last executing test programs: 1m34.821601641s ago: executing program 2 (id=3068): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@fallback=r1, 0x0, 0x0, 0x5c000000, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0]}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="8fe5453fb3d7b693f22607503beb346f8a642b6bd18fb4e6ff12b2986c3103240f06334e1c2819d2619a89bc3a85bdb561b18c8a6faccc0855a88fcb8776c768bacc3706cd8ca471f7f6c8b218cccaba89ca853c136cccc22ff94775e65d388abebc2b3076c5efa1aa320bc70cf2de0af80fbba6e2a3df06f05320f5d5fbff4acb722ef6e679e9da2f646e72166c163f50ce9623770ed60fad18ec90d06f3af7125758ae5d7bdef3e6158b4f3167f62b063fd166be5882f7796a125de7efc2dd5afbfc535d7a52fac85273d06e6c716056a87a0ab5e6fbfe9f6b1c1b6b5df6de15b96ba26b17bd3ac635122ddad646", 0xef}, {&(0x7f0000000580)="d462a5e27683d86323c9516b9470568ca4fb07cb63b8428d55e1fe0f89fbb01d1c9ddb8e5c264f9e59b5ec8e744359ee56fd3bcd2d001dd195d8e33baeb1baf78cf3163f37babf160e0d7ea35dea561cbe4b322fc8dae43d05d37f00229cd7a2285a44d8c67c2dbdb317820a9a5e602a6aae219c2300dce3984466461cb6ec3a505310b2b4824f9d", 0x88}], 0x2, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}, 0x8040) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000740)=""/32, 0x20}, {&(0x7f00000007c0)=""/15, 0xf}, {&(0x7f0000000800)=""/41, 0x29}, {&(0x7f0000006a80)=""/4110, 0x100e}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x8, &(0x7f0000000900)=""/137, 0x89}, 0x8301) 1m33.441192381s ago: executing program 2 (id=3073): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x60}, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000039000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x6, 0x7, 0x1, 0x3, 0x0, 0xc81, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6072, 0x4, @perf_bp={&(0x7f0000000180), 0x1}, 0x100, 0xffffffffffffffff, 0x6, 0x2, 0x7, 0x5, 0x9, 0x0, 0xfffffdc5, 0x0, 0x2}, r3, 0x2, r2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 1m30.297842528s ago: executing program 2 (id=3079): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$sock(0xffffffffffffffff, 0x0, 0x2c0) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000e40)=[{0x0}, {0x0}], 0x2, &(0x7f00000000c0)}, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93124fc60040011000a7403004700000037153e370248018000f01700", 0x2c}], 0x1}, 0x0) 1m30.13508474s ago: executing program 2 (id=3082): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4079, 0xfef}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f0000000740)=""/96, 0x60}], 0x4}, 0x40012002) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 1m28.064197671s ago: executing program 2 (id=3090): sendmsg$sock(0xffffffffffffffff, 0x0, 0x2c0) getpid() perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001340)={&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f00000000c0)}, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f93124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m22.926463977s ago: executing program 2 (id=3104): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004000000060000000700000000000000", @ANYRESHEX=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4000000008000000ffffff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 1m22.408848425s ago: executing program 32 (id=3104): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004000000060000000700000000000000", @ANYRESHEX=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4000000008000000ffffff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 19.698288127s ago: executing program 1 (id=3457): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x5, 0x2, 0x6, 0x7, 0x0, 0x8000, 0x90208, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xa, 0x4, @perf_config_ext={0x100000001, 0x6}, 0x1000, 0x2, 0xc, 0x0, 0x90b7, 0x4, 0x0, 0x0, 0x100, 0x0, 0xa62}, 0x0, 0x8, r0, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@fallback=r1, 0x0, 0x0, 0x5c000000, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0]}, 0x40) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\x00') r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="8fe5453fb3d7b693f22607503beb346f8a642b6bd18fb4e6ff12b2986c3103240f06334e1c2819d2619a89bc3a85bdb561b18c8a6faccc0855a88fcb8776c768bacc3706cd8ca471f7f6c8b218cccaba89ca853c136cccc22ff94775e65d388abebc2b3076c5efa1aa320bc70cf2de0af80fbba6e2a3df06f05320f5d5fbff4acb722ef6e679e9da2f646e72166c163f50ce9623770ed60fad18ec90d06f3af7125758ae5d7bdef3e6158b4f3167f62b063fd166be5882f7796a125de7efc2dd5afbfc535d7a52fac85273d06e6c716056a87a0ab5e6fbfe9f6b1c1b6b5df6de15b96ba26b17bd3ac635122ddad646", 0xef}, {&(0x7f0000000580)="d462a5e27683d86323c9516b9470568ca4fb07cb63b8428d55e1fe0f89fbb01d1c9ddb8e5c264f9e59b5ec8e744359ee56fd3bcd2d001dd195d8e33baeb1baf78cf3163f37babf160e0d7ea35dea561cbe4b322fc8dae43d05d37f00229cd7a2285a44d8c67c2dbdb317820a9a5e602a6aae219c2300dce3984466461cb6ec3a505310b2b4824f9d", 0x88}], 0x2, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}, 0x8040) socket$kcm(0x1e, 0x4, 0x0) 19.415463821s ago: executing program 1 (id=3460): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000440)=[0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f00000004c0)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8940, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0309000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x24, &(0x7f00000001c0)=@raw=[@map_idx={0x18, 0xb, 0x5, 0x0, 0xf}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0xb, 0xd, 0x6, 0x6}, @generic={0x7, 0x7, 0x5, 0x0, 0x8}, @alu={0x7, 0x0, 0xa, 0x4, 0x6, 0x6, 0x1}, @jmp={0x5, 0x1, 0x7, 0x8, 0x1, 0x20, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x7, 0x8, 0x80}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x1, 0x1, r2, r5, r5], 0x0, 0x10, 0xffff9ee9, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18.924492328s ago: executing program 1 (id=3463): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x970f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0xc, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r0}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18.694733802s ago: executing program 1 (id=3467): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 18.527682584s ago: executing program 1 (id=3469): socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0xa888, 0x41}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="623bed114d421d8b1c60ea4388a8", 0x36}], 0x1}, 0x4000) 18.073087171s ago: executing program 1 (id=3474): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) 17.662961457s ago: executing program 33 (id=3474): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) 15.878084563s ago: executing program 6 (id=3476): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@fallback=r1, 0x0, 0x0, 0x5c000000, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0]}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="8fe5453fb3d7b693f22607503beb346f8a642b6bd18fb4e6ff12b2986c3103240f06334e1c2819d2619a89bc3a85bdb561b18c8a6faccc0855a88fcb8776c768bacc3706cd8ca471f7f6c8b218cccaba89ca853c136cccc22ff94775e65d388abebc2b3076c5efa1aa320bc70cf2de0af80fbba6e2a3df06f05320f5d5fbff4acb722ef6e679e9da2f646e72166c163f50ce9623770ed60fad18ec90d06f3af7125758ae5d7bdef3e6158b4f3167f62b063fd166be5882f7796a125de7efc2dd5afbfc535d7a52fac85273d06e6c716056a87a0ab5e6fbfe9f6b1c1b6b5df6de15b96ba26b17bd3ac635122ddad646", 0xef}, {&(0x7f0000000580)="d462a5e27683d86323c9516b9470568ca4fb07cb63b8428d55e1fe0f89fbb01d1c9ddb8e5c264f9e59b5ec8e744359ee56fd3bcd2d001dd195d8e33baeb1baf78cf3163f37babf160e0d7ea35dea561cbe4b322fc8dae43d05d37f00229cd7a2285a44d8c67c2dbdb317820a9a5e602a6aae219c2300dce3984466461cb6ec3a505310b2b4824f9d", 0x88}], 0x2, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}, 0x8040) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000740)=""/32, 0x20}, {&(0x7f00000007c0)=""/15, 0xf}, {&(0x7f0000000800)=""/41, 0x29}, {&(0x7f0000006a80)=""/4110, 0x100e}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x8, &(0x7f0000000900)=""/137, 0x89}, 0x8301) 15.281534252s ago: executing program 34 (id=3476): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@fallback=r1, 0x0, 0x0, 0x5c000000, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0]}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="8fe5453fb3d7b693f22607503beb346f8a642b6bd18fb4e6ff12b2986c3103240f06334e1c2819d2619a89bc3a85bdb561b18c8a6faccc0855a88fcb8776c768bacc3706cd8ca471f7f6c8b218cccaba89ca853c136cccc22ff94775e65d388abebc2b3076c5efa1aa320bc70cf2de0af80fbba6e2a3df06f05320f5d5fbff4acb722ef6e679e9da2f646e72166c163f50ce9623770ed60fad18ec90d06f3af7125758ae5d7bdef3e6158b4f3167f62b063fd166be5882f7796a125de7efc2dd5afbfc535d7a52fac85273d06e6c716056a87a0ab5e6fbfe9f6b1c1b6b5df6de15b96ba26b17bd3ac635122ddad646", 0xef}, {&(0x7f0000000580)="d462a5e27683d86323c9516b9470568ca4fb07cb63b8428d55e1fe0f89fbb01d1c9ddb8e5c264f9e59b5ec8e744359ee56fd3bcd2d001dd195d8e33baeb1baf78cf3163f37babf160e0d7ea35dea561cbe4b322fc8dae43d05d37f00229cd7a2285a44d8c67c2dbdb317820a9a5e602a6aae219c2300dce3984466461cb6ec3a505310b2b4824f9d", 0x88}], 0x2, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}, 0x8040) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000740)=""/32, 0x20}, {&(0x7f00000007c0)=""/15, 0xf}, {&(0x7f0000000800)=""/41, 0x29}, {&(0x7f0000006a80)=""/4110, 0x100e}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x8, &(0x7f0000000900)=""/137, 0x89}, 0x8301) 12.291858637s ago: executing program 7 (id=3493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.704251285s ago: executing program 35 (id=3493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.895530752s ago: executing program 4 (id=3538): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000179fa10000000000ff000000850000006d00000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$kcm(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x40, 0xfffffffe, 0x7, 0x20029, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x3, @void, @value, @void, @value}, 0x50) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x894b, &(0x7f0000000100)) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890c, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x4}, {0x2}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) 5.581086476s ago: executing program 4 (id=3540): socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x8000000006}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f0000000040)="22c751ac8281e1e303d8ae141fc3d9ae3a86b5a635e5947d694757267c96695bf48d1e88734cb20e3aaade3fb25bb65e6811b451689ee4fd86bc4d9b2a7f60fc0b1331ec2f8dd5ba7d3c7123aad4afd94da55808d127c85e8def5d2d51917bdf543a3c30e1892ac36d20ca0748631b7c2b2a5c22525cfe2581188c29f4e9305e5d3e5b244bbaa5c0ab2ba24f10ee5c2e0657207928a44debefa9bef345325ded084101a9e9e4d477cb6c4d1ce7a4014a796b9f2bdbe8bfdf2c597e201b94f43cfb0d9854b09b2b5e1cacfaf93a868031b0b72f8463756983c1ad10247668d328c35e58028ca9ed5ca7", 0xe9}, {&(0x7f0000000300)}, {&(0x7f0000000140)="a1503ab1ab381baf768927e5bd18748e8b", 0x11}], 0x4}, 0x4044830) 4.882754157s ago: executing program 5 (id=3541): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r0 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x80047437, 0x0) socket$kcm(0x11, 0xa, 0x300) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) sendmsg$sock(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7c904b47775a762b, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000003c0)={0x0, 0x3, [@local, @empty, @broadcast]}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sock_rcvqueue_full\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0xf9, 0x61, 0x7, 0x2a1, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x3, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638877fbac141416ac14141644089f034d2f87e5070f0cab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 4.832514837s ago: executing program 3 (id=3542): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000004000000000000000088e161a4bb0a78c3679805370085000000ba00000095"], &(0x7f0000000380)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x5, 0x800, 0x800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100a60, 0xc78, 0x8000, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="170000e3040000000000000000000000080000001da772c8976d9c408e95453170175da9dcb21700a148684e6cd6b04ed2e3cb651c0b41873045932dc1508d4ce548aa7f27e747ac40d30b39cac7cff10da50bf4cc5875e93563b06c54f195c66966a77810a6611dd6c95d225a28b65cbcb8a7df1dc69491b4c3c0d1be1bde04c42efff4bc90aa080c1a352dd0617e9db476b40421dfa932630b6684c344cc8c94326660837d1627b83f1dc5432d1be9e7c90128a1db438e8d23e38e88dd96209333d02d0af33e20", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ff0100000000000004000000950000000000000709ce5469ea904ed354d1626db7a462b9beaaa14fe1391b79cad98cb7bfdded839e9b945c9127afd9832cb9bbbfb3a01e1b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe92, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r3 = socket$kcm(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) close(r3) socket$kcm(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0424fc600b003540280008000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f00000002c0)}, 0x10) 4.412310654s ago: executing program 3 (id=3543): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x300, 0x0}, 0x0) 4.338101845s ago: executing program 5 (id=3544): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4079, 0xfef}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f0000000740)=""/96, 0x60}], 0x4}, 0x40012002) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffd7a, 0x0, 0x3, 0x0, 0x4, 0x0, 0x40003, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 2.340037525s ago: executing program 3 (id=3545): socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={0x0, 0xa}, 0x2980, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffdfffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x20, 0x0, 0x0, 0x10000000}, 0x12cd) 2.302744166s ago: executing program 5 (id=3547): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000002000000020000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000179fa10000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0xa00, 0x4, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x40, 0xfffffffe, 0x7, 0x20029, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x3, @void, @value, @void, @value}, 0x50) setsockopt$sock_attach_bpf(r3, 0x6, 0x12, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x894b, &(0x7f0000000100)) r5 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890c, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x4}, {0x2}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) 2.302181006s ago: executing program 4 (id=3548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.152486288s ago: executing program 3 (id=3549): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYRESOCT, @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000000100000000000000000000000000000000001e"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3a489, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x9, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000d40)=ANY=[@ANYRES8=r4, @ANYRESDEC=r2, @ANYRESDEC, @ANYRESHEX=r1, @ANYRES16=r3, @ANYRESDEC=r1, @ANYRESHEX=r4], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r7, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x4, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0200000004000000080000000100000080002000a3800eaab32a2e517f0389ff0bf41fba8d4875addd39069524386e0af9f05f3008c92484c38a98641fc6c501684b3d6472b639a2c8be48c74dd653c17c6d5f03039bc2a2f8f855a10be00e22a1861342a3408d8848e3cd25807022283d1a9a8c3c9a4cbb0d8810d3a21dcb890b005b0ee1976453cba0b0d4f09952b4e1bdd4723fdcb401601fc9cbea5732ebd7483f1a9095eb7169173e96ebbd47f2565c3ba1126436fd4c395080d2b9c506c76939e8bf07288ddcec00967710c5d6a6b3dd32713dba996e33ee2ba81c66f38880a988", @ANYRES16=r5, @ANYRES32=r5, @ANYRESDEC=r3, @ANYBLOB="fb1b74e2b734ae238ce913e5b00eae8cd85faa846cd345826299103889204de6e15c9f6cbee5962155d53a8beab80027ef1bb653262bf2e772f6e09dbf97", @ANYRESOCT=r6], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r7, 0x58, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000004000000000000000000000000000000f8f6c71b6c722e85954ff1f18f141f9739e54f9f2c92284384bfb863167334566ff73cedb8fbd8d6e3b08db1106e8261950a518c8d461587ea40e56c05dec2f5511219d9e8bb661a683c48c436b8d59fdef69d03e710d7bf3c2083b886483f77a28b013d7169ede13bdab3f5a6885fe4924b75a2aeb58f86e647150b5f41ee914519f626c5d3939ff1b7dad45a53ad57ca1a8f61a7764cb5dff31ad4fbb1d79f81b7728011f52d60543fed70a4027c261f3be8b582bb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r13, @ANYBLOB="0100"/20, @ANYRES32=r12, @ANYRES32, @ANYBLOB="e3ffffff0200"/20], 0x50) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000bc0)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000500)=""/27, 0x1b, 0x0, &(0x7f0000000540)=""/77, 0x4d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x22, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000009000000000000005c0f000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000fa550200040000007944ffff1600000007718c010000000018240000", @ANYRES32=r10, @ANYRES16=r3, @ANYRES32=r11, @ANYBLOB="0000000001010004181b0000", @ANYRES32=r1, @ANYBLOB="0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c0000008500000006000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x14, &(0x7f0000000180)=""/20, 0x40f00, 0x20, '\x00', r12, @fallback=0x38, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x3, 0x1, 0x2}, 0x10, r15, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[r1], 0x0, 0x10, 0xe62d, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x8}, 0x8) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x5, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4, 0x0, 0x7, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 2.149639078s ago: executing program 4 (id=3550): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0x58, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x5, 0x7fe2, 0x1, 0x84, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[0x0, 0x0], 0x0, 0x52, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000b80)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_lsm={0x1d, 0x15, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x5, 0x3, 0x6, 0x3ff, 0x52a}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @alu={0x4, 0x0, 0x8, 0xb, 0x3, 0xc, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', r4, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x2, 0xc, 0x101, 0x1a}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r1, r1, r1, r1], 0x0, 0x10, 0x9, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x4, 0xf, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1806000000000018008500"/28, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000007a900c00f0ffffff9500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) r9 = syz_clone(0x80080, &(0x7f00000001c0)="d82fb0072cbea899eefb3e2a287ca24c05a3f4855f70d81fc0710dcdb26a413c436d8339ac353fe018e5820d31b9e13757e4c5a0638afd9f506564efebe63990529ada73f38bc7542bd750f218b59e5b63975167650c2e65a6f578b1fa21371aab00037035bfadfe83256027b319c40109508cc838a6b370236632620fb2319dda9cae95895864e009a1885344422777eb0e38d8a052e32bb9c1d1165ffb8697922645e9abb40e5c9e367ba9102d3479584b747532ebd02f4d93b0a15bac4593757a9d17c3a7cc4f8575cb06b43110358485b300542533c44747a8c058fd1742ddf959d0b0a963b3b03ca7d55d25ca02554661d62a", 0xf5, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000500)="c24b71ebf48ce3d29b40e94d3cfd0b927be459e758da3b285ce42db978001c1027297f1e6774b214380cad203e7289a2c7c664702d45d809336daad175ffcdf56ccaf1aa270b8fec4f5ead558cfdd96589a04b97fa93d5ba7fb5fdc8699c1c7b193f4d0261cca5029a6c7f36c7adb2910419cfb8c9c24ead322427c96ad7bc2f6de346d5b51f8804f62e3e") r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000633c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) syz_open_procfs$namespace(r9, &(0x7f00000000c0)='ns/pid_for_children\x00') 1.98988749s ago: executing program 5 (id=3551): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000004000000000000000088e161a4bb0a78c3679805370085000000ba00000095"], &(0x7f0000000380)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x5, 0x800, 0x800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100a60, 0xc78, 0x8000, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="170000e3040000000000000000000000080000001da772c8976d9c408e95453170175da9dcb21700a148684e6cd6b04ed2e3cb651c0b41873045932dc1508d4ce548aa7f27e747ac40d30b39cac7cff10da50bf4cc5875e93563b06c54f195c66966a77810a6611dd6c95d225a28b65cbcb8a7df1dc69491b4c3c0d1be1bde04c42efff4bc90aa080c1a352dd0617e9db476b40421dfa932630b6684c344cc8c94326660837d1627b83f1dc5432d1be9e7c90128a1db438e8d23e38e88dd96209333d02d0af33e20", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ff0100000000000004000000950000000000000709ce5469ea904ed354d1626db7a462b9beaaa14fe1391b79cad98cb7bfdded839e9b945c9127afd9832cb9bbbfb3a01e1b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe92, @void, @value}, 0x94) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) close(r2) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0424fc600b003540280008000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) 1.31249502s ago: executing program 3 (id=3554): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000ac0)={@fallback=r1, 0x0, 0x0, 0x5c000000, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0]}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x54, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="8fe5453fb3d7b693f22607503beb346f8a642b6bd18fb4e6ff12b2986c3103240f06334e1c2819d2619a89bc3a85bdb561b18c8a6faccc0855a88fcb8776c768bacc3706cd8ca471f7f6c8b218cccaba89ca853c136cccc22ff94775e65d388abebc2b3076c5efa1aa320bc70cf2de0af80fbba6e2a3df06f05320f5d5fbff4acb722ef6e679e9da2f646e72166c163f50ce9623770ed60fad18ec90d06f3af7125758ae5d7bdef3e6158b4f3167f62b063fd166be5882f7796a125de7efc2dd5afbfc535d7a52fac85273d06e6c716056a87a0ab5e6fbfe9f6b1c1b6b5df6de15b96ba26b17bd3ac635122ddad646", 0xef}, {&(0x7f0000000580)="d462a5e27683d86323c9516b9470568ca4fb07cb63b8428d55e1fe0f89fbb01d1c9ddb8e5c264f9e59b5ec8e744359ee56fd3bcd2d001dd195d8e33baeb1baf78cf3163f37babf160e0d7ea35dea561cbe4b322fc8dae43d05d37f00229cd7a2285a44d8c67c2dbdb317820a9a5e602a6aae219c2300dce3984466461cb6ec3a505310b2b4824f9d", 0x88}], 0x2, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xe8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}, 0x8040) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg$kcm(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000680)=""/165, 0xa5}, {&(0x7f0000000740)}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000000740)=""/32, 0x20}, {&(0x7f00000007c0)=""/15, 0xf}, {&(0x7f0000000800)=""/41, 0x29}, {&(0x7f0000006a80)=""/4110, 0x100e}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x8, &(0x7f0000000900)=""/137, 0x89}, 0x8301) 1.281171371s ago: executing program 0 (id=3555): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000004000000000000000088e161a4bb0a78c3679805370085000000ba00000095"], &(0x7f0000000380)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x5, 0x800, 0x800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100a60, 0xc78, 0x8000, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="170000e3040000000000000000000000080000001da772c8976d9c408e95453170175da9dcb21700a148684e6cd6b04ed2e3cb651c0b41873045932dc1508d4ce548aa7f27e747ac40d30b39cac7cff10da50bf4cc5875e93563b06c54f195c66966a77810a6611dd6c95d225a28b65cbcb8a7df1dc69491b4c3c0d1be1bde04c42efff4bc90aa080c1a352dd0617e9db476b40421dfa932630b6684c344cc8c94326660837d1627b83f1dc5432d1be9e7c90128a1db438e8d23e38e88dd96209333d02d0af33e20", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) close(r2) r3 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0424fc600b003540280008000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)}, 0x10) 1.120018563s ago: executing program 5 (id=3556): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4079, 0xfef}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f0000000740)=""/96, 0x60}], 0x4}, 0x40012002) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffd7a, 0x0, 0x3, 0x0, 0x4, 0x0, 0x40003, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x450, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 1.052539034s ago: executing program 4 (id=3557): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701000012ffffffb702000009000000b70300000000000085000000ca00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 859.930067ms ago: executing program 0 (id=3558): socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x8000000006}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f0000000040)="22c751ac8281e1e303d8ae141fc3d9ae3a86b5a635e5947d694757267c96695bf48d1e88734cb20e3aaade3fb25bb65e6811b451689ee4fd86bc4d9b2a7f60fc0b1331ec2f8dd5ba7d3c7123aad4afd94da55808d127c85e8def5d2d51917bdf543a3c30e1892ac36d20ca0748631b7c2b2a5c22525cfe2581188c29f4e9305e5d3e5b244bbaa5c0ab2ba24f10ee5c2e0657207928a44debefa9bef345325ded084101a9e9e4d477cb6c4d1ce7a4014a796b9f2bdbe8bfdf2c597e201b94f43cfb0d9854b09b2b5e1cacfaf93a868031b0b72f8463756983c1ad10247668d328c35e58028ca9ed5ca7", 0xe9}, {&(0x7f0000000300)="e05340f1db1ea0d34f844e5a8f456f616f4c8818278123644d78e92cfb8f9e3efab16c37380d0924f6c55695f19281c1d7b2231529ffe93a10d166ca57be4d37310636e18c7d665d257c01ac3bda2a9e74b458e9467c5f1f", 0x58}, {&(0x7f0000000140)="a1503ab1ab381baf768927e5bd18748e8b", 0x11}], 0x4}, 0x4044830) 718.564979ms ago: executing program 4 (id=3559): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff001}, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xfb, 0x7, 0x6, 0x0, 0x0, 0x6, 0x100, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7ff, 0x38f}, 0x204, 0x8000, 0x26fb, 0x4, 0x1ff, 0x7, 0x3, 0x0, 0x101, 0x0, 0x4}, r2, 0x4, r1, 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0xffffffffffffffff, 0x5b, 0x0}, 0x10000) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f00000009c0)=ANY=[@ANYRES8=r5, @ANYBLOB="3eca0d"], 0x9a) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x0) 706.759789ms ago: executing program 0 (id=3560): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000002000000020000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000179fa10000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xf, 0xa00, 0x4, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0x2c, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x40, 0xfffffffe, 0x7, 0x20029, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2, 0x3, @void, @value, @void, @value}, 0x50) setsockopt$sock_attach_bpf(r3, 0x6, 0x12, &(0x7f0000000000), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b4861ea30df81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca25b3659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf5f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730af36bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d26ce7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652cecbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b204007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000000000000000c87bd5b7cb8c5ae18218963f6d71cfa8b8afb7a4ade932aa3c4701a1c3284cf6b08a4c265dbf4c96cf1ccbcf8f43fd0abf415e581956070f52673a4fa63fb36788bbbcdc0cb1519e8e8fdd9c1463230ce4ccfa63d7069135d9804765a62bd12c2cf388b09c3a0bbd296a4ce6e523145bb6"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x894b, &(0x7f0000000100)) r5 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890c, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x4}, {0x2}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000048009125745c7388641f9c0e0a"], 0xfe33) 535.772162ms ago: executing program 0 (id=3561): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 367.634794ms ago: executing program 0 (id=3562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000000000eb17010000786c6c250000000007000000731af8ff00000000bfa100000000000007010000f8ffffffb700000000000080b7030000000000fd85ac00007300000518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='sys_exit\x00', r4, 0x0, 0x80000000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000000000eb17010000786c6c250000000007000000731af8ff00000000bfa100000000000007010000f8ffffffb700000000000080b7030000000000fd85ac00007300000518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='sys_exit\x00', r4, 0x0, 0x80000000}, 0x18) (async) 622.47µs ago: executing program 5 (id=3563): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000004000000000000000088e161a4bb0a78c3679805370085000000ba00000095"], &(0x7f0000000380)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x5, 0x800, 0x800, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100a60, 0xc78, 0x8000, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="170000e3040000000000000000000000080000001da772c8976d9c408e95453170175da9dcb21700a148684e6cd6b04ed2e3cb651c0b41873045932dc1508d4ce548aa7f27e747ac40d30b39cac7cff10da50bf4cc5875e93563b06c54f195c66966a77810a6611dd6c95d225a28b65cbcb8a7df1dc69491b4c3c0d1be1bde04c42efff4bc90aa080c1a352dd0617e9db476b40421dfa932630b6684c344cc8c94326660837d1627b83f1dc5432d1be9e7c90128a1db438e8d23e38e88dd96209333d02d0af33e20", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400"/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ff0100000000000004000000950000000000000709ce5469ea904ed354d1626db7a462b9beaaa14fe1391b79cad98cb7bfdded839e9b945c9127afd9832cb9bbbfb3a01e1b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfe92, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$ITER_CREATE(0xb, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r3 = socket$kcm(0x2c, 0x3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) close(r3) socket$kcm(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0424fc600b003540280008000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x480000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f00000002c0)}, 0x10) 327.56µs ago: executing program 3 (id=3564): r0 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000044010000ff"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) (fail_nth: 4) 0s ago: executing program 0 (id=3565): sendmsg$sock(0xffffffffffffffff, 0x0, 0x2c0) getpid() perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001340)={&(0x7f0000000b40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f00000000c0)}, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 0000000 R09: 0000000000000000 [ 888.017752][T13250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.025755][T13250] R13: 0000000000000000 R14: 00007f1c5ddb5fa0 R15: 00007fffc1abe628 [ 888.033773][T13250] [ 888.105934][T13250] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3049'. [ 888.533375][T13256] netlink: 'syz.4.3051': attribute type 8 has an invalid length. [ 888.591175][T13256] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3051'. [ 888.624190][T13119] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 888.684032][T13261] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3054'. [ 888.806863][T13119] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 888.835528][T13119] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 888.969783][T13119] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 889.374463][T13119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.566336][ T7573] bond0: (slave wlan1): Releasing backup interface [ 889.574513][ T4301] Bluetooth: hci3: command 0x0419 tx timeout [ 889.582099][ T7573] device wlan1 left promiscuous mode [ 889.623942][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 889.656061][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 889.696204][T13119] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.758654][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 889.784812][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 889.834574][ T7578] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.841725][ T7578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.874532][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 889.930953][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 890.155430][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 890.215315][ T7578] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.222528][ T7578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.654180][T13284] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3062'. [ 890.663620][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 890.695476][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 890.784724][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 890.852169][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 890.952157][T13119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 891.033908][T13119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 891.280696][T13294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3065'. [ 891.294704][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 891.313710][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 891.355266][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 891.391194][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 891.413224][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 891.435768][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 891.452072][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 891.461382][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 891.954132][ T7573] device hsr_slave_1 left promiscuous mode [ 891.965899][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.004131][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.027126][ T7573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.053979][ T7573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.085676][ T7573] bridge0: port 3(bond0) entered disabled state [ 892.104744][ T7573] device bridge_slave_1 left promiscuous mode [ 892.111085][ T7573] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.213801][ T7573] device bridge_slave_0 left promiscuous mode [ 892.242223][ T7573] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.324665][ T7573] device veth1_macvtap left promiscuous mode [ 892.331205][ T7573] device veth1_vlan left promiscuous mode [ 892.358565][ T7573] device veth0_vlan left promiscuous mode [ 893.243617][T13321] netlink: 'syz.4.3074': attribute type 8 has an invalid length. [ 893.263968][T13321] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3074'. [ 893.593490][ T7573] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 894.040235][T13328] netlink: 'syz.4.3076': attribute type 8 has an invalid length. [ 894.079473][T13328] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3076'. [ 894.442917][T13331] netlink: 'syz.4.3077': attribute type 3 has an invalid length. [ 894.471751][T13331] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3077'. [ 894.757454][ T7573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.873778][ T7573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.699212][ T7573] bond0 (unregistering): Released all slaves [ 895.824749][T13317] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3072'. [ 896.027817][T13334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3078'. [ 896.126497][T13339] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3080'. [ 896.318660][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 896.326736][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 896.363631][T13345] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3082'. [ 896.379484][T13119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.409268][T13345] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3082'. [ 896.530389][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 896.547574][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 896.730259][T13349] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3084'. [ 897.019504][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 897.045837][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 897.117106][T13119] device veth0_vlan entered promiscuous mode [ 897.139291][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 897.158727][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 897.291697][T13119] device veth1_vlan entered promiscuous mode [ 897.368659][T13362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3086'. [ 897.539993][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 897.559877][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 897.575753][T13119] device veth0_macvtap entered promiscuous mode [ 897.595484][T13119] device veth1_macvtap entered promiscuous mode [ 897.627258][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.638167][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.655479][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.681004][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.694187][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 897.711185][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.724900][T13119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.732921][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 897.749028][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 897.759425][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 897.772886][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 897.799895][T13119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 897.819040][T13119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 897.835147][T13119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.855583][T13119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.870689][T13119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.880532][T13119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.896009][T13119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.920153][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 897.937018][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 898.200257][ T7558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.232636][T13367] FAULT_INJECTION: forcing a failure. [ 898.232636][T13367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.254239][ T7558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.280734][ T7571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.282355][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 898.304916][T13367] CPU: 0 PID: 13367 Comm: syz.3.3089 Not tainted 6.1.140-syzkaller #0 [ 898.313127][T13367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 898.322540][ T7571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.323278][T13367] Call Trace: [ 898.323289][T13367] [ 898.336828][T13367] dump_stack_lvl+0x168/0x22e [ 898.341563][T13367] ? show_regs_print_info+0x12/0x12 [ 898.346899][T13367] ? load_image+0x3b0/0x3b0 [ 898.351471][T13367] ? __lock_acquire+0x7c50/0x7c50 [ 898.356627][T13367] should_fail_ex+0x399/0x4d0 [ 898.361342][T13367] _copy_from_user+0x2c/0x170 [ 898.366042][T13367] generic_map_update_batch+0x4c5/0x850 [ 898.371616][T13367] ? rcu_read_unlock+0xa0/0xa0 [ 898.376400][T13367] ? __fdget+0x17c/0x200 [ 898.380671][T13367] ? rcu_read_unlock+0xa0/0xa0 [ 898.385535][T13367] bpf_map_do_batch+0x466/0x600 [ 898.390418][T13367] __sys_bpf+0x65f/0x6d0 [ 898.394683][T13367] ? bpf_link_show_fdinfo+0x310/0x310 [ 898.400077][T13367] ? lock_chain_count+0x20/0x20 [ 898.404950][T13367] __x64_sys_bpf+0x78/0x90 [ 898.409382][T13367] do_syscall_64+0x4c/0xa0 [ 898.413820][T13367] ? clear_bhb_loop+0x60/0xb0 [ 898.418504][T13367] ? clear_bhb_loop+0x60/0xb0 [ 898.423189][T13367] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.429100][T13367] RIP: 0033:0x7f1e9498e969 [ 898.433518][T13367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.453154][T13367] RSP: 002b:00007f1e957db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 898.461574][T13367] RAX: ffffffffffffffda RBX: 00007f1e94bb5fa0 RCX: 00007f1e9498e969 [ 898.469573][T13367] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 898.477550][T13367] RBP: 00007f1e957db090 R08: 0000000000000000 R09: 0000000000000000 [ 898.485527][T13367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.493501][T13367] R13: 0000000000000000 R14: 00007f1e94bb5fa0 R15: 00007fffd6cbc398 [ 898.501489][T13367] [ 898.513724][T13369] netlink: 'syz.2.3090': attribute type 3 has an invalid length. [ 898.542596][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 898.543149][T13369] __nla_validate_parse: 1 callbacks suppressed [ 898.543182][T13369] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3090'. [ 898.657389][T13372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3092'. [ 899.652008][T13397] netlink: 'syz.1.3097': attribute type 8 has an invalid length. [ 899.683487][T13397] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3097'. [ 899.964030][ T4317] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 899.978105][ T4317] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 899.989718][T12724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 900.025453][T13401] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3098'. [ 900.036676][T12724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 900.116874][T12724] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 900.117053][T13407] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3099'. [ 900.148761][T12724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 900.445336][T13409] netlink: 'syz.1.3101': attribute type 8 has an invalid length. [ 901.967513][T13409] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3101'. [ 901.988667][T13411] netlink: 'syz.3.3102': attribute type 3 has an invalid length. [ 902.159215][T13411] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3102'. [ 902.233962][T12724] Bluetooth: hci1: command 0x0409 tx timeout [ 902.843970][T13407] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3099'. [ 902.997078][ T4374] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.049225][T13418] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3105'. [ 903.066364][T13415] bond_slave_1: mtu less than device minimum [ 903.149385][ T4374] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.292634][ T4374] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.481999][ T4374] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.815079][ T4374] device 0 left promiscuous mode [ 903.885269][ T4374] device 1 left promiscuous mode [ 903.944336][ T4374] device 2 left promiscuous mode [ 904.004160][ T4374] device 3 left promiscuous mode [ 904.066992][ T4374] device 4 left promiscuous mode [ 904.259976][T13442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3114'. [ 904.322346][T13440] netlink: 'syz.3.3112': attribute type 8 has an invalid length. [ 904.378766][T13440] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3112'. [ 904.467370][ T4301] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 904.477159][ T4301] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 904.508846][ T4301] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 904.517191][ T4301] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 904.529494][ T4301] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 904.546989][ T4301] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 904.632708][T12724] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 904.642467][T12724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 904.651064][ T4317] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 904.660013][ T4317] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 904.668044][ T4317] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 904.675599][ T4317] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 905.266803][T13450] netlink: 'syz.4.3115': attribute type 8 has an invalid length. [ 905.296762][T13450] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3115'. [ 905.463510][ T4374] device 5 left promiscuous mode [ 905.484068][T13442] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3114'. [ 905.569415][ T4374] device 6 left promiscuous mode [ 905.860891][T13457] netlink: 'syz.4.3117': attribute type 3 has an invalid length. [ 905.869464][T13455] netlink: 'syz.3.3125': attribute type 8 has an invalid length. [ 905.878254][T13457] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3117'. [ 905.901065][T13455] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3125'. [ 906.300604][T13446] chnl_net:caif_netlink_parms(): no params data found [ 906.511362][T13444] chnl_net:caif_netlink_parms(): no params data found [ 906.621549][ T4317] Bluetooth: hci1: command 0x0409 tx timeout [ 906.774315][ T4317] Bluetooth: hci2: command 0x0409 tx timeout [ 906.896106][T13446] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.903459][T13446] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.923081][T13446] device bridge_slave_0 entered promiscuous mode [ 906.971178][T13446] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.981982][T13446] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.000338][T13446] device bridge_slave_1 entered promiscuous mode [ 907.060492][T13444] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.070009][T13444] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.093153][T13444] device bridge_slave_0 entered promiscuous mode [ 907.164108][T13444] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.171354][T13444] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.182120][T13501] FAULT_INJECTION: forcing a failure. [ 907.182120][T13501] name failslab, interval 1, probability 0, space 0, times 0 [ 907.197413][T13501] CPU: 1 PID: 13501 Comm: syz.4.3128 Not tainted 6.1.140-syzkaller #0 [ 907.205620][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 907.215710][T13501] Call Trace: [ 907.217805][T13444] device bridge_slave_1 entered promiscuous mode [ 907.218999][T13501] [ 907.219012][T13501] dump_stack_lvl+0x168/0x22e [ 907.232984][T13501] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 907.236106][T13498] netlink: 'syz.3.3126': attribute type 8 has an invalid length. [ 907.239156][T13501] ? show_regs_print_info+0x12/0x12 [ 907.239193][T13501] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 907.239233][T13501] should_fail_ex+0x399/0x4d0 [ 907.239269][T13501] should_failslab+0x5/0x20 [ 907.239293][T13501] slab_pre_alloc_hook+0x59/0x310 [ 907.239326][T13501] kmem_cache_alloc+0x56/0x2f0 [ 907.277531][T13501] ? skb_clone+0x1e7/0x370 [ 907.282002][T13501] skb_clone+0x1e7/0x370 [ 907.286292][T13501] __netlink_deliver_tap+0x3ed/0x800 [ 907.291631][T13501] ? netlink_deliver_tap+0x2e/0x1b0 [ 907.296866][T13501] netlink_deliver_tap+0x19c/0x1b0 [ 907.302013][T13501] netlink_unicast+0x727/0x8c0 [ 907.306819][T13501] netlink_sendmsg+0x89e/0xbc0 [ 907.311632][T13501] ? netlink_getsockopt+0x540/0x540 [ 907.316861][T13501] ? aa_sock_msg_perm+0x94/0x150 [ 907.321811][T13501] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 907.327108][T13501] ? security_socket_sendmsg+0x7c/0xa0 [ 907.332590][T13501] ? netlink_getsockopt+0x540/0x540 [ 907.337819][T13501] ____sys_sendmsg+0x59b/0x970 [ 907.342649][T13501] ? __sys_sendmsg_sock+0x30/0x30 [ 907.347700][T13501] ? __import_iovec+0x315/0x500 [ 907.352576][T13501] ? import_iovec+0x6f/0xa0 [ 907.357113][T13501] ___sys_sendmsg+0x21c/0x290 [ 907.361811][T13501] ? __sys_sendmsg+0x270/0x270 [ 907.366609][T13501] ? __lock_acquire+0x7c50/0x7c50 [ 907.371663][T13501] ? __fdget+0x17c/0x200 [ 907.375924][T13501] __se_sys_sendmsg+0x19e/0x270 [ 907.380801][T13501] ? __x64_sys_sendmsg+0x80/0x80 [ 907.385834][T13501] ? lockdep_hardirqs_on+0x94/0x140 [ 907.391053][T13501] do_syscall_64+0x4c/0xa0 [ 907.395479][T13501] ? clear_bhb_loop+0x60/0xb0 [ 907.400183][T13501] ? clear_bhb_loop+0x60/0xb0 [ 907.404884][T13501] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 907.410828][T13501] RIP: 0033:0x7f9a0738e969 [ 907.415283][T13501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.434905][T13501] RSP: 002b:00007f9a0812c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.443333][T13501] RAX: ffffffffffffffda RBX: 00007f9a075b5fa0 RCX: 00007f9a0738e969 [ 907.451323][T13501] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 907.459298][T13501] RBP: 00007f9a0812c090 R08: 0000000000000000 R09: 0000000000000000 [ 907.467273][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.475248][T13501] R13: 0000000000000000 R14: 00007f9a075b5fa0 R15: 00007ffde4b50008 [ 907.483240][T13501] [ 907.523671][T13498] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3126'. [ 907.535891][T13501] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3128'. [ 907.614896][T13444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.639535][T13446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.728262][T13503] netlink: 'syz.0.3129': attribute type 8 has an invalid length. [ 907.739673][ T4374] bond0: (slave wlan1): Releasing backup interface [ 907.741529][T13503] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3129'. [ 907.757205][ T4374] device wlan1 left promiscuous mode [ 907.772364][T13444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.784220][T13446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.853715][T13444] team0: Port device team_slave_0 added [ 907.961475][T13446] team0: Port device team_slave_0 added [ 907.981946][T13444] team0: Port device team_slave_1 added [ 907.994333][T13508] netlink: 'syz.0.3130': attribute type 3 has an invalid length. [ 908.014150][T13446] team0: Port device team_slave_1 added [ 908.023409][T13508] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3130'. [ 908.099241][ T4374] device hsr_slave_0 left promiscuous mode [ 908.109609][ T4374] device hsr_slave_1 left promiscuous mode [ 908.477237][T13522] netlink: 'syz.3.3136': attribute type 8 has an invalid length. [ 908.693953][ T4317] Bluetooth: hci1: command 0x041b tx timeout [ 908.754730][ T4374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 908.801053][ T4374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 908.846724][ T4374] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 908.854336][ T4317] Bluetooth: hci2: command 0x041b tx timeout [ 909.136505][ T4374] bond0 (unregistering): Released all slaves [ 909.248677][T13444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.262729][T13444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.303046][T13444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.356720][T13444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.367245][T13444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.405608][T13527] netlink: 'syz.4.3138': attribute type 8 has an invalid length. [ 909.408334][T13444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.415357][T13527] __nla_validate_parse: 1 callbacks suppressed [ 909.415394][T13527] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3138'. [ 909.436932][T13446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.459558][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.493666][T13446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.585728][T13446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.592725][T13446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.650729][T13446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.729316][T13444] device hsr_slave_0 entered promiscuous mode [ 909.745041][T13444] device hsr_slave_1 entered promiscuous mode [ 909.850494][T13446] device hsr_slave_0 entered promiscuous mode [ 909.884217][T13446] device hsr_slave_1 entered promiscuous mode [ 909.900489][T13446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 909.914256][T13446] Cannot create hsr debugfs directory [ 910.212647][ T7562] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.382925][ T7562] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.456780][T13446] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 910.515773][ T7562] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.590090][T13446] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 910.772272][T13557] netlink: 'syz.4.3146': attribute type 8 has an invalid length. [ 910.783931][ T4317] Bluetooth: hci1: command 0x040f tx timeout [ 910.807420][ T7562] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 910.858564][T13557] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3146'. [ 910.885150][T13446] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 910.906580][T13446] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 910.933941][ T4301] Bluetooth: hci2: command 0x040f tx timeout [ 911.076313][ T7562] device 0 left promiscuous mode [ 911.137601][ T7562] device 1 left promiscuous mode [ 911.227807][ T7562] device 2 left promiscuous mode [ 911.272015][T13446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.292169][ T7562] device 3 left promiscuous mode [ 911.319515][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 911.360318][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 911.401364][ T7562] device 4 left promiscuous mode [ 911.421402][T13446] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.442120][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 911.458699][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 911.467631][ T7578] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.474848][ T7578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.487292][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 911.503514][ T7562] device 5 left promiscuous mode [ 911.521790][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 911.544790][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 911.568968][ T7573] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.576190][ T7573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.601700][ T7562] device 6 left promiscuous mode [ 911.625294][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 911.638452][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 911.668536][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 911.726883][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 911.767275][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 911.835456][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 911.865385][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 911.884934][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 911.910359][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 911.936297][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 911.974077][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 912.092550][T13590] FAULT_INJECTION: forcing a failure. [ 912.092550][T13590] name failslab, interval 1, probability 0, space 0, times 0 [ 912.155658][T13590] CPU: 0 PID: 13590 Comm: syz.3.3159 Not tainted 6.1.140-syzkaller #0 [ 912.163882][T13590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 912.173976][T13590] Call Trace: [ 912.177279][T13590] [ 912.180229][T13590] dump_stack_lvl+0x168/0x22e [ 912.184946][T13590] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 912.191144][T13590] ? show_regs_print_info+0x12/0x12 [ 912.196385][T13590] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 912.202576][T13590] ? dump_stack+0x5/0x12 [ 912.206854][T13590] ? dump_stack_lvl+0x1/0x22e [ 912.211577][T13590] should_fail_ex+0x399/0x4d0 [ 912.216291][T13590] should_failslab+0x5/0x20 [ 912.220849][T13590] slab_pre_alloc_hook+0x59/0x310 [ 912.225916][T13590] ? lockdep_hardirqs_on+0x94/0x140 [ 912.231148][T13590] kmem_cache_alloc+0x56/0x2f0 [ 912.236012][T13590] ? skb_clone+0x1e7/0x370 [ 912.240452][T13590] skb_clone+0x1e7/0x370 [ 912.244718][T13590] __netlink_deliver_tap+0x3ed/0x800 [ 912.250031][T13590] ? netlink_deliver_tap+0x2e/0x1b0 [ 912.255244][T13590] netlink_deliver_tap+0x19c/0x1b0 [ 912.260371][T13590] netlink_unicast+0x727/0x8c0 [ 912.265158][T13590] netlink_sendmsg+0x89e/0xbc0 [ 912.269942][T13590] ? lockdep_hardirqs_on+0x94/0x140 [ 912.275165][T13590] ? netlink_getsockopt+0x540/0x540 [ 912.280382][T13590] ? security_socket_sendmsg+0x56/0xa0 [ 912.285857][T13590] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 912.291153][T13590] ? security_socket_sendmsg+0x7c/0xa0 [ 912.296636][T13590] ? netlink_getsockopt+0x540/0x540 [ 912.301853][T13590] ____sys_sendmsg+0x59b/0x970 [ 912.306643][T13590] ? __sys_sendmsg_sock+0x30/0x30 [ 912.311686][T13590] ? __import_iovec+0x315/0x500 [ 912.316555][T13590] ? import_iovec+0x6f/0xa0 [ 912.321069][T13590] ___sys_sendmsg+0x21c/0x290 [ 912.325850][T13590] ? __sys_sendmsg+0x270/0x270 [ 912.330639][T13590] ? perf_trace_preemptirq_template+0xa0/0x330 [ 912.336821][T13590] ? irqentry_enter+0x33/0x50 [ 912.341542][T13590] __se_sys_sendmsg+0x19e/0x270 [ 912.346407][T13590] ? rcu_is_watching+0x11/0xa0 [ 912.351185][T13590] ? __x64_sys_sendmsg+0x80/0x80 [ 912.356158][T13590] do_syscall_64+0x4c/0xa0 [ 912.360586][T13590] ? clear_bhb_loop+0x60/0xb0 [ 912.365269][T13590] ? clear_bhb_loop+0x60/0xb0 [ 912.369960][T13590] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 912.375872][T13590] RIP: 0033:0x7f1e9498e969 [ 912.380295][T13590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.399940][T13590] RSP: 002b:00007f1e957db038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.408363][T13590] RAX: ffffffffffffffda RBX: 00007f1e94bb5fa0 RCX: 00007f1e9498e969 [ 912.416371][T13590] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 912.424435][T13590] RBP: 00007f1e957db090 R08: 0000000000000000 R09: 0000000000000000 [ 912.432412][T13590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.440409][T13590] R13: 0000000000000000 R14: 00007f1e94bb5fa0 R15: 00007fffd6cbc398 [ 912.448421][T13590] [ 912.712124][T13594] netlink: 'syz.0.3160': attribute type 8 has an invalid length. [ 912.726038][T13594] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3160'. [ 912.757183][T13446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 912.854543][ T4301] Bluetooth: hci1: command 0x0419 tx timeout [ 912.868178][T13590] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3159'. [ 913.004406][T13601] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3161'. [ 913.014500][ T4317] Bluetooth: hci2: command 0x0419 tx timeout [ 913.059146][T13444] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 913.147720][T13444] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 913.177928][T13607] netlink: 'syz.4.3162': attribute type 10 has an invalid length. [ 913.236925][T13607] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.246210][T13607] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.359441][T13444] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 913.388755][T13444] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 913.680974][T13615] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3166'. [ 913.805640][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 913.813209][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 913.888766][T13446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 913.984281][T13630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3169'. [ 914.853089][T13630] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3169'. [ 914.917401][T13444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.967158][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 914.980355][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 915.002999][T13444] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.041822][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 915.062638][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 915.112032][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.119263][ T4374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.310911][ T7562] bond0: (slave wlan1): Releasing backup interface [ 915.395431][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 915.413212][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 915.444777][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 915.472362][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.479627][ T4374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.534005][T13642] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3172'. [ 915.648125][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 915.862560][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 915.892546][T13657] netlink: 'syz.3.3176': attribute type 10 has an invalid length. [ 915.926918][T13657] bridge0: port 6(team0) entered blocking state [ 915.933940][T13657] bridge0: port 6(team0) entered forwarding state [ 915.941749][T13657] bridge0: port 5(bond0) entered blocking state [ 915.948663][T13657] bridge0: port 5(bond0) entered forwarding state [ 915.956615][T13657] bridge0: port 4(batadv_slave_1) entered blocking state [ 915.964650][T13657] bridge0: port 4(batadv_slave_1) entered forwarding state [ 915.973263][T13657] bridge0: port 3(batadv0) entered blocking state [ 915.980421][T13657] bridge0: port 3(batadv0) entered forwarding state [ 915.988398][T13657] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.992649][T13659] sock: sock_set_timeout: `syz.0.3177' (pid 13659) tries to set negative timeout [ 915.996792][T13657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.040134][T13657] bridge0: port 6(team0) entered disabled state [ 916.047803][T13657] bridge0: port 5(bond0) entered disabled state [ 916.055750][T13657] bridge0: port 4(batadv_slave_1) entered disabled state [ 916.063979][T13657] bridge0: port 3(batadv0) entered disabled state [ 916.071975][T13657] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.179677][ T7562] device hsr_slave_0 left promiscuous mode [ 916.186308][ T7562] device hsr_slave_1 left promiscuous mode [ 916.192969][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.202695][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.231823][ T7562] device bridge_slave_1 left promiscuous mode [ 916.242385][T13662] netlink: 'syz.4.3178': attribute type 3 has an invalid length. [ 916.244035][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.274106][T13662] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3178'. [ 916.300801][ T7562] device bridge_slave_0 left promiscuous mode [ 916.311073][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.373645][ T7562] device veth1_vlan left promiscuous mode [ 916.382988][ T7562] device veth0_vlan left promiscuous mode [ 916.514838][T13668] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3180'. [ 917.001161][ T7562] device geneve1 left promiscuous mode [ 917.012656][ T7562] team0 (unregistering): Port device geneve1 removed [ 917.116474][ T7562] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 917.526760][ T7562] device team_slave_1 left promiscuous mode [ 917.533759][ T7562] team0 (unregistering): Port device team_slave_1 removed [ 917.580948][ T7562] device team_slave_0 left promiscuous mode [ 917.589608][ T7562] team0 (unregistering): Port device team_slave_0 removed [ 917.628287][ T7562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 917.672513][ T7562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.087433][ T7562] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 918.096591][ T7562] bond0 (unregistering): Released all slaves [ 918.190797][T13668] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3180'. [ 918.215342][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 918.224726][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 918.262476][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 918.298762][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 918.309854][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 918.352791][T13446] device veth0_vlan entered promiscuous mode [ 918.370828][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 918.415589][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 918.435754][T13680] netlink: 'syz.0.3191': attribute type 3 has an invalid length. [ 918.443768][T13680] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3191'. [ 918.445419][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 918.482537][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 918.495337][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 918.504460][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 918.519286][T13444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 918.555098][T13444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 918.564095][T13683] netlink: 'syz.3.3184': attribute type 10 has an invalid length. [ 918.591225][T13683] bridge0: port 6(team0) entered blocking state [ 918.598532][T13683] bridge0: port 6(team0) entered forwarding state [ 918.606597][T13683] bridge0: port 5(bond0) entered blocking state [ 918.613569][T13683] bridge0: port 5(bond0) entered forwarding state [ 918.621510][T13683] bridge0: port 4(batadv_slave_1) entered blocking state [ 918.629556][T13683] bridge0: port 4(batadv_slave_1) entered forwarding state [ 918.638309][T13683] bridge0: port 3(batadv0) entered blocking state [ 918.645798][T13683] bridge0: port 3(batadv0) entered forwarding state [ 918.653871][T13683] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.662072][T13683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.759400][T13683] bridge0: port 6(team0) entered disabled state [ 918.767067][T13683] bridge0: port 5(bond0) entered disabled state [ 918.774392][T13683] bridge0: port 4(batadv_slave_1) entered disabled state [ 918.782603][T13683] bridge0: port 3(batadv0) entered disabled state [ 918.790116][T13683] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.859597][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 918.869253][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 918.877547][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 918.898679][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 918.961798][T13446] device veth1_vlan entered promiscuous mode [ 919.020485][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 919.086374][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 919.109657][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 919.129364][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 919.153757][T13446] device veth0_macvtap entered promiscuous mode [ 919.185195][T13446] device veth1_macvtap entered promiscuous mode [ 919.197761][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 919.235325][ T7578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 919.271884][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.293921][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.343973][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.370570][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.418540][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 919.439404][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.486134][T13446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 919.552222][T13693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3188'. [ 919.587701][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 919.641729][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 919.692708][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.741325][T13701] netlink: 'syz.0.3190': attribute type 8 has an invalid length. [ 919.762998][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.780468][T13701] netlink: 463 bytes leftover after parsing attributes in process `syz.0.3190'. [ 919.789517][T13446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 919.829003][T13446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 919.877110][T13446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 919.922231][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 919.959772][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 920.013723][T13446] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.034294][T13446] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.043050][T13446] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.052309][T13446] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.121500][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 920.146713][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 920.176168][T13444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.193528][T13713] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3193'. [ 920.685291][T13713] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3193'. [ 920.711283][T13714] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3194'. [ 920.788290][T13718] netlink: 'syz.0.3196': attribute type 3 has an invalid length. [ 920.797798][T13718] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3196'. [ 920.845867][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 920.863206][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 920.899575][T13444] device veth0_vlan entered promiscuous mode [ 920.931353][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 920.946371][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 920.987900][ T7573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 920.996186][T13444] device veth1_vlan entered promiscuous mode [ 920.998775][ T7573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.035024][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 921.043231][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 921.062616][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 921.080688][ T7569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 921.095491][T13721] netlink: 'syz.4.3197': attribute type 10 has an invalid length. [ 921.147027][T13724] netlink: 'syz.0.3199': attribute type 10 has an invalid length. [ 921.171898][T13724] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.181760][T13724] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.262120][T13724] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.269909][T13724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.278570][T13724] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.286380][T13724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 921.325449][T13724] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 921.362648][T13729] netlink: 'syz.4.3201': attribute type 10 has an invalid length. [ 921.371778][ T7569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.382317][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 921.383079][ T7569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.391959][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 921.406508][T13726] delete_channel: no stack [ 921.424889][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 921.444580][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 921.477532][T13444] device veth0_macvtap entered promiscuous mode [ 921.502164][T13444] device veth1_macvtap entered promiscuous mode [ 921.580791][T13444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.611038][T13444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.631471][T13444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.672595][T13444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.713998][T13444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.764143][T13444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.809633][T13444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 921.826506][T13733] netlink: 'syz.4.3203': attribute type 8 has an invalid length. [ 921.857324][T13738] netlink: 'syz.5.3111': attribute type 8 has an invalid length. [ 921.874840][T13444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.886305][T13733] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3203'. [ 921.916981][T13444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 921.936518][T13738] netlink: 399 bytes leftover after parsing attributes in process `syz.5.3111'. [ 921.951118][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 921.961563][T13743] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3206'. [ 921.997948][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 922.022252][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 922.049830][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 922.082000][T13444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.093424][T13444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.114446][T13444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.129795][T13444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.152133][T13444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 922.162906][T13444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 922.175348][T13444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.194683][T13444] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.224024][T13444] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.240681][T13444] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.259702][T13444] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.271412][T13752] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3208'. [ 922.310580][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 922.330373][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 922.381934][T13749] netlink: 'syz.5.3207': attribute type 10 has an invalid length. [ 922.395381][T13754] netlink: 'syz.4.3209': attribute type 3 has an invalid length. [ 922.412891][T13754] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3209'. [ 922.823469][T13749] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.832108][T13749] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.890012][T13749] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.897774][T13749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.906259][T13749] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.913582][T13749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.933327][T13749] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 922.943567][T13752] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3208'. [ 923.093287][ T7558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.120154][ T7558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.156553][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 923.180492][ T7558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 923.200773][ T7558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.251771][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 923.290175][T13761] netlink: 'syz.3.3211': attribute type 10 has an invalid length. [ 923.356708][T13761] bridge0: port 6(team0) entered blocking state [ 923.363633][T13761] bridge0: port 6(team0) entered forwarding state [ 923.371363][T13761] bridge0: port 5(bond0) entered blocking state [ 923.378405][T13761] bridge0: port 5(bond0) entered forwarding state [ 923.386255][T13761] bridge0: port 4(batadv_slave_1) entered blocking state [ 923.394318][T13761] bridge0: port 4(batadv_slave_1) entered forwarding state [ 923.402982][T13761] bridge0: port 3(batadv0) entered blocking state [ 923.410399][T13761] bridge0: port 3(batadv0) entered forwarding state [ 923.418664][T13761] bridge0: port 1(bridge_slave_0) entered blocking state [ 923.426915][T13761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.515891][T13769] FAULT_INJECTION: forcing a failure. [ 923.515891][T13769] name failslab, interval 1, probability 0, space 0, times 0 [ 923.544068][T13769] CPU: 1 PID: 13769 Comm: syz.4.3213 Not tainted 6.1.140-syzkaller #0 [ 923.552300][T13769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 923.562402][T13769] Call Trace: [ 923.565718][T13769] [ 923.568682][T13769] dump_stack_lvl+0x168/0x22e [ 923.573421][T13769] ? show_regs_print_info+0x12/0x12 [ 923.578676][T13769] ? load_image+0x3b0/0x3b0 [ 923.583230][T13769] ? __might_sleep+0xd0/0xd0 [ 923.587877][T13769] ? __lock_acquire+0x7c50/0x7c50 [ 923.592962][T13769] should_fail_ex+0x399/0x4d0 [ 923.597695][T13769] should_failslab+0x5/0x20 [ 923.602240][T13769] slab_pre_alloc_hook+0x59/0x310 [ 923.607316][T13769] kmem_cache_alloc_node+0x5a/0x320 [ 923.612561][T13769] ? __alloc_skb+0xfc/0x7e0 [ 923.617123][T13769] __alloc_skb+0xfc/0x7e0 [ 923.621678][T13769] ? netlink_autobind+0xda/0x300 [ 923.626682][T13769] netlink_sendmsg+0x645/0xbc0 [ 923.631525][T13769] ? netlink_getsockopt+0x540/0x540 [ 923.636781][T13769] ? aa_sock_msg_perm+0x94/0x150 [ 923.641773][T13769] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 923.647100][T13769] ? security_socket_sendmsg+0x7c/0xa0 [ 923.652588][T13769] ? netlink_getsockopt+0x540/0x540 [ 923.657812][T13769] ____sys_sendmsg+0x59b/0x970 [ 923.662615][T13769] ? __sys_sendmsg_sock+0x30/0x30 [ 923.667665][T13769] ? __import_iovec+0x315/0x500 [ 923.672549][T13769] ? import_iovec+0x6f/0xa0 [ 923.677080][T13769] ___sys_sendmsg+0x21c/0x290 [ 923.681789][T13769] ? __sys_sendmsg+0x270/0x270 [ 923.686608][T13769] ? __lock_acquire+0x7c50/0x7c50 [ 923.691680][T13769] ? __fdget+0x17c/0x200 [ 923.695952][T13769] __se_sys_sendmsg+0x19e/0x270 [ 923.700842][T13769] ? __x64_sys_sendmsg+0x80/0x80 [ 923.705831][T13769] ? lockdep_hardirqs_on+0x94/0x140 [ 923.711060][T13769] do_syscall_64+0x4c/0xa0 [ 923.715493][T13769] ? clear_bhb_loop+0x60/0xb0 [ 923.720183][T13769] ? clear_bhb_loop+0x60/0xb0 [ 923.724874][T13769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 923.730791][T13769] RIP: 0033:0x7f9a0738e969 [ 923.735225][T13769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.754870][T13769] RSP: 002b:00007f9a0812c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.763395][T13769] RAX: ffffffffffffffda RBX: 00007f9a075b5fa0 RCX: 00007f9a0738e969 [ 923.771467][T13769] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 923.779449][T13769] RBP: 00007f9a0812c090 R08: 0000000000000000 R09: 0000000000000000 [ 923.787436][T13769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.795525][T13769] R13: 0000000000000000 R14: 00007f9a075b5fa0 R15: 00007ffde4b50008 [ 923.803532][T13769] [ 923.882464][T13761] bridge0: port 6(team0) entered disabled state [ 923.891024][T13761] bridge0: port 5(bond0) entered disabled state [ 923.898589][T13761] bridge0: port 4(batadv_slave_1) entered disabled state [ 923.907159][T13761] bridge0: port 3(batadv0) entered disabled state [ 923.914761][T13761] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.123281][T13763] netlink: 'syz.5.3212': attribute type 10 has an invalid length. [ 924.163552][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.170882][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.443363][T13778] netlink: 'syz.4.3220': attribute type 3 has an invalid length. [ 925.349259][ T4317] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 925.391119][ T4317] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 925.454036][ T4317] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 925.463197][ T4317] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 925.472611][T12724] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 925.480246][ T4317] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 925.775309][T13790] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 925.848058][T13802] __nla_validate_parse: 4 callbacks suppressed [ 925.848078][T13802] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3226'. [ 926.237935][ T7562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 926.279987][T13812] validate_nla: 2 callbacks suppressed [ 926.280023][T13812] netlink: 'syz.1.3229': attribute type 10 has an invalid length. [ 926.326973][T13812] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.336709][T13812] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.455775][T13820] netlink: 'syz.4.3232': attribute type 8 has an invalid length. [ 926.481035][T13820] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3232'. [ 926.500607][T13812] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.508613][T13812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.517675][T13812] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.525430][T13812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.603180][T13812] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 927.355424][T13838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3236'. [ 927.423013][ T7562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 927.501761][ T4317] Bluetooth: hci4: command 0x0409 tx timeout [ 928.091659][T13838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3236'. [ 928.121077][T13797] chnl_net:caif_netlink_parms(): no params data found [ 928.121504][T13844] FAULT_INJECTION: forcing a failure. [ 928.121504][T13844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.188810][ T7562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.257360][T13844] CPU: 1 PID: 13844 Comm: syz.0.3238 Not tainted 6.1.140-syzkaller #0 [ 928.265577][T13844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 928.275642][T13844] Call Trace: [ 928.278944][T13844] [ 928.281881][T13844] dump_stack_lvl+0x168/0x22e [ 928.286575][T13844] ? show_regs_print_info+0x12/0x12 [ 928.291785][T13844] ? load_image+0x3b0/0x3b0 [ 928.296297][T13844] ? __lock_acquire+0x7c50/0x7c50 [ 928.301338][T13844] should_fail_ex+0x399/0x4d0 [ 928.306043][T13844] _copy_from_user+0x2c/0x170 [ 928.310749][T13844] kstrtouint_from_user+0xbe/0x150 [ 928.315892][T13844] ? kstrtol_from_user+0x150/0x150 [ 928.321041][T13844] proc_fail_nth_write+0x85/0x1f0 [ 928.326096][T13844] ? proc_fail_nth_read+0x210/0x210 [ 928.331310][T13844] ? common_file_perm+0x171/0x1c0 [ 928.336407][T13844] ? proc_fail_nth_read+0x210/0x210 [ 928.341621][T13844] vfs_write+0x2c4/0x960 [ 928.345881][T13844] ? file_end_write+0x250/0x250 [ 928.350738][T13844] ? __fget_files+0x28/0x4d0 [ 928.355342][T13844] ? __fget_files+0x44a/0x4d0 [ 928.360041][T13844] ? __fdget_pos+0x2ae/0x360 [ 928.364644][T13844] ? ksys_write+0x71/0x240 [ 928.369072][T13844] ksys_write+0x143/0x240 [ 928.373411][T13844] ? __ia32_sys_read+0x80/0x80 [ 928.378184][T13844] ? lockdep_hardirqs_on+0x94/0x140 [ 928.383410][T13844] do_syscall_64+0x4c/0xa0 [ 928.387857][T13844] ? clear_bhb_loop+0x60/0xb0 [ 928.392540][T13844] ? clear_bhb_loop+0x60/0xb0 [ 928.397232][T13844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.403153][T13844] RIP: 0033:0x7fee4ff8d41f [ 928.407576][T13844] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 928.427189][T13844] RSP: 002b:00007fee50eb5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 928.435611][T13844] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fee4ff8d41f [ 928.443588][T13844] RDX: 0000000000000001 RSI: 00007fee50eb50a0 RDI: 0000000000000005 [ 928.451564][T13844] RBP: 00007fee50eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 928.459540][T13844] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 928.467516][T13844] R13: 0000000000000000 R14: 00007fee501b5fa0 R15: 00007ffd59af73f8 [ 928.475506][T13844] [ 928.627240][T13849] netlink: 'syz.4.3239': attribute type 10 has an invalid length. [ 928.692412][T13856] netlink: 'syz.5.3240': attribute type 8 has an invalid length. [ 928.706203][T13856] netlink: 399 bytes leftover after parsing attributes in process `syz.5.3240'. [ 928.876469][T13797] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.911664][T13797] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.921040][T13797] device bridge_slave_0 entered promiscuous mode [ 928.961427][T13797] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.010503][T13797] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.041807][T13797] device bridge_slave_1 entered promiscuous mode [ 929.211786][T13863] netlink: 'syz.0.3243': attribute type 10 has an invalid length. [ 929.225593][T13863] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.234193][T13863] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.364857][T13865] netlink: 'syz.1.3245': attribute type 8 has an invalid length. [ 929.395860][ T7562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.402727][T13865] netlink: 463 bytes leftover after parsing attributes in process `syz.1.3245'. [ 929.462705][T13868] netlink: 'syz.4.3246': attribute type 10 has an invalid length. [ 929.509811][T13869] netlink: 'syz.5.3247': attribute type 8 has an invalid length. [ 929.544008][T13869] netlink: 399 bytes leftover after parsing attributes in process `syz.5.3247'. [ 929.574262][ T4301] Bluetooth: hci4: command 0x041b tx timeout [ 929.630573][T13797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.676745][T13797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.848749][T13881] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3250'. [ 929.899112][T13877] netlink: 'syz.0.3248': attribute type 8 has an invalid length. [ 929.921591][T13877] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3248'. [ 930.406584][T13888] FAULT_INJECTION: forcing a failure. [ 930.406584][T13888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 930.498384][T13888] CPU: 0 PID: 13888 Comm: syz.0.3253 Not tainted 6.1.140-syzkaller #0 [ 930.506610][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 930.516692][T13888] Call Trace: [ 930.519995][T13888] [ 930.522945][T13888] dump_stack_lvl+0x168/0x22e [ 930.527668][T13888] ? show_regs_print_info+0x12/0x12 [ 930.532911][T13888] ? load_image+0x3b0/0x3b0 [ 930.537454][T13888] ? __lock_acquire+0x7c50/0x7c50 [ 930.542534][T13888] should_fail_ex+0x399/0x4d0 [ 930.547246][T13888] _copy_from_user+0x2c/0x170 [ 930.551962][T13888] iovec_from_user+0x143/0x360 [ 930.556760][T13888] __import_iovec+0x6d/0x500 [ 930.561401][T13888] ? __might_fault+0xa6/0x120 [ 930.566123][T13888] import_iovec+0x6f/0xa0 [ 930.570518][T13888] ___sys_sendmsg+0x1e4/0x290 [ 930.575242][T13888] ? __sys_sendmsg+0x270/0x270 [ 930.580078][T13888] ? __lock_acquire+0x7c50/0x7c50 [ 930.585176][T13888] ? __fdget+0x17c/0x200 [ 930.589477][T13888] __se_sys_sendmsg+0x19e/0x270 [ 930.594383][T13888] ? __x64_sys_sendmsg+0x80/0x80 [ 930.599358][T13888] ? lockdep_hardirqs_on+0x94/0x140 [ 930.604579][T13888] do_syscall_64+0x4c/0xa0 [ 930.609011][T13888] ? clear_bhb_loop+0x60/0xb0 [ 930.613698][T13888] ? clear_bhb_loop+0x60/0xb0 [ 930.618473][T13888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 930.624395][T13888] RIP: 0033:0x7fee4ff8e969 [ 930.628817][T13888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.648439][T13888] RSP: 002b:00007fee50e94038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.656871][T13888] RAX: ffffffffffffffda RBX: 00007fee501b6080 RCX: 00007fee4ff8e969 [ 930.664938][T13888] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 930.672923][T13888] RBP: 00007fee50e94090 R08: 0000000000000000 R09: 0000000000000000 [ 930.680922][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.688900][T13888] R13: 0000000000000000 R14: 00007fee501b6080 R15: 00007ffd59af73f8 [ 930.696896][T13888] [ 930.855514][T13797] team0: Port device team_slave_0 added [ 930.870978][T13881] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3250'. [ 930.900524][T13885] netlink: 'syz.5.3252': attribute type 19 has an invalid length. [ 930.962305][T13885] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3252'. [ 931.018413][T13797] team0: Port device team_slave_1 added [ 931.039287][ T7562] device 0 left promiscuous mode [ 931.080462][T13892] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3254'. [ 931.141782][ T7562] device 1 left promiscuous mode [ 931.217314][T13797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.237477][T13797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.344269][T13797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 931.355307][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.361704][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.374937][ T7562] device 2 left promiscuous mode [ 931.496554][T13900] netlink: 'syz.1.3256': attribute type 8 has an invalid length. [ 931.548616][T13900] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3256'. [ 931.653944][ T4301] Bluetooth: hci4: command 0x040f tx timeout [ 931.687023][T13797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 931.713170][T13797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 931.803871][T13797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 931.846373][T13903] netlink: 'syz.0.3258': attribute type 10 has an invalid length. [ 931.866821][T13907] netlink: 'syz.5.3259': attribute type 10 has an invalid length. [ 931.890237][ T7562] device 3 left promiscuous mode [ 931.969701][T13797] device hsr_slave_0 entered promiscuous mode [ 932.004600][T13797] device hsr_slave_1 entered promiscuous mode [ 932.017173][T13797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 932.043915][T13797] Cannot create hsr debugfs directory [ 932.049638][ T7562] device 4 left promiscuous mode [ 932.164372][ T7562] device 5 left promiscuous mode [ 932.218091][T13913] netlink: 'syz.4.3262': attribute type 8 has an invalid length. [ 932.235848][T13913] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3262'. [ 932.243695][ T7562] device 6 left promiscuous mode [ 932.434053][ T7562] device 7 left promiscuous mode [ 932.531228][T13912] netlink: 'syz.0.3260': attribute type 8 has an invalid length. [ 932.539926][T13912] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3260'. [ 932.571476][ T7562] device 8 left promiscuous mode [ 933.738048][ T4301] Bluetooth: hci4: command 0x0419 tx timeout [ 934.705133][ T7562] device 9 left promiscuous mode [ 934.754474][ T7562] device 10 left promiscuous mode [ 934.814290][ T7562] device 11 left promiscuous mode [ 934.925835][T13924] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3264'. [ 934.948313][T13924] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3264'. [ 935.586573][T13930] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3267'. [ 935.652957][T13932] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3268'. [ 935.758510][T13797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 935.839953][T13797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 935.851147][T13935] netlink: 'syz.5.3269': attribute type 10 has an invalid length. [ 935.875147][T13797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 935.914725][T13797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 935.972054][T13940] netlink: 'syz.0.3271': attribute type 10 has an invalid length. [ 936.047814][T13944] netlink: 'syz.1.3274': attribute type 3 has an invalid length. [ 936.073240][T13938] netlink: 'syz.4.3270': attribute type 8 has an invalid length. [ 936.083178][T13938] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3270'. [ 936.093950][T13944] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3274'. [ 936.208091][T13946] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3273'. [ 936.389810][T13797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.505400][T13952] netlink: 'syz.0.3284': attribute type 3 has an invalid length. [ 936.560908][T13953] netlink: 'syz.1.3276': attribute type 8 has an invalid length. [ 936.578455][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 936.585878][T13952] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3284'. [ 936.614933][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 936.618111][T13953] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3276'. [ 936.653007][T13797] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.751278][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 936.771744][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 936.834688][ T7571] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.836860][T13956] netlink: 'syz.4.3275': attribute type 8 has an invalid length. [ 936.841828][ T7571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.909339][T13956] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3275'. [ 937.041850][T13969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3278'. [ 937.107836][T13972] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3281'. [ 937.600120][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 937.626039][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 937.644707][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 937.653436][ T7571] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.660626][ T7571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.673097][T13969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3278'. [ 937.688947][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 937.792467][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 937.802589][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 937.819194][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 937.841295][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 937.898291][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 937.918301][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 937.947926][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 937.970811][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 938.036668][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 938.049030][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 938.060532][T13797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 938.112397][T13981] netlink: 'syz.1.3285': attribute type 8 has an invalid length. [ 938.171655][T13981] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3285'. [ 939.052777][T14002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.074078][T14002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.115292][T14002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.122885][T14002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.648667][T14016] FAULT_INJECTION: forcing a failure. [ 939.648667][T14016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.702184][T14016] CPU: 1 PID: 14016 Comm: syz.0.3296 Not tainted 6.1.140-syzkaller #0 [ 939.710411][T14016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 939.720510][T14016] Call Trace: [ 939.723824][T14016] [ 939.726784][T14016] dump_stack_lvl+0x168/0x22e [ 939.731512][T14016] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 939.737702][T14016] ? show_regs_print_info+0x12/0x12 [ 939.742936][T14016] ? load_image+0x3b0/0x3b0 [ 939.747484][T14016] should_fail_ex+0x399/0x4d0 [ 939.752196][T14016] copyin+0x1b/0x120 [ 939.756120][T14016] _copy_from_iter+0x45a/0x10c0 [ 939.761017][T14016] ? copyout_mc+0x110/0x110 [ 939.765554][T14016] ? __check_object_size+0x2ca/0xa40 [ 939.770874][T14016] ? __check_heap_object+0x1/0xf0 [ 939.775932][T14016] ? __check_object_size+0x500/0xa40 [ 939.781250][T14016] skb_copy_datagram_from_iter+0xef/0x690 [ 939.787008][T14016] ? skb_put+0x117/0x210 [ 939.791290][T14016] packet_sendmsg+0x37aa/0x4e70 [ 939.796165][T14016] ? lockdep_hardirqs_on+0x94/0x140 [ 939.801428][T14016] ? perf_trace_preemptirq_template+0xa0/0x330 [ 939.807623][T14016] ? perf_trace_preemptirq_template+0xa0/0x330 [ 939.813822][T14016] ? irqentry_enter+0x33/0x50 [ 939.818535][T14016] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 939.824555][T14016] ? lock_chain_count+0x20/0x20 [ 939.829453][T14016] ? packet_getsockopt+0x950/0x950 [ 939.834631][T14016] ? lockdep_hardirqs_on+0x94/0x140 [ 939.839974][T14016] ? packet_getsockopt+0x950/0x950 [ 939.845111][T14016] ____sys_sendmsg+0x59b/0x970 [ 939.849915][T14016] ? rcu_is_watching+0x11/0xa0 [ 939.854727][T14016] ? __sys_sendmsg_sock+0x30/0x30 [ 939.859817][T14016] ? ___sys_sendmsg+0x202/0x290 [ 939.864736][T14016] ___sys_sendmsg+0x21c/0x290 [ 939.869469][T14016] ? __sys_sendmsg+0x270/0x270 [ 939.874298][T14016] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 939.880589][T14016] ? __fdget+0x17c/0x200 [ 939.884882][T14016] __se_sys_sendmsg+0x19e/0x270 [ 939.889790][T14016] ? rcu_is_watching+0x11/0xa0 [ 939.894603][T14016] ? __x64_sys_sendmsg+0x80/0x80 [ 939.899616][T14016] do_syscall_64+0x4c/0xa0 [ 939.904091][T14016] ? clear_bhb_loop+0x60/0xb0 [ 939.908802][T14016] ? clear_bhb_loop+0x60/0xb0 [ 939.913510][T14016] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.919451][T14016] RIP: 0033:0x7fee4ff8e969 [ 939.923896][T14016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.943541][T14016] RSP: 002b:00007fee50eb5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 939.952000][T14016] RAX: ffffffffffffffda RBX: 00007fee501b5fa0 RCX: 00007fee4ff8e969 [ 939.960005][T14016] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 0000000000000007 [ 939.968007][T14016] RBP: 00007fee50eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 939.976009][T14016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.984012][T14016] R13: 0000000000000000 R14: 00007fee501b5fa0 R15: 00007ffd59af73f8 [ 939.992033][T14016] [ 940.240096][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 940.268608][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 940.313592][T13797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.379276][ T7562] device hsr_slave_0 left promiscuous mode [ 940.388158][ T7562] device hsr_slave_1 left promiscuous mode [ 940.400422][ T7562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.417803][ T7562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.429682][ T7562] bridge0: port 6(team0) entered disabled state [ 940.441149][ T7562] bridge0: port 5(bond0) entered disabled state [ 940.494637][ T7562] bridge0: port 4(batadv_slave_1) entered disabled state [ 940.516300][ T7562] bridge0: port 3(batadv0) entered disabled state [ 940.523010][T14027] netlink: 'syz.5.3299': attribute type 8 has an invalid length. [ 940.542557][ T7562] device bridge_slave_1 left promiscuous mode [ 940.566604][ T7562] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.579417][ T7562] device bridge_slave_0 left promiscuous mode [ 940.591667][ T7562] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.641922][ T7562] device veth1_macvtap left promiscuous mode [ 940.652666][ T7562] device veth1_vlan left promiscuous mode [ 940.661288][ T7562] device veth0_vlan left promiscuous mode [ 941.231317][ T7562] device team_slave_1 left promiscuous mode [ 941.240043][ T7562] team0 (unregistering): Port device team_slave_1 removed [ 941.284965][ T7562] device team_slave_0 left promiscuous mode [ 941.292379][ T7562] team0 (unregistering): Port device team_slave_0 removed [ 941.337194][ T7562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.382306][ T7562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.928575][ T7562] bond0 (unregistering): Released all slaves [ 942.064265][T14025] netlink: 'syz.0.3298': attribute type 10 has an invalid length. [ 942.072223][T14023] netlink: 'syz.1.3297': attribute type 10 has an invalid length. [ 942.104111][T14023] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.111418][T14023] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.143658][T14031] __nla_validate_parse: 8 callbacks suppressed [ 942.143679][T14031] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3300'. [ 942.270665][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 942.295196][ T7558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 942.347471][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 942.393629][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 942.452039][T13797] device veth0_vlan entered promiscuous mode [ 942.521503][T14049] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3302'. [ 942.564612][T14046] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3303'. [ 942.598824][T14050] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3311'. [ 942.646517][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 942.668541][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 942.728434][T14043] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3311'. [ 942.794203][T14057] netlink: 'syz.4.3304': attribute type 19 has an invalid length. [ 942.864198][T14057] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3304'. [ 942.890430][T13797] device veth1_vlan entered promiscuous mode [ 943.011025][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 943.036055][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 943.079265][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 943.120573][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 943.153792][T13797] device veth0_macvtap entered promiscuous mode [ 943.196015][T13797] device veth1_macvtap entered promiscuous mode [ 943.219112][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 943.237927][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 943.283273][T14068] FAULT_INJECTION: forcing a failure. [ 943.283273][T14068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.294871][T13797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.302146][T14068] CPU: 0 PID: 14068 Comm: syz.5.3307 Not tainted 6.1.140-syzkaller #0 [ 943.314935][T14068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 943.321825][T13797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.324999][T14068] Call Trace: [ 943.325011][T14068] [ 943.325020][T14068] dump_stack_lvl+0x168/0x22e [ 943.325060][T14068] ? show_regs_print_info+0x12/0x12 [ 943.350995][T14068] ? load_image+0x3b0/0x3b0 [ 943.355539][T14068] ? __lock_acquire+0x7c50/0x7c50 [ 943.360611][T14068] should_fail_ex+0x399/0x4d0 [ 943.365112][T13797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.365306][T14068] _copy_from_user+0x2c/0x170 [ 943.380416][T14068] iovec_from_user+0x143/0x360 [ 943.385390][T14068] __import_iovec+0x6d/0x500 [ 943.390099][T14068] ? __might_fault+0xa6/0x120 [ 943.394814][T14068] import_iovec+0x6f/0xa0 [ 943.399179][T14068] ___sys_sendmsg+0x1e4/0x290 [ 943.402147][T13797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.403881][T14068] ? __sys_sendmsg+0x270/0x270 [ 943.403938][T14068] ? __lock_acquire+0x7c50/0x7c50 [ 943.403986][T14068] ? __fdget+0x17c/0x200 [ 943.404022][T14068] __se_sys_sendmsg+0x19e/0x270 [ 943.404057][T14068] ? __x64_sys_sendmsg+0x80/0x80 [ 943.404106][T14068] ? lockdep_hardirqs_on+0x94/0x140 [ 943.404145][T14068] do_syscall_64+0x4c/0xa0 [ 943.404171][T14068] ? clear_bhb_loop+0x60/0xb0 [ 943.426054][T13797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 943.427996][T14068] ? clear_bhb_loop+0x60/0xb0 [ 943.432844][T13797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.437773][T14068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 943.437811][T14068] RIP: 0033:0x7f67ba78e969 [ 943.437830][T14068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.437850][T14068] RSP: 002b:00007f67bb69d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.455612][T13797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.462546][T14068] RAX: ffffffffffffffda RBX: 00007f67ba9b5fa0 RCX: 00007f67ba78e969 [ 943.471230][T13797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.477014][T14068] RDX: 0000000020000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 943.477033][T14068] RBP: 00007f67bb69d090 R08: 0000000000000000 R09: 0000000000000000 [ 943.477048][T14068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.477061][T14068] R13: 0000000000000000 R14: 00007f67ba9b5fa0 R15: 00007ffd5224da68 [ 943.477093][T14068] [ 943.583090][T13797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.595540][T13797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.606343][T13797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.617637][T13797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 943.628231][T13797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 943.640342][T13797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.650712][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 943.667602][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 943.689043][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 943.711099][ T7571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 943.732583][T13797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.745650][T14070] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3308'. [ 943.792138][T13797] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.829111][T13797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.875891][T13797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.963896][T14070] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3308'. [ 943.968472][T14077] netlink: 'syz.5.3310': attribute type 8 has an invalid length. [ 944.020624][T14077] netlink: 399 bytes leftover after parsing attributes in process `syz.5.3310'. [ 944.275330][T14084] netlink: 'syz.0.3312': attribute type 10 has an invalid length. [ 944.316187][T14087] netlink: 'syz.5.3314': attribute type 10 has an invalid length. [ 944.383769][T14089] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3315'. [ 944.447636][ T7558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.474235][ T7558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.514438][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 944.551484][T14094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.573422][T14094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.593296][T14094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.603046][T14094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.672658][ T7571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 944.682368][ T7571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 944.731770][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 946.094768][T14125] netlink: 'syz.0.3326': attribute type 10 has an invalid length. [ 946.479316][T14127] netlink: 'syz.0.3337': attribute type 10 has an invalid length. [ 946.598738][T14129] netlink: 'syz.3.3327': attribute type 10 has an invalid length. [ 946.650034][T14129] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.660659][T14129] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.828565][T14129] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.836301][T14129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.844981][T14129] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.852737][T14129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.892936][T14134] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 946.900246][T14134] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 946.933681][T14135] netlink: 'syz.5.3329': attribute type 3 has an invalid length. [ 947.043270][T14129] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 947.618785][T14156] FAULT_INJECTION: forcing a failure. [ 947.618785][T14156] name failslab, interval 1, probability 0, space 0, times 0 [ 947.651519][T14156] CPU: 1 PID: 14156 Comm: syz.0.3340 Not tainted 6.1.140-syzkaller #0 [ 947.659740][T14156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 947.669816][T14156] Call Trace: [ 947.673112][T14156] [ 947.676147][T14156] dump_stack_lvl+0x168/0x22e [ 947.680845][T14156] ? show_regs_print_info+0x12/0x12 [ 947.686066][T14156] ? load_image+0x3b0/0x3b0 [ 947.690579][T14156] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 947.696503][T14156] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 947.702416][T14156] ? _raw_spin_unlock+0x40/0x40 [ 947.707278][T14156] ? __wake_up_common+0x5b/0x4e0 [ 947.712229][T14156] should_fail_ex+0x399/0x4d0 [ 947.716916][T14156] should_failslab+0x5/0x20 [ 947.721423][T14156] slab_pre_alloc_hook+0x59/0x310 [ 947.726457][T14156] ? addr_event+0xc3/0x470 [ 947.730884][T14156] __kmem_cache_alloc_node+0x4f/0x260 [ 947.736266][T14156] ? addr_event+0xc3/0x470 [ 947.740693][T14156] kmalloc_trace+0x26/0xe0 [ 947.745116][T14156] addr_event+0xc3/0x470 [ 947.749373][T14156] inetaddr_event+0xe0/0x140 [ 947.753978][T14156] ? is_eth_active_slave_of_bonding_rcu+0x260/0x260 [ 947.760576][T14156] ? memset+0x1e/0x40 [ 947.764573][T14156] ? down_read+0x1a8/0x2d0 [ 947.769003][T14156] blocking_notifier_call_chain+0x103/0x1b0 [ 947.774912][T14156] __inet_del_ifa+0x879/0x1020 [ 947.779707][T14156] devinet_ioctl+0x92f/0x1af0 [ 947.784404][T14156] inet_ioctl+0x2c9/0x400 [ 947.788749][T14156] ? inet_shutdown+0x370/0x370 [ 947.793523][T14156] ? slab_free_freelist_hook+0x131/0x1a0 [ 947.799169][T14156] ? tomoyo_path_number_perm+0x4ae/0x600 [ 947.804815][T14156] ? __kmem_cache_free+0xb6/0x1f0 [ 947.809869][T14156] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 947.815367][T14156] sock_do_ioctl+0xd3/0x2f0 [ 947.819892][T14156] ? sock_show_fdinfo+0xb0/0xb0 [ 947.824773][T14156] sock_ioctl+0x4ed/0x6e0 [ 947.829130][T14156] ? sock_poll+0x3f0/0x3f0 [ 947.833568][T14156] ? bpf_lsm_file_ioctl+0x5/0x10 [ 947.838517][T14156] ? security_file_ioctl+0x7c/0xa0 [ 947.843653][T14156] ? sock_poll+0x3f0/0x3f0 [ 947.848078][T14156] __se_sys_ioctl+0xfa/0x170 [ 947.852692][T14156] do_syscall_64+0x4c/0xa0 [ 947.857121][T14156] ? clear_bhb_loop+0x60/0xb0 [ 947.861805][T14156] ? clear_bhb_loop+0x60/0xb0 [ 947.866502][T14156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.872434][T14156] RIP: 0033:0x7fee4ff8e969 [ 947.876866][T14156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 947.896500][T14156] RSP: 002b:00007fee50eb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 947.904928][T14156] RAX: ffffffffffffffda RBX: 00007fee501b5fa0 RCX: 00007fee4ff8e969 [ 947.912921][T14156] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000009 [ 947.920899][T14156] RBP: 00007fee50eb5090 R08: 0000000000000000 R09: 0000000000000000 [ 947.928872][T14156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.936845][T14156] R13: 0000000000000000 R14: 00007fee501b5fa0 R15: 00007ffd59af73f8 [ 947.944836][T14156] [ 948.008563][T14162] __nla_validate_parse: 12 callbacks suppressed [ 948.008582][T14162] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3339'. [ 948.082170][T14153] validate_nla: 1 callbacks suppressed [ 948.082213][T14153] netlink: 'syz.3.3338': attribute type 8 has an invalid length. [ 948.112428][T14162] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3339'. [ 948.121776][T14153] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3338'. [ 948.208115][T14167] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3341'. [ 949.060713][T14162] mac80211_hwsim hwsim24 »»»»»»: renamed from wlan0 [ 949.105674][T14167] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3341'. [ 949.241935][T14178] netlink: 'syz.3.3344': attribute type 3 has an invalid length. [ 949.296533][T14178] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3344'. [ 949.767343][T14192] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3345'. [ 949.792398][T14187] netlink: 'syz.3.3348': attribute type 8 has an invalid length. [ 949.827674][T14187] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3348'. [ 950.155184][T14210] netlink: 'syz.1.3354': attribute type 8 has an invalid length. [ 950.167998][T14213] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3355'. [ 950.179927][T14213] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3355'. [ 950.978308][T14215] mac80211_hwsim hwsim22 »»»»»»: renamed from wlan0 [ 951.309278][T14225] netlink: 'syz.0.3360': attribute type 10 has an invalid length. [ 951.321861][T14222] netlink: 'syz.3.3359': attribute type 3 has an invalid length. [ 952.528928][T14252] netlink: 'syz.3.3371': attribute type 8 has an invalid length. [ 953.025667][T14261] __nla_validate_parse: 9 callbacks suppressed [ 953.025684][T14261] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3372'. [ 953.059269][T14261] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3372'. [ 953.404595][T14262] mac80211_hwsim hwsim28 »»»»»»: renamed from wlan0 [ 953.449237][T14267] netlink: 'syz.1.3373': attribute type 10 has an invalid length. [ 953.679640][T14270] netlink: 'syz.4.3374': attribute type 8 has an invalid length. [ 953.688829][T14270] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3374'. [ 954.317809][T14290] netlink: 'syz.4.3382': attribute type 8 has an invalid length. [ 954.414149][T14290] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3382'. [ 954.442955][T14285] netlink: 'syz.3.3381': attribute type 8 has an invalid length. [ 954.481070][T14285] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3381'. [ 954.836527][T14303] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3386'. [ 954.854105][T14303] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3386'. [ 954.928792][T14302] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3385'. [ 954.950089][T14295] netlink: 'syz.5.3384': attribute type 8 has an invalid length. [ 954.964030][T14302] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3385'. [ 955.044253][T14295] netlink: 399 bytes leftover after parsing attributes in process `syz.5.3384'. [ 955.738229][T14307] netlink: 'syz.5.3387': attribute type 10 has an invalid length. [ 956.359705][T14321] mac80211_hwsim hwsim20 »»»»»»: renamed from wlan0 [ 956.383250][T14325] netlink: 'syz.0.3393': attribute type 10 has an invalid length. [ 957.254779][T14331] device syzkaller0 entered promiscuous mode [ 958.923238][T14360] netlink: 'syz.3.3404': attribute type 8 has an invalid length. [ 958.971311][T14360] __nla_validate_parse: 5 callbacks suppressed [ 958.971408][T14360] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3404'. [ 959.282704][T14365] netlink: 'syz.5.3408': attribute type 3 has an invalid length. [ 959.301548][T14365] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3408'. [ 961.868853][T14382] netlink: 'syz.3.3414': attribute type 3 has an invalid length. [ 961.879742][T14382] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3414'. [ 962.109974][T14367] netlink: 'syz.0.3407': attribute type 10 has an invalid length. [ 962.361760][T14395] FAULT_INJECTION: forcing a failure. [ 962.361760][T14395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.398671][T14395] CPU: 0 PID: 14395 Comm: syz.0.3418 Not tainted 6.1.140-syzkaller #0 [ 962.406892][T14395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 962.417061][T14395] Call Trace: [ 962.420358][T14395] [ 962.423308][T14395] dump_stack_lvl+0x168/0x22e [ 962.428034][T14395] ? show_regs_print_info+0x12/0x12 [ 962.433273][T14395] ? load_image+0x3b0/0x3b0 [ 962.437812][T14395] ? __lock_acquire+0x7c50/0x7c50 [ 962.442876][T14395] ? snprintf+0xd7/0x120 [ 962.447159][T14395] should_fail_ex+0x399/0x4d0 [ 962.451880][T14395] _copy_to_user+0x2c/0x130 [ 962.456429][T14395] simple_read_from_buffer+0xe3/0x150 [ 962.461839][T14395] proc_fail_nth_read+0x19a/0x210 [ 962.466903][T14395] ? proc_fault_inject_write+0x2f0/0x2f0 [ 962.472593][T14395] ? fsnotify_perm+0x248/0x550 [ 962.477415][T14395] ? proc_fault_inject_write+0x2f0/0x2f0 [ 962.483087][T14395] vfs_read+0x2c0/0x920 [ 962.487299][T14395] ? kernel_read+0x1e0/0x1e0 [ 962.491945][T14395] ? __fget_files+0x28/0x4d0 [ 962.496586][T14395] ? __fget_files+0x44a/0x4d0 [ 962.501316][T14395] ? __fdget_pos+0x2ae/0x360 [ 962.505947][T14395] ? ksys_read+0x71/0x240 [ 962.510296][T14395] ksys_read+0x143/0x240 [ 962.514640][T14395] ? vfs_write+0x960/0x960 [ 962.519200][T14395] ? lockdep_hardirqs_on+0x94/0x140 [ 962.524425][T14395] do_syscall_64+0x4c/0xa0 [ 962.528863][T14395] ? clear_bhb_loop+0x60/0xb0 [ 962.533548][T14395] ? clear_bhb_loop+0x60/0xb0 [ 962.538232][T14395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 962.544143][T14395] RIP: 0033:0x7fee4ff8d37c [ 962.548566][T14395] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 962.568181][T14395] RSP: 002b:00007fee50e94030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 962.576605][T14395] RAX: ffffffffffffffda RBX: 00007fee501b6080 RCX: 00007fee4ff8d37c [ 962.584584][T14395] RDX: 000000000000000f RSI: 00007fee50e940a0 RDI: 0000000000000004 [ 962.592562][T14395] RBP: 00007fee50e94090 R08: 0000000000000000 R09: 0000000000000000 [ 962.600538][T14395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.608511][T14395] R13: 0000000000000001 R14: 00007fee501b6080 R15: 00007ffd59af73f8 [ 962.616504][T14395] [ 962.671820][T14399] FAULT_INJECTION: forcing a failure. [ 962.671820][T14399] name failslab, interval 1, probability 0, space 0, times 0 [ 962.684851][T14399] CPU: 0 PID: 14399 Comm: syz.5.3421 Not tainted 6.1.140-syzkaller #0 [ 962.693049][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 962.703137][T14399] Call Trace: [ 962.706449][T14399] [ 962.709409][T14399] dump_stack_lvl+0x168/0x22e [ 962.714136][T14399] ? show_regs_print_info+0x12/0x12 [ 962.719377][T14399] ? load_image+0x3b0/0x3b0 [ 962.723908][T14399] ? ___ratelimit+0x6/0x5f0 [ 962.728464][T14399] should_fail_ex+0x399/0x4d0 [ 962.733182][T14399] should_failslab+0x5/0x20 [ 962.737720][T14399] slab_pre_alloc_hook+0x59/0x310 [ 962.742786][T14399] ? memcg_alloc_slab_cgroups+0x83/0x120 [ 962.748467][T14399] __kmem_cache_alloc_node+0x4f/0x260 [ 962.753878][T14399] ? memcg_alloc_slab_cgroups+0x83/0x120 [ 962.759555][T14399] __kmalloc_node+0xa0/0x240 [ 962.764272][T14399] memcg_alloc_slab_cgroups+0x83/0x120 [ 962.769776][T14399] slab_post_alloc_hook+0xba/0x480 [ 962.774938][T14399] kmem_cache_alloc+0x123/0x2f0 [ 962.779826][T14399] ? dst_alloc+0x101/0x160 [ 962.784290][T14399] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 962.789969][T14399] dst_alloc+0x101/0x160 [ 962.794254][T14399] ip6_pol_route+0x94d/0x1260 [ 962.798972][T14399] ? ip6_pol_route+0x162/0x1260 [ 962.803867][T14399] ? trace_fib6_table_lookup+0x250/0x250 [ 962.809546][T14399] ? look_up_lock_class+0x75/0x140 [ 962.814690][T14399] ? register_lock_class+0xb1/0x860 [ 962.819942][T14399] fib6_rule_lookup+0x1d3/0x570 [ 962.824839][T14399] ? ip6_route_output_flags_noref+0x390/0x390 [ 962.830950][T14399] ? fib6_lookup+0x2c0/0x2c0 [ 962.835591][T14399] ? __ipv6_addr_type+0x168/0x2f0 [ 962.840662][T14399] ? ip6_route_output_flags_noref+0x230/0x390 [ 962.846777][T14399] ip6_route_output_flags+0xe3/0x330 [ 962.852101][T14399] ? ip6_route_output_flags+0x27/0x330 [ 962.857603][T14399] ip6_dst_lookup_tail+0x195/0x1480 [ 962.862858][T14399] ? sk_dst_check+0x25/0x460 [ 962.867490][T14399] ? ip6_dst_lookup+0x60/0x60 [ 962.872217][T14399] ? lock_chain_count+0x20/0x20 [ 962.877126][T14399] ? sk_dst_check+0x25/0x460 [ 962.881756][T14399] ? sk_dst_check+0x30f/0x460 [ 962.886481][T14399] ip6_sk_dst_lookup_flow+0x711/0x9b0 [ 962.891912][T14399] udpv6_sendmsg+0x18f6/0x2540 [ 962.896727][T14399] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 962.901625][T14399] ? udp_v6_early_demux+0xf50/0xf50 [ 962.906874][T14399] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 962.913068][T14399] ? inet_send_prepare+0x1af/0x260 [ 962.918251][T14399] ? _local_bh_enable+0xa0/0xa0 [ 962.923151][T14399] ? ip6_datagram_release_cb+0x3b6/0x540 [ 962.928833][T14399] ? release_sock+0xa9/0x1b0 [ 962.933464][T14399] ? inet_send_prepare+0x1af/0x260 [ 962.938631][T14399] ? inet_send_prepare+0x1af/0x260 [ 962.943796][T14399] ? inet6_sendmsg+0x5b/0xd0 [ 962.948437][T14399] ? inet6_compat_ioctl+0x380/0x380 [ 962.953681][T14399] ____sys_sendmsg+0x59b/0x970 [ 962.958497][T14399] ? __lock_acquire+0x7c50/0x7c50 [ 962.963580][T14399] ? __sys_sendmsg_sock+0x30/0x30 [ 962.968649][T14399] ? __import_iovec+0x315/0x500 [ 962.973534][T14399] ? import_iovec+0x6f/0xa0 [ 962.978055][T14399] ___sys_sendmsg+0x21c/0x290 [ 962.982759][T14399] ? __sys_sendmsg+0x270/0x270 [ 962.987586][T14399] __se_sys_sendmsg+0x19e/0x270 [ 962.992462][T14399] ? rcu_is_watching+0x11/0xa0 [ 962.997246][T14399] ? __x64_sys_sendmsg+0x80/0x80 [ 963.002226][T14399] do_syscall_64+0x4c/0xa0 [ 963.006662][T14399] ? clear_bhb_loop+0x60/0xb0 [ 963.011362][T14399] ? clear_bhb_loop+0x60/0xb0 [ 963.016047][T14399] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 963.021975][T14399] RIP: 0033:0x7f67ba78e969 [ 963.026398][T14399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 963.046008][T14399] RSP: 002b:00007f67bb69d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.054440][T14399] RAX: ffffffffffffffda RBX: 00007f67ba9b5fa0 RCX: 00007f67ba78e969 [ 963.062424][T14399] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000004 [ 963.070407][T14399] RBP: 00007f67bb69d090 R08: 0000000000000000 R09: 0000000000000000 [ 963.078397][T14399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.086378][T14399] R13: 0000000000000000 R14: 00007f67ba9b5fa0 R15: 00007ffd5224da68 [ 963.094377][T14399] [ 964.232365][T14422] netlink: 'syz.4.3427': attribute type 3 has an invalid length. [ 964.307914][T14422] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3427'. [ 964.461508][T14424] netlink: 'syz.5.3428': attribute type 10 has an invalid length. [ 964.535912][T14426] netlink: 'syz.1.3429': attribute type 3 has an invalid length. [ 964.562957][T14426] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3429'. [ 964.729256][T14436] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.3432'. [ 964.785806][T14436] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 965.247240][T14453] netlink: 'syz.5.3439': attribute type 2 has an invalid length. [ 965.319872][T14453] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3439'. [ 965.431397][T14462] netlink: 'syz.1.3441': attribute type 3 has an invalid length. [ 965.444387][T14462] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3441'. [ 965.513084][T14465] netlink: 'syz.0.3442': attribute type 10 has an invalid length. [ 966.050466][T14482] netlink: 'syz.0.3447': attribute type 3 has an invalid length. [ 966.079511][T14482] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3447'. [ 966.451573][T14496] netlink: 'syz.0.3456': attribute type 10 has an invalid length. [ 966.714803][T14500] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3454'. [ 966.740944][T14499] netlink: 'syz.4.3453': attribute type 3 has an invalid length. [ 966.804005][T14499] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3453'. [ 966.820900][T14498] netlink: 'syz.3.3454': attribute type 10 has an invalid length. [ 966.928612][T14504] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3458'. [ 967.142685][T14498] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.233682][T14498] bond0: (slave team0): Enslaving as an active interface with an up link [ 967.554835][T14520] device batadv_slave_1 entered promiscuous mode [ 968.046194][T14534] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3472'. [ 968.274943][ T7561] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.430302][T14542] device batadv_slave_1 entered promiscuous mode [ 968.484058][T14542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 968.537049][T14542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 968.756357][ T7561] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.072185][ T7561] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.262542][ T7561] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.314561][ T4301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 969.324726][ T4301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 969.332713][ T4301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 969.353449][ T4301] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 969.354936][T14557] validate_nla: 9 callbacks suppressed [ 969.354976][T14557] netlink: 'syz.5.3483': attribute type 10 has an invalid length. [ 969.381901][ T4301] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 969.390542][ T4301] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 970.119551][T14569] netlink: 'syz.4.3486': attribute type 8 has an invalid length. [ 970.159051][T14569] __nla_validate_parse: 3 callbacks suppressed [ 970.159093][T14569] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3486'. [ 970.491556][T14578] netlink: 'syz.0.3500': attribute type 8 has an invalid length. [ 970.517151][T14578] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3500'. [ 972.008055][ T4317] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 972.018316][ T4317] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 972.030055][ T4317] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 972.038946][ T4317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 972.051161][ T4317] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 972.059189][ T4317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 973.553892][T14601] netlink: 'syz.5.3498': attribute type 10 has an invalid length. [ 973.823376][T14616] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.3502'. [ 974.010080][T14616] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 974.042508][T14616] CPU: 0 PID: 14616 Comm: syz.5.3502 Not tainted 6.1.140-syzkaller #0 [ 974.050724][T14616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 974.060815][T14616] Call Trace: [ 974.064163][T14616] [ 974.067123][T14616] dump_stack_lvl+0x168/0x22e [ 974.071852][T14616] ? show_regs_print_info+0x12/0x12 [ 974.077094][T14616] ? load_image+0x3b0/0x3b0 [ 974.081652][T14616] sysfs_warn_dup+0x8a/0xa0 [ 974.086200][T14616] sysfs_do_create_link_sd+0xc0/0x110 [ 974.091618][T14616] device_add+0x7ed/0xfb0 [ 974.096007][T14616] wiphy_register+0x1e68/0x2bd0 [ 974.100931][T14616] ? cfg80211_event_work+0x40/0x40 [ 974.106081][T14616] ? minstrel_ht_alloc+0x894/0xa20 [ 974.111236][T14616] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 974.117335][T14616] ieee80211_register_hw+0x2c29/0x38c0 [ 974.122848][T14616] ? ieee80211_register_hw+0xf01/0x38c0 [ 974.128432][T14616] ? ieee80211_register_hw+0xf01/0x38c0 [ 974.134021][T14616] ? ieee80211_tasklet_handler+0x20/0x20 [ 974.139711][T14616] ? rcu_is_watching+0x11/0xa0 [ 974.144524][T14616] ? memset+0x1e/0x40 [ 974.148531][T14616] ? hrtimer_init+0x10c/0x220 [ 974.153224][T14616] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 974.158970][T14616] hwsim_new_radio_nl+0xafa/0xce0 [ 974.164019][T14616] genl_family_rcv_msg_doit+0x22e/0x320 [ 974.169578][T14616] ? end_current_label_crit_section+0x170/0x170 [ 974.175827][T14616] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 974.181736][T14616] ? bpf_lsm_capable+0x5/0x10 [ 974.186425][T14616] ? security_capable+0x85/0xb0 [ 974.191297][T14616] genl_rcv_msg+0x5f2/0x780 [ 974.195819][T14616] ? genl_bind+0x350/0x350 [ 974.200242][T14616] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 974.206596][T14616] netlink_rcv_skb+0x1de/0x420 [ 974.211380][T14616] ? genl_bind+0x350/0x350 [ 974.215808][T14616] ? netlink_ack+0x1100/0x1100 [ 974.220603][T14616] ? down_read+0x1a8/0x2d0 [ 974.225041][T14616] genl_rcv+0x24/0x40 [ 974.229038][T14616] netlink_unicast+0x74c/0x8c0 [ 974.233834][T14616] netlink_sendmsg+0x89e/0xbc0 [ 974.238622][T14616] ? netlink_getsockopt+0x540/0x540 [ 974.243838][T14616] ? aa_sock_msg_perm+0x94/0x150 [ 974.248785][T14616] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 974.254096][T14616] ? security_socket_sendmsg+0x7c/0xa0 [ 974.259577][T14616] ? netlink_getsockopt+0x540/0x540 [ 974.264792][T14616] ____sys_sendmsg+0x59b/0x970 [ 974.269579][T14616] ? __sys_sendmsg_sock+0x30/0x30 [ 974.274620][T14616] ? __import_iovec+0x315/0x500 [ 974.279487][T14616] ? import_iovec+0x6f/0xa0 [ 974.284027][T14616] ___sys_sendmsg+0x21c/0x290 [ 974.288723][T14616] ? __sys_sendmsg+0x270/0x270 [ 974.293535][T14616] ? __fdget+0x17c/0x200 [ 974.297794][T14616] __se_sys_sendmsg+0x19e/0x270 [ 974.302659][T14616] ? __se_sys_futex+0x14a/0x440 [ 974.307529][T14616] ? __x64_sys_sendmsg+0x80/0x80 [ 974.312496][T14616] ? lockdep_hardirqs_on+0x94/0x140 [ 974.317729][T14616] do_syscall_64+0x4c/0xa0 [ 974.322168][T14616] ? clear_bhb_loop+0x60/0xb0 [ 974.326852][T14616] ? clear_bhb_loop+0x60/0xb0 [ 974.331545][T14616] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 974.337458][T14616] RIP: 0033:0x7f67ba78e969 [ 974.341916][T14616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.361532][T14616] RSP: 002b:00007f67bb69d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.369964][T14616] RAX: ffffffffffffffda RBX: 00007f67ba9b5fa0 RCX: 00007f67ba78e969 [ 974.377945][T14616] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 974.385930][T14616] RBP: 00007f67ba810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 974.393908][T14616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.401884][T14616] R13: 0000000000000000 R14: 00007f67ba9b5fa0 R15: 00007ffd5224da68 [ 974.409903][T14616] [ 974.508473][T14624] netlink: 'syz.3.3505': attribute type 8 has an invalid length. [ 974.517188][T14622] FAULT_INJECTION: forcing a failure. [ 974.517188][T14622] name failslab, interval 1, probability 0, space 0, times 0 [ 974.530255][T14624] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3505'. [ 974.554074][T14622] CPU: 0 PID: 14622 Comm: syz.4.3503 Not tainted 6.1.140-syzkaller #0 [ 974.562281][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 974.572344][T14622] Call Trace: [ 974.575625][T14622] [ 974.578560][T14622] dump_stack_lvl+0x168/0x22e [ 974.583263][T14622] ? show_regs_print_info+0x12/0x12 [ 974.588474][T14622] ? load_image+0x3b0/0x3b0 [ 974.592984][T14622] ? __might_sleep+0xd0/0xd0 [ 974.597591][T14622] ? __lock_acquire+0x7c50/0x7c50 [ 974.602660][T14622] should_fail_ex+0x399/0x4d0 [ 974.607348][T14622] should_failslab+0x5/0x20 [ 974.611876][T14622] slab_pre_alloc_hook+0x59/0x310 [ 974.616912][T14622] ? ioctl_standard_iw_point+0x4d1/0xc90 [ 974.622557][T14622] __kmem_cache_alloc_node+0x4f/0x260 [ 974.628029][T14622] ? ioctl_standard_iw_point+0x4d1/0xc90 [ 974.633674][T14622] __kmalloc+0xa0/0x240 [ 974.637839][T14622] ioctl_standard_iw_point+0x4d1/0xc90 [ 974.643422][T14622] ? __cfg80211_wext_giwauth+0x10/0x10 [ 974.648890][T14622] ? iw_handler_get_iwstats+0x240/0x240 [ 974.654446][T14622] ? wext_ioctl_dispatch+0xaf/0x470 [ 974.659653][T14622] ? mutex_lock_nested+0x10/0x10 [ 974.664611][T14622] ? full_name_hash+0x8e/0xe0 [ 974.669296][T14622] ? __cfg80211_wext_giwauth+0x10/0x10 [ 974.674768][T14622] ioctl_standard_call+0xb3/0x2b0 [ 974.679800][T14622] ? __cfg80211_wext_giwauth+0x10/0x10 [ 974.685271][T14622] wext_ioctl_dispatch+0x3da/0x470 [ 974.690412][T14622] ? wext_ioctl_dispatch+0x470/0x470 [ 974.695706][T14622] ? iw_handler_get_private+0x1e0/0x1e0 [ 974.701273][T14622] wext_handle_ioctl+0x104/0x1c0 [ 974.706224][T14622] ? call_commit_handler+0xf0/0xf0 [ 974.711366][T14622] sock_ioctl+0x145/0x6e0 [ 974.715701][T14622] ? sock_poll+0x3f0/0x3f0 [ 974.720127][T14622] ? bpf_lsm_file_ioctl+0x5/0x10 [ 974.725069][T14622] ? security_file_ioctl+0x7c/0xa0 [ 974.730202][T14622] ? sock_poll+0x3f0/0x3f0 [ 974.734626][T14622] __se_sys_ioctl+0xfa/0x170 [ 974.739230][T14622] do_syscall_64+0x4c/0xa0 [ 974.743663][T14622] ? clear_bhb_loop+0x60/0xb0 [ 974.748343][T14622] ? clear_bhb_loop+0x60/0xb0 [ 974.753048][T14622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 974.758953][T14622] RIP: 0033:0x7f9a0738e969 [ 974.763474][T14622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.783091][T14622] RSP: 002b:00007f9a0812c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 974.791510][T14622] RAX: ffffffffffffffda RBX: 00007f9a075b5fa0 RCX: 00007f9a0738e969 [ 974.799485][T14622] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004 [ 974.807565][T14622] RBP: 00007f9a0812c090 R08: 0000000000000000 R09: 0000000000000000 [ 974.815550][T14622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.823535][T14622] R13: 0000000000000000 R14: 00007f9a075b5fa0 R15: 00007ffde4b50008 [ 974.831536][T14622] [ 975.014047][T14626] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3502'. [ 975.199342][T14632] netlink: 'syz.0.3507': attribute type 8 has an invalid length. [ 975.223915][T14632] netlink: 463 bytes leftover after parsing attributes in process `syz.0.3507'. [ 975.502606][ T4301] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 975.512595][ T4301] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 975.521880][ T4301] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 975.531125][ T4317] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 975.539915][ T4317] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 975.548206][ T4317] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 975.567734][T14640] netlink: 'syz.5.3511': attribute type 10 has an invalid length. [ 975.757765][T14653] FAULT_INJECTION: forcing a failure. [ 975.757765][T14653] name failslab, interval 1, probability 0, space 0, times 0 [ 975.771021][T14653] CPU: 0 PID: 14653 Comm: syz.5.3515 Not tainted 6.1.140-syzkaller #0 [ 975.779210][T14653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 975.789297][T14653] Call Trace: [ 975.792602][T14653] [ 975.795570][T14653] dump_stack_lvl+0x168/0x22e [ 975.800295][T14653] ? show_regs_print_info+0x12/0x12 [ 975.805535][T14653] ? load_image+0x3b0/0x3b0 [ 975.810083][T14653] should_fail_ex+0x399/0x4d0 [ 975.814796][T14653] should_failslab+0x5/0x20 [ 975.819333][T14653] slab_pre_alloc_hook+0x59/0x310 [ 975.824404][T14653] kmem_cache_alloc+0x56/0x2f0 [ 975.829212][T14653] ? sctp_get_port_local+0x6b9/0x14e0 [ 975.834634][T14653] sctp_get_port_local+0x6b9/0x14e0 [ 975.839886][T14653] ? sctp_do_bind+0x990/0x990 [ 975.844654][T14653] ? sctp_bind_addr_match+0x2c/0x2a0 [ 975.849998][T14653] sctp_do_bind+0x553/0x990 [ 975.854564][T14653] sctp_connect_new_asoc+0x252/0x690 [ 975.859921][T14653] ? __sctp_connect+0xd20/0xd20 [ 975.864829][T14653] ? __local_bh_enable_ip+0x12a/0x1b0 [ 975.870261][T14653] ? lock_sock_nested+0x66/0x100 [ 975.875244][T14653] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 975.881269][T14653] ? security_sctp_bind_connect+0x85/0xb0 [ 975.887061][T14653] sctp_sendmsg+0x15ff/0x2980 [ 975.891801][T14653] ? sctp_getsockopt+0x8a0/0x8a0 [ 975.897137][T14653] ? aa_af_perm+0x2b0/0x2b0 [ 975.901674][T14653] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 975.908151][T14653] ? inet_sendmsg+0xe5/0x2f0 [ 975.912876][T14653] ? inet_send_prepare+0x260/0x260 [ 975.918028][T14653] ____sys_sendmsg+0x59b/0x970 [ 975.922844][T14653] ? __sys_sendmsg_sock+0x30/0x30 [ 975.927911][T14653] ? __import_iovec+0x315/0x500 [ 975.932812][T14653] ? import_iovec+0x6f/0xa0 [ 975.937355][T14653] ___sys_sendmsg+0x21c/0x290 [ 975.942068][T14653] ? __sys_sendmsg+0x270/0x270 [ 975.946876][T14653] ? __lock_acquire+0x7c50/0x7c50 [ 975.951968][T14653] ? __fdget+0x17c/0x200 [ 975.956253][T14653] __se_sys_sendmsg+0x19e/0x270 [ 975.961150][T14653] ? __x64_sys_sendmsg+0x80/0x80 [ 975.966152][T14653] ? lockdep_hardirqs_on+0x94/0x140 [ 975.971568][T14653] do_syscall_64+0x4c/0xa0 [ 975.976021][T14653] ? clear_bhb_loop+0x60/0xb0 [ 975.980731][T14653] ? clear_bhb_loop+0x60/0xb0 [ 975.985442][T14653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 975.991378][T14653] RIP: 0033:0x7f67ba78e969 [ 975.995818][T14653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.015456][T14653] RSP: 002b:00007f67bb69d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 976.023909][T14653] RAX: ffffffffffffffda RBX: 00007f67ba9b5fa0 RCX: 00007f67ba78e969 [ 976.031921][T14653] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000003 [ 976.039950][T14653] RBP: 00007f67bb69d090 R08: 0000000000000000 R09: 0000000000000000 [ 976.047955][T14653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 976.056044][T14653] R13: 0000000000000000 R14: 00007f67ba9b5fa0 R15: 00007ffd5224da68 [ 976.064066][T14653] [ 976.292755][T14660] netlink: 'syz.4.3517': attribute type 8 has an invalid length. [ 976.308015][T14660] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3517'. [ 976.352738][T14641] chnl_net:caif_netlink_parms(): no params data found [ 976.412419][ T7561] device hsr_slave_0 left promiscuous mode [ 976.445153][ T7561] device hsr_slave_1 left promiscuous mode [ 976.466846][ T7561] device bridge_slave_1 left promiscuous mode [ 976.473122][ T7561] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.505830][ T7561] device bridge_slave_0 left promiscuous mode [ 976.512173][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.695436][T14671] netlink: 'syz.4.3522': attribute type 1 has an invalid length. [ 976.740021][ T7561] device veth1_macvtap left promiscuous mode [ 976.759879][T14671] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.3522'. [ 976.761046][ T7561] device veth0_macvtap left promiscuous mode [ 976.782411][T14674] netlink: 'syz.3.3521': attribute type 8 has an invalid length. [ 976.804906][ T7561] device veth1_vlan left promiscuous mode [ 976.821285][ T7561] device veth0_vlan left promiscuous mode [ 976.840689][T14674] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3521'. [ 977.574251][ T4317] Bluetooth: hci0: command 0x0409 tx timeout [ 978.558984][ T7561] team0 (unregistering): Port device team_slave_1 removed [ 978.622631][ T7561] team0 (unregistering): Port device team_slave_0 removed [ 978.695909][ T7561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.752159][ T7561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.285491][ T7561] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 979.304376][ T7561] bond0 (unregistering): Released all slaves [ 979.443725][T14682] netlink: 'syz.0.3524': attribute type 10 has an invalid length. [ 979.465621][T14691] IPv6: Can't replace route, no match found [ 979.661322][ T4317] Bluetooth: hci0: command 0x041b tx timeout [ 979.728868][T14641] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.775687][T14714] FAULT_INJECTION: forcing a failure. [ 979.775687][T14714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 979.780311][T14641] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.789335][T14714] CPU: 1 PID: 14714 Comm: syz.3.3533 Not tainted 6.1.140-syzkaller #0 [ 979.804365][T14714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 979.809674][T14706] netlink: 'syz.4.3532': attribute type 8 has an invalid length. [ 979.814528][T14714] Call Trace: [ 979.814540][T14714] [ 979.814550][T14714] dump_stack_lvl+0x168/0x22e [ 979.814588][T14714] ? show_regs_print_info+0x12/0x12 [ 979.814618][T14714] ? load_image+0x3b0/0x3b0 [ 979.814644][T14714] ? __lock_acquire+0x7c50/0x7c50 [ 979.814680][T14714] should_fail_ex+0x399/0x4d0 [ 979.814706][T14714] _copy_from_user+0x2c/0x170 [ 979.814736][T14714] ____sys_sendmsg+0x2d5/0x970 [ 979.814777][T14714] ? __sys_sendmsg_sock+0x30/0x30 [ 979.814807][T14714] ? __import_iovec+0x315/0x500 [ 979.814838][T14714] ? import_iovec+0x6f/0xa0 [ 979.814865][T14714] ___sys_sendmsg+0x21c/0x290 [ 979.814899][T14714] ? __sys_sendmsg+0x270/0x270 [ 979.814958][T14714] ? __lock_acquire+0x7c50/0x7c50 [ 979.854108][T14706] netlink: 399 bytes leftover after parsing attributes in process `syz.4.3532'. [ 979.857685][T14714] ? __fdget+0x17c/0x200 [ 979.857731][T14714] __se_sys_sendmsg+0x19e/0x270 [ 979.857769][T14714] ? __x64_sys_sendmsg+0x80/0x80 [ 979.857815][T14714] ? lockdep_hardirqs_on+0x94/0x140 [ 979.897529][T14641] device bridge_slave_0 entered promiscuous mode [ 979.900702][T14714] do_syscall_64+0x4c/0xa0 [ 979.930741][T14714] ? clear_bhb_loop+0x60/0xb0 [ 979.935445][T14714] ? clear_bhb_loop+0x60/0xb0 [ 979.940146][T14714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 979.946065][T14714] RIP: 0033:0x7efe41d8e969 [ 979.950489][T14714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 979.970115][T14714] RSP: 002b:00007efe42c38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 979.978544][T14714] RAX: ffffffffffffffda RBX: 00007efe41fb5fa0 RCX: 00007efe41d8e969 [ 979.986522][T14714] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 979.994501][T14714] RBP: 00007efe42c38090 R08: 0000000000000000 R09: 0000000000000000 [ 980.002480][T14714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.010458][T14714] R13: 0000000000000000 R14: 00007efe41fb5fa0 R15: 00007ffdd3f98b28 [ 980.018451][T14714] [ 980.036378][T14641] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.043594][T14641] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.052273][T14641] device bridge_slave_1 entered promiscuous mode [ 980.100614][T14641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.139793][T14641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 980.554529][T14718] device syzkaller0 entered promiscuous mode [ 980.569525][T14641] team0: Port device team_slave_0 added [ 980.618484][T14641] team0: Port device team_slave_1 added [ 981.706542][T14732] netlink: 'syz.3.3542': attribute type 8 has an invalid length. [ 981.714948][T14732] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3542'. [ 981.734472][ T4317] Bluetooth: hci0: command 0x040f tx timeout [ 981.882108][T14740] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3543'. [ 982.028632][T14744] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3544'. [ 983.801966][T14730] netlink: 'syz.4.3540': attribute type 10 has an invalid length. [ 983.814227][T14744] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3544'. [ 983.823949][ T4317] Bluetooth: hci0: command 0x0419 tx timeout [ 983.843466][T14641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.878051][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.981744][T14641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.008751][T14641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.020498][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.093848][T14641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.130186][T14748] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.3546'. [ 984.397223][T14641] device hsr_slave_0 entered promiscuous mode [ 984.449645][T14641] device hsr_slave_1 entered promiscuous mode [ 984.516777][T14765] netlink: 'syz.0.3552': attribute type 2 has an invalid length. [ 984.556390][T14761] netlink: 'syz.5.3551': attribute type 8 has an invalid length. [ 984.570175][T14765] device 0 entered promiscuous mode [ 984.584677][T14761] netlink: 399 bytes leftover after parsing attributes in process `syz.5.3551'. [ 984.613937][ T4317] Bluetooth: hci5: command 0x0406 tx timeout [ 985.221619][T14773] netlink: 'syz.0.3555': attribute type 8 has an invalid length. [ 985.251463][T14773] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3555'. [ 985.298898][T14778] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3556'. [ 985.358743][T14778] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3556'. [ 985.484371][T14782] netlink: 'syz.0.3558': attribute type 10 has an invalid length. [ 985.500343][T14641] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 985.571349][T14641] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 985.584678][T14641] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 985.625878][T14641] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 985.819541][ T7561] bond0 (unregistering): Released all slaves [ 985.927190][T14641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 986.006788][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 986.048554][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 986.077491][T14641] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.118251][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 986.142797][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 986.164875][ T7562] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.172041][ T7562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.200361][ T7562] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 986.244934][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 986.265817][T14796] FAULT_INJECTION: forcing a failure. [ 986.265817][T14796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 986.267129][T14796] [ 986.267137][T14796] ====================================================== [ 986.267145][T14796] WARNING: possible circular locking dependency detected [ 986.267164][T14796] 6.1.140-syzkaller #0 Not tainted [ 986.267183][T14796] ------------------------------------------------------ [ 986.267190][T14796] syz.3.3564/14796 is trying to acquire lock: [ 986.267201][T14796] ffffffff8c91ecc0 (console_owner){-.-.}-{0:0}, at: console_emit_next_record+0x82d/0xc90 [ 986.267263][T14796] [ 986.267263][T14796] but task is already holding lock: [ 986.267269][T14796] ffff8880b8e3aa58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 986.267315][T14796] [ 986.267315][T14796] which lock already depends on the new lock. [ 986.267315][T14796] [ 986.267320][T14796] [ 986.267320][T14796] the existing dependency chain (in reverse order) is: [ 986.267327][T14796] [ 986.267327][T14796] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 986.267351][T14796] _raw_spin_lock_nested+0x2e/0x40 [ 986.267384][T14796] raw_spin_rq_lock_nested+0x26/0x140 [ 986.267405][T14796] task_fork_fair+0x5c/0x350 [ 986.267428][T14796] sched_cgroup_fork+0x32c/0x3c0 [ 986.267452][T14796] copy_process+0x248b/0x4060 [ 986.267470][T14796] kernel_clone+0x225/0x8b0 [ 986.267488][T14796] user_mode_thread+0xda/0x130 [ 986.267505][T14796] rest_init+0x23/0x300 [ 986.267522][T14796] start_kernel+0x0/0x539 [ 986.267551][T14796] start_kernel+0x490/0x539 [ 986.267579][T14796] secondary_startup_64_no_verify+0xcf/0xdb [ 986.267607][T14796] [ 986.267607][T14796] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 986.267631][T14796] _raw_spin_lock_irqsave+0xa4/0xf0 [ 986.267658][T14796] try_to_wake_up+0x5c/0x1080 [ 986.267680][T14796] __wake_up_common+0x2a4/0x4e0 [ 986.267706][T14796] __wake_up+0x10e/0x190 [ 986.267729][T14796] tty_port_default_wakeup+0x9e/0xf0 [ 986.267750][T14796] serial8250_tx_chars+0x629/0x830 [ 986.267773][T14796] serial8250_handle_irq+0x516/0x6d0 [ 986.267796][T14796] serial8250_default_handle_irq+0xb4/0x1a0 [ 986.267822][T14796] serial8250_interrupt+0x9b/0x1c0 [ 986.267843][T14796] __handle_irq_event_percpu+0x298/0xa30 [ 986.267861][T14796] handle_irq_event+0x87/0x1e0 [ 986.267879][T14796] handle_edge_irq+0x243/0xb20 [ 986.267902][T14796] __common_interrupt+0xd7/0x1e0 [ 986.267930][T14796] common_interrupt+0xb0/0xd0 [ 986.267957][T14796] asm_common_interrupt+0x22/0x40 [ 986.267974][T14796] __sanitizer_cov_trace_cmp1+0x0/0x80 [ 986.267994][T14796] mt_validate+0x45ef/0x4c90 [ 986.268016][T14796] validate_mm_mt+0xcd/0x420 [ 986.268043][T14796] __split_vma+0x30/0x500 [ 986.268068][T14796] do_mas_align_munmap+0x351/0x1220 [ 986.268097][T14796] do_mas_munmap+0x240/0x2b0 [ 986.268123][T14796] mmap_region+0x713/0x1d30 [ 986.268149][T14796] do_mmap+0x894/0xf30 [ 986.268180][T14796] vm_mmap_pgoff+0x1b2/0x2b0 [ 986.268199][T14796] ksys_mmap_pgoff+0x516/0x6f0 [ 986.268226][T14796] do_syscall_64+0x4c/0xa0 [ 986.268249][T14796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.268281][T14796] [ 986.268281][T14796] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 986.268307][T14796] _raw_spin_lock_irqsave+0xa4/0xf0 [ 986.268334][T14796] __wake_up+0xf4/0x190 [ 986.268358][T14796] tty_port_default_wakeup+0x9e/0xf0 [ 986.268378][T14796] serial8250_tx_chars+0x629/0x830 [ 986.268401][T14796] serial8250_handle_irq+0x516/0x6d0 [ 986.268424][T14796] serial8250_default_handle_irq+0xb4/0x1a0 [ 986.268450][T14796] serial8250_interrupt+0x9b/0x1c0 [ 986.268472][T14796] __handle_irq_event_percpu+0x298/0xa30 [ 986.268490][T14796] handle_irq_event+0x87/0x1e0 [ 986.268512][T14796] handle_edge_irq+0x243/0xb20 [ 986.268535][T14796] __common_interrupt+0xd7/0x1e0 [ 986.268562][T14796] common_interrupt+0xb0/0xd0 [ 986.268589][T14796] asm_common_interrupt+0x22/0x40 [ 986.268606][T14796] _raw_spin_unlock_irqrestore+0xa5/0x100 [ 986.268633][T14796] uart_write+0x68a/0x910 [ 986.268650][T14796] n_tty_write+0xd1a/0x11c0 [ 986.268676][T14796] file_tty_write+0x4dd/0x860 [ 986.268699][T14796] vfs_write+0x44c/0x960 [ 986.268716][T14796] ksys_write+0x143/0x240 [ 986.268731][T14796] do_syscall_64+0x4c/0xa0 [ 986.268754][T14796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.268786][T14796] [ 986.268786][T14796] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 986.268811][T14796] _raw_spin_lock_irqsave+0xa4/0xf0 [ 986.268838][T14796] serial8250_console_write+0x169/0x17a0 [ 986.268861][T14796] console_emit_next_record+0x947/0xc90 [ 986.268889][T14796] console_unlock+0x223/0x630 [ 986.268914][T14796] vprintk_emit+0x489/0x680 [ 986.268940][T14796] _printk+0xcc/0x110 [ 986.268958][T14796] register_console+0x6c6/0x9c0 [ 986.268985][T14796] univ8250_console_init+0x41/0x43 [ 986.269008][T14796] console_init+0x1bc/0x78e [ 986.269034][T14796] start_kernel+0x303/0x539 [ 986.269063][T14796] secondary_startup_64_no_verify+0xcf/0xdb [ 986.269089][T14796] [ 986.269089][T14796] -> #0 (console_owner){-.-.}-{0:0}: [ 986.269113][T14796] __lock_acquire+0x2cf8/0x7c50 [ 986.269139][T14796] lock_acquire+0x1b4/0x490 [ 986.269163][T14796] console_emit_next_record+0x84c/0xc90 [ 986.269203][T14796] console_unlock+0x223/0x630 [ 986.269227][T14796] vprintk_emit+0x489/0x680 [ 986.269253][T14796] _printk+0xcc/0x110 [ 986.269269][T14796] should_fail_ex+0x37a/0x4d0 [ 986.269286][T14796] strncpy_from_user+0x32/0x350 [ 986.269313][T14796] strncpy_from_user_nofault+0x6d/0x140 [ 986.269335][T14796] bpf_probe_read_compat_str+0xdd/0x170 [ 986.269363][T14796] bpf_prog_34c20d315800ee20+0x38/0x3f [ 986.269381][T14796] bpf_trace_run2+0x30a/0x3b0 [ 986.269410][T14796] trace_tlb_flush+0x143/0x190 [ 986.269437][T14796] switch_mm_irqs_off+0x758/0xb10 [ 986.269462][T14796] __schedule+0xe96/0x40d0 [ 986.269481][T14796] schedule+0xb9/0x180 [ 986.269499][T14796] schedule_preempt_disabled+0xf/0x20 [ 986.269519][T14796] __mutex_lock+0x555/0xaf0 [ 986.269539][T14796] ip_rt_ioctl+0xdb/0x1120 [ 986.269561][T14796] inet_ioctl+0x364/0x400 [ 986.269590][T14796] sock_do_ioctl+0xd3/0x2f0 [ 986.269607][T14796] sock_ioctl+0x4ed/0x6e0 [ 986.269623][T14796] __se_sys_ioctl+0xfa/0x170 [ 986.269651][T14796] do_syscall_64+0x4c/0xa0 [ 986.269675][T14796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.269706][T14796] [ 986.269706][T14796] other info that might help us debug this: [ 986.269706][T14796] [ 986.269712][T14796] Chain exists of: [ 986.269712][T14796] console_owner --> &p->pi_lock --> &rq->__lock [ 986.269712][T14796] [ 986.269740][T14796] Possible unsafe locking scenario: [ 986.269740][T14796] [ 986.269746][T14796] CPU0 CPU1 [ 986.269751][T14796] ---- ---- [ 986.269755][T14796] lock(&rq->__lock); [ 986.269767][T14796] lock(&p->pi_lock); [ 986.269779][T14796] lock(&rq->__lock); [ 986.269792][T14796] lock(console_owner); [ 986.269804][T14796] [ 986.269804][T14796] *** DEADLOCK *** [ 986.269804][T14796] [ 986.269808][T14796] 4 locks held by syz.3.3564/14796: [ 986.269820][T14796] #0: ffffffff8db34428 (rtnl_mutex){+.+.}-{3:3}, at: ip_rt_ioctl+0xdb/0x1120 [ 986.269869][T14796] #1: ffff8880b8e3aa58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 986.269918][T14796] #2: ffffffff8c92ab20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0xda/0x3b0 [ 986.269972][T14796] #3: ffffffff8c91eda0 (console_lock){+.+.}-{0:0}, at: _printk+0xcc/0x110 [ 986.270016][T14796] [ 986.270016][T14796] stack backtrace: [ 986.270022][T14796] CPU: 0 PID: 14796 Comm: syz.3.3564 Not tainted 6.1.140-syzkaller #0 [ 986.270042][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 986.270054][T14796] Call Trace: [ 986.270060][T14796] [ 986.270069][T14796] dump_stack_lvl+0x168/0x22e [ 986.270097][T14796] ? load_image+0x3b0/0x3b0 [ 986.270118][T14796] ? show_regs_print_info+0x12/0x12 [ 986.270150][T14796] ? print_circular_bug+0x12b/0x1a0 [ 986.270188][T14796] check_noncircular+0x274/0x310 [ 986.270220][T14796] ? add_chain_block+0x940/0x940 [ 986.270247][T14796] ? lockdep_lock+0xdc/0x1e0 [ 986.270276][T14796] ? add_lock_to_list+0x191/0x280 [ 986.270305][T14796] ? _find_first_zero_bit+0xcf/0x100 [ 986.270330][T14796] __lock_acquire+0x2cf8/0x7c50 [ 986.270371][T14796] ? verify_lock_unused+0x140/0x140 [ 986.270412][T14796] lock_acquire+0x1b4/0x490 [ 986.270438][T14796] ? console_emit_next_record+0x82d/0xc90 [ 986.270473][T14796] ? __lock_acquire+0x7c50/0x7c50 [ 986.270500][T14796] ? do_raw_spin_lock+0x11d/0x280 [ 986.270531][T14796] ? read_lock_is_recursive+0x10/0x10 [ 986.270559][T14796] ? __rwlock_init+0x140/0x140 [ 986.270588][T14796] ? memcpy+0x3c/0x60 [ 986.270611][T14796] ? do_raw_spin_unlock+0x11d/0x230 [ 986.270641][T14796] ? console_emit_next_record+0x82d/0xc90 [ 986.270673][T14796] console_emit_next_record+0x84c/0xc90 [ 986.270704][T14796] ? console_emit_next_record+0x82d/0xc90 [ 986.270739][T14796] ? __lock_acquire+0x7c50/0x7c50 [ 986.270768][T14796] ? info_print_prefix+0x300/0x300 [ 986.270800][T14796] ? do_raw_spin_unlock+0x11d/0x230 [ 986.270833][T14796] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 986.270863][T14796] ? _raw_spin_unlock+0x40/0x40 [ 986.270891][T14796] ? mark_lock+0x94/0x320 [ 986.270925][T14796] ? __down_trylock_console_sem+0x184/0x1e0 [ 986.270955][T14796] ? _printk+0xcc/0x110 [ 986.270974][T14796] ? _printk+0xcc/0x110 [ 986.270993][T14796] ? console_trylock+0x160/0x160 [ 986.271022][T14796] console_unlock+0x223/0x630 [ 986.271052][T14796] ? _printk+0xcc/0x110 [ 986.271073][T14796] vprintk_emit+0x489/0x680 [ 986.271102][T14796] ? printk_sprint+0x460/0x460 [ 986.271135][T14796] ? verify_lock_unused+0x140/0x140 [ 986.271165][T14796] _printk+0xcc/0x110 [ 986.271193][T14796] ? load_image+0x3b0/0x3b0 [ 986.271219][T14796] should_fail_ex+0x37a/0x4d0 [ 986.271242][T14796] strncpy_from_user+0x32/0x350 [ 986.271273][T14796] strncpy_from_user_nofault+0x6d/0x140 [ 986.271299][T14796] bpf_probe_read_compat_str+0xdd/0x170 [ 986.271329][T14796] bpf_prog_34c20d315800ee20+0x38/0x3f [ 986.271349][T14796] bpf_trace_run2+0x30a/0x3b0 [ 986.271378][T14796] ? bpf_trace_run2+0xda/0x3b0 [ 986.271408][T14796] ? bpf_trace_run1+0x3b0/0x3b0 [ 986.271442][T14796] trace_tlb_flush+0x143/0x190 [ 986.271471][T14796] switch_mm_irqs_off+0x758/0xb10 [ 986.271500][T14796] ? perf_sched_cb_inc+0x230/0x230 [ 986.271532][T14796] ? switch_mm+0x120/0x120 [ 986.271557][T14796] ? psi_task_switch+0x398/0x6d0 [ 986.271593][T14796] __schedule+0xe96/0x40d0 [ 986.271625][T14796] ? release_firmware_map_entry+0x18a/0x18a [ 986.271647][T14796] ? __mutex_trylock_common+0x80/0x250 [ 986.271672][T14796] ? trace_raw_output_contention_end+0xd0/0xd0 [ 986.271701][T14796] schedule+0xb9/0x180 [ 986.271721][T14796] schedule_preempt_disabled+0xf/0x20 [ 986.271742][T14796] __mutex_lock+0x555/0xaf0 [ 986.271766][T14796] ? __mutex_lock+0x3a5/0xaf0 [ 986.271790][T14796] ? ip_rt_ioctl+0xdb/0x1120 [ 986.271813][T14796] ? mutex_lock_nested+0x10/0x10 [ 986.271838][T14796] ? bpf_lsm_capable+0x5/0x10 [ 986.271865][T14796] ? security_capable+0x85/0xb0 [ 986.271893][T14796] ip_rt_ioctl+0xdb/0x1120 [ 986.271919][T14796] ? fib_validate_source+0x1240/0x1240 [ 986.271946][T14796] ? __lock_acquire+0x7c50/0x7c50 [ 986.271973][T14796] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 986.272003][T14796] ? __might_fault+0xa6/0x120 [ 986.272026][T14796] ? __might_fault+0xc2/0x120 [ 986.272047][T14796] ? __might_fault+0xa6/0x120 [ 986.272073][T14796] inet_ioctl+0x364/0x400 [ 986.272105][T14796] ? inet_shutdown+0x370/0x370 [ 986.272135][T14796] ? slab_free_freelist_hook+0x131/0x1a0 [ 986.272165][T14796] ? tomoyo_path_number_perm+0x4ae/0x600 [ 986.272201][T14796] ? __kmem_cache_free+0xb6/0x1f0 [ 986.272230][T14796] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 986.272263][T14796] sock_do_ioctl+0xd3/0x2f0 [ 986.272284][T14796] ? sock_show_fdinfo+0xb0/0xb0 [ 986.272311][T14796] sock_ioctl+0x4ed/0x6e0 [ 986.272331][T14796] ? sock_poll+0x3f0/0x3f0 [ 986.272353][T14796] ? bpf_lsm_file_ioctl+0x5/0x10 [ 986.272371][T14796] ? security_file_ioctl+0x7c/0xa0 [ 986.272399][T14796] ? sock_poll+0x3f0/0x3f0 [ 986.272417][T14796] __se_sys_ioctl+0xfa/0x170 [ 986.272449][T14796] do_syscall_64+0x4c/0xa0 [ 986.272474][T14796] ? clear_bhb_loop+0x60/0xb0 [ 986.272493][T14796] ? clear_bhb_loop+0x60/0xb0 [ 986.272514][T14796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 986.272547][T14796] RIP: 0033:0x7efe41d8e969 [ 986.272563][T14796] Code: Unable to access opcode bytes at 0x7efe41d8e93f. [ 986.272573][T14796] RSP: 002b:00007efe42c38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 986.272594][T14796] RAX: ffffffffffffffda RBX: 00007efe41fb5fa0 RCX: 00007efe41d8e969 [ 986.272610][T14796] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000003 [ 986.272624][T14796] RBP: 00007efe42c38090 R08: 0000000000000000 R09: 0000000000000000 [ 986.272637][T14796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 986.272649][T14796] R13: 0000000000000000 R14: 00007efe41fb5fa0 R15: 00007ffdd3f98b28 [ 986.272671][T14796] [ 987.556666][T14796] CPU: 0 PID: 14796 Comm: syz.3.3564 Not tainted 6.1.140-syzkaller #0 [ 987.564809][T14796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 987.574852][T14796] Call Trace: [ 987.578132][T14796] [ 987.581058][T14796] dump_stack_lvl+0x168/0x22e [ 987.585750][T14796] ? show_regs_print_info+0x12/0x12 [ 987.590949][T14796] ? load_image+0x3b0/0x3b0 [ 987.595450][T14796] should_fail_ex+0x399/0x4d0 [ 987.600298][T14796] strncpy_from_user+0x32/0x350 [ 987.605153][T14796] strncpy_from_user_nofault+0x6d/0x140 [ 987.610698][T14796] bpf_probe_read_compat_str+0xdd/0x170 [ 987.616241][T14796] bpf_prog_34c20d315800ee20+0x38/0x3f [ 987.621691][T14796] bpf_trace_run2+0x30a/0x3b0 [ 987.626369][T14796] ? bpf_trace_run2+0xda/0x3b0 [ 987.631136][T14796] ? bpf_trace_run1+0x3b0/0x3b0 [ 987.635994][T14796] trace_tlb_flush+0x143/0x190 [ 987.640770][T14796] switch_mm_irqs_off+0x758/0xb10 [ 987.645790][T14796] ? perf_sched_cb_inc+0x230/0x230 [ 987.650900][T14796] ? switch_mm+0x120/0x120 [ 987.655311][T14796] ? psi_task_switch+0x398/0x6d0 [ 987.660250][T14796] __schedule+0xe96/0x40d0 [ 987.664668][T14796] ? release_firmware_map_entry+0x18a/0x18a [ 987.670553][T14796] ? __mutex_trylock_common+0x80/0x250 [ 987.676007][T14796] ? trace_raw_output_contention_end+0xd0/0xd0 [ 987.682169][T14796] schedule+0xb9/0x180 [ 987.686229][T14796] schedule_preempt_disabled+0xf/0x20 [ 987.691595][T14796] __mutex_lock+0x555/0xaf0 [ 987.696103][T14796] ? __mutex_lock+0x3a5/0xaf0 [ 987.700784][T14796] ? ip_rt_ioctl+0xdb/0x1120 [ 987.705370][T14796] ? mutex_lock_nested+0x10/0x10 [ 987.710304][T14796] ? bpf_lsm_capable+0x5/0x10 [ 987.714976][T14796] ? security_capable+0x85/0xb0 [ 987.719822][T14796] ip_rt_ioctl+0xdb/0x1120 [ 987.724242][T14796] ? fib_validate_source+0x1240/0x1240 [ 987.729696][T14796] ? __lock_acquire+0x7c50/0x7c50 [ 987.734717][T14796] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 987.740691][T14796] ? __might_fault+0xa6/0x120 [ 987.745361][T14796] ? __might_fault+0xc2/0x120 [ 987.750027][T14796] ? __might_fault+0xa6/0x120 [ 987.754700][T14796] inet_ioctl+0x364/0x400 [ 987.759044][T14796] ? inet_shutdown+0x370/0x370 [ 987.763805][T14796] ? slab_free_freelist_hook+0x131/0x1a0 [ 987.769437][T14796] ? tomoyo_path_number_perm+0x4ae/0x600 [ 987.775065][T14796] ? __kmem_cache_free+0xb6/0x1f0 [ 987.780091][T14796] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 987.785554][T14796] sock_do_ioctl+0xd3/0x2f0 [ 987.790054][T14796] ? sock_show_fdinfo+0xb0/0xb0 [ 987.794919][T14796] sock_ioctl+0x4ed/0x6e0 [ 987.799500][T14796] ? sock_poll+0x3f0/0x3f0 [ 987.803913][T14796] ? bpf_lsm_file_ioctl+0x5/0x10 [ 987.808839][T14796] ? security_file_ioctl+0x7c/0xa0 [ 987.813948][T14796] ? sock_poll+0x3f0/0x3f0 [ 987.818375][T14796] __se_sys_ioctl+0xfa/0x170 [ 987.822985][T14796] do_syscall_64+0x4c/0xa0 [ 987.827409][T14796] ? clear_bhb_loop+0x60/0xb0 [ 987.832084][T14796] ? clear_bhb_loop+0x60/0xb0 [ 987.836769][T14796] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 987.842666][T14796] RIP: 0033:0x7efe41d8e969 [ 987.847073][T14796] Code: Unable to access opcode bytes at 0x7efe41d8e93f. [ 987.854079][T14796] RSP: 002b:00007efe42c38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 987.862490][T14796] RAX: ffffffffffffffda RBX: 00007efe41fb5fa0 RCX: 00007efe41d8e969 [ 987.870461][T14796] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000003 [ 987.878432][T14796] RBP: 00007efe42c38090 R08: 0000000000000000 R09: 0000000000000000 [ 987.886403][T14796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.894372][T14796] R13: 0000000000000000 R14: 00007efe41fb5fa0 R15: 00007ffdd3f98b28 [ 987.902343][T14796] [ 987.946645][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 987.978191][ T4355] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.985407][ T4355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.000609][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 988.031059][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 988.067861][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 988.096550][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 988.107090][T14798] netlink: 'syz.5.3563': attribute type 8 has an invalid length. [ 988.121385][T14798] netlink: 399 bytes leftover after parsing attributes in process `syz.5.3563'. [ 988.122120][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 988.175140][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 988.188910][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 988.209674][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 988.228181][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 988.255874][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 988.285426][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 988.304072][T14641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 988.546642][T14641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.556713][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 988.566612][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 988.971092][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 988.980459][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 989.000556][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 989.008738][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 989.018007][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 989.026307][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 989.041171][T14641] device veth0_vlan entered promiscuous mode [ 989.051570][T14641] device veth1_vlan entered promiscuous mode [ 989.069020][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 989.077851][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 989.087923][T14641] device veth0_macvtap entered promiscuous mode [ 989.099037][T14641] device veth1_macvtap entered promiscuous mode [ 989.112095][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.122686][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.132584][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.143382][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.153430][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 989.164133][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.175148][T14641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.184452][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 989.192551][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 989.200912][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 989.209625][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 989.219872][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.230587][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.240639][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 989.251121][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 989.262244][T14641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.271559][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 989.280866][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 989.291179][T14641] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.300136][T14641] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.309162][T14641] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.318251][T14641] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.342660][T14641] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 989.362279][ T7561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.363155][T14641] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 989.370240][ T7561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.390766][ T7573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 989.407513][ T7573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.417451][ T7573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.425076][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 992.785609][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.791933][ T1274] ieee802154 phy1 wpan1: encryption failed: -22