mode [ 666.571476][T14886] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3046'. [ 666.577491][T14839] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.627826][T14891] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3046'. [ 666.641643][T14839] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.690644][T14839] device bridge_slave_1 entered promiscuous mode [ 666.759607][T14890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3046'. [ 666.888445][T14839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.935068][T14839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.090657][T14839] team0: Port device team_slave_0 added [ 667.099206][T14839] team0: Port device team_slave_1 added [ 667.373011][T14900] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3049'. [ 667.466782][T14906] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3049'. [ 667.904818][T14839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.920551][T14839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.105976][T14839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.339251][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 668.552482][T14920] netlink: 'syz.2.3054': attribute type 10 has an invalid length. [ 669.081828][T14920] team0: Device hsr_slave_0 failed to register rx_handler [ 669.167858][T14937] netlink: 'syz.1.3056': attribute type 1 has an invalid length. [ 669.875227][T14839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.896206][T14839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.078598][T14839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.153603][T14941] netlink: 'syz.0.3058': attribute type 10 has an invalid length. [ 670.376278][T14839] device hsr_slave_0 entered promiscuous mode [ 670.389586][T14839] device hsr_slave_1 entered promiscuous mode [ 670.399972][T14111] Bluetooth: hci2: command 0x040f tx timeout [ 670.416094][T14839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 670.425913][T14839] Cannot create hsr debugfs directory [ 670.515748][T14950] netlink: 'syz.1.3060': attribute type 10 has an invalid length. [ 670.571495][T14950] __nla_validate_parse: 4 callbacks suppressed [ 670.571536][T14950] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3060'. [ 670.705157][T14950] device bond0 entered promiscuous mode [ 670.722449][T14950] device bond_slave_0 entered promiscuous mode [ 670.742670][T14950] device bond_slave_1 entered promiscuous mode [ 670.773843][T14950] bridge0: port 3(bond0) entered blocking state [ 670.787365][T14950] bridge0: port 3(bond0) entered disabled state [ 670.871306][T14950] bridge0: port 3(bond0) entered blocking state [ 670.878873][T14950] bridge0: port 3(bond0) entered forwarding state [ 671.981398][T14980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3066'. [ 672.059571][T14978] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3066'. [ 672.479888][T14111] Bluetooth: hci2: command 0x0419 tx timeout [ 672.506641][T14990] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3067'. [ 672.576438][T14987] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3067'. [ 672.748938][ T4512] device hsr_slave_0 left promiscuous mode [ 672.777323][ T4512] device hsr_slave_1 left promiscuous mode [ 672.797214][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.812981][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.836235][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.853238][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.862396][ T4512] bridge0: port 3(bond0) entered disabled state [ 672.873128][ T4512] device bridge_slave_1 left promiscuous mode [ 672.879510][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.889255][ T4512] device bridge_slave_0 left promiscuous mode [ 672.895811][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.937823][ T4512] device veth1_vlan left promiscuous mode [ 672.947117][ T4512] device veth0_vlan left promiscuous mode [ 673.951179][ T4512] team0 (unregistering): Port device team_slave_1 removed [ 674.008257][ T4512] team0 (unregistering): Port device team_slave_0 removed [ 674.061245][ T4512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.076713][ T4512] device bond_slave_1 left promiscuous mode [ 674.126792][ T4512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.138091][ T4512] device bond_slave_0 left promiscuous mode [ 674.485068][ T4512] team0 (unregistering): Port device bridge0 removed [ 674.521219][ T4512] bond0 (unregistering): Released all slaves [ 674.695279][T15003] netlink: 'syz.1.3071': attribute type 10 has an invalid length. [ 674.704891][T15003] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3071'. [ 674.716227][T15008] netlink: 'syz.0.3074': attribute type 10 has an invalid length. [ 674.832711][T15008] team0: Device hsr_slave_0 failed to register rx_handler [ 674.957770][T15009] netlink: 'syz.3.3073': attribute type 10 has an invalid length. [ 674.985256][T15009] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3073'. [ 675.301808][T15016] netlink: 'syz.1.3075': attribute type 19 has an invalid length. [ 675.340974][T15016] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.3075'. [ 675.437599][T15024] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3079'. [ 675.446148][T15021] netlink: 'syz.0.3078': attribute type 1 has an invalid length. [ 675.510165][T15023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3079'. [ 675.736978][T15021] __nla_validate_parse: 2 callbacks suppressed [ 675.737070][T15021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3078'. [ 676.083739][T14839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 676.191308][T14839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 676.449873][T14839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 676.462394][T15038] netlink: 'syz.1.3080': attribute type 19 has an invalid length. [ 676.479891][T15038] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.3080'. [ 676.494503][T15039] netlink: 'syz.3.3081': attribute type 10 has an invalid length. [ 676.514448][T15039] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3081'. [ 676.560762][T14839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 676.829010][T15049] sctp: [Deprecated]: syz.2.3083 (pid 15049) Use of int in maxseg socket option. [ 676.829010][T15049] Use struct sctp_assoc_value instead [ 676.956673][T14839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.991640][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 677.002211][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 677.015707][T14839] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.028406][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 677.038339][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 677.056626][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.064819][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.095999][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 677.106524][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 677.138577][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 677.149191][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.156560][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.177075][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 677.225756][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 677.266272][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 677.309641][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 677.363974][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 677.400715][T15055] netlink: 'syz.1.3084': attribute type 10 has an invalid length. [ 677.474389][T15055] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3084'. [ 677.517382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 677.537057][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 677.628354][T15065] netlink: 'syz.0.3087': attribute type 10 has an invalid length. [ 677.801321][T15065] team0: Device hsr_slave_0 failed to register rx_handler [ 678.118687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 678.148311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 678.215638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 678.290458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 678.323203][T14839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 678.373035][T15063] netlink: 'syz.3.3086': attribute type 19 has an invalid length. [ 678.390322][T15063] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.3086'. [ 679.223954][T15085] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3091'. [ 679.263216][T15087] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.3090'. [ 679.296290][T15085] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3091'. [ 679.491960][T15085] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3091'. [ 679.833347][T15102] sctp: [Deprecated]: syz.2.3094 (pid 15102) Use of int in maxseg socket option. [ 679.833347][T15102] Use struct sctp_assoc_value instead [ 680.178351][T15105] validate_nla: 2 callbacks suppressed [ 680.178372][T15105] netlink: 'syz.3.3093': attribute type 19 has an invalid length. [ 680.229936][T15105] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.3093'. [ 680.270565][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 680.278304][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 680.293975][T14839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.491582][T15117] sctp: [Deprecated]: syz.1.3104 (pid 15117) Use of int in maxseg socket option. [ 680.491582][T15117] Use struct sctp_assoc_value instead [ 680.729746][T15123] netlink: 'syz.2.3096': attribute type 10 has an invalid length. [ 681.051571][T15133] netlink: 'syz.0.3098': attribute type 10 has an invalid length. [ 681.065965][T15133] __nla_validate_parse: 1 callbacks suppressed [ 681.065982][T15133] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3098'. [ 681.396944][T15138] netlink: 'syz.3.3099': attribute type 10 has an invalid length. [ 681.651169][T15138] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3099'. [ 682.080159][T15149] netlink: 'syz.2.3100': attribute type 19 has an invalid length. [ 682.145295][T15149] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.3100'. [ 682.245229][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 682.258642][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 682.359644][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 682.410575][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 682.466467][T14839] device veth0_vlan entered promiscuous mode [ 682.506524][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 682.566217][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 682.590091][T15157] netlink: 'syz.0.3102': attribute type 10 has an invalid length. [ 682.694850][T15157] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3102'. [ 682.753812][T14839] device veth1_vlan entered promiscuous mode [ 682.916072][T15170] netlink: 'syz.2.3103': attribute type 19 has an invalid length. [ 682.934919][T15170] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.3103'. [ 682.974465][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 682.993244][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 683.013333][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 683.032838][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 683.052911][T14839] device veth0_macvtap entered promiscuous mode [ 683.142799][T14839] device veth1_macvtap entered promiscuous mode [ 683.177161][T15173] sctp: [Deprecated]: syz.1.3107 (pid 15173) Use of int in maxseg socket option. [ 683.177161][T15173] Use struct sctp_assoc_value instead [ 683.231678][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.266778][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.319122][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.369762][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.410275][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.525874][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.569142][T14839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.608541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 683.633681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 683.736169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 683.816125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 683.871803][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.910975][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.949843][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.980059][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.001451][T14839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.069220][T14839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.091971][T14839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.133701][T15182] netlink: 'syz.0.3108': attribute type 10 has an invalid length. [ 684.500523][T15182] team0: Device hsr_slave_0 failed to register rx_handler [ 684.605680][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 684.628416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 684.673924][T14839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.833860][T14839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.842951][T14839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.852064][T14839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.002002][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.008466][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.117587][ T4512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.159988][ T4512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.287522][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 686.307434][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.327502][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.354810][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 687.398922][T15229] netlink: 'syz.0.3117': attribute type 1 has an invalid length. [ 687.439253][T15229] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3117'. [ 687.468524][T15236] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3130'. [ 687.510135][T15231] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 687.538370][T15237] sctp: [Deprecated]: syz.3.3119 (pid 15237) Use of int in maxseg socket option. [ 687.538370][T15237] Use struct sctp_assoc_value instead [ 687.570295][T15231] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3130'. [ 687.581027][T15234] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3117'. [ 687.641565][T15236] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3130'. [ 687.780426][T15229] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3117'. [ 688.232628][T15249] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3122'. [ 688.246465][T15242] netlink: 'syz.1.3122': attribute type 1 has an invalid length. [ 688.258904][T15242] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3122'. [ 688.279929][T15249] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3122'. [ 688.538587][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 688.548122][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 688.558668][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 688.569394][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 688.589017][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 688.597763][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 688.679308][T15250] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3124'. [ 688.885478][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.187067][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.445838][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.582289][ T9] device netdevsim0 left promiscuous mode [ 689.583724][T15272] netlink: 'syz.3.3129': attribute type 1 has an invalid length. [ 689.618070][ T9] bridge0: port 3(netdevsim0) entered disabled state [ 689.630988][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.996305][T15253] chnl_net:caif_netlink_parms(): no params data found [ 690.785572][T14111] Bluetooth: hci0: command 0x0409 tx timeout [ 691.084635][T15253] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.102469][T15253] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.124389][T15253] device bridge_slave_0 entered promiscuous mode [ 691.136266][T15301] sctp: [Deprecated]: syz.4.3135 (pid 15301) Use of int in maxseg socket option. [ 691.136266][T15301] Use struct sctp_assoc_value instead [ 691.301623][T15305] sctp: [Deprecated]: syz.0.3136 (pid 15305) Use of int in maxseg socket option. [ 691.301623][T15305] Use struct sctp_assoc_value instead [ 691.320875][T15253] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.331208][T15253] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.356520][T15253] device bridge_slave_1 entered promiscuous mode [ 691.404589][T15294] netlink: 'syz.3.3134': attribute type 10 has an invalid length. [ 691.624130][T15253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.732771][T15253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.858520][T15314] sctp: [Deprecated]: syz.1.3148 (pid 15314) Use of int in maxseg socket option. [ 691.858520][T15314] Use struct sctp_assoc_value instead [ 691.982785][T15317] netlink: 'syz.4.3138': attribute type 1 has an invalid length. [ 692.102339][T15253] team0: Port device team_slave_0 added [ 692.219569][T15253] team0: Port device team_slave_1 added [ 692.625786][T15253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.635480][T15253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.774931][T15253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.806008][T14111] Bluetooth: hci0: command 0x041b tx timeout [ 692.813245][T15332] netlink: 'syz.3.3140': attribute type 10 has an invalid length. [ 692.930107][T15332] __nla_validate_parse: 7 callbacks suppressed [ 692.930132][T15332] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3140'. [ 693.164926][T15253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 693.175248][T15253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.266470][T15253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.516392][T15253] device hsr_slave_0 entered promiscuous mode [ 693.595940][T15346] netlink: 'syz.3.3145': attribute type 1 has an invalid length. [ 693.616511][T15346] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3145'. [ 693.628223][T15253] device hsr_slave_1 entered promiscuous mode [ 693.647895][T15253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 693.676410][T15253] Cannot create hsr debugfs directory [ 693.729898][T15355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3145'. [ 693.800860][T15357] netlink: 'syz.4.3149': attribute type 10 has an invalid length. [ 693.808846][T15357] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3149'. [ 693.826103][T15346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3145'. [ 693.838869][T15357] device bond0 entered promiscuous mode [ 693.876784][T15357] device bond_slave_0 entered promiscuous mode [ 693.956274][T15357] device bond_slave_1 entered promiscuous mode [ 694.054124][T15357] bridge0: port 3(bond0) entered blocking state [ 694.131975][T15363] netlink: 'syz.1.3159': attribute type 1 has an invalid length. [ 694.179284][T15357] bridge0: port 3(bond0) entered disabled state [ 694.193298][T15363] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3159'. [ 694.252912][T15367] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3159'. [ 694.311405][T15357] bridge0: port 3(bond0) entered blocking state [ 694.318160][T15357] bridge0: port 3(bond0) entered forwarding state [ 694.348621][T15358] netlink: 'syz.0.3146': attribute type 10 has an invalid length. [ 694.365349][T15358] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3146'. [ 694.398438][T15366] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3159'. [ 694.705354][T15379] sctp: [Deprecated]: syz.0.3151 (pid 15379) Use of int in maxseg socket option. [ 694.705354][T15379] Use struct sctp_assoc_value instead [ 694.880416][T14111] Bluetooth: hci0: command 0x040f tx timeout [ 695.018410][T15380] netlink: 'syz.4.3152': attribute type 10 has an invalid length. [ 695.026758][T15380] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3152'. [ 696.102320][T15397] netlink: 'syz.0.3155': attribute type 10 has an invalid length. [ 696.190992][ T9] device hsr_slave_0 left promiscuous mode [ 696.271122][ T9] device hsr_slave_1 left promiscuous mode [ 696.283874][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.335427][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.452504][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.510785][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 696.541125][ T9] bridge0: port 4(bond0) entered disabled state [ 696.561488][ T9] device bridge_slave_1 left promiscuous mode [ 696.567891][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.598935][ T9] device bridge_slave_0 left promiscuous mode [ 696.622510][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.736840][ T9] device veth1_vlan left promiscuous mode [ 696.790624][ T9] device veth0_vlan left promiscuous mode [ 696.973320][T14111] Bluetooth: hci0: command 0x0419 tx timeout [ 697.546099][ T9] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 697.625845][T15427] netlink: 'syz.3.3164': attribute type 1 has an invalid length. [ 698.016652][ T9] device team_slave_1 left promiscuous mode [ 698.025361][ T9] team0 (unregistering): Port device team_slave_1 removed [ 698.076221][ T9] device team_slave_0 left promiscuous mode [ 698.085198][ T9] team0 (unregistering): Port device team_slave_0 removed [ 698.136143][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 698.145154][ T9] device bond_slave_1 left promiscuous mode [ 698.202851][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 698.212545][ T9] device bond_slave_0 left promiscuous mode [ 698.486218][ T9] device bridge0 left promiscuous mode [ 698.492626][ T9] team0 (unregistering): Port device bridge0 removed [ 698.531930][ T9] bond0 (unregistering): Released all slaves [ 698.659462][T15416] netlink: 'syz.4.3162': attribute type 10 has an invalid length. [ 698.667656][T15416] __nla_validate_parse: 3 callbacks suppressed [ 698.667668][T15416] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3162'. [ 698.717698][T15427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3164'. [ 698.739365][T15431] netlink: 'syz.0.3163': attribute type 10 has an invalid length. [ 698.759616][T15431] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3163'. [ 698.917808][T15436] sctp: [Deprecated]: syz.4.3165 (pid 15436) Use of int in maxseg socket option. [ 698.917808][T15436] Use struct sctp_assoc_value instead [ 699.203369][T15443] netlink: 'syz.3.3175': attribute type 1 has an invalid length. [ 699.234850][T15443] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3175'. [ 699.318091][T15443] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3175'. [ 699.358957][T15440] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3175'. [ 699.840942][T15454] netlink: 'syz.1.3167': attribute type 10 has an invalid length. [ 699.848931][T15454] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3167'. [ 700.095068][T15466] netlink: 'syz.0.3170': attribute type 10 has an invalid length. [ 700.239398][T15466] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3170'. [ 700.588242][T15253] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 700.623481][T15253] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 700.701440][T15253] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 700.794132][T15253] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 700.940562][T15482] netlink: 'syz.3.3174': attribute type 10 has an invalid length. [ 700.967690][T15482] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3174'. [ 701.110636][T15491] netlink: 'syz.1.3173': attribute type 10 has an invalid length. [ 701.178605][T15491] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3173'. [ 701.272934][T15489] netlink: 'syz.0.3177': attribute type 10 has an invalid length. [ 701.306882][T15498] sctp: [Deprecated]: syz.3.3178 (pid 15498) Use of int in maxseg socket option. [ 701.306882][T15498] Use struct sctp_assoc_value instead [ 701.360952][T15489] team0: Device hsr_slave_0 failed to register rx_handler [ 701.824229][T15493] netlink: 'syz.4.3176': attribute type 10 has an invalid length. [ 701.976695][T15253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.055779][T15253] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.078756][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 702.097442][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 702.197298][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 702.230804][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 702.273754][ T4512] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.281276][ T4512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.342739][T15501] netlink: 'syz.1.3179': attribute type 1 has an invalid length. [ 702.362155][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 702.401377][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 702.440701][ T4512] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.447920][ T4512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.486533][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 702.515278][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 702.555427][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 702.616530][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 702.644538][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 702.694664][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 702.758316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 702.787921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 702.884429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 702.976005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 703.076412][T15253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 703.200886][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 703.227341][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 704.879029][T15545] validate_nla: 1 callbacks suppressed [ 704.879051][T15545] netlink: 'syz.0.3186': attribute type 10 has an invalid length. [ 705.060331][T15545] __nla_validate_parse: 5 callbacks suppressed [ 705.060360][T15545] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3186'. [ 705.166010][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 705.180865][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 705.246676][T15253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.463124][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 705.485969][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 705.548551][T15253] device veth0_vlan entered promiscuous mode [ 705.577975][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 705.600853][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 705.620618][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 705.641246][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 705.706408][T15253] device veth1_vlan entered promiscuous mode [ 705.945514][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 705.997319][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 706.201126][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 706.361048][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 706.377510][T15253] device veth0_macvtap entered promiscuous mode [ 706.512239][T15253] device veth1_macvtap entered promiscuous mode [ 706.553361][T15562] netlink: 'syz.1.3192': attribute type 10 has an invalid length. [ 706.602777][T15562] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3192'. [ 706.719232][T15253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.759771][T15253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.783276][T15253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.799323][T15253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.815757][T15253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 706.826981][T15253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 706.903835][T15253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.043043][T15253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.093466][T15253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.115950][T15253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.147886][T15253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.183341][T15253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.216843][T15253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.256329][T15253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.271354][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 707.295633][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 707.319435][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 707.366208][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 707.388178][T15592] netlink: 'syz.0.3206': attribute type 1 has an invalid length. [ 707.465956][T15253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.475738][T15592] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3206'. [ 707.513464][T15253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.563853][T15253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.604204][T15253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.675502][T15592] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3206'. [ 707.678314][T15597] netlink: 'syz.1.3198': attribute type 10 has an invalid length. [ 707.808838][T15597] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3198'. [ 707.879515][T15598] netlink: 'syz.4.3197': attribute type 10 has an invalid length. [ 707.901284][T15598] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3197'. [ 707.992470][T15596] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3206'. [ 708.033163][T15605] netlink: 'syz.3.3199': attribute type 10 has an invalid length. [ 708.055619][T15605] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3199'. [ 708.269442][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.304573][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.352216][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 708.379389][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 708.393349][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.423425][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 710.899058][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 710.912579][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 710.925236][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 710.939415][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 710.948190][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 710.974783][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 711.514753][ T1069] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.811172][ T1069] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.849888][T15665] netlink: 'syz.2.3212': attribute type 10 has an invalid length. [ 711.918212][T15665] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3212'. [ 711.949887][T15665] device bond0 entered promiscuous mode [ 711.969054][T15665] device bond_slave_0 entered promiscuous mode [ 712.000240][T15665] device bond_slave_1 entered promiscuous mode [ 712.026783][T15665] bridge0: port 3(bond0) entered blocking state [ 712.086864][T15665] bridge0: port 3(bond0) entered disabled state [ 712.144939][T15665] bridge0: port 3(bond0) entered blocking state [ 712.151446][T15665] bridge0: port 3(bond0) entered forwarding state [ 712.589616][ T1069] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.753785][ T1069] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.876061][T15689] netlink: 'syz.1.3216': attribute type 10 has an invalid length. [ 712.909447][T15689] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3216'. [ 713.012045][T15649] chnl_net:caif_netlink_parms(): no params data found [ 713.040342][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 713.732372][ T1069] device ip6gretap0 left promiscuous mode [ 713.741938][ T1069] : port 1(ip6gretap0) entered disabled state [ 713.829575][T15649] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.837356][T15649] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.846106][T15649] device bridge_slave_0 entered promiscuous mode [ 713.952815][T15649] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.973984][T15649] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.000226][T15649] device bridge_slave_1 entered promiscuous mode [ 714.018904][T15707] netlink: 'syz.2.3218': attribute type 10 has an invalid length. [ 714.037327][T15707] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3218'. [ 714.091543][T15649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.165438][T15649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.375573][T15649] team0: Port device team_slave_0 added [ 714.410283][T15723] netlink: 'syz.1.3230': attribute type 1 has an invalid length. [ 714.431639][T15649] team0: Port device team_slave_1 added [ 714.437619][T15725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3230'. [ 714.460798][T15723] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3230'. [ 714.552494][T15725] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3230'. [ 714.573192][T15728] netlink: 'syz.4.3220': attribute type 10 has an invalid length. [ 714.604715][T15728] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3220'. [ 714.721030][T15649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.728112][T15649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 714.841410][T15649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.887304][T15736] netlink: 'syz.2.3222': attribute type 1 has an invalid length. [ 714.924839][T15736] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3222'. [ 715.096456][T15649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.116899][T15736] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3222'. [ 715.126067][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 715.147914][T15649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.223370][T15741] netlink: 'syz.1.3221': attribute type 1 has an invalid length. [ 715.242339][T15649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.260633][T15740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3222'. [ 715.444344][T15649] device hsr_slave_0 entered promiscuous mode [ 715.510261][T15649] device hsr_slave_1 entered promiscuous mode [ 716.690290][T15773] netlink: 'syz.0.3231': attribute type 10 has an invalid length. [ 716.842814][T15773] team0: Device hsr_slave_0 failed to register rx_handler [ 717.186994][T15774] netlink: 'syz.4.3228': attribute type 10 has an invalid length. [ 717.200157][ T4288] Bluetooth: hci4: command 0x040f tx timeout [ 717.219032][T15774] __nla_validate_parse: 3 callbacks suppressed [ 717.219055][T15774] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3228'. [ 717.270127][T15775] netlink: 'syz.2.3229': attribute type 10 has an invalid length. [ 717.288122][T15775] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3229'. [ 717.350778][T15781] netlink: 'syz.1.3233': attribute type 10 has an invalid length. [ 717.374605][T15781] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3233'. [ 717.435289][ T1069] bridge0: port 3(bond0) entered disabled state [ 717.537663][ T1069] device bridge_slave_1 left promiscuous mode [ 717.547773][ T1069] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.570330][ T1069] device bridge_slave_0 left promiscuous mode [ 717.583848][ T1069] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.596209][T15791] netlink: 'syz.2.3235': attribute type 1 has an invalid length. [ 717.638915][T15791] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3235'. [ 717.695949][ T1069] device veth1_macvtap left promiscuous mode [ 717.731537][ T1069] device veth0_macvtap left promiscuous mode [ 717.749202][ T1069] device veth1_vlan left promiscuous mode [ 717.755310][ T1069] device veth0_vlan left promiscuous mode [ 717.928317][T15791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3235'. [ 718.327178][ T1069] team0 (unregistering): Port device geneve1 removed [ 718.814697][ T1069] team0 (unregistering): Port device team_slave_1 removed [ 718.862784][ T1069] team0 (unregistering): Port device team_slave_0 removed [ 718.912605][ T1069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.921614][ T1069] device bond_slave_1 left promiscuous mode [ 718.972664][ T1069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.982667][ T1069] device bond_slave_0 left promiscuous mode [ 719.281596][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 719.289005][ T1069] team0 (unregistering): Port device bridge0 removed [ 719.325947][ T1069] bond0 (unregistering): Released all slaves [ 719.478506][T15804] netlink: 'syz.4.3238': attribute type 1 has an invalid length. [ 719.488825][T15804] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3238'. [ 719.510336][T15793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3235'. [ 719.519404][T15804] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3238'. [ 719.657014][T15804] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3238'. [ 719.668805][T15812] netlink: 'syz.1.3237': attribute type 10 has an invalid length. [ 719.712118][T15812] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3237'. [ 719.830934][T15813] netlink: 'syz.0.3236': attribute type 10 has an invalid length. [ 720.449558][T15649] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 720.531871][T15649] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 720.599555][T15649] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 720.713503][T15649] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 721.088420][T15830] netlink: 'syz.1.3243': attribute type 10 has an invalid length. [ 721.484303][T15830] team0: Device hsr_slave_0 failed to register rx_handler [ 722.319332][T15835] netlink: 'syz.0.3244': attribute type 10 has an invalid length. [ 722.380430][T15835] __nla_validate_parse: 1 callbacks suppressed [ 722.380453][T15835] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3244'. [ 722.661188][T15649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.725376][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 722.759536][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 722.770358][T15649] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.832513][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 722.843071][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 722.865481][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.872856][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.935124][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 722.945632][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 722.956217][T15845] sctp: [Deprecated]: syz.4.3247 (pid 15845) Use of int in maxseg socket option. [ 722.956217][T15845] Use struct sctp_assoc_value instead [ 723.003099][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 723.038525][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.045971][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.162018][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 723.212859][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 723.223604][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 723.237530][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 723.257462][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 723.289436][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 723.306962][T15846] netlink: 'syz.0.3246': attribute type 10 has an invalid length. [ 723.316959][T15846] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3246'. [ 723.364596][T15848] netlink: 'syz.2.3248': attribute type 10 has an invalid length. [ 723.842094][T15848] team0: Device hsr_slave_0 failed to register rx_handler [ 724.050402][T15857] netlink: 'syz.0.3251': attribute type 1 has an invalid length. [ 724.059056][T15857] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3251'. [ 724.096840][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 724.115682][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 724.127330][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 724.181416][T15857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3251'. [ 724.203299][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 724.222303][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.265447][T15860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3251'. [ 724.350167][T15649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 724.379571][T15864] netlink: 'syz.4.3252': attribute type 10 has an invalid length. [ 724.387989][T15864] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3252'. [ 724.603927][T15872] netlink: 'syz.2.3254': attribute type 10 has an invalid length. [ 724.656428][T15872] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3254'. [ 724.921022][T15876] netlink: 'syz.0.3255': attribute type 10 has an invalid length. [ 725.001705][T15876] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3255'. [ 725.841838][T15887] netlink: 'syz.1.3267': attribute type 10 has an invalid length. [ 726.008754][T15887] team0: Device hsr_slave_0 failed to register rx_handler [ 726.187921][T15895] sctp: [Deprecated]: syz.0.3259 (pid 15895) Use of int in maxseg socket option. [ 726.187921][T15895] Use struct sctp_assoc_value instead [ 730.621856][T15649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.629078][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 730.640732][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 730.773156][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 730.789006][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 730.831892][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 730.855614][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 730.896313][T15649] device veth0_vlan entered promiscuous mode [ 730.916298][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 730.933415][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 730.965478][T15649] device veth1_vlan entered promiscuous mode [ 731.077350][T15913] netlink: 'syz.2.3266': attribute type 10 has an invalid length. [ 731.116918][T15913] team0: Device hsr_slave_0 failed to register rx_handler [ 731.138463][T15909] netlink: 'syz.1.3264': attribute type 1 has an invalid length. [ 731.160091][T15909] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3264'. [ 731.197046][T15916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3264'. [ 731.539766][T15914] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3264'. [ 731.549188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 731.581423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 731.632936][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 731.646742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 731.671511][T15921] netlink: 'syz.0.3268': attribute type 10 has an invalid length. [ 731.710404][T15921] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3268'. [ 731.756714][T15649] device veth0_macvtap entered promiscuous mode [ 731.787078][T15649] device veth1_macvtap entered promiscuous mode [ 731.916841][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.984729][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.008392][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.037598][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.055600][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.066867][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.089046][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.101601][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.113793][T15649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.124239][T15925] netlink: 'syz.1.3269': attribute type 10 has an invalid length. [ 732.134256][T15925] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3269'. [ 732.144861][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 732.156081][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 732.166988][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 732.178331][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 732.191715][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.204750][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.214962][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.226745][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.236995][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.247709][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.259294][T15649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.270434][T15649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.282053][T15649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.304361][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 732.319254][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 732.346980][T15649] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.385420][T15649] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.399114][T15649] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.415214][T15649] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.554496][ T1069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.577869][ T1069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.597380][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 732.618304][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.633529][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.652073][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 732.678979][T15934] FAULT_INJECTION: forcing a failure. [ 732.678979][T15934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 732.693547][T15934] CPU: 1 PID: 15934 Comm: syz.1.3272 Not tainted syzkaller #0 [ 732.701245][T15934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.711695][T15934] Call Trace: [ 732.715108][T15934] [ 732.718096][T15934] dump_stack_lvl+0x188/0x24e [ 732.722853][T15934] ? show_regs_print_info+0x12/0x12 [ 732.728110][T15934] ? load_image+0x410/0x410 [ 732.732941][T15934] ? __lock_acquire+0x7c40/0x7c40 [ 732.738039][T15934] should_fail_ex+0x390/0x4c0 [ 732.742818][T15934] _copy_from_user+0x2c/0x170 [ 732.747719][T15934] restore_altstack+0xab/0x4e0 [ 732.752531][T15934] ? __lock_acquire+0x7c40/0x7c40 [ 732.757610][T15934] ? __ia32_sys_sigaltstack+0x2a0/0x2a0 [ 732.763288][T15934] ? __might_fault+0xc2/0x120 [ 732.767991][T15934] ? __might_fault+0xa6/0x120 [ 732.772690][T15934] __ia32_sys_rt_sigreturn+0x624/0x750 [ 732.778181][T15934] ? load_gs_index+0x130/0x130 [ 732.782981][T15934] ? lock_chain_count+0x20/0x20 [ 732.787966][T15934] ? lockdep_hardirqs_on+0x94/0x140 [ 732.793187][T15934] do_syscall_64+0x4c/0xa0 [ 732.797621][T15934] ? clear_bhb_loop+0x60/0xb0 [ 732.802341][T15934] ? clear_bhb_loop+0x60/0xb0 [ 732.807129][T15934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.813073][T15934] RIP: 0033:0x7f858f99e0d9 [ 732.817515][T15934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.837533][T15934] RSP: 002b:00007f8590893028 EFLAGS: 00000246 [ 732.843993][T15934] RAX: ffffffffffffffea RBX: 00007f858fc25fa0 RCX: 00007f858f99e0d9 [ 732.852090][T15934] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 732.860163][T15934] RBP: 00007f8590893090 R08: 0000000000000000 R09: 0000000000000000 [ 732.868237][T15934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 732.876313][T15934] R13: 00007f858fc26038 R14: 00007f858fc25fa0 R15: 00007fff85a71938 [ 732.884407][T15934] [ 733.310123][T15943] sctp: [Deprecated]: syz.1.3274 (pid 15943) Use of int in maxseg socket option. [ 733.310123][T15943] Use struct sctp_assoc_value instead [ 733.617696][T15948] netlink: 'syz.3.3276': attribute type 10 has an invalid length. [ 734.066579][T15951] netlink: 'syz.4.3278': attribute type 1 has an invalid length. [ 734.070580][T15958] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3278'. [ 734.291834][T15951] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3278'. [ 734.424736][T15948] team0: Device hsr_slave_0 failed to register rx_handler [ 734.823530][T15957] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3278'. [ 734.834276][T15959] netlink: 'syz.1.3277': attribute type 10 has an invalid length. [ 734.853560][T15959] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3277'. [ 735.056808][T15982] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3284'. [ 735.110504][T15982] netlink: 'syz.2.3284': attribute type 1 has an invalid length. [ 735.486360][T15995] FAULT_INJECTION: forcing a failure. [ 735.486360][T15995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.500342][T15995] CPU: 0 PID: 15995 Comm: syz.4.3289 Not tainted syzkaller #0 [ 735.507862][T15995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.517961][T15995] Call Trace: [ 735.521281][T15995] [ 735.524255][T15995] dump_stack_lvl+0x188/0x24e [ 735.528991][T15995] ? show_regs_print_info+0x12/0x12 [ 735.534244][T15995] ? load_image+0x410/0x410 [ 735.538798][T15995] ? __lock_acquire+0x7c40/0x7c40 [ 735.543915][T15995] ? snprintf+0xe5/0x140 [ 735.548297][T15995] should_fail_ex+0x390/0x4c0 [ 735.553036][T15995] _copy_to_user+0x2c/0x130 [ 735.557582][T15995] simple_read_from_buffer+0xe3/0x150 [ 735.563090][T15995] proc_fail_nth_read+0x1a6/0x220 [ 735.568163][T15995] ? proc_fault_inject_write+0x310/0x310 [ 735.573853][T15995] ? fsnotify_perm+0x248/0x550 [ 735.578655][T15995] ? proc_fault_inject_write+0x310/0x310 [ 735.584324][T15995] vfs_read+0x2db/0x960 [ 735.588643][T15995] ? kernel_read+0x1e0/0x1e0 [ 735.593387][T15995] ? __fget_files+0x28/0x460 [ 735.598023][T15995] ? __fget_files+0x3fc/0x460 [ 735.602753][T15995] ? __fdget_pos+0x2ae/0x360 [ 735.607371][T15995] ? ksys_read+0x70/0x260 [ 735.611835][T15995] ksys_read+0x14d/0x260 [ 735.616119][T15995] ? vfs_write+0x9a0/0x9a0 [ 735.620657][T15995] ? lockdep_hardirqs_on+0x94/0x140 [ 735.625996][T15995] do_syscall_64+0x4c/0xa0 [ 735.630546][T15995] ? clear_bhb_loop+0x60/0xb0 [ 735.635255][T15995] ? clear_bhb_loop+0x60/0xb0 [ 735.639970][T15995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 735.645982][T15995] RIP: 0033:0x7fe0ea15e90e [ 735.650518][T15995] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 735.670191][T15995] RSP: 002b:00007fe0eb101fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 735.678659][T15995] RAX: ffffffffffffffda RBX: 00007fe0eb1026c0 RCX: 00007fe0ea15e90e [ 735.686669][T15995] RDX: 000000000000000f RSI: 00007fe0eb1020a0 RDI: 0000000000000005 [ 735.694847][T15995] RBP: 00007fe0eb102090 R08: 0000000000000000 R09: 0000000000000000 [ 735.702938][T15995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.710936][T15995] R13: 00007fe0ea426038 R14: 00007fe0ea425fa0 R15: 00007ffc2e02c1c8 [ 735.719038][T15995] [ 736.407965][T16010] netlink: 'syz.0.3294': attribute type 10 has an invalid length. [ 736.434489][T16010] team0: Device hsr_slave_0 failed to register rx_handler [ 736.547397][T16017] FAULT_INJECTION: forcing a failure. [ 736.547397][T16017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.569400][T16017] CPU: 0 PID: 16017 Comm: syz.1.3297 Not tainted syzkaller #0 [ 736.577112][T16017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.587344][T16017] Call Trace: [ 736.590682][T16017] [ 736.593745][T16017] dump_stack_lvl+0x188/0x24e [ 736.598485][T16017] ? show_regs_print_info+0x12/0x12 [ 736.603748][T16017] ? load_image+0x410/0x410 [ 736.608312][T16017] ? __lock_acquire+0x7c40/0x7c40 [ 736.613396][T16017] ? __local_bh_enable_ip+0x136/0x1c0 [ 736.618820][T16017] ? _local_bh_enable+0xa0/0xa0 [ 736.623738][T16017] should_fail_ex+0x390/0x4c0 [ 736.628542][T16017] copy_fpstate_to_sigframe+0xaae/0xd70 [ 736.634110][T16017] ? copy_fpstate_to_sigframe+0x26a/0xd70 [ 736.639985][T16017] ? fpregs_set+0x5f0/0x5f0 [ 736.644770][T16017] ? ct_irq_exit_irqson+0x113/0x170 [ 736.650261][T16017] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 736.656461][T16017] ? lock_chain_count+0x20/0x20 [ 736.661367][T16017] ? arch_do_signal_or_restart+0x23b/0x1310 [ 736.667396][T16017] ? fpu__alloc_mathframe+0xa3/0x120 [ 736.672885][T16017] arch_do_signal_or_restart+0x67a/0x1310 [ 736.678720][T16017] ? anon_inode_getfd+0x1ab/0x1b0 [ 736.683768][T16017] ? bpf_prog_get_fd_by_id+0x1fa/0x260 [ 736.689310][T16017] ? get_sigframe_size+0x10/0x10 [ 736.694283][T16017] ? __sys_bpf+0x5e0/0x780 [ 736.698732][T16017] ? exit_to_user_mode_loop+0x3b/0x110 [ 736.704218][T16017] exit_to_user_mode_loop+0x70/0x110 [ 736.709523][T16017] exit_to_user_mode_prepare+0xee/0x180 [ 736.715090][T16017] syscall_exit_to_user_mode+0x16/0x40 [ 736.720568][T16017] do_syscall_64+0x58/0xa0 [ 736.725008][T16017] ? clear_bhb_loop+0x60/0xb0 [ 736.729703][T16017] ? clear_bhb_loop+0x60/0xb0 [ 736.734482][T16017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.740477][T16017] RIP: 0033:0x7f858f99e0d9 [ 736.744912][T16017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.764631][T16017] RSP: 002b:00007f8590893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 736.773075][T16017] RAX: 0000000000000008 RBX: 00007f858fc25fa0 RCX: 00007f858f99e0d9 [ 736.781057][T16017] RDX: 0000000000000004 RSI: 0000200000000300 RDI: 000000000000000d [ 736.789130][T16017] RBP: 00007f8590893090 R08: 0000000000000000 R09: 0000000000000000 [ 736.797145][T16017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.805131][T16017] R13: 00007f858fc26038 R14: 00007f858fc25fa0 R15: 00007fff85a71938 [ 736.813141][T16017] [ 736.855007][T16015] netlink: 'syz.4.3296': attribute type 10 has an invalid length. [ 736.892584][T16015] __nla_validate_parse: 1 callbacks suppressed [ 736.892629][T16015] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3296'. [ 737.305440][T16028] netlink: 'syz.3.3299': attribute type 1 has an invalid length. [ 737.405608][T16028] netlink: 126196 bytes leftover after parsing attributes in process `syz.3.3299'. [ 737.563975][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3299'. [ 738.231086][T16040] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.3304'. [ 738.280956][T16040] openvswitch: netlink: Flow actions attr not present in new flow. [ 738.897065][T16056] netlink: 'syz.2.3309': attribute type 10 has an invalid length. [ 738.909398][T16056] team0: Device hsr_slave_0 failed to register rx_handler [ 739.202953][T16058] netlink: 'syz.3.3310': attribute type 10 has an invalid length. [ 739.333498][T16068] netlink: 'syz.4.3312': attribute type 10 has an invalid length. [ 739.469836][T16068] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3312'. [ 739.565561][T16072] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3315'. [ 739.610442][T16073] netlink: 'syz.3.3314': attribute type 40 has an invalid length. [ 739.733754][T16072] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.3315'. [ 740.119236][T16080] netlink: 'syz.1.3316': attribute type 10 has an invalid length. [ 741.719119][T16100] netlink: 'syz.0.3332': attribute type 1 has an invalid length. [ 741.746107][T16100] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3332'. [ 741.893243][T16104] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3332'. [ 742.043145][T16107] netlink: 'syz.2.3325': attribute type 10 has an invalid length. [ 742.064176][T16100] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3332'. [ 742.088565][T16107] team0: Device hsr_slave_0 failed to register rx_handler [ 742.338042][T16116] FAULT_INJECTION: forcing a failure. [ 742.338042][T16116] name failslab, interval 1, probability 0, space 0, times 0 [ 742.410069][T16116] CPU: 1 PID: 16116 Comm: syz.1.3327 Not tainted syzkaller #0 [ 742.417639][T16116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 742.427836][T16116] Call Trace: [ 742.431161][T16116] [ 742.434140][T16116] dump_stack_lvl+0x188/0x24e [ 742.438968][T16116] ? show_regs_print_info+0x12/0x12 [ 742.444350][T16116] ? load_image+0x410/0x410 [ 742.448931][T16116] ? __might_sleep+0xd0/0xd0 [ 742.453577][T16116] ? __lock_acquire+0x7c40/0x7c40 [ 742.458673][T16116] should_fail_ex+0x390/0x4c0 [ 742.463591][T16116] should_failslab+0x5/0x20 [ 742.468152][T16116] slab_pre_alloc_hook+0x59/0x300 [ 742.473228][T16116] ? __lock_acquire+0x138a/0x7c40 [ 742.478358][T16116] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 742.484235][T16116] __kmem_cache_alloc_node+0x4f/0x270 [ 742.489844][T16116] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 742.495712][T16116] __kmalloc+0xa3/0x240 [ 742.499932][T16116] tomoyo_realpath_from_path+0xe2/0x5c0 [ 742.505538][T16116] ? tomoyo_domain+0xd2/0x120 [ 742.510296][T16116] ? tomoyo_path_number_perm+0x205/0x650 [ 742.515999][T16116] tomoyo_path_number_perm+0x22f/0x650 [ 742.521541][T16116] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 742.527060][T16116] ? trace_call_bpf+0xbf/0x6b0 [ 742.531881][T16116] ? trace_call_bpf+0xbf/0x6b0 [ 742.536791][T16116] ? trace_call_bpf+0x5d6/0x6b0 [ 742.541765][T16116] ? __fget_files+0x28/0x460 [ 742.546420][T16116] security_file_ioctl+0x6c/0xa0 [ 742.551398][T16116] __se_sys_ioctl+0x48/0x170 [ 742.556021][T16116] do_syscall_64+0x4c/0xa0 [ 742.560558][T16116] ? clear_bhb_loop+0x60/0xb0 [ 742.565541][T16116] ? clear_bhb_loop+0x60/0xb0 [ 742.570284][T16116] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 742.576300][T16116] RIP: 0033:0x7f858f99e0d9 [ 742.580822][T16116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.600553][T16116] RSP: 002b:00007f8590893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 742.609001][T16116] RAX: ffffffffffffffda RBX: 00007f858fc25fa0 RCX: 00007f858f99e0d9 [ 742.616991][T16116] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 742.624978][T16116] RBP: 00007f8590893090 R08: 0000000000000000 R09: 0000000000000000 [ 742.632971][T16116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.640958][T16116] R13: 00007f858fc26038 R14: 00007f858fc25fa0 R15: 00007fff85a71938 [ 742.649058][T16116] [ 742.792620][T16121] netlink: 'syz.0.3328': attribute type 10 has an invalid length. [ 742.882747][T16121] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3328'. [ 742.891939][T16116] ERROR: Out of memory at tomoyo_realpath_from_path. [ 743.176480][T16124] device syzkaller0 entered promiscuous mode [ 745.754968][T16142] netlink: 'syz.4.3334': attribute type 3 has an invalid length. [ 745.772181][T16142] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3334'. [ 746.987268][T16159] netlink: 'syz.1.3339': attribute type 1 has an invalid length. [ 746.995821][T16159] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3339'. [ 747.088012][T16160] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3339'. [ 747.444541][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.451089][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.731922][T16152] netlink: 'syz.0.3336': attribute type 10 has an invalid length. [ 748.748240][T16152] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3336'. [ 748.759043][T16159] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3339'. [ 748.943516][T16164] netlink: 'syz.3.3340': attribute type 10 has an invalid length. [ 749.002272][T16164] team0: Device hsr_slave_0 failed to register rx_handler [ 749.331161][T16176] netlink: 'syz.2.3343': attribute type 10 has an invalid length. [ 749.380430][T16176] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3343'. [ 749.521875][T14111] Bluetooth: hci1: command 0x0406 tx timeout [ 749.669874][T16178] netlink: 'syz.1.3342': attribute type 10 has an invalid length. [ 749.772941][T16178] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3342'. [ 750.362222][T16191] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3347'. [ 750.541487][T16191] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3347'. [ 750.609280][T16189] netlink: 'syz.1.3347': attribute type 1 has an invalid length. [ 750.642733][T16189] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3347'. [ 750.658748][T16199] netlink: 'syz.3.3349': attribute type 10 has an invalid length. [ 750.704848][T16199] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3349'. [ 750.851736][T16199] device bond0 entered promiscuous mode [ 750.857382][T16199] device bond_slave_0 entered promiscuous mode [ 750.949186][T16199] device bond_slave_1 entered promiscuous mode [ 750.978207][T16199] bridge0: port 3(bond0) entered blocking state [ 751.034390][T16199] bridge0: port 3(bond0) entered disabled state [ 751.086652][T16199] bridge0: port 3(bond0) entered blocking state [ 751.093115][T16199] bridge0: port 3(bond0) entered forwarding state [ 751.755374][T16218] netlink: 'syz.4.3353': attribute type 1 has an invalid length. [ 751.800236][T16218] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3353'. [ 752.250697][T16229] netlink: 'syz.2.3355': attribute type 10 has an invalid length. [ 752.284212][T16229] __nla_validate_parse: 2 callbacks suppressed [ 752.284250][T16229] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3355'. [ 752.390892][T16239] netlink: 'syz.0.3358': attribute type 10 has an invalid length. [ 752.480872][T16239] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3358'. [ 752.629162][T16240] netlink: 'syz.4.3369': attribute type 10 has an invalid length. [ 752.709147][T16240] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3369'. [ 753.160629][T16247] netlink: 'syz.2.3359': attribute type 10 has an invalid length. [ 753.168533][T16247] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3359'. [ 754.687054][T16280] FAULT_INJECTION: forcing a failure. [ 754.687054][T16280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.792705][T16280] CPU: 1 PID: 16280 Comm: syz.4.3368 Not tainted syzkaller #0 [ 754.800253][T16280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 754.810356][T16280] Call Trace: [ 754.813714][T16280] [ 754.816679][T16280] dump_stack_lvl+0x188/0x24e [ 754.821402][T16280] ? show_regs_print_info+0x12/0x12 [ 754.826737][T16280] ? load_image+0x410/0x410 [ 754.831317][T16280] ? __might_fault+0xa6/0x120 [ 754.836054][T16280] should_fail_ex+0x390/0x4c0 [ 754.840792][T16280] copyin+0x1b/0x120 [ 754.844739][T16280] _copy_from_iter+0x447/0x1130 [ 754.849617][T16280] ? copyout_mc+0x110/0x110 [ 754.854154][T16280] ? __virt_addr_valid+0x188/0x540 [ 754.859368][T16280] ? __virt_addr_valid+0x188/0x540 [ 754.864494][T16280] ? __virt_addr_valid+0x467/0x540 [ 754.869656][T16280] ? __phys_addr_symbol+0x2b/0x70 [ 754.874701][T16280] ? __check_object_size+0x4f6/0xa70 [ 754.880089][T16280] netlink_sendmsg+0x755/0xbd0 [ 754.884895][T16280] ? netlink_getsockopt+0x550/0x550 [ 754.890484][T16280] ? apparmor_socket_sendmsg+0x8a/0x330 [ 754.896060][T16280] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 754.901373][T16280] ? security_socket_sendmsg+0x7c/0xa0 [ 754.906843][T16280] ? netlink_getsockopt+0x550/0x550 [ 754.912057][T16280] ____sys_sendmsg+0x5ed/0x9a0 [ 754.916847][T16280] ? __sys_sendmsg_sock+0x30/0x30 [ 754.921885][T16280] ? __import_iovec+0x306/0x510 [ 754.926763][T16280] ? import_iovec+0x6f/0xa0 [ 754.931294][T16280] ___sys_sendmsg+0x2a2/0x360 [ 754.935989][T16280] ? __sys_sendmsg+0x2a0/0x2a0 [ 754.940872][T16280] ? trace_call_bpf+0xbf/0x6b0 [ 754.945693][T16280] __se_sys_sendmsg+0x1c3/0x2b0 [ 754.950602][T16280] ? perf_trace_preemptirq_template+0x268/0x320 [ 754.956907][T16280] ? __x64_sys_sendmsg+0x80/0x80 [ 754.961896][T16280] ? lockdep_hardirqs_on+0x94/0x140 [ 754.967128][T16280] do_syscall_64+0x4c/0xa0 [ 754.971772][T16280] ? clear_bhb_loop+0x60/0xb0 [ 754.976462][T16280] ? clear_bhb_loop+0x60/0xb0 [ 754.981153][T16280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.987058][T16280] RIP: 0033:0x7fe0ea19e0d9 [ 754.991507][T16280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.011131][T16280] RSP: 002b:00007fe0eb0e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 755.019591][T16280] RAX: ffffffffffffffda RBX: 00007fe0ea426090 RCX: 00007fe0ea19e0d9 [ 755.028027][T16280] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 755.036048][T16280] RBP: 00007fe0eb0e1090 R08: 0000000000000000 R09: 0000000000000000 [ 755.044043][T16280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.052029][T16280] R13: 00007fe0ea426128 R14: 00007fe0ea426090 R15: 00007ffc2e02c1c8 [ 755.060200][T16280] [ 755.101862][T16275] netlink: 'syz.1.3367': attribute type 2 has an invalid length. [ 755.120049][T16275] netlink: 'syz.1.3367': attribute type 8 has an invalid length. [ 755.128144][T16275] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3367'. [ 755.181566][T16279] netlink: 'syz.1.3367': attribute type 2 has an invalid length. [ 755.247035][T16279] netlink: 'syz.1.3367': attribute type 8 has an invalid length. [ 755.263890][T16279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3367'. [ 755.293963][T16272] netlink: 'syz.4.3368': attribute type 2 has an invalid length. [ 755.315885][T16272] netlink: 'syz.4.3368': attribute type 8 has an invalid length. [ 755.334366][T16272] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3368'. [ 755.367944][T16268] : port 1(ip6gretap0) entered blocking state [ 755.393791][T16268] : port 1(ip6gretap0) entered disabled state [ 755.425457][T16268] device ip6gretap0 entered promiscuous mode [ 755.696122][T16288] FAULT_INJECTION: forcing a failure. [ 755.696122][T16288] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 755.757761][T16288] CPU: 1 PID: 16288 Comm: syz.1.3372 Not tainted syzkaller #0 [ 755.765478][T16288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 755.775581][T16288] Call Trace: [ 755.778896][T16288] [ 755.781862][T16288] dump_stack_lvl+0x188/0x24e [ 755.786596][T16288] ? show_regs_print_info+0x12/0x12 [ 755.791829][T16288] ? load_image+0x410/0x410 [ 755.796371][T16288] ? __lock_acquire+0x7c40/0x7c40 [ 755.801547][T16288] should_fail_ex+0x390/0x4c0 [ 755.806452][T16288] prepare_alloc_pages+0x1e1/0x5b0 [ 755.811618][T16288] __alloc_pages+0x130/0x4f0 [ 755.816246][T16288] ? __lock_acquire+0x7c40/0x7c40 [ 755.821309][T16288] ? zone_statistics+0x170/0x170 [ 755.826309][T16288] pte_alloc_one+0x7b/0x310 [ 755.830861][T16288] ? pfn_modify_allowed+0x560/0x560 [ 755.836108][T16288] ? __rwlock_init+0x140/0x140 [ 755.840932][T16288] __pte_alloc+0x21/0x150 [ 755.845317][T16288] handle_mm_fault+0x34b1/0x3d40 [ 755.850303][T16288] ? mt_find+0x157/0x830 [ 755.854604][T16288] ? numa_migrate_prep+0x250/0x250 [ 755.859768][T16288] ? lock_chain_count+0x20/0x20 [ 755.864697][T16288] ? lock_mm_and_find_vma+0xae/0x2f0 [ 755.870121][T16288] do_user_addr_fault+0x58e/0xb20 [ 755.875307][T16288] exc_page_fault+0x60/0x100 [ 755.879947][T16288] asm_exc_page_fault+0x22/0x30 [ 755.884848][T16288] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 755.890666][T16288] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 755.910491][T16288] RSP: 0018:ffffc90003e87e80 EFLAGS: 00050293 [ 755.916616][T16288] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000200000000140 [ 755.924642][T16288] RDX: 0000000000000000 RSI: ffffffff8a8c2920 RDI: ffffffff8adf5de0 [ 755.932932][T16288] RBP: 0000000000000004 R08: ffffffff8e210aef R09: 1ffffffff1c4215d [ 755.940952][T16288] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 0000000000000000 [ 755.948971][T16288] R13: 0000200000000140 R14: 0000000000000010 R15: 0000000000000003 [ 755.957099][T16288] __sys_socketpair+0xb4/0x540 [ 755.961938][T16288] __x64_sys_socketpair+0x97/0xb0 [ 755.967205][T16288] do_syscall_64+0x4c/0xa0 [ 755.971676][T16288] ? clear_bhb_loop+0x60/0xb0 [ 755.976489][T16288] ? clear_bhb_loop+0x60/0xb0 [ 755.981227][T16288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 755.987190][T16288] RIP: 0033:0x7f858f99e0d9 [ 755.991658][T16288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.011409][T16288] RSP: 002b:00007f8590893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 756.019969][T16288] RAX: ffffffffffffffda RBX: 00007f858fc25fa0 RCX: 00007f858f99e0d9 [ 756.027988][T16288] RDX: 0000000000000007 RSI: 0000000000000003 RDI: 0000000000000010 [ 756.036007][T16288] RBP: 00007f8590893090 R08: 0000000000000000 R09: 0000000000000000 [ 756.044032][T16288] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 756.052064][T16288] R13: 00007f858fc26038 R14: 00007f858fc25fa0 R15: 00007fff85a71938 [ 756.060116][T16288] [ 756.150911][T16295] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3373'. [ 756.476662][T16301] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3375'. [ 757.770018][T16319] validate_nla: 1 callbacks suppressed [ 757.770042][T16319] netlink: 'syz.0.3377': attribute type 10 has an invalid length. [ 757.819933][T16319] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3377'. [ 758.433630][T16334] device syzkaller0 entered promiscuous mode [ 758.746012][T16352] FAULT_INJECTION: forcing a failure. [ 758.746012][T16352] name failslab, interval 1, probability 0, space 0, times 0 [ 758.810451][T16352] CPU: 0 PID: 16352 Comm: syz.2.3389 Not tainted syzkaller #0 [ 758.818002][T16352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 758.828143][T16352] Call Trace: [ 758.831460][T16352] [ 758.834447][T16352] dump_stack_lvl+0x188/0x24e [ 758.839186][T16352] ? show_regs_print_info+0x12/0x12 [ 758.844444][T16352] ? load_image+0x410/0x410 [ 758.849088][T16352] ? __might_sleep+0xd0/0xd0 [ 758.853741][T16352] ? __lock_acquire+0x7c40/0x7c40 [ 758.858826][T16352] should_fail_ex+0x390/0x4c0 [ 758.863566][T16352] should_failslab+0x5/0x20 [ 758.868119][T16352] slab_pre_alloc_hook+0x59/0x300 [ 758.873241][T16352] ? __lock_acquire+0x138a/0x7c40 [ 758.878418][T16352] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 758.884276][T16352] __kmem_cache_alloc_node+0x4f/0x270 [ 758.889705][T16352] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 758.895483][T16352] __kmalloc+0xa3/0x240 [ 758.899695][T16352] tomoyo_realpath_from_path+0xe2/0x5c0 [ 758.905277][T16352] ? tomoyo_domain+0xd2/0x120 [ 758.910085][T16352] ? tomoyo_path_number_perm+0x205/0x650 [ 758.915758][T16352] tomoyo_path_number_perm+0x22f/0x650 [ 758.921256][T16352] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 758.926747][T16352] ? ksys_write+0x1ce/0x260 [ 758.931319][T16352] ? common_file_perm+0x171/0x1c0 [ 758.936428][T16352] ? __fget_files+0x28/0x460 [ 758.941162][T16352] security_file_ioctl+0x6c/0xa0 [ 758.946146][T16352] __se_sys_ioctl+0x48/0x170 [ 758.950881][T16352] do_syscall_64+0x4c/0xa0 [ 758.955416][T16352] ? clear_bhb_loop+0x60/0xb0 [ 758.960130][T16352] ? clear_bhb_loop+0x60/0xb0 [ 758.964850][T16352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 758.970777][T16352] RIP: 0033:0x7fbf8cd9e0d9 [ 758.975395][T16352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.995293][T16352] RSP: 002b:00007fbf8dc2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.004169][T16352] RAX: ffffffffffffffda RBX: 00007fbf8d025fa0 RCX: 00007fbf8cd9e0d9 [ 759.012168][T16352] RDX: 0000200000000040 RSI: 0000000000008919 RDI: 0000000000000003 [ 759.020166][T16352] RBP: 00007fbf8dc2a090 R08: 0000000000000000 R09: 0000000000000000 [ 759.028166][T16352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 759.036195][T16352] R13: 00007fbf8d026038 R14: 00007fbf8d025fa0 R15: 00007ffc21cb2f58 [ 759.044214][T16352] [ 759.108350][T16352] ERROR: Out of memory at tomoyo_realpath_from_path. [ 759.285798][T16364] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3392'. [ 759.294733][T16355] netlink: 'syz.1.3392': attribute type 1 has an invalid length. [ 759.304285][T16355] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3392'. [ 759.328454][T16351] netlink: 'syz.0.3390': attribute type 9 has an invalid length. [ 759.380537][T16351] netlink: 391 bytes leftover after parsing attributes in process `syz.0.3390'. [ 762.011807][T16361] netlink: 'syz.3.3391': attribute type 10 has an invalid length. [ 762.019936][T16361] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3391'. [ 762.039834][T16362] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3392'. [ 762.551388][T16382] netlink: 'syz.0.3396': attribute type 27 has an invalid length. [ 762.560798][T16382] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.3396'. [ 762.980935][T16392] netlink: 'syz.3.3399': attribute type 10 has an invalid length. [ 762.988927][T16392] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3399'. [ 763.976965][T16413] netlink: 'syz.2.3404': attribute type 10 has an invalid length. [ 764.074001][T16413] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3404'. [ 764.374704][T16420] netlink: 'syz.0.3406': attribute type 1 has an invalid length. [ 764.417920][T16420] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3406'. [ 764.469558][T16426] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3406'. [ 764.673480][T16422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3406'. [ 764.880167][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 765.509214][T16425] device syzkaller0 entered promiscuous mode [ 765.765002][T16433] netlink: 'syz.4.3408': attribute type 10 has an invalid length. [ 765.982710][T16433] team0: Device hsr_slave_0 failed to register rx_handler [ 770.559076][T16468] netlink: 'syz.2.3416': attribute type 10 has an invalid length. [ 770.584163][T16468] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3416'. [ 770.896320][T16479] netlink: 'syz.3.3421': attribute type 3 has an invalid length. [ 770.931101][T16483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3420'. [ 770.940293][T16479] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3421'. [ 770.968511][T16476] netlink: 'syz.4.3420': attribute type 1 has an invalid length. [ 770.990933][T16483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3420'. [ 771.011124][T16486] netlink: 'syz.1.3422': attribute type 3 has an invalid length. [ 771.028447][T16485] netlink: 'syz.2.3423': attribute type 10 has an invalid length. [ 771.038045][T16476] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3420'. [ 771.074629][T16486] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3422'. [ 771.077601][T16485] team0: Device hsr_slave_0 failed to register rx_handler [ 773.426870][T16496] netlink: 'syz.4.3424': attribute type 10 has an invalid length. [ 773.449352][T16496] team0: Device hsr_slave_0 failed to register rx_handler [ 773.775178][T16506] netlink: 'syz.3.3426': attribute type 10 has an invalid length. [ 773.822042][T16506] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3426'. [ 773.988358][T16512] netlink: 'syz.0.3428': attribute type 10 has an invalid length. [ 774.035574][T16512] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3428'. [ 774.195886][T16517] netlink: 'syz.1.3430': attribute type 10 has an invalid length. [ 774.221368][T16517] team0: Device hsr_slave_0 failed to register rx_handler [ 774.347133][T16518] netlink: 'syz.2.3429': attribute type 10 has an invalid length. [ 774.368835][T16518] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3429'. [ 774.587066][T16521] team0: Device hsr_slave_0 failed to register rx_handler [ 774.700465][T16523] device syzkaller0 entered promiscuous mode [ 775.117882][T16527] sctp: [Deprecated]: syz.2.3433 (pid 16527) Use of int in maxseg socket option. [ 775.117882][T16527] Use struct sctp_assoc_value instead [ 777.996248][T16542] validate_nla: 1 callbacks suppressed [ 777.996269][T16542] netlink: 'syz.2.3436': attribute type 10 has an invalid length. [ 778.217072][T16542] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3436'. [ 778.636830][T16551] netlink: 'syz.0.3440': attribute type 10 has an invalid length. [ 778.725513][T16551] team0: Device hsr_slave_0 failed to register rx_handler [ 779.279296][T16557] netlink: 'syz.1.3442': attribute type 10 has an invalid length. [ 779.307478][T16557] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3442'. [ 779.348779][T16561] netlink: 'syz.3.3443': attribute type 10 has an invalid length. [ 779.382987][T16561] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3443'. [ 779.548006][T16565] sctp: [Deprecated]: syz.2.3454 (pid 16565) Use of int in maxseg socket option. [ 779.548006][T16565] Use struct sctp_assoc_value instead [ 779.911242][T16569] netlink: 'syz.4.3444': attribute type 10 has an invalid length. [ 780.073229][T16569] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3444'. [ 780.227198][T16572] netlink: 'syz.1.3445': attribute type 10 has an invalid length. [ 780.341054][T16572] team0: Device hsr_slave_0 failed to register rx_handler [ 780.652636][T16579] sctp: [Deprecated]: syz.2.3458 (pid 16579) Use of int in maxseg socket option. [ 780.652636][T16579] Use struct sctp_assoc_value instead [ 780.728302][T16581] sctp: [Deprecated]: syz.4.3447 (pid 16581) Use of int in maxseg socket option. [ 780.728302][T16581] Use struct sctp_assoc_value instead [ 780.827772][T16583] netlink: 'syz.3.3446': attribute type 10 has an invalid length. [ 780.866014][T16583] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3446'. [ 781.031574][T16585] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3446'. [ 781.751227][T16590] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.3449'. [ 781.837843][T16590] netlink: zone id is out of range [ 782.052143][T16590] netlink: zone id is out of range [ 782.069818][T16590] netlink: zone id is out of range [ 782.092620][T16590] netlink: get zone limit has 8 unknown bytes [ 782.396159][T16599] FAULT_INJECTION: forcing a failure. [ 782.396159][T16599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.591091][T16599] CPU: 0 PID: 16599 Comm: syz.4.3451 Not tainted syzkaller #0 [ 782.599106][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 782.609214][T16599] Call Trace: [ 782.612523][T16599] [ 782.615549][T16599] dump_stack_lvl+0x188/0x24e [ 782.620344][T16599] ? show_regs_print_info+0x12/0x12 [ 782.625643][T16599] ? load_image+0x410/0x410 [ 782.630158][T16599] ? __lock_acquire+0x7c40/0x7c40 [ 782.635182][T16599] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 782.641219][T16599] ? __lock_acquire+0x7c40/0x7c40 [ 782.646298][T16599] should_fail_ex+0x390/0x4c0 [ 782.651048][T16599] _copy_to_user+0x2c/0x130 [ 782.655606][T16599] bpf_test_finish+0x266/0x600 [ 782.660525][T16599] ? convert_skb_to___skb+0x420/0x420 [ 782.666489][T16599] bpf_prog_test_run_flow_dissector+0x4c5/0x640 [ 782.672795][T16599] ? xdp_convert_buff_to_md+0x200/0x200 [ 782.678381][T16599] ? __fget_files+0x28/0x460 [ 782.683126][T16599] ? xdp_convert_buff_to_md+0x200/0x200 [ 782.688895][T16599] bpf_prog_test_run+0x31c/0x390 [ 782.693889][T16599] __sys_bpf+0x62b/0x780 [ 782.698186][T16599] ? bpf_link_show_fdinfo+0x380/0x380 [ 782.703620][T16599] ? lock_chain_count+0x20/0x20 [ 782.708619][T16599] __x64_sys_bpf+0x78/0x90 [ 782.713094][T16599] do_syscall_64+0x4c/0xa0 [ 782.717647][T16599] ? clear_bhb_loop+0x60/0xb0 [ 782.722454][T16599] ? clear_bhb_loop+0x60/0xb0 [ 782.727169][T16599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 782.733109][T16599] RIP: 0033:0x7fe0ea19e0d9 [ 782.737755][T16599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.757409][T16599] RSP: 002b:00007fe0eb102028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 782.765871][T16599] RAX: ffffffffffffffda RBX: 00007fe0ea425fa0 RCX: 00007fe0ea19e0d9 [ 782.773887][T16599] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a [ 782.781990][T16599] RBP: 00007fe0eb102090 R08: 0000000000000000 R09: 0000000000000000 [ 782.790003][T16599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.798023][T16599] R13: 00007fe0ea426038 R14: 00007fe0ea425fa0 R15: 00007ffc2e02c1c8 [ 782.806161][T16599] [ 783.307003][T16616] netlink: 'syz.2.3459': attribute type 10 has an invalid length. [ 783.349769][T16617] FAULT_INJECTION: forcing a failure. [ 783.349769][T16617] name failslab, interval 1, probability 0, space 0, times 0 [ 783.385305][T16617] CPU: 1 PID: 16617 Comm: syz.1.3457 Not tainted syzkaller #0 [ 783.393290][T16617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 783.403541][T16617] Call Trace: [ 783.406843][T16617] [ 783.409819][T16617] dump_stack_lvl+0x188/0x24e [ 783.414566][T16617] ? show_regs_print_info+0x12/0x12 [ 783.419788][T16617] ? load_image+0x410/0x410 [ 783.424314][T16617] ? __might_sleep+0xd0/0xd0 [ 783.429020][T16617] ? __lock_acquire+0x7c40/0x7c40 [ 783.434091][T16617] should_fail_ex+0x390/0x4c0 [ 783.438798][T16617] should_failslab+0x5/0x20 [ 783.443324][T16617] slab_pre_alloc_hook+0x59/0x300 [ 783.448851][T16617] kmem_cache_alloc_node+0x5a/0x310 [ 783.454067][T16617] ? __alloc_skb+0xf9/0x7d0 [ 783.458601][T16617] __alloc_skb+0xf9/0x7d0 [ 783.462959][T16617] alloc_skb_with_frags+0xa7/0x710 [ 783.468097][T16617] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 783.473944][T16617] sock_alloc_send_pskb+0x87f/0x9a0 [ 783.479193][T16617] ? sock_kzfree_s+0x50/0x50 [ 783.483894][T16617] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 783.489852][T16617] __ip_append_data+0x260a/0x38d0 [ 783.494927][T16617] ? trace_event_raw_event_lock+0x230/0x230 [ 783.500881][T16617] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 783.505854][T16617] ? ip_route_output_key_hash+0x139/0x330 [ 783.511594][T16617] ? ip_setup_cork+0x850/0x850 [ 783.516397][T16617] ? ip_setup_cork+0x528/0x850 [ 783.521187][T16617] ip_make_skb+0x227/0x440 [ 783.525635][T16617] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 783.530682][T16617] ? ip_flush_pending_frames+0x250/0x250 [ 783.536436][T16617] ? trace_event_raw_event_lock+0x230/0x230 [ 783.542358][T16617] udp_sendmsg+0x1b04/0x23d0 [ 783.547092][T16617] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 783.552074][T16617] ? udp_cmsg_send+0x350/0x350 [ 783.556878][T16617] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 783.562923][T16617] ? lock_chain_count+0x20/0x20 [ 783.568022][T16617] ? __local_bh_enable_ip+0x136/0x1c0 [ 783.573422][T16617] ? _local_bh_enable+0xa0/0xa0 [ 783.578298][T16617] ? inet_sendmsg+0x109/0x2a0 [ 783.583139][T16617] ? inet_sendmsg+0x109/0x2a0 [ 783.587856][T16617] ? inet_send_prepare+0x250/0x250 [ 783.592989][T16617] ____sys_sendmsg+0x5ed/0x9a0 [ 783.597808][T16617] ? __lock_acquire+0x7c40/0x7c40 [ 783.602968][T16617] ? __sys_sendmsg_sock+0x30/0x30 [ 783.608013][T16617] ? __import_iovec+0x306/0x510 [ 783.612901][T16617] ? import_iovec+0x6f/0xa0 [ 783.617610][T16617] ___sys_sendmsg+0x2a2/0x360 [ 783.622341][T16617] ? __sys_sendmsg+0x2a0/0x2a0 [ 783.627258][T16617] ? __lock_acquire+0x7c40/0x7c40 [ 783.632391][T16617] __se_sys_sendmsg+0x1c3/0x2b0 [ 783.637296][T16617] ? __x64_sys_sendmsg+0x80/0x80 [ 783.642331][T16617] ? lockdep_hardirqs_on+0x94/0x140 [ 783.647569][T16617] do_syscall_64+0x4c/0xa0 [ 783.652040][T16617] ? clear_bhb_loop+0x60/0xb0 [ 783.656848][T16617] ? clear_bhb_loop+0x60/0xb0 [ 783.661613][T16617] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.667565][T16617] RIP: 0033:0x7f858f99e0d9 [ 783.672009][T16617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.691914][T16617] RSP: 002b:00007f8590893028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.700362][T16617] RAX: ffffffffffffffda RBX: 00007f858fc25fa0 RCX: 00007f858f99e0d9 [ 783.708349][T16617] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000000b [ 783.716343][T16617] RBP: 00007f8590893090 R08: 0000000000000000 R09: 0000000000000000 [ 783.724338][T16617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.732354][T16617] R13: 00007f858fc26038 R14: 00007f858fc25fa0 R15: 00007fff85a71938 [ 783.740457][T16617] [ 783.746296][T16616] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3459'. [ 784.347774][T16626] netlink: 'syz.4.3460': attribute type 10 has an invalid length. [ 784.401493][T16626] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3460'. [ 784.438175][T16632] sctp: [Deprecated]: syz.1.3463 (pid 16632) Use of int in maxseg socket option. [ 784.438175][T16632] Use struct sctp_assoc_value instead [ 784.464145][T16629] netlink: 'syz.2.3464': attribute type 10 has an invalid length. [ 784.571395][T16629] team0: Device hsr_slave_0 failed to register rx_handler [ 785.176360][T16626] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3460'. [ 785.523007][T16647] netlink: 'syz.4.3467': attribute type 2 has an invalid length. [ 785.693225][T16647] device 0 entered promiscuous mode [ 786.131928][T16656] netlink: 'syz.3.3469': attribute type 10 has an invalid length. [ 786.140038][T16656] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3469'. [ 786.397187][T16661] netlink: 'syz.0.3471': attribute type 10 has an invalid length. [ 786.528202][T16661] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3471'. [ 786.791681][T16668] netlink: 'syz.1.3473': attribute type 10 has an invalid length. [ 786.835225][T16668] team0: Device hsr_slave_0 failed to register rx_handler [ 787.549684][T16674] netlink: 'syz.4.3474': attribute type 10 has an invalid length. [ 787.557609][T16674] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3474'. [ 788.156157][T16687] netlink: 'syz.0.3478': attribute type 10 has an invalid length. [ 788.190189][T16687] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3478'. [ 788.318851][T16688] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3478'. [ 788.504919][T16690] FAULT_INJECTION: forcing a failure. [ 788.504919][T16690] name failslab, interval 1, probability 0, space 0, times 0 [ 788.545748][T16690] CPU: 0 PID: 16690 Comm: syz.4.3480 Not tainted syzkaller #0 [ 788.553302][T16690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 788.563531][T16690] Call Trace: [ 788.566869][T16690] [ 788.569859][T16690] dump_stack_lvl+0x188/0x24e [ 788.574618][T16690] ? show_regs_print_info+0x12/0x12 [ 788.579878][T16690] ? load_image+0x410/0x410 [ 788.584533][T16690] ? __might_sleep+0xd0/0xd0 [ 788.589183][T16690] ? __lock_acquire+0x7c40/0x7c40 [ 788.594377][T16690] should_fail_ex+0x390/0x4c0 [ 788.599138][T16690] should_failslab+0x5/0x20 [ 788.603789][T16690] slab_pre_alloc_hook+0x59/0x300 [ 788.608974][T16690] ? lock_chain_count+0x20/0x20 [ 788.613906][T16690] kmem_cache_alloc_node+0x5a/0x310 [ 788.619205][T16690] ? __local_bh_enable_ip+0x136/0x1c0 [ 788.624647][T16690] ? __alloc_skb+0xf9/0x7d0 [ 788.629250][T16690] __alloc_skb+0xf9/0x7d0 [ 788.633663][T16690] sock_wmalloc+0xa6/0x120 [ 788.638237][T16690] l2tp_ip_sendmsg+0x1bf/0x1480 [ 788.643225][T16690] ? sock_rps_record_flow+0x19/0x3f0 [ 788.648574][T16690] ? inet_sendmsg+0x7a/0x2a0 [ 788.653298][T16690] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 788.658631][T16690] ? inet_send_prepare+0x250/0x250 [ 788.663834][T16690] ____sys_sendmsg+0x5ed/0x9a0 [ 788.668955][T16690] ? __sys_sendmsg_sock+0x30/0x30 [ 788.674043][T16690] ? __import_iovec+0x306/0x510 [ 788.678988][T16690] ? import_iovec+0x6f/0xa0 [ 788.683594][T16690] ___sys_sendmsg+0x2a2/0x360 [ 788.688403][T16690] ? __sys_sendmsg+0x2a0/0x2a0 [ 788.693340][T16690] ? __lock_acquire+0x7c40/0x7c40 [ 788.698528][T16690] __se_sys_sendmsg+0x1c3/0x2b0 [ 788.703558][T16690] ? __x64_sys_sendmsg+0x80/0x80 [ 788.708659][T16690] ? lockdep_hardirqs_on+0x94/0x140 [ 788.713927][T16690] do_syscall_64+0x4c/0xa0 [ 788.718482][T16690] ? clear_bhb_loop+0x60/0xb0 [ 788.723226][T16690] ? clear_bhb_loop+0x60/0xb0 [ 788.728067][T16690] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 788.734040][T16690] RIP: 0033:0x7fe0ea19e0d9 [ 788.738523][T16690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.758209][T16690] RSP: 002b:00007fe0eb102028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 788.766694][T16690] RAX: ffffffffffffffda RBX: 00007fe0ea425fa0 RCX: 00007fe0ea19e0d9 [ 788.774734][T16690] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 788.782802][T16690] RBP: 00007fe0eb102090 R08: 0000000000000000 R09: 0000000000000000 [ 788.791001][T16690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.799109][T16690] R13: 00007fe0ea426038 R14: 00007fe0ea425fa0 R15: 00007ffc2e02c1c8 [ 788.807280][T16690] [ 789.583507][T16703] netlink: 'syz.0.3485': attribute type 3 has an invalid length. [ 789.609218][T16703] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3485'. [ 790.221536][T16711] netlink: 'syz.3.3487': attribute type 10 has an invalid length. [ 790.297911][T16711] team0: Device hsr_slave_0 failed to register rx_handler [ 790.417658][T16717] netlink: 'syz.4.3489': attribute type 10 has an invalid length. [ 790.480023][T14111] Bluetooth: hci2: command 0x0406 tx timeout [ 790.531982][T16717] team0: Device hsr_slave_0 failed to register rx_handler [ 790.737095][T16722] netlink: 'syz.1.3492': attribute type 10 has an invalid length. [ 790.755043][T16722] team0: Device hsr_slave_0 failed to register rx_handler [ 791.000238][T16724] device syzkaller0 entered promiscuous mode [ 791.015166][T16726] netlink: 'syz.0.3491': attribute type 10 has an invalid length. [ 791.024724][T16726] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3491'. [ 793.099891][T16738] FAULT_INJECTION: forcing a failure. [ 793.099891][T16738] name failslab, interval 1, probability 0, space 0, times 0 [ 793.112995][T16738] CPU: 1 PID: 16738 Comm: syz.4.3495 Not tainted syzkaller #0 [ 793.120578][T16738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 793.130659][T16738] Call Trace: [ 793.133976][T16738] [ 793.136941][T16738] dump_stack_lvl+0x188/0x24e [ 793.141656][T16738] ? show_regs_print_info+0x12/0x12 [ 793.146883][T16738] ? load_image+0x410/0x410 [ 793.152062][T16738] ? __might_sleep+0xd0/0xd0 [ 793.156780][T16738] ? __lock_acquire+0x7c40/0x7c40 [ 793.161937][T16738] should_fail_ex+0x390/0x4c0 [ 793.166643][T16738] should_failslab+0x5/0x20 [ 793.171280][T16738] slab_pre_alloc_hook+0x59/0x300 [ 793.176357][T16738] ? apparmor_sk_alloc_security+0x74/0x100 [ 793.182209][T16738] __kmem_cache_alloc_node+0x4f/0x270 [ 793.187684][T16738] ? apparmor_sk_alloc_security+0x74/0x100 [ 793.193544][T16738] kmalloc_trace+0x26/0xe0 [ 793.197995][T16738] apparmor_sk_alloc_security+0x74/0x100 [ 793.203756][T16738] security_sk_alloc+0x6a/0xa0 [ 793.208549][T16738] sk_prot_alloc+0x101/0x210 [ 793.213152][T16738] ? sk_alloc+0x20/0x330 [ 793.217415][T16738] sk_alloc+0x36/0x330 [ 793.221506][T16738] ? bpf_ctx_init+0x154/0x190 [ 793.226482][T16738] bpf_prog_test_run_skb+0x36d/0x18e0 [ 793.231966][T16738] ? __fget_files+0x28/0x460 [ 793.236572][T16738] ? __fget_files+0x3fc/0x460 [ 793.241278][T16738] ? cpu_online+0xa0/0xa0 [ 793.245648][T16738] bpf_prog_test_run+0x31c/0x390 [ 793.250630][T16738] __sys_bpf+0x62b/0x780 [ 793.254888][T16738] ? bpf_link_show_fdinfo+0x380/0x380 [ 793.260316][T16738] ? lock_chain_count+0x20/0x20 [ 793.265187][T16738] __x64_sys_bpf+0x78/0x90 [ 793.269621][T16738] do_syscall_64+0x4c/0xa0 [ 793.274056][T16738] ? clear_bhb_loop+0x60/0xb0 [ 793.278743][T16738] ? clear_bhb_loop+0x60/0xb0 [ 793.283433][T16738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 793.289338][T16738] RIP: 0033:0x7fe0ea19e0d9 [ 793.293763][T16738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 793.313399][T16738] RSP: 002b:00007fe0eb102028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 793.321998][T16738] RAX: ffffffffffffffda RBX: 00007fe0ea425fa0 RCX: 00007fe0ea19e0d9 [ 793.329993][T16738] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 793.338163][T16738] RBP: 00007fe0eb102090 R08: 0000000000000000 R09: 0000000000000000 [ 793.346146][T16738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.354230][T16738] R13: 00007fe0ea426038 R14: 00007fe0ea425fa0 R15: 00007ffc2e02c1c8 [ 793.362316][T16738] [ 793.528540][T14111] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 794.415973][T16750] FAULT_INJECTION: forcing a failure. [ 794.415973][T16750] name failslab, interval 1, probability 0, space 0, times 0 [ 794.528937][T16750] CPU: 1 PID: 16750 Comm: syz.0.3500 Not tainted syzkaller #0 [ 794.536484][T16750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 794.547370][T16750] Call Trace: [ 794.550687][T16750] [ 794.553660][T16750] dump_stack_lvl+0x188/0x24e [ 794.558382][T16750] ? show_regs_print_info+0x12/0x12 [ 794.563704][T16750] ? load_image+0x410/0x410 [ 794.568263][T16750] ? __might_sleep+0xd0/0xd0 [ 794.573086][T16750] ? __lock_acquire+0x7c40/0x7c40 [ 794.578155][T16750] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 794.584185][T16750] should_fail_ex+0x390/0x4c0 [ 794.589005][T16750] should_failslab+0x5/0x20 [ 794.593548][T16750] slab_pre_alloc_hook+0x59/0x300 [ 794.598627][T16750] ? lockdep_hardirqs_on+0x94/0x140 [ 794.603973][T16750] kmem_cache_alloc_node+0x5a/0x310 [ 794.609212][T16750] ? __alloc_skb+0xf9/0x7d0 [ 794.613777][T16750] __alloc_skb+0xf9/0x7d0 [ 794.618166][T16750] alloc_skb_with_frags+0xa7/0x710 [ 794.623313][T16750] ? perf_trace_preemptirq_template+0x268/0x320 [ 794.629682][T16750] ? irqentry_enter+0x33/0x50 [ 794.634413][T16750] sock_alloc_send_pskb+0x87f/0x9a0 [ 794.639679][T16750] ? rcu_is_watching+0x11/0xa0 [ 794.644587][T16750] ? sock_kzfree_s+0x50/0x50 [ 794.649247][T16750] ? wait_for_unix_gc+0xe/0x190 [ 794.654219][T16750] ? wait_for_unix_gc+0x14/0x190 [ 794.659238][T16750] unix_dgram_sendmsg+0x5c1/0x16f0 [ 794.664408][T16750] ? aa_sk_perm+0x81f/0x950 [ 794.668976][T16750] ? aa_af_perm+0x340/0x340 [ 794.673513][T16750] ? unix_dgram_poll+0x680/0x680 [ 794.678494][T16750] ? tomoyo_socket_sendmsg_permission+0x1d6/0x2f0 [ 794.685042][T16750] ? apparmor_socket_sendmsg+0x8a/0x330 [ 794.690743][T16750] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 794.696076][T16750] ? security_socket_sendmsg+0x7c/0xa0 [ 794.701576][T16750] ? unix_dgram_poll+0x680/0x680 [ 794.706551][T16750] ____sys_sendmsg+0x5ed/0x9a0 [ 794.711379][T16750] ? __sys_sendmsg_sock+0x30/0x30 [ 794.716435][T16750] ? __import_iovec+0x306/0x510 [ 794.721335][T16750] ? import_iovec+0x6f/0xa0 [ 794.725977][T16750] ___sys_sendmsg+0x2a2/0x360 [ 794.730693][T16750] ? migrate_enable+0x148/0x220 [ 794.735673][T16750] ? __sys_sendmsg+0x2a0/0x2a0 [ 794.740528][T16750] __se_sys_sendmsg+0x1c3/0x2b0 [ 794.745423][T16750] ? __x64_sys_sendmsg+0x80/0x80 [ 794.750420][T16750] ? syscall_enter_from_user_mode+0x2a/0x80 [ 794.756345][T16750] do_syscall_64+0x4c/0xa0 [ 794.760801][T16750] ? clear_bhb_loop+0x60/0xb0 [ 794.765514][T16750] ? clear_bhb_loop+0x60/0xb0 [ 794.770231][T16750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 794.776156][T16750] RIP: 0033:0x7f89eb39e0d9 [ 794.780601][T16750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.800421][T16750] RSP: 002b:00007f89ec2f9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.808869][T16750] RAX: ffffffffffffffda RBX: 00007f89eb625fa0 RCX: 00007f89eb39e0d9 [ 794.816868][T16750] RDX: 0000000004000000 RSI: 0000200000001d00 RDI: 000000000000000c [ 794.824958][T16750] RBP: 00007f89ec2f9090 R08: 0000000000000000 R09: 0000000000000000 [ 794.832965][T16750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.841151][T16750] R13: 00007f89eb626038 R14: 00007f89eb625fa0 R15: 00007ffc5d9fa998 [ 794.849275][T16750] [ 794.882321][T16761] netlink: 'syz.2.3503': attribute type 10 has an invalid length. [ 794.921217][T16761] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3503'. [ 795.394955][T16764] netlink: 'syz.4.3504': attribute type 10 has an invalid length. [ 795.426491][T16764] team0: Device hsr_slave_0 failed to register rx_handler [ 796.260419][T16784] FAULT_INJECTION: forcing a failure. [ 796.260419][T16784] name failslab, interval 1, probability 0, space 0, times 0 [ 796.362529][T16784] CPU: 1 PID: 16784 Comm: syz.1.3508 Not tainted syzkaller #0 [ 796.370376][T16784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.381244][T16784] Call Trace: [ 796.384548][T16784] [ 796.387502][T16784] dump_stack_lvl+0x188/0x24e [ 796.392236][T16784] ? show_regs_print_info+0x12/0x12 [ 796.397501][T16784] ? load_image+0x410/0x410 [ 796.402146][T16784] ? __might_sleep+0xd0/0xd0 [ 796.406787][T16784] ? __lock_acquire+0x7c40/0x7c40 [ 796.411875][T16784] should_fail_ex+0x390/0x4c0 [ 796.416604][T16784] should_failslab+0x5/0x20 [ 796.421138][T16784] slab_pre_alloc_hook+0x59/0x300 [ 796.426248][T16784] ? tomoyo_encode+0x28a/0x550 [ 796.431063][T16784] __kmem_cache_alloc_node+0x4f/0x270 [ 796.436475][T16784] ? tomoyo_encode+0x28a/0x550 [ 796.441273][T16784] __kmalloc+0xa3/0x240 [ 796.445475][T16784] tomoyo_encode+0x28a/0x550 [ 796.450103][T16784] tomoyo_realpath_from_path+0x578/0x5c0 [ 796.455781][T16784] ? tomoyo_domain+0xd2/0x120 [ 796.460518][T16784] ? tomoyo_path_number_perm+0x205/0x650 [ 796.466197][T16784] tomoyo_path_number_perm+0x22f/0x650 [ 796.471696][T16784] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 796.477294][T16784] ? ksys_write+0x1ce/0x260 [ 796.481853][T16784] ? common_file_perm+0x171/0x1c0 [ 796.486978][T16784] ? __fget_files+0x28/0x460 [ 796.491663][T16784] security_file_ioctl+0x6c/0xa0 [ 796.496639][T16784] __se_sys_ioctl+0x48/0x170 [ 796.501279][T16784] do_syscall_64+0x4c/0xa0 [ 796.505754][T16784] ? clear_bhb_loop+0x60/0xb0 [ 796.510563][T16784] ? clear_bhb_loop+0x60/0xb0 [ 796.515356][T16784] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 796.521294][T16784] RIP: 0033:0x7f858f99e0d9 [ 796.525744][T16784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.545391][T16784] RSP: 002b:00007f8590872028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 796.553903][T16784] RAX: ffffffffffffffda RBX: 00007f858fc26090 RCX: 00007f858f99e0d9 [ 796.554427][T16789] netlink: 'syz.3.3510': attribute type 21 has an invalid length. [ 796.561989][T16784] RDX: 0000200000000180 RSI: 0000000040047451 RDI: 0000000000000004 [ 796.562016][T16784] RBP: 00007f8590872090 R08: 0000000000000000 R09: 0000000000000000 [ 796.562028][T16784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.562040][T16784] R13: 00007f858fc26128 R14: 00007f858fc26090 R15: 00007fff85a71938 [ 796.562071][T16784] [ 796.586326][T16784] ERROR: Out of memory at tomoyo_realpath_from_path. [ 796.742975][T16791] netlink: 'syz.2.3511': attribute type 1 has an invalid length. [ 796.776470][T16791] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3511'. [ 796.851234][T16791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3511'. [ 796.885721][T16793] netlink: 'syz.0.3512': attribute type 1 has an invalid length. [ 796.895787][T16799] FAULT_INJECTION: forcing a failure. [ 796.895787][T16799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.940454][T16793] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3512'. [ 796.958151][T16791] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3511'. [ 796.968341][T16799] CPU: 0 PID: 16799 Comm: syz.1.3514 Not tainted syzkaller #0 [ 796.976022][T16799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 796.986390][T16799] Call Trace: [ 796.989705][T16799] [ 796.992663][T16799] dump_stack_lvl+0x188/0x24e [ 796.997385][T16799] ? show_regs_print_info+0x12/0x12 [ 797.002623][T16799] ? load_image+0x410/0x410 [ 797.007246][T16799] ? __lock_acquire+0x7c40/0x7c40 [ 797.012311][T16799] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 797.018506][T16799] should_fail_ex+0x390/0x4c0 [ 797.023232][T16799] _copy_to_user+0x2c/0x130 [ 797.027768][T16799] bond_do_ioctl+0x59c/0x960 [ 797.032402][T16799] ? bond_eth_ioctl+0x770/0x770 [ 797.037295][T16799] ? __schedule+0x1087/0x4030 [ 797.042036][T16799] bond_siocdevprivate+0x15b/0x350 [ 797.047187][T16799] ? bond_do_ioctl+0x960/0x960 [ 797.052034][T16799] ? full_name_hash+0x8e/0xe0 [ 797.056774][T16799] dev_ifsioc+0xa4a/0xd50 [ 797.061139][T16799] ? dev_ioctl+0xe80/0xe80 [ 797.065773][T16799] ? full_name_hash+0x8e/0xe0 [ 797.070591][T16799] ? dev_load+0x1d/0x1e0 [ 797.074978][T16799] ? dev_load+0x1d/0x1e0 [ 797.079259][T16799] dev_ioctl+0x5f8/0xe80 [ 797.083541][T16799] ? get_user_ifreq+0xc7/0x170 [ 797.088350][T16799] sock_ioctl+0x679/0x700 [ 797.092799][T16799] ? sock_poll+0x420/0x420 [ 797.097283][T16799] ? bpf_lsm_file_ioctl+0x5/0x10 [ 797.102352][T16799] ? security_file_ioctl+0x7c/0xa0 [ 797.107497][T16799] ? sock_poll+0x420/0x420 [ 797.111948][T16799] __se_sys_ioctl+0xfa/0x170 [ 797.116580][T16799] do_syscall_64+0x4c/0xa0 [ 797.121143][T16799] ? clear_bhb_loop+0x60/0xb0 [ 797.126029][T16799] ? clear_bhb_loop+0x60/0xb0 [ 797.130759][T16799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.136683][T16799] RIP: 0033:0x7f858f99e0d9 [ 797.141157][T16799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.161067][T16799] RSP: 002b:00007f8590893028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 797.169590][T16799] RAX: ffffffffffffffda RBX: 00007f858fc25fa0 RCX: 00007f858f99e0d9 [ 797.177593][T16799] RDX: 0000200000000040 RSI: 00000000000089fb RDI: 0000000000000003 [ 797.185747][T16799] RBP: 00007f8590893090 R08: 0000000000000000 R09: 0000000000000000 [ 797.193728][T16799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.201706][T16799] R13: 00007f858fc26038 R14: 00007f858fc25fa0 R15: 00007fff85a71938 [ 797.209704][T16799] [ 797.223710][T16800] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3512'. [ 797.317214][T16793] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3512'. [ 797.967047][T16814] netlink: 'syz.0.3517': attribute type 10 has an invalid length. [ 798.011462][T16814] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3517'. [ 798.499003][T16821] netlink: 'syz.2.3519': attribute type 10 has an invalid length. [ 798.586546][T16821] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3519'. [ 799.398963][T16842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3528'. [ 799.511801][T16838] netlink: 'syz.1.3528': attribute type 1 has an invalid length. [ 799.549258][T16844] netlink: 'syz.3.3524': attribute type 10 has an invalid length. [ 799.737182][T16851] netlink: 'syz.4.3530': attribute type 1 has an invalid length. [ 800.001268][T16855] netlink: 'syz.1.3532': attribute type 10 has an invalid length. [ 800.108828][T16855] team0: Device hsr_slave_0 failed to register rx_handler [ 800.550776][T16857] netlink: 'syz.0.3533': attribute type 10 has an invalid length. [ 800.567472][T16857] team0: Device hsr_slave_0 failed to register rx_handler [ 801.043118][T16870] netlink: 'syz.4.3536': attribute type 10 has an invalid length. [ 801.102899][T16870] __nla_validate_parse: 6 callbacks suppressed [ 801.102921][T16870] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3536'. [ 801.600088][T16875] netlink: 'syz.3.3538': attribute type 1 has an invalid length. [ 801.618805][T16875] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.3538'. [ 801.807905][T14111] Bluetooth: hci0: ISO packet for unknown connection handle 4095 [ 802.125762][T16884] netlink: 'syz.4.3540': attribute type 10 has an invalid length. [ 802.164803][T16884] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3540'. [ 803.343232][T16901] netlink: 'syz.1.3545': attribute type 1 has an invalid length. [ 803.381283][T16901] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3545'. [ 803.477738][T16901] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3545'. [ 803.520449][T16901] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3545'. [ 803.573702][T16908] netlink: 'syz.0.3548': attribute type 10 has an invalid length. [ 803.598692][T16908] team0: Device hsr_slave_0 failed to register rx_handler [ 803.853722][T16912] FAULT_INJECTION: forcing a failure. [ 803.853722][T16912] name failslab, interval 1, probability 0, space 0, times 0 [ 803.913495][T16912] CPU: 1 PID: 16912 Comm: syz.4.3551 Not tainted syzkaller #0 [ 803.921043][T16912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 803.931142][T16912] Call Trace: [ 803.934446][T16912] [ 803.937391][T16912] dump_stack_lvl+0x188/0x24e [ 803.942091][T16912] ? show_regs_print_info+0x12/0x12 [ 803.947306][T16912] ? load_image+0x410/0x410 [ 803.952026][T16912] ? __might_sleep+0xd0/0xd0 [ 803.956710][T16912] ? __lock_acquire+0x7c40/0x7c40 [ 803.961765][T16912] should_fail_ex+0x390/0x4c0 [ 803.966498][T16912] should_failslab+0x5/0x20 [ 803.971025][T16912] slab_pre_alloc_hook+0x59/0x300 [ 803.976195][T16912] ? __lock_acquire+0x138a/0x7c40 [ 803.981416][T16912] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 803.987407][T16912] __kmem_cache_alloc_node+0x4f/0x270 [ 803.992801][T16912] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 803.998528][T16912] __kmalloc+0xa3/0x240 [ 804.002701][T16912] tomoyo_realpath_from_path+0xe2/0x5c0 [ 804.008258][T16912] ? tomoyo_domain+0xd2/0x120 [ 804.012949][T16912] ? tomoyo_path_number_perm+0x205/0x650 [ 804.018597][T16912] tomoyo_path_number_perm+0x22f/0x650 [ 804.024066][T16912] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 804.029531][T16912] ? ksys_write+0x1ce/0x260 [ 804.034078][T16912] ? common_file_perm+0x171/0x1c0 [ 804.039166][T16912] ? __fget_files+0x28/0x460 [ 804.043791][T16912] security_file_ioctl+0x6c/0xa0 [ 804.048745][T16912] __se_sys_ioctl+0x48/0x170 [ 804.053376][T16912] do_syscall_64+0x4c/0xa0 [ 804.057815][T16912] ? clear_bhb_loop+0x60/0xb0 [ 804.062592][T16912] ? clear_bhb_loop+0x60/0xb0 [ 804.067300][T16912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.073208][T16912] RIP: 0033:0x7fe0ea19e0d9 [ 804.077632][T16912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.097355][T16912] RSP: 002b:00007fe0eb102028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 804.105798][T16912] RAX: ffffffffffffffda RBX: 00007fe0ea425fa0 RCX: 00007fe0ea19e0d9 [ 804.113918][T16912] RDX: 000000000000000d RSI: 000000004004743d RDI: 0000000000000003 [ 804.122173][T16912] RBP: 00007fe0eb102090 R08: 0000000000000000 R09: 0000000000000000 [ 804.130290][T16912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 804.138280][T16912] R13: 00007fe0ea426038 R14: 00007fe0ea425fa0 R15: 00007ffc2e02c1c8 [ 804.146505][T16912] [ 804.166536][T16916] netlink: 'syz.3.3549': attribute type 10 has an invalid length. [ 804.209978][T16916] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3549'. [ 804.509985][T16912] ERROR: Out of memory at tomoyo_realpath_from_path. [ 805.553163][T16931] netlink: 'syz.2.3556': attribute type 10 has an invalid length. [ 805.592848][T16931] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3556'. [ 805.903991][T16934] netlink: 'syz.3.3558': attribute type 10 has an invalid length. [ 805.945316][T16934] team0: Device hsr_slave_0 failed to register rx_handler [ 806.149149][T16936] netlink: 'syz.1.3557': attribute type 1 has an invalid length. [ 806.177248][T16936] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.3557'. [ 806.388085][T16946] netlink: 'syz.2.3560': attribute type 10 has an invalid length. [ 806.408598][T16946] team0: Device hsr_slave_0 failed to register rx_handler [ 806.710532][T16949] device syzkaller0 entered promiscuous mode [ 807.003384][T16955] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3563'. [ 808.517285][T16969] netlink: 'syz.1.3568': attribute type 1 has an invalid length. [ 808.525508][T16969] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3568'. [ 808.598335][T16970] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3568'. [ 808.885246][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.899351][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.960331][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 811.307022][T16969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3568'. [ 811.316629][T16973] netlink: 'syz.3.3569': attribute type 10 has an invalid length. [ 811.324915][T16973] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3569'. [ 811.336190][T16979] netlink: 'syz.2.3571': attribute type 10 has an invalid length. [ 811.367975][T16979] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3571'. [ 811.587857][T16986] netlink: 'syz.3.3573': attribute type 10 has an invalid length. [ 811.670490][T16986] team0: Device hsr_slave_0 failed to register rx_handler [ 811.781738][T16995] netlink: 'syz.2.3576': attribute type 3 has an invalid length. [ 811.853305][T16995] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3576'. [ 813.442664][T16994] netlink: 'syz.1.3572': attribute type 10 has an invalid length. [ 813.459303][T16994] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3572'. [ 813.623843][T17006] device syzkaller0 entered promiscuous mode [ 813.885705][T17022] netlink: 'syz.1.3583': attribute type 1 has an invalid length. [ 813.894104][T17022] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3583'. [ 813.962666][T17023] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3583'. [ 816.183031][T17012] netlink: 'syz.4.3579': attribute type 10 has an invalid length. [ 816.196254][T17012] team0: Device hsr_slave_0 failed to register rx_handler [ 816.445241][T17018] netlink: 'syz.2.3582': attribute type 10 has an invalid length. [ 816.502728][T17018] team0: Device hsr_slave_0 failed to register rx_handler [ 816.747244][T17022] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3583'. [ 816.809359][T17027] netlink: 'syz.0.3584': attribute type 10 has an invalid length. [ 816.849833][T17027] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3584'. [ 817.327378][T17031] device syzkaller0 entered promiscuous mode [ 817.389721][T17042] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 817.456422][T17042] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3586'. [ 821.556406][T17052] netlink: 'syz.2.3590': attribute type 10 has an invalid length. [ 821.564382][T17052] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3590'. [ 821.574741][T17055] netlink: 'syz.1.3591': attribute type 10 has an invalid length. [ 821.595401][T17055] team0: Device hsr_slave_0 failed to register rx_handler [ 821.708592][T17066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 821.723961][T17066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.759475][T17066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 821.786479][T17066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.900751][T17071] device syzkaller0 entered promiscuous mode [ 821.909016][T17077] netlink: 'syz.2.3596': attribute type 10 has an invalid length. [ 821.919272][T17077] team0: Device hsr_slave_0 failed to register rx_handler [ 821.956962][T17079] netlink: 'syz.3.3597': attribute type 10 has an invalid length. [ 821.976093][T17079] team0: Device hsr_slave_0 failed to register rx_handler [ 822.206535][T17081] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.3598'. [ 824.901070][T17084] netlink: 'syz.0.3599': attribute type 1 has an invalid length. [ 824.909192][T17084] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3599'. [ 824.925601][T17091] netlink: 'syz.1.3600': attribute type 10 has an invalid length. [ 824.936057][T17091] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3600'. [ 825.837810][T17112] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3606'. [ 829.081476][T17120] device syzkaller0 entered promiscuous mode [ 829.088879][T17126] netlink: 'syz.2.3609': attribute type 10 has an invalid length. [ 829.118560][T17126] team0: Device hsr_slave_0 failed to register rx_handler [ 829.214361][T17130] netlink: 'syz.1.3610': attribute type 10 has an invalid length. [ 829.226527][T17130] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3610'. [ 832.628607][T17137] netlink: 'syz.0.3612': attribute type 10 has an invalid length. [ 832.638597][T17137] team0: Device hsr_slave_0 failed to register rx_handler [ 832.945444][T17148] netlink: 'syz.3.3615': attribute type 10 has an invalid length. [ 832.960369][T17148] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3615'. [ 833.025531][T17146] device syzkaller0 entered promiscuous mode [ 836.561060][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 836.904577][T17162] netlink: 'syz.1.3628': attribute type 10 has an invalid length. [ 836.919091][T17162] team0: Device hsr_slave_0 failed to register rx_handler [ 837.021899][T17180] netlink: 'syz.0.3623': attribute type 10 has an invalid length. [ 837.095339][T17180] team0: Device hsr_slave_0 failed to register rx_handler [ 837.407200][T17191] netlink: 'syz.4.3625': attribute type 10 has an invalid length. [ 837.543917][T17191] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3625'. [ 837.689425][T17199] netlink: 'syz.3.3629': attribute type 10 has an invalid length. [ 837.713351][T17199] team0: Device hsr_slave_0 failed to register rx_handler [ 838.521816][T17201] netlink: 'syz.0.3627': attribute type 10 has an invalid length. [ 838.548011][T17201] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3627'. [ 839.309497][T17223] netlink: 'syz.4.3634': attribute type 10 has an invalid length. [ 839.363323][T17223] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.472966][T17223] device bridge_slave_1 left promiscuous mode [ 839.513494][T17223] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.543357][T17223] device bridge_slave_1 entered promiscuous mode [ 839.560896][T17223] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 839.732583][T17231] netlink: 'syz.0.3639': attribute type 10 has an invalid length. [ 839.745498][T17231] team0: Device hsr_slave_0 failed to register rx_handler [ 840.234349][T17244] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 840.247550][T17244] syzkaller1: linktype set to 823 [ 840.528780][T17252] netlink: 'syz.1.3646': attribute type 10 has an invalid length. [ 840.642170][T17252] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3646'. [ 841.319800][T17268] netlink: 'syz.0.3652': attribute type 10 has an invalid length. [ 841.376049][T17268] team0: Device hsr_slave_0 failed to register rx_handler [ 841.608801][T17273] netlink: 'syz.1.3653': attribute type 10 has an invalid length. [ 841.668565][T17273] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3653'. [ 842.238816][T17281] validate_nla: 1 callbacks suppressed [ 842.238836][T17281] netlink: 'syz.3.3656': attribute type 28 has an invalid length. [ 842.381756][T17281] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3656'. [ 842.478994][T17291] netlink: 'syz.0.3658': attribute type 10 has an invalid length. [ 842.507444][T17291] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3658'. [ 842.810243][T17294] netlink: 'syz.4.3660': attribute type 10 has an invalid length. [ 842.932428][T17294] team0: Device hsr_slave_0 failed to register rx_handler [ 843.729089][T17310] netlink: 'syz.1.3663': attribute type 10 has an invalid length. [ 843.842615][T17310] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3663'. [ 843.903187][T17312] netlink: 'syz.2.3665': attribute type 10 has an invalid length. [ 843.960417][T17312] team0: Device hsr_slave_0 failed to register rx_handler [ 845.957035][T17338] netlink: 'syz.0.3671': attribute type 10 has an invalid length. [ 846.237965][T17338] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3671'. [ 847.041072][T17351] netlink: 'syz.1.3678': attribute type 10 has an invalid length. [ 847.061327][T17351] team0: Device hsr_slave_0 failed to register rx_handler [ 847.397380][T17360] netlink: 'syz.0.3679': attribute type 10 has an invalid length. [ 847.447556][T17360] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3679'. [ 847.617298][T17362] netlink: 'syz.1.3682': attribute type 28 has an invalid length. [ 847.750087][T17362] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3682'. [ 847.994239][T17369] netlink: 'syz.4.3684': attribute type 10 has an invalid length. [ 848.310594][T17369] team0: Device hsr_slave_0 failed to register rx_handler [ 850.902870][T17389] netlink: 'syz.2.3689': attribute type 1 has an invalid length. [ 850.936640][T17389] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.3689'. [ 851.237782][T17402] netlink: 'syz.1.3692': attribute type 1 has an invalid length. [ 851.565623][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3696'. [ 851.593386][T17408] FAULT_INJECTION: forcing a failure. [ 851.593386][T17408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.720441][T17407] netlink: 'syz.4.3696': attribute type 3 has an invalid length. [ 851.743647][T17408] CPU: 0 PID: 17408 Comm: syz.0.3695 Not tainted syzkaller #0 [ 851.751187][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 851.761371][T17408] Call Trace: [ 851.764680][T17408] [ 851.767732][T17408] dump_stack_lvl+0x188/0x24e [ 851.768209][T17407] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3696'. [ 851.772534][T17408] ? show_regs_print_info+0x12/0x12 [ 851.772568][T17408] ? load_image+0x410/0x410 [ 851.772593][T17408] ? __lock_acquire+0x7c40/0x7c40 [ 851.772617][T17408] ? tomoyo_path_number_perm+0x205/0x650 [ 851.772640][T17408] ? tomoyo_path_number_perm+0x5a4/0x650 [ 851.772664][T17408] should_fail_ex+0x390/0x4c0 [ 851.772694][T17408] _copy_from_user+0x2c/0x170 [ 851.772717][T17408] wext_handle_ioctl+0xc4/0x1d0 [ 851.772746][T17408] ? call_commit_handler+0xf0/0xf0 [ 851.772785][T17408] sock_ioctl+0x143/0x700 [ 851.772808][T17408] ? sock_poll+0x420/0x420 [ 851.772837][T17408] ? bpf_lsm_file_ioctl+0x5/0x10 [ 851.772863][T17408] ? security_file_ioctl+0x7c/0xa0 [ 851.772884][T17408] ? sock_poll+0x420/0x420 [ 851.772903][T17408] __se_sys_ioctl+0xfa/0x170 [ 851.772932][T17408] do_syscall_64+0x4c/0xa0 [ 851.860421][T17408] ? clear_bhb_loop+0x60/0xb0 [ 851.865515][T17408] ? clear_bhb_loop+0x60/0xb0 [ 851.870263][T17408] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 851.876242][T17408] RIP: 0033:0x7f89eb39e0d9 [ 851.880793][T17408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.900623][T17408] RSP: 002b:00007f89ec2f9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 851.909085][T17408] RAX: ffffffffffffffda RBX: 00007f89eb625fa0 RCX: 00007f89eb39e0d9 [ 851.917108][T17408] RDX: 0000200000000080 RSI: 0000000000008b06 RDI: 0000000000000005 [ 851.925140][T17408] RBP: 00007f89ec2f9090 R08: 0000000000000000 R09: 0000000000000000 [ 851.933196][T17408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.941234][T17408] R13: 00007f89eb626038 R14: 00007f89eb625fa0 R15: 00007ffc5d9fa998 [ 851.949360][T17408] [ 851.984640][T17417] netlink: 'syz.2.3698': attribute type 3 has an invalid length. [ 852.049468][T17417] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3698'. [ 852.151881][T17412] netlink: 'syz.1.3697': attribute type 10 has an invalid length. [ 852.463392][T17423] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3700'. [ 852.493820][T17412] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.595109][T17412] device bridge_slave_1 left promiscuous mode [ 852.621526][T17412] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.944893][T17412] device bridge_slave_1 entered promiscuous mode [ 852.986682][T17412] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 853.064070][T17422] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3700'. Stopping sshd: stopped /usr/sbin/sshd (pid 4030) OK [ 857.675487][T17468] netlink: 'syz.3.3711': attribute type 1 has an invalid length. [ 857.695250][T17468] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.3711'. [ 857.861832][T17473] netlink: 'syz.1.3715': attribute type 1 has an invalid length. [ 857.882686][T17474] netlink: 'syz.2.3712': attribute type 10 has an invalid length. [ 857.890775][T17473] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3715'. Stopping crond: [ 858.008219][T17473] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3715'. [ 858.018002][T17474] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3712'. [ 858.071961][T17477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3715'. stopped /usr/sbin/crond (pid 4015) OK [ 859.165950][T17499] FAULT_INJECTION: forcing a failure. [ 859.165950][T17499] name failslab, interval 1, probability 0, space 0, times 0 [ 859.223302][T17499] CPU: 1 PID: 17499 Comm: syz.4.3721 Not tainted syzkaller #0 [ 859.230862][T17499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.240977][T17499] Call Trace: [ 859.244294][T17499] [ 859.247255][T17499] dump_stack_lvl+0x188/0x24e [ 859.252099][T17499] ? show_regs_print_info+0x12/0x12 [ 859.257520][T17499] ? load_image+0x410/0x410 [ 859.262067][T17499] ? __might_sleep+0xd0/0xd0 [ 859.266689][T17499] ? __lock_acquire+0x7c40/0x7c40 [ 859.268745][T17503] netlink: 'syz.2.3718': attribute type 10 has an invalid length. [ 859.271740][T17499] should_fail_ex+0x390/0x4c0 [ 859.271780][T17499] should_failslab+0x5/0x20 [ 859.271799][T17499] slab_pre_alloc_hook+0x59/0x300 [ 859.271821][T17499] ? slab_free_freelist_hook+0x133/0x1b0 [ 859.299974][T17499] ? create_local_trace_uprobe+0x154/0x660 [ 859.305923][T17499] __kmem_cache_alloc_node+0x4f/0x270 [ 859.311330][T17499] ? kern_path+0x3b/0x50 [ 859.315612][T17499] ? create_local_trace_uprobe+0x154/0x660 [ 859.321473][T17499] kmalloc_trace+0x26/0xe0 [ 859.325949][T17499] create_local_trace_uprobe+0x154/0x660 [ 859.331976][T17499] ? bpf_get_uprobe_info+0x520/0x520 [ 859.337497][T17499] perf_uprobe_init+0xef/0x190 [ 859.339050][T17503] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3718'. [ 859.342469][T17499] perf_uprobe_event_init+0xe2/0x170 [ 859.342503][T17499] perf_try_init_event+0x12b/0x3d0 [ 859.342525][T17499] ? perf_event_alloc+0xb28/0x21e0 [ 859.342547][T17499] perf_event_alloc+0xea0/0x21e0 [ 859.342567][T17499] ? _raw_spin_unlock+0x24/0x40 [ 859.342589][T17499] ? find_lively_task_by_vpid+0x19/0x290 [ 859.342609][T17499] ? find_lively_task_by_vpid+0x19/0x290 [ 859.342637][T17499] __se_sys_perf_event_open+0x701/0x1ec0 [ 859.342676][T17499] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 859.342718][T17499] ? syscall_enter_from_user_mode+0x2a/0x80 [ 859.406423][T17499] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 859.412117][T17499] do_syscall_64+0x4c/0xa0 [ 859.416592][T17499] ? clear_bhb_loop+0x60/0xb0 [ 859.421312][T17499] ? clear_bhb_loop+0x60/0xb0 [ 859.426165][T17499] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 859.432098][T17499] RIP: 0033:0x7fe0ea19e0d9 [ 859.436764][T17499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.456501][T17499] RSP: 002b:00007fe0eb102028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 859.465170][T17499] RAX: ffffffffffffffda RBX: 00007fe0ea425fa0 RCX: 00007fe0ea19e0d9 [ 859.473179][T17499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001080 [ 859.481313][T17499] RBP: 00007fe0eb102090 R08: 0000000000000000 R09: 0000000000000000 [ 859.489642][T17499] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 859.497665][T17499] R13: 00007fe0ea426038 R14: 00007fe0ea425fa0 R15: 00007ffc2e02c1c8 [ 859.506266][T17499] [ 859.609802][T17499] trace_uprobe: Failed to allocate trace_uprobe.(-12) Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3933) Stopping network: [ 860.938391][T17538] netlink: 'syz.1.3727': attribute type 7 has an invalid length. [ 861.159968][T17540] netlink: 'syz.0.3728': attribute type 1 has an invalid length. [ 861.210115][T17540] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3728'. [ 861.236098][T17542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3728'. [ 861.259226][T17542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3728'. [ 861.570564][T17550] netlink: 'syz.1.3729': attribute type 10 has an invalid length. [ 861.666010][T17550] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3729'. [ 862.184649][T17559] netlink: 'syz.3.3732': attribute type 1 has an invalid length. OK Stopping iptables: OK Stopping system message bus: [ 864.596789][T17593] netlink: 'syz.3.3738': attribute type 5 has an invalid length. done [ 866.455717][T17604] netlink: 'syz.3.3740': attribute type 1 has an invalid length. [ 866.460551][T17608] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 866.482267][T17604] __nla_validate_parse: 1 callbacks suppressed [ 866.482319][T17604] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3740'. [ 866.490283][T17611] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3740'. [ 866.512635][T17608] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 866.599777][T17610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3740'. [ 866.961299][T17620] netlink: 'syz.2.3744': attribute type 1 has an invalid length. [ 867.042885][T17620] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.3744'. [ 867.130627][T17627] netlink: 'syz.1.3743': attribute type 10 has an invalid length. [ 867.138542][T17627] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3743'. [ 868.216517][T17637] device syzkaller0 entered promiscuous mode [ 869.349991][T17658] FAULT_INJECTION: forcing a failure. [ 869.349991][T17658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.439187][T17658] CPU: 1 PID: 17658 Comm: syz.2.3751 Not tainted syzkaller #0 [ 869.446721][T17658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 869.456892][T17658] Call Trace: [ 869.460211][T17658] [ 869.463187][T17658] dump_stack_lvl+0x188/0x24e [ 869.467913][T17658] ? show_regs_print_info+0x12/0x12 [ 869.473164][T17658] ? load_image+0x410/0x410 [ 869.477720][T17658] ? __lock_acquire+0x7c40/0x7c40 [ 869.482814][T17658] should_fail_ex+0x390/0x4c0 [ 869.487632][T17658] _copy_from_user+0x2c/0x170 [ 869.492344][T17658] __sys_bpf+0x2ea/0x780 Stopping klogd: [ 869.496629][T17658] ? bpf_link_show_fdinfo+0x380/0x380 [ 869.503427][T17658] ? lock_chain_count+0x20/0x20 [ 869.508349][T17658] __x64_sys_bpf+0x78/0x90 [ 869.512910][T17658] do_syscall_64+0x4c/0xa0 [ 869.517469][T17658] ? clear_bhb_loop+0x60/0xb0 [ 869.522237][T17658] ? clear_bhb_loop+0x60/0xb0 [ 869.527068][T17658] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 869.533100][T17658] RIP: 0033:0x7fbf8cd9e0d9 [ 869.537557][T17658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 869.557210][T17658] RSP: 002b:00007fbf8dc09028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 869.565673][T17658] RAX: ffffffffffffffda RBX: 00007fbf8d026090 RCX: 00007fbf8cd9e0d9 [ 869.573970][T17658] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000002 [ 869.582069][T17658] RBP: 00007fbf8dc09090 R08: 0000000000000000 R09: 0000000000000000 [ 869.590193][T17658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.598214][T17658] R13: 00007fbf8d026128 R14: 00007fbf8d026090 R15: 00007ffc21cb2f58 [ 869.606331][T17658] OK Stopping acpid: [ 870.362047][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.368556][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 OK Stopping syslogd: stopped /sbin/syslogd (pid 3621) OK [ 871.962169][T17680] netlink: 'syz.2.3755': attribute type 1 has an invalid length. [ 871.978286][T17680] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3755'. [ 872.185783][T17680] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3755'. umount: can't remount debugfs read-only [ 872.852401][T17652] netlink: 'syz.1.3750': attribute type 10 has an invalid length. [ 872.889221][T17652] team0: Device nlmon0 is of different type [ 873.042774][T17647] device syzkaller0 entered promiscuous mode [ 873.070865][T17681] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3755'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.81 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 876.156126][T17687] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 876.176123][T17687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 876.195402][T17692] netlink: 'syz.2.3758': attribute type 10 has an invalid length. [ 876.209338][T17692] team0: Device hsr_slave_0 failed to register rx_handler [ 876.259204][T17694] netlink: 'syz.3.3759': attribute type 1 has an invalid length. [ 876.272272][T17694] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.3759'. [ 876.587035][T17697] kvm: exiting hardware virtualization [ 876.633931][T17697] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 876.657309][T17697] ACPI: PM: Preparing to enter system sleep state S5 [ 876.701414][T17697] reboot: Power down serialport: VM disconnected.