last executing test programs: 10.502941985s ago: executing program 3 (id=2445): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000f0000000400000002"], 0x50) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="950002"], 0x0, 0x81, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a00", 0x36}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20) 10.287721164s ago: executing program 3 (id=2447): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x3, 0x10) close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047459, 0x0) 10.000081096s ago: executing program 3 (id=2449): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x86, 0x86, 0x5, [@datasec={0xc, 0x7, 0x0, 0xf, 0x2, [{0x3, 0x1, 0x8}, {0x5, 0x4, 0x225f9a5f}, {0x4, 0x1, 0x4}, {0x1, 0x3, 0x7e}, {0x2, 0x1, 0x7}, {0x4, 0x2, 0xf}, {0x3, 0x0, 0xc}], "3cb1"}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}, @fwd={0x1}, @ptr={0xe, 0x0, 0x0, 0x2, 0x5}]}, {0x0, [0x6c, 0x30, 0x61]}}, &(0x7f0000001980)=""/204, 0xa5, 0xcc, 0x0, 0x5}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x42, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xffffffa1, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r7, &(0x7f0000000440), &(0x7f0000000000), 0x2}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x9, 0x5, 0x3ff80, 0x948, r4, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, [@generic={0x6, 0x9, 0x9, 0x1000, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}]}, 0x0, 0x2, 0x95, &(0x7f00000003c0)=""/149, 0x40f00, 0x23, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x1, 0x5, 0x9}, 0x10, r6, r5, 0x4, &(0x7f00000006c0)=[r7, r8], &(0x7f0000000700)=[{0x1, 0x3, 0x9, 0xa}, {0x3, 0x4, 0x10, 0x2}, {0x0, 0x3, 0x9, 0xa}, {0x2, 0x5, 0xf, 0xc}], 0x10, 0x42572b3e}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={0x0, r9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x1b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8f7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0xd, 0xa, 0x4, 0xffffffffffffffe0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x6, 0x83, &(0x7f0000000580)=""/131, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x4, 0xc, 0x80000001, 0x5}, 0x10, r6, 0xffffffffffffffff, 0x5, &(0x7f0000000680)=[r2, r9, 0x1, r2, r2, r2], &(0x7f00000006c0)=[{0x1, 0x4, 0x7, 0x7}, {0x5, 0x2, 0x10, 0xb}, {0x5, 0x1, 0x4, 0x1}, {0x2, 0x1, 0x9, 0x7}, {0x2, 0x2, 0xc, 0xfc045f4747670285}], 0x10, 0x978}, 0x94) r10 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="cc", 0x1}], 0x1}, 0x24044851) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x11, &(0x7f0000000000)=r12, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNATTACHFILTER(r14, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x0, 0xf}, {0x0, 0x0, 0x0, 0x81}]}) write$cgroup_subtree(r14, &(0x7f0000000000)=ANY=[], 0xfdef) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x14, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa}, {}, {}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xf6, &(0x7f0000000480)=""/246, 0x41000, 0x2, '\x00', 0x0, @fallback=0x16, r1, 0x8, &(0x7f0000001ac0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001b00)={0x2, 0xd, 0x3, 0x80000001}, 0x10, r6, r12, 0x0, &(0x7f0000001bc0)=[r14, r15], 0x0, 0x10, 0xcdbe}, 0x94) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000002b40)=""/4077, 0xfed}, {&(0x7f0000000940)=""/4139, 0x102b}, {&(0x7f0000000700)=""/215, 0xd7}], 0x5}, 0x20) 8.941938521s ago: executing program 3 (id=2454): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/210, 0xd2}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}], 0x20}, 0x2) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, 0x0}, 0x20040000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e78fe8d2d2b6c64e34f78894fd7566d763eb89be4f198af192c873ba35d3f238b59aaafc2c445a7a19c9100af292fd50d3cf7257441a8a9dbd45626b09ea6e65aa79ea"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6de62f00080000001826", @ANYRES32, @ANYBLOB="0000000003000000"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x2f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x6, 0x0, 0x20000, 0xb, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x7ffffffe, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24048811) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 7.77826726s ago: executing program 3 (id=2457): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x4000001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x84}], 0x10}, 0x41) r3 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x81, 0x6, 0xa, 0x0, 0x8, 0x8000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0x0, 0x1, 0x7fffffff, 0x9, 0x3, 0x7fff, 0x7, 0x0, 0x8, 0x0, 0x100000001}, r1, 0x10, r3, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) (async) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) sendmsg$kcm(r0, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, 0x4040000) sendmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0xe07e872420dfefca) (async) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x9, 0x8}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={0xffffffffffffffff, r7}, 0x18) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000240)=""/125, 0x7d}], 0x4}, 0x40000000) recvmsg$kcm(r6, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 7.378421547s ago: executing program 3 (id=2460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xc, 0xb, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000000000007110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f0000000400)='./file0\x00', r0}, 0x18) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x10000}, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x34000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10000, 0xc8, 0x0, 0x8, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x18, 0x800, 0x3, &(0x7f0000000040)) 4.352461656s ago: executing program 1 (id=2474): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003f00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000002b40)=""/4077, 0xfed}, {&(0x7f0000000940)=""/4139, 0x102b}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f00000003c0)=""/39, 0x27}], 0x5}, 0x20) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)}, 0x0) gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='Zb', 0x2}], 0x1}, 0x10) sendmsg$inet(r7, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000740)='!', 0x1}], 0x1}, 0x54) sendmsg$inet(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x1}}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000480)="b9013064709bd9ef4e92966fa397b59994352434f33a2d56b637c9c445e07f5ae88d122ac8a45942cb08dba48df4b24edb7dfacffbda848a3198990de1527a59a8f0cbb0b1a5419be84b672a332777598f88c67cdd7ef0b84f0546341b8a70956c74a2cad0f5a64cb61367ebd37e8fb41da6b37dcf39e4e96e30ef4b9b54184707606b241405d7bfbeef5aa3043600a02bd5bcb9a67c9dd053c29d39c153a62bd5ee2de5c527", 0xa6}], 0x1, &(0x7f0000001980)="b3241aa280eb6d602bbe75cd7d40354555db0c757368d0a983c8cae34fff33b7ecf5617fb8b1041d5d47d79fc64e3f11d27edc6ef949a48a60ff826a99a0ffa1b651d0c201166067b8e4b22f0e4cd79e5283d163e598fd4923907bb5d6c7b04ad8f8ef22385ba661ea8507e9809d24ccdefefe808a46c5e4498561d42873ea5ccc2847c83c2925cfd0a1bc9079a0c74a56be6f18c336315dc9d6419a5a7d3b97da61342fdde7c79daf243b39a83c24dd3eb0", 0xb2, 0x20000091}, 0x4005) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x80) perf_event_open$cgroup(&(0x7f0000000140)={0x1b01e73f31d366fb, 0x80, 0xe, 0xf8, 0x7, 0x6, 0x0, 0x8, 0x44, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x6}, 0x100a08, 0x5, 0xd6, 0xa, 0x0, 0x7ff, 0x9c, 0x0, 0x100, 0x0, 0x4}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) 4.315396457s ago: executing program 2 (id=2475): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/210, 0xd2}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}], 0x20}, 0x2) sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, 0x0}, 0x20040000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e78fe8d2d2b6c64e34f78894fd7566d763eb89be4f198af192c873ba35d3f238b59aaafc2c445a7a19c9100af292fd50d3cf7257441a8a9dbd45626b09ea6e65aa79ea"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6de62f00080000001826", @ANYRES32, @ANYBLOB="0000000003000000"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x2f, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x6, 0x0, 0x20000, 0xb, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x7ffffffe, r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24048811) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.314765037s ago: executing program 0 (id=2476): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047459, 0x0) 3.344730598s ago: executing program 0 (id=2477): perf_event_open(0x0, 0x0, 0xfff0000020000003, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_config_ext={0x7b7b, 0x7fff}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$sock(r3, &(0x7f0000000180)={&(0x7f0000000280)=@caif=@util={0x25, "c185cb6fffa90fc86a85afe93732c7e9"}, 0x80, 0x0}, 0x8000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000006000000000000000200000604000000030000000000000005000000000000000000"], 0x0, 0x3a, 0x0, 0x1}, 0x28) r4 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xfffd, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000300"], 0x18}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r7}, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=r7, 0x4) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r5, 0x0, 0x0, 0x4}, 0x20) 3.05048668s ago: executing program 1 (id=2478): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="fe"], 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0xfc00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000640)="15d0fa7a9f62cd20c79e2b9c8d262db2fbafd353f999c2b8228634238e85340fae27cf610848d59517b6a3fd61ddcbc2cb431a6e52d56ba468cd680c4ceb89f796ec75c0e37df870f9fe54df2075a9829a7f79a300fc0f5ea2b20fcf27c1552c2458eded28fa47aaa82c48e8895f232efe90dc8ff778c6c3ec1f5f1f71c03e3b94c233a97bc36202d1c33bcf749797be764383aba6284f141a4bba227c959ab2d66c1401b28c13306263fe48f25bb4ed8375c36bbdc5aeb0de95a9c7dfafc6f77e98f90f05d591650d5c3e4b92ff42c7db01810826cd934ff72930a42773", 0xde}, {&(0x7f0000000740)="53c8b5104e72c427f617f3fc1f69505d5c70fe9656633c90a3dd57af2db36a2218bedd5611969d715457c81b70a29ad369a8b188413f4d5ebd7c9d36d86e6733e7bf42cf78830ed2e5abc9791370c1785925be4d7961a4d17613978356446d415f89de07c151895a3917bd40f4474a88494f0b4e472f2affb8c9fddf80a3435c62b7ebbe5e0c6cb8c016a4e452123910bf928b76b1b4b98e996f31ac77acb66d01b6c0410311cc9b1d7a67b70de65e426d289f27596f374dfe62ca5d406e85a8eede39911e1fa51a72a1c8ef32a7f2f3979381194dc2f33ec17c2c68dd9e770e1520630766db8a34155f6e12d333c90407dd6e25aa6c", 0xf6}, {&(0x7f0000000840)="99ddc9eb3579ece977ea7d4e052326e77b4ab20519030ba9f937c5d36755fb8d8874a5892d5b0a2b49b8b77f830bc703ba386fceff7fdbb76a6dcf7b1784f305fb90c92f40d3d7f50132109d633b112b56d43acd03b8bac24e0ed9198e053baae012f382728607f57b30b057da06abc2a10116da2628987909b2a8a9522e4235dc035942d25c1a82c3ef6e1b68f7c92a5457240d329ff230b5b08581162ef2ede4a4291861c161df209ad34c46cc6f3296d00e7839", 0xb5}, {&(0x7f00000009c0)="700995ada77a9a032ac65240057d4bb72d0c1c1fc96935a2de824007c309042291de36a17dc1572942c88a445fcb4ae085bc7c61f76b1f87aa068b8b0b9c07eba418dcce29c7aa9434d12e500ec78b38b0583188ad3ed337850e7560aaabbd70941e12cd621f6ee009f7df4cb8f0701faaabc4d904cab9f9d67bd05a76b0d1ce96067e652f61a171", 0x88}, {&(0x7f0000000a80)="36c67e18d4c6704261e125e131508d8f0cf61cd558fd2700a4ec5b6441cf7e48d946fa0b83785f5c4bddb6fc539edc315cd3d0e277f4118613946ba9891a502ec9454940565760c43e47c38399fdf874fcdca6c5c3344c30ae69c7b445c88b2f92746686b1728529088fe9149eb65db79adada1a869d6e1435f0174283c9192652e67ad8836677cbe73602b4b2c16aba9a8b8ec79ac37b544c4ac821ffa0be02e34a206bbb0d503c420e36826dcd261b9c7e6f8bdd6bfc6d311a86048eb8577d3842799ebeabe61bed9bc4e524fbecde15af5135b4d8d8b1a0bffa3c3501e24fe3e652999baa263d", 0xe8}, {&(0x7f0000000b80)="920fa9f92a873fab8704a1c4f986cc438c36263f586ed185c6f2319e6c59f0637600dfde6d1b00cb86f543ec1aaf70dcda7b0f1a78c486e3054d437b7506c71242e08c818361dd51a305ba3e32c3a1d94484c844665eb8defc2c30ab91091f5b6f64c1891f2e492100abc426dbdbc33ac97e29c627b5cfb49bc7f644", 0x7c}, {&(0x7f0000001980)="7af30b1a0259334b2f29d5c04b9eb80dcb94f4b0aae02a20e1d096b64ec5ef3b9cdae384dff44d7a7ef4e1360f211e16793790b51aad8df6a5108b8a3297bc4313f37656c4cb35823d50216c93d1537101236612f73f7d5edf4fab773e48b4fd8ab89b5fc6d0b6b03d010ec84193c36835c80fea4e2de493fa0862c0f4f77a09f59d1bb841e912eceb742b79e0c8baf3c9a5d4d8333e8953898c0dc01e26f0f1ecca363cb2ca630ad9716b0a0d6c96209af7abd20e2e7ce38b03374d7474c7ed43146089847b226f43549a6b5648d82535f34cd76cce3c524d714db17e17378d5bd31bff989edd0f89ac9332ae11c06bc0cc3afeaac0e5ac61f6c61b0687bd00a56c1a0bb9d21ed1a50d98eef6e9d6ef4ebcc28963dc9f2d57b2a1341c977c6e091f32d0e207b4fb0358c4a73d625a5ae525f434b2a93996bbd54b41fa4e68e19a1335892a168a33bc6845d8bae00084f859bb028657409b08efc3a6959b613c859fdac3ca911a587965ed1a8c7438cc3f0d81b58619b63189c168869428cac61ce7897aa5e8b8725a95ccde144142432bf43dd9bb24333258a7827bb523d6f0753773fbf4d0bdf9de67f7092e4f4076f67a838eb9eb0ddda9971c5126fb075b05bff397b023ddcd193fdb0fff1434c229791542d868617509defec1a988ba54b8449c4602f30de7d9511311aa05e47b1991f95a57067062d67cde319f070123e1c1ac186bc6c0b0325739b335b5f799db207b34847e5801d7f2501464fdb0e8312f48440dc5b9f0d05c6ddf67e03956b28ee8773741bf92f72f8970384781b5ca49e77e53e1f35b966699721dd512a3ab183cfbb0dfe63ece835f8ac24eca7b770373bd5bb9a26fc4deaf0f454da82dd07a5084a3f5b2fb280f1c3be07bafd4a6239261a9d39435256af777a7b23f43fdad9da42733df5d82e61fff76d1845536a24b01a4f1a771837913154d0895d714dc4a6b3b712f9c488ade3651e24ccb2e91d94a5e709b4adeb75f5ee5ea633d2415aa42c494b7d8d67cffd006791e295f4531562ceb554de93457df89637c84fa8d1dd0848b469773e71231379af7d04650cdac24bb114ad34187ec9e36289c1b8d93ba47e8a94cb469a5ad27fda23bae3baaffafa7ee9c55725ea65c3c23e5dc7e06b412491707611e0decf69f6e9429ce8d80161451493f8b623781f9b242820448913f398d54515d82a0fadad6b70fc524f6cecfb18b4b67725673983e19373a8dd79afae7f9226612cba6c2bcb24d034b328c57f1b554ecb65a9d3ad694fa9b58440ae36a4f0b71acf2c51094d9563236c7bbb1669cc6c8bedae077557daff1a5d258e48cb0604620a9b0af451a77ee9f14fd55c9a80236a46baa8aae8cd9b046606315a1250c473df387afb08024ad8f4f2b7d07126da35a141149bc4a1d9c1eed7b601dadf46cb00d035f54f1bc6e8811a1418525fe6bf040817811ee4bc9df87973298bae1f092ade7a5922d5b0e2544de25b5c28b9078a4c25bbfccb4c37d8367111df77a5433072f1791db2a78c408a82031f1597530b7f1db1a88262328e587877627c61dbc013f831c94032e1db457ffe9c0ac8a10b856f274b1d88bfaa97527d1887e9b7bd75323806f48807e9a9c53ebb8558f457aace0186f40357a82744ceae9e5dd5cefa11eefa0dee119ab26fd3e01b6a5e3cac8d7b33ff2932ee7a7a2ef351f25538029abf2cd8123af008bfa54518e0f5565f759dd1594c773430aaf50f1b71f7184e65a5f55b06b11f033f84ac69003bee5a6c6f3ad2dc252b6830ada8af88ca2d1e5969ff3ec699ec3de22d1a0270781fe15983768cd06d9c383d0deceafdda24222cd44407f25133df7337c7772414e78984be2b6420550ead995fd8b3e8b617f1ee0851e11e51aaa6ebd5e062cd134bc6aab9c8c6847494994efb8a5d86ba66852e9ab60d9f4cf4da199d14a684d0a5a38671f382197e9659c004c9e29513738b5f82d22ec838aa95163c327fadc42d81376095dee4f3591e4b35b4dd6637b3c191a74423dceb69096c59629744715dee8546172a5267259e4b4528f5e3945dea49e8fc304168afdb6582d3b9c927cc61867c42a070efa49fb73f477b8a0dbfc28b30b2a19dffaff9bfb65a5de6e790ebebcee59f008b01cd39e4756373cf684f53a9f4ae0638a0d68e9a6a152b66782483b144ee4913bf7a86bd231e747b132ad5bb3ae576d1bd6184c78e00453484dccd15a1df1c6857752985888bfb035d62848cb0764d2557b67e0a86a2e99a073c8db2aa3bb2fd3950a8c6a5373dddf371cbe9d58faf159eb8b1a14b711c9ab27e164d7f629b87b677f3a53b33afbfaf100ca947b4747dbc78a51c3d72fa2f6f99475c5e1e56a06f2bb6e5b3e7b2ee372f0a55133d5b358ddb215a4b5c2061b6d1733a39b6665b43d170cec5c473049546105e864a1c2dac959ce74ff196ff19bd0194f674efec0ff2587e0acd71869cfea99d70caa86a9969de72b4906fd1b87dc40234c5f93626e4c85e54a823a5d1b2dae5ccd3a0ab4d61a119ffefb1b06be5ca97991de0f4b31af581ec6c7a537902d3a0895719492c7f2fcbd61403cada88c8a704875cab02686693e2fff76d72fa82b260b8902b6b8709d5fe88c7d95db9c1bf6f9cab689d886426aa0f7d16a850967ce170c59f3b1b8db2d925bf4dbf5cf53276b5fd4b4dcbb69e9c394b30bcef525a5571b3df5739afcb2c6f48973923de381d7819731b45d87dd0263902214da1994d6c7001475af1a758810afeb4d1d8c32ba7b1ffceccc6abb7c20696e6e56c3937c8f36b355d6e85755a9518b81bb813e0afb8a2877caa56d9e5051a8a794fe3b3cebd9a81263e8aedb8819f17d45f3f6c55bdf178e49f93402ad823a34a25183601b1524f833e2ae59929719466f8f2102f3ad63998a6da1fe3740faab5deb6c7ea8690c018add93bb58436c4ff8f26410a36bde8e3ae67375021c38d55c98b589286fca4c21ec0e1c9e798596eb96851714391f8a56b8f4972583028b153c66d75d55c3f1c22de3bd575f54b2c01db6b3a948509b1c8a0c14d90c27895082027ed87babcd29344aed17dd01d8a05043961ea0b5480cf28471762a609bdb09ebe5aad613999405f20c9b0303eaef05bc4f069a951e011a6de865efe6070cbae52cabd40a8707e121cc45cc904fd22eb9bd340b9d328f2a9c9150a3438b4c50fc8551d752b2c98e7d9c41464a3d1c59e021a6f1cc6480be262a0a6b8be1229627cc79b3bdc9a4eeaef708c8f0526745ece9c6cf533c04203ef68adbeb7a4c57f3c2c5ce77bc67ff6cba6d29dccbc4ac53bb7c696831896b896ad3c11256e9cffe0f964d027b7566307a731da3141680e4141d8ade16d106369057fb94b2444864c021c810399cf6b6efb22b415e348fce45e6a8867349e1f4ab628eef82edc8b327483c0f4298d9eb4d5087b5b314c0cb774889a1313667644a63ef0ca903c75bcc98d55925e66bda11ef0c06fdb7d102b59b33af9adbffa5e9de06890d52be1dc9a8fa4c4dfa2eacc8dd41e4b65b332544015fb1c6f1f0a5b580519b86757786d5fb2a7e372e41f0901bc436806ecd287e1d838baf3aa691e02c635b2556b030a821bb667b7ef64637daf5b9a96e5450a3ec75a08a335f6bce6077364615fbc17c20792429245c75e747155ca7fb8a62ef4ded454261d49ebd0c16d170c900e83e95257bcc1a38471184c53e574ae0955aeeaddb4c74aa68ddfdad51456699e1ff2a418211f88060c92870420341654a576d84629ba73df4ee30add79e4aa10d77aef3a91150dd9c4ceecfdee87451d8579326ca4a280b4fee69895c114bc94af3e713d5c31d458402c3e985f84089de6f06b85fb0deda02ff94f1981c391ea8600a5f2471c7bfbcfd4932b9492b0872c611f89568d8074386d505cb34395db1fec0ac2ddafa3bdebc9382293bd6b80da476b1738b2ab3b367bb7b5f128a59b2d255301c20b52cb32de4304e4b2a13003743b7da6896ecdeac26c1fcc5645381fc77f6fda76b552bb19bf1c70975cfb9f687bdacb453c1edc68b8aa0a8f8f810b4c79f9f0ed0de71df035753eecaaa218f306189fc8a4162517c10a661ee72ac0e0eac777f3a23a271a5edffb98b5283a7ce7d7d87323776eaa414eb8f5b35280f26e441ca9a13f862180c789c4b9d5d8ae01725337cda47700e0126c8b773616fa496a240b05886c20b0d9e729230de687ec529a7ca54d5dcfe579cc940a449003817f2fca694cab52bd650cdab08638f0891d26e53bb6a1f8b38b4a612de30ba03213b2d42c454930d8ab8dff504d5fa8761de63425e8542ab9f2b2d023285a67ad0d75af604c4a274c27817e38d0f4d0504cbf81f5b1691336d3da00948dda8318f04d49743b5bcee0a7757f88a98835c29bdee98100bac0236773d80fba4b52006f4daf54451098ac20b0e7520772d37524fd9b561bf9d425f7caa9ffb52434a97dd08f2d1783c4636b914b63f159984af36abdfa6f202e8dc3415b54dcea321f3a6a2e3a71ebdff01bbe71abd2575fc6b26a39f38d00478e97c429c34dcf2af5ce3406bc3ebcc354d5970a84dce4f1c80e216eb1936836f5c53040c733008a900d722272a1dfe4d405ade2f8bfcb6859bb2993a9b83fa6303759a6fb97f1282b2a2234bf00859ee6a2129f8eb35c3e0cd6c643991b2be1d699c04a940f8bd0d5d24fca9c661482b30976cb6e1a28b5fda80b534f90458930cdeb2358ced19ad2a7692b7dc585fc4edb768a97c0eefa1c6f7dddbdac98ac1b93fb0b5aa8858308903b82976cd9e2e2b714ef58ea01b6794911f8da8ac0d85e9d4966828f3cc5e54730506698ea4ce90aaa7be9f3295fa25ff73f5d07e9ffd42fb1e68383b8d908156a2000b578df3b0e5a9e46f435660cda7fa63d16da948a0aab4e02a71ec159c7af7821018d45bccd747edbec40c5339586e81cd1468dcdcaf47e2555cdcfc94001d3a8d8adc706f16de568f1bfe85278809599e14c21238d0b513579b229bc6654dad32fd9b06db9fc038cc435f29a7e51ffd9360175a1432d99c595ada5a820e1dbcbf53bdcbbbdc2e3487a876833604ee517fa35f9fc7fad810ffe1dba351d6274affaf302fe3d989ba981cf6ab7f98c94e21fbe4987993c947d9361110dcf43aa1306ed615799934b58aa410b90eed4516afb8783e5a5974807b351aeb3eee8824524a20cffe00b8237775f8d0294c93601cfbc2110c31b4ef9b486424fff997b6aa8d6ca9759af4a800bc98b64d6feeb30bb759c36bed66a58924645c55a89d3fb5dbf76c54af20d45757a93f6476305841ae5a33d87677423f020fa430424a3ffa0a5b9e96f16587f7eee08b333fdfc32c9073b8a584cb2b25323cf22cc96bb1775c14c3ce20ea7339cc988ec16904867d377685831e3cf515bff3bc0de751e3e85f9664b385da266ba9765a3c99fa36f343c31a1ebfe8a1648f51765a592b196f7df09ffaa529640db6667655eb10c3cef91233a47e48433aab9ea84ea2e4b9577ae94eb9a28cb47d9d17df7d402dcb54ee8b40b17e4274ad47b16dde0b960c77f7e3a9d6c60f55230794f46cf4238228abde2dadb036451191232347bc036fb97cbfafc875da30fe8ae92a1cdcd5717f354e25e826509e3159ec21ba05996480aae58535b9e3f546a48bf8ee743545ebc360e140ea1748c723b5fdb3697c99e7e57cebdd7f341674d5fc34a3a4381bbd99089e9ab55a9ec3847e61e2d53fea1bb984239d4e683a6e7b930a99272d3d1f21a4b46e820014e426e1", 0x1000}], 0x9}, 0x0) 2.471388385s ago: executing program 1 (id=2479): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/210, 0xd2}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}], 0x20}, 0x2) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, 0x0}, 0x20040000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e78fe8d2d2b6c64e34f78894fd7566d763eb89be4f198af192c873ba35d3f238b59aaafc2c445a7a19c9100af292fd50d3cf7257441a8a9dbd45626b09ea6e65aa79ea"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6de62f00080000001826", @ANYRES32, @ANYBLOB="0000000003000000"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x2f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x6, 0x0, 0x20000, 0xb, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x7ffffffe, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24048811) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.470107595s ago: executing program 2 (id=2480): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000880)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/238, 0xee}, {&(0x7f0000000a00)=""/210, 0xd2}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}], 0x20}, 0x2) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}, 0x0, 0x3}, 0x80, 0x0}, 0x20040000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000601fac8b00e2c30d000c00000005000000fdffffff0000000604000000839a6ab19c15f93747692e19f5f757860712df9ec5be3423764c2ccaf3e78fe8d2d2b6c64e34f78894fd7566d763eb89be4f198af192c873ba35d3f238b59aaafc2c445a7a19c9100af292fd50d3cf7257441a8a9dbd45626b09ea6e65aa79ea"], 0x0, 0x29, 0x0, 0x1, 0xfffffffa}, 0x28) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000faffffff00000000faffffff6de62f00080000001826", @ANYRES32, @ANYBLOB="0000000003000000"], &(0x7f0000000580)='GPL\x00', 0xd, 0x4f, &(0x7f00000005c0)=""/79, 0x41000, 0x20, '\x00', 0x0, @sched_cls=0x2f, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x9, 0x3, 0x1f}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000700)=[{0x0, 0x4, 0xb, 0x1}, {0x2, 0x5, 0xe, 0xa}], 0x10, 0x58586df}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) r5 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x1, 0x0, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, @perf_config_ext={0x8000000000000000, 0x8}, 0x3b35, 0x0, 0x0, 0x6, 0x0, 0x20000, 0xb, 0x0, 0x4, 0x0, 0x3}, 0x0, 0x7ffffffe, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x24048811) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.469223985s ago: executing program 0 (id=2481): r0 = socket$kcm(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb, 0x3}, {0x10000002, 0x20, 0x400084, 0x3}]}, 0x94) close(0x3) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0x8) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x1800}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) r8 = syz_clone(0x82c0200, &(0x7f0000000300)="c110d57753783479a3c005759999e88990d1dc015bf5ea3282ac9ce0e807fadf7a60f5f326d8122ea3e9e7210c9790c451ce8a8c59ec59d19271146bd3514489fa3f9467dd38004d1845867b871d4d76ea9ddf04c416b68edeedad1e98247861a954be457349", 0x66, &(0x7f0000000380), &(0x7f0000000580), &(0x7f0000000600)="7fa3e03bc9ed6803981d7ca5de2097df65ba5124bdc4f2f1606b1ed6ea0a7bc8ad55d72ced4735b9dbf61ba2d30389beba63c70141cddd57aa7ed6ae09e9244f39c80a35b9e069dc6f0244b488b24b00e732768c364b66d9195e031f781b07b8f49801d4d51f041966a7fe") bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000740)=@o_path={&(0x7f0000000100)='.\x00', r6, 0x4000, r2}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={r8, r4, 0x0, 0x1, &(0x7f0000000680)='\x00'}, 0x30) recvmsg$kcm(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x102) 1.335181093s ago: executing program 2 (id=2482): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000007f030010000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad00009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x28044) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xad, &(0x7f000000cf3d)=""/173, 0x41000, 0x2, '\x00', 0x0, @cgroup_sysctl=0x12}, 0x94) close(r3) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x200400b0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001600)={@fallback, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000340)=ANY=[@ANYBLOB='b 75:*\tw\nr'], 0xa) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r9, 0x107, 0x8, &(0x7f00000000c0), 0x4) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000081}, 0x20050) recvmsg$kcm(r9, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=""/161, 0xa1}, 0x60) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80044, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0}, 0x0, 0x5}, 0xffffffffffffffff, 0xfffffeffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10, 0x0}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002a40)}, 0x0) 1.333806453s ago: executing program 0 (id=2489): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r4, &(0x7f0000006480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000c00)=""/4088, 0xff8}, {&(0x7f0000000480)=""/66, 0x42}, {&(0x7f00000002c0)=""/35, 0x23}], 0x6}, 0x0) recvmsg$kcm(r4, &(0x7f00000030c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0xfff9, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x90) 1.267779016s ago: executing program 1 (id=2483): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x11, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_config_ext={0x7b7b, 0x7fff}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x7d55f909d2fe5691, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0xccab, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, r3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x80000001, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$sock(r5, &(0x7f0000000180)={&(0x7f0000000280)=@caif=@util={0x25, "c185cb6fffa90fc86a85afe93732c7e9"}, 0x80, 0x0}, 0x8000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000006000000000000000200000604000000030000000000000005000000000000000000"], 0x0, 0x3a, 0x0, 0x1}, 0x28) r6 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000300"], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r8}, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=r8, 0x4) r9 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x21, 0x0, 0x0) 921.700601ms ago: executing program 2 (id=2484): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x6ce29e0b86f4d33f, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x20000010) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @remote, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000004000000711096000000000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000001c80)={&(0x7f0000000400)=@generic={0x29, "da937f2c548f668eeb4debaa035dbdf966a325ee19a1c0443b5504508d87e4d28b544c7fd544f20c21e2f55d2197566c3c96427bf3e0de4383a90b38ea4e6f53999afad096ca1d71f3674be4af8828716620e4638cdc5b9b060201b32e6bab34d5ea4ec2e74427778c57794455dc3f1fd361d801caabaac0ffa9a6acbce1"}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)="12966197af52ed5a54d8e6f44cc205366371e6da2b86bf3fc7cd856cb3be5485158a375ffacf8ad2c56b79784eb92f825b", 0x31}, {&(0x7f00000005c0)="06403ace53395c73b3e2e37b400ba87d25418eb098115c945142d365796ec9c72bc04321836a903a0fe6df36d2ac8ab94e563c0ce22446899bad17b69fef8f02180a770b25f4cd6925f6fe0a85b417678ed9fe1abeccade0b8246c73d23dcb1912", 0x61}, {&(0x7f0000000640)="9e492aab87f4ce751b96a1ac0652673a2db09f02c3c9a234fb5b5ec06f9a6ab48d42737a7edc04faca26fc3fb26387596e4bd4543d9e213cd8b23645c4e213a5e13aaa2a3b910c3d10ccc6573aa16d17c402a9e07f62f73e9d99eb1ff8a91c20797b3dabe267c60bd513e1d9f8cfe7296c0fc3d360985133662908c6bef3fdbd6768840286401db1d720b810631d1dfce88e4541924bf8deb81ab7baffd42c8295c86ae52493d90cb04579d0a53d3096b641f3513deaef715c0c82a358344f76a1885a8a4d2d406bf63df3a3c48e5f10688ff3", 0xd3}, {&(0x7f00000007c0)="2ff2ce25e92598a23487d8b9362b51b2a07e83fd83949ae54fba73052ecf2fc9cc0d2a4a41fd0ab1fc948059b68169c23916746e1c9c7e4de6634125a0466c2bb0e6e800aebcd04989fbce0e42d9e6a3f9d14950eed2767dfd921896296bed10061cd59fc72da4", 0x67}], 0x4, &(0x7f0000000880)=[{0xd8, 0x101, 0x1ff, "3111cebda93ef8a391deb6fa57b28c0b938fa6bda44be67c6bd3ae7713e28cf740db9f794211d2a9e879aa41ffb6f1255ca2da2014bb7f166dfb9221ca304679b9253fe26cf090f569a724813eb37b5417661fd02a54397a177c99bbc5fc422e46574e71d772088ab9856cdad75bef3ad04fe4dd529819fc05c91c0207bea332f5468ea44e887da64c5264a3dddc181e2a84ce27ddedfca65664ec447c0584e3f42274faf3523284e48034fb1dbc5f8ad5d5b4a2f3cf78e1b113450c19d3c7673f986195"}, {0x10, 0x1, 0xf7}, {0x98, 0x104, 0xf, "9372bafd130c566b201498de87fe5a98c1d95306dced882286e5004f62eb1a8bd1ed065506a28c7d18750307949b43f18b5b822b2166e56c06d4ea7f985f53d290f85f935dfac9d46e434eaa450d07aad272a2fb91aa8f2dbbb68b5086ec747567fcf6a489e4fc486be80fbcb58f376bd301760a5ccccb201c171acc8675e4354d050b"}, {0x1010, 0x10f, 0x1000, "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"}, {0xc8, 0x10e, 0x0, "499a104fa05c4911d0596defd9f861eae7fc0cd1198b9d3f13a6315fc283ac458432243320c846f9de01f7b833caefd1513928174211fbad74858149faaefffb2fdf8b17512a2288e5898d9b03f3698ed077ac2d16a6c237c559932389dff3ba88b5ceaf40a41cca5b93de830c27d1627369dc12d9d5495a0218ac0780e8b0f90021ed704da65125110acac7cac79d308f38baa10e9e39d0b26454b763da854e3c097edcb3c381a2eb5790a866b14371e259"}, {0x110, 0x119, 0x7, "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"}, {0x60, 0x10a, 0x5, "d40884cc49e3d00b2bed6756dd0eeed96b874ad083781ebab150f2b9f6c035e98d6da8689ec226312881cb74afaea918df65b4120ce68f73788c60d300a0c061177e0b49458359b951"}], 0x13c8}, 0x20000810) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) close(0x4) 886.272672ms ago: executing program 1 (id=2485): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$unix(0xffffffffffffffff, 0x0, 0x40800) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002002500020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x4}]}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e32, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x45) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x20, 0x4, 0xb, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) 674.337231ms ago: executing program 2 (id=2486): perf_event_open(0x0, 0x0, 0xfff0000020000003, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x4, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_config_ext={0x7b7b, 0x7fff}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xe, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$sock(r3, &(0x7f0000000180)={&(0x7f0000000280)=@caif=@util={0x25, "c185cb6fffa90fc86a85afe93732c7e9"}, 0x80, 0x0}, 0x8000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000006000000000000000200000604000000030000000000000005000000000000000000"], 0x0, 0x3a, 0x0, 0x1}, 0x28) r4 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r4, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xfffd, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000300"], 0x18}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r7}, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000040)=r7, 0x4) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x21, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r5, 0x0, 0x0, 0x4}, 0x20) 672.199681ms ago: executing program 0 (id=2494): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x171301, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x21ed000000000, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (fail_nth: 2) 4.05061ms ago: executing program 2 (id=2487): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='&\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="fe"], 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0xfc00) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f0000000380)="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", 0xff}, {&(0x7f0000000640)="15d0fa7a9f62cd20c79e2b9c8d262db2fbafd353f999c2b8228634238e85340fae27cf610848d59517b6a3fd61ddcbc2cb431a6e52d56ba468cd680c4ceb89f796ec75c0e37df870f9fe54df2075a9829a7f79a300fc0f5ea2b20fcf27c1552c2458eded28fa47aaa82c48e8895f232efe90dc8ff778c6c3ec1f5f1f71c03e3b94c233a97bc36202d1c33bcf749797be764383aba6284f141a4bba227c959ab2d66c1401b28c13306263fe48f25bb4ed8375c36bbdc5aeb0de95a9c7dfafc6f77e98f90f05d591650d5c3e4b92ff42c7db01810826cd934ff72930a42773", 0xde}, {&(0x7f0000000740)="53c8b5104e72c427f617f3fc1f69505d5c70fe9656633c90a3dd57af2db36a2218bedd5611969d715457c81b70a29ad369a8b188413f4d5ebd7c9d36d86e6733e7bf42cf78830ed2e5abc9791370c1785925be4d7961a4d17613978356446d415f89de07c151895a3917bd40f4474a88494f0b4e472f2affb8c9fddf80a3435c62b7ebbe5e0c6cb8c016a4e452123910bf928b76b1b4b98e996f31ac77acb66d01b6c0410311cc9b1d7a67b70de65e426d289f27596f374dfe62ca5d406e85a8eede39911e1fa51a72a1c8ef32a7f2f3979381194dc2f33ec17c2c68dd9e770e1520630766db8a34155f6e12d333c90407dd6e25aa6c", 0xf6}, {&(0x7f0000000840)="99ddc9eb3579ece977ea7d4e052326e77b4ab20519030ba9f937c5d36755fb8d8874a5892d5b0a2b49b8b77f830bc703ba386fceff7fdbb76a6dcf7b1784f305fb90c92f40d3d7f50132109d633b112b56d43acd03b8bac24e0ed9198e053baae012f382728607f57b30b057da06abc2a10116da2628987909b2a8a9522e4235dc035942d25c1a82c3ef6e1b68f7c92a5457240d329ff230b5b08581162ef2ede4a4291861c161df209ad34c46cc6f3296d00e7839", 0xb5}, {&(0x7f00000009c0)="700995ada77a9a032ac65240057d4bb72d0c1c1fc96935a2de824007c309042291de36a17dc1572942c88a445fcb4ae085bc7c61f76b1f87aa068b8b0b9c07eba418dcce29c7aa9434d12e500ec78b38b0583188ad3ed337850e7560aaabbd70941e12cd621f6ee009f7df4cb8f0701faaabc4d904cab9f9d67bd05a76b0d1ce96067e652f61a171", 0x88}, {&(0x7f0000000a80)="36c67e18d4c6704261e125e131508d8f0cf61cd558fd2700a4ec5b6441cf7e48d946fa0b83785f5c4bddb6fc539edc315cd3d0e277f4118613946ba9891a502ec9454940565760c43e47c38399fdf874fcdca6c5c3344c30ae69c7b445c88b2f92746686b1728529088fe9149eb65db79adada1a869d6e1435f0174283c9192652e67ad8836677cbe73602b4b2c16aba9a8b8ec79ac37b544c4ac821ffa0be02e34a206bbb0d503c420e36826dcd261b9c7e6f8bdd6bfc6d311a86048eb8577d3842799ebeabe61bed9bc4e524fbecde15af5135b4d8d8b1a0bffa3c3501e24fe3e652999baa263d", 0xe8}, {&(0x7f0000000b80)="920fa9f92a873fab8704a1c4f986cc438c36263f586ed185c6f2319e6c59f0637600dfde6d1b00cb86f543ec1aaf70dcda7b0f1a78c486e3054d437b7506c71242e08c818361dd51a305ba3e32c3a1d94484c844665eb8defc2c30ab91091f5b6f64c1891f2e492100abc426dbdbc33ac97e29c627b5cfb49bc7f644", 0x7c}, {&(0x7f0000001980)="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", 0x1000}], 0x9}, 0x0) 465.73µs ago: executing program 0 (id=2496): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lli}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3, 0xffffffffffffffff}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x10, 0x4, 0x4, 0xffffffff, 0x40, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$sock(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adcd922e70fa89f0e436ab6", 0x37}, {&(0x7f0000000100), 0xfffffeda}], 0x2}, 0x4804) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xe, 0x0, &(0x7f0000000280)="b306ac9676b27004d3c8ff6f88ec", 0x0, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 0s ago: executing program 1 (id=2488): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411cf2600010000000028000000000000000000000007000000014414"], 0x48}, 0x200040c4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x9, 0x60cb01f8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe000000008500000089000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x7}, 0x100400, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xe, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x4, 0xffffffffffffffff, 0x3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x10003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8d157164}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x1, 0xdb, &(0x7f0000000640)=""/219, 0x41100, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x1, 0x9, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000007c0)=[r1], 0x0, 0x10, 0x101}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0xb3, 0x0, 0x0, 0xffffffffffffffa8, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x5, 0x0) close(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f00000000c0)=r3}, 0x20) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000c80)=""/214, 0xd6}], 0x1}, 0x10143) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='-cpu -cpuset +memory -net +rli\b\x00\x00\x00'], 0x22) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40086602, &(0x7f0000000180)=0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB=',\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB="8b81ca45a2e897193c46024de9dd32e94308bfc8220a74e6b3d2a440f157c77535e2707581f40830fb1d777e3fb43d429cdecf3eb5ef6d5b0270cdf63a62ce337ce1b3c883d8f895e41f56df9cd948f75b9715c34a2002d13079a9baf38e7ce840a3d3aa490f6f", @ANYRES32=r5, @ANYBLOB, @ANYRES64=0x0], 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) syz_clone(0x0, &(0x7f00000001c0)="0a407e63a58c0ce97cfde16b8803228c7ecfac9d5a368235050322", 0x1b, &(0x7f00000002c0), &(0x7f0000000440), &(0x7f0000000a40)) socketpair$unix(0x1, 0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 417.229045][T11610] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 417.235324][T11610] ? lock_chain_count+0x20/0x20 [ 417.240396][T11610] ? __local_bh_enable_ip+0x13a/0x1c0 [ 417.246152][T11610] ? lockdep_hardirqs_on+0x98/0x150 [ 417.251728][T11610] ? __local_bh_enable_ip+0x13a/0x1c0 [ 417.257940][T11610] ? _local_bh_enable+0xa0/0xa0 [ 417.263695][T11610] ? __dev_queue_xmit+0x265/0x3660 [ 417.269394][T11610] ? __dev_queue_xmit+0x265/0x3660 [ 417.274871][T11610] ? __dev_queue_xmit+0x1b2c/0x3660 [ 417.280181][T11610] ? __dev_queue_xmit+0x265/0x3660 [ 417.285831][T11610] ? perf_trace_lock+0xfc/0x3b0 [ 417.291068][T11610] netlink_rcv_skb+0x241/0x4d0 [ 417.295867][T11610] ? rtnetlink_bind+0x80/0x80 [ 417.300653][T11610] ? netlink_ack+0x1180/0x1180 [ 417.305519][T11610] ? __lock_acquire+0x7d40/0x7d40 [ 417.310552][T11610] ? netlink_deliver_tap+0x2e/0x1b0 [ 417.316226][T11610] netlink_unicast+0x751/0x8d0 [ 417.321300][T11610] netlink_sendmsg+0x8d0/0xbf0 [ 417.326702][T11610] ? netlink_getsockopt+0x590/0x590 [ 417.332400][T11610] ? aa_sock_msg_perm+0x94/0x150 [ 417.337690][T11610] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 417.343174][T11610] ? security_socket_sendmsg+0x80/0xa0 [ 417.348740][T11610] ? netlink_getsockopt+0x590/0x590 [ 417.354043][T11610] ____sys_sendmsg+0x5ba/0x960 [ 417.358978][T11610] ? __asan_memset+0x22/0x40 [ 417.363685][T11610] ? __sys_sendmsg_sock+0x30/0x30 [ 417.368821][T11610] ? __import_iovec+0x5f2/0x850 [ 417.374046][T11610] ? import_iovec+0x73/0xa0 [ 417.378730][T11610] ___sys_sendmsg+0x2a6/0x360 [ 417.383500][T11610] ? __sys_sendmsg+0x2a0/0x2a0 [ 417.388485][T11610] ? __lock_acquire+0x7d40/0x7d40 [ 417.393549][T11610] __se_sys_sendmsg+0x1c2/0x2b0 [ 417.398514][T11610] ? __x64_sys_sendmsg+0x80/0x80 [ 417.403565][T11610] ? lockdep_hardirqs_on+0x98/0x150 [ 417.409386][T11610] do_syscall_64+0x55/0xa0 [ 417.413811][T11610] ? clear_bhb_loop+0x40/0x90 [ 417.418844][T11610] ? clear_bhb_loop+0x40/0x90 [ 417.423621][T11610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.429541][T11610] RIP: 0033:0x7f5cac99cdd9 [ 417.434331][T11610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.454563][T11610] RSP: 002b:00007f5cad7be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.464273][T11610] RAX: ffffffffffffffda RBX: 00007f5cacc15fa0 RCX: 00007f5cac99cdd9 [ 417.472743][T11610] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 417.482391][T11610] RBP: 00007f5cad7be090 R08: 0000000000000000 R09: 0000000000000000 [ 417.491417][T11610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 417.501077][T11610] R13: 00007f5cacc16038 R14: 00007f5cacc15fa0 R15: 00007ffe6d379058 [ 417.509446][T11610] [ 417.613822][T11612] sctp: [Deprecated]: syz.0.2007 (pid 11612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.613822][T11612] Use struct sctp_sack_info instead [ 417.921579][T11619] netlink: 'syz.3.2009': attribute type 10 has an invalid length. [ 417.958533][T11619] bridge0: port 4(dummy0) entered blocking state [ 417.967622][T11619] bridge0: port 4(dummy0) entered forwarding state [ 417.978317][T11619] bridge0: port 3(bond0) entered blocking state [ 417.987493][T11619] bridge0: port 3(bond0) entered forwarding state [ 417.996773][T11619] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.008993][T11619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.020425][T11619] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.029681][T11619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.136397][T11619] team0: Port device bridge0 added [ 418.292232][T11624] sctp: [Deprecated]: syz.2.2011 (pid 11624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.292232][T11624] Use struct sctp_sack_info instead [ 418.443098][T11628] sctp: [Deprecated]: syz.1.2019 (pid 11628) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.443098][T11628] Use struct sctp_sack_info instead [ 418.544527][T11630] FAULT_INJECTION: forcing a failure. [ 418.544527][T11630] name failslab, interval 1, probability 0, space 0, times 0 [ 418.603231][T11630] CPU: 1 PID: 11630 Comm: syz.3.2013 Not tainted syzkaller #0 [ 418.611125][T11630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 418.622221][T11630] Call Trace: [ 418.625734][T11630] [ 418.628864][T11630] dump_stack_lvl+0x18c/0x250 [ 418.634569][T11630] ? show_regs_print_info+0x20/0x20 [ 418.640010][T11630] ? load_image+0x420/0x420 [ 418.645190][T11630] ? verify_lock_unused+0x140/0x140 [ 418.650786][T11630] should_fail_ex+0x39d/0x4d0 [ 418.655605][T11630] should_failslab+0x9/0x20 [ 418.660318][T11630] slab_pre_alloc_hook+0x59/0x310 [ 418.665651][T11630] kmem_cache_alloc+0x5a/0x2d0 [ 418.670534][T11630] ? skb_clone+0x1eb/0x370 [ 418.675079][T11630] skb_clone+0x1eb/0x370 [ 418.679485][T11630] __netlink_deliver_tap+0x41c/0x830 [ 418.685087][T11630] ? netlink_deliver_tap+0x2e/0x1b0 [ 418.690769][T11630] netlink_deliver_tap+0x19c/0x1b0 [ 418.696469][T11630] __netlink_sendskb+0x4b/0x90 [ 418.701639][T11630] netlink_dump+0xa75/0xe50 [ 418.706529][T11630] ? netlink_lookup+0x200/0x200 [ 418.711611][T11630] ? __asan_memset+0x22/0x40 [ 418.716245][T11630] ? genl_start+0x493/0x6b0 [ 418.720875][T11630] __netlink_dump_start+0x5f1/0x810 [ 418.726311][T11630] genl_family_rcv_msg_dumpit+0x214/0x310 [ 418.732349][T11630] ? genl_rcv_msg+0x7a0/0x7a0 [ 418.737321][T11630] ? genl_get_cmd+0x7f1/0x920 [ 418.742132][T11630] ? genl_family_rcv_msg_doit+0x310/0x310 [ 418.748346][T11630] ? genl_start+0x6b0/0x6b0 [ 418.753146][T11630] ? genl_dumpit+0x1a0/0x1a0 [ 418.757876][T11630] genl_rcv_msg+0x5e5/0x7a0 [ 418.762658][T11630] ? genl_bind+0x360/0x360 [ 418.767201][T11630] ? ovs_dp_cmd_get+0x3e0/0x3e0 [ 418.772439][T11630] ? ref_tracker_free+0x690/0x840 [ 418.777894][T11630] netlink_rcv_skb+0x241/0x4d0 [ 418.782940][T11630] ? genl_bind+0x360/0x360 [ 418.787465][T11630] ? netlink_ack+0x1180/0x1180 [ 418.792347][T11630] ? __lock_acquire+0x7d40/0x7d40 [ 418.797488][T11630] ? down_read+0x1ac/0x2e0 [ 418.802014][T11630] genl_rcv+0x28/0x40 [ 418.806089][T11630] netlink_unicast+0x751/0x8d0 [ 418.811060][T11630] netlink_sendmsg+0x8d0/0xbf0 [ 418.816114][T11630] ? netlink_getsockopt+0x590/0x590 [ 418.821675][T11630] ? aa_sock_msg_perm+0x94/0x150 [ 418.827151][T11630] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 418.832550][T11630] ? security_socket_sendmsg+0x80/0xa0 [ 418.838136][T11630] ? netlink_getsockopt+0x590/0x590 [ 418.843994][T11630] ____sys_sendmsg+0x5ba/0x960 [ 418.848892][T11630] ? __asan_memset+0x22/0x40 [ 418.853583][T11630] ? __sys_sendmsg_sock+0x30/0x30 [ 418.858650][T11630] ? __import_iovec+0x5f2/0x850 [ 418.863543][T11630] ? import_iovec+0x73/0xa0 [ 418.868262][T11630] ___sys_sendmsg+0x2a6/0x360 [ 418.873080][T11630] ? __sys_sendmsg+0x2a0/0x2a0 [ 418.878041][T11630] __se_sys_sendmsg+0x1c2/0x2b0 [ 418.883049][T11630] ? __x64_sys_sendmsg+0x80/0x80 [ 418.888286][T11630] ? syscall_enter_from_user_mode+0x2e/0x80 [ 418.894391][T11630] do_syscall_64+0x55/0xa0 [ 418.899278][T11630] ? clear_bhb_loop+0x40/0x90 [ 418.904192][T11630] ? clear_bhb_loop+0x40/0x90 [ 418.909250][T11630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.915269][T11630] RIP: 0033:0x7f5f42d9cdd9 [ 418.920020][T11630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.940698][T11630] RSP: 002b:00007f5f43d28028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.949409][T11630] RAX: ffffffffffffffda RBX: 00007f5f43015fa0 RCX: 00007f5f42d9cdd9 [ 418.957594][T11630] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 418.966135][T11630] RBP: 00007f5f43d28090 R08: 0000000000000000 R09: 0000000000000000 [ 418.975193][T11630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.984219][T11630] R13: 00007f5f43016038 R14: 00007f5f43015fa0 R15: 00007ffcc0c70958 [ 418.992519][T11630] [ 419.553229][T11645] sctp: [Deprecated]: syz.3.2020 (pid 11645) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.553229][T11645] Use struct sctp_sack_info instead [ 419.654406][T11647] sctp: [Deprecated]: syz.0.2021 (pid 11647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.654406][T11647] Use struct sctp_sack_info instead [ 420.086314][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 420.626276][T11661] sctp: [Deprecated]: syz.1.2025 (pid 11661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.626276][T11661] Use struct sctp_sack_info instead [ 420.633788][T11658] sctp: [Deprecated]: syz.3.2022 (pid 11658) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.633788][T11658] Use struct sctp_sack_info instead [ 420.703594][T11659] netlink: 'syz.2.2024': attribute type 10 has an invalid length. [ 420.801350][T11659] team0: Port device bridge_slave_1 added [ 421.273211][T11674] netlink: 'syz.2.2028': attribute type 10 has an invalid length. [ 421.636112][T11688] sctp: [Deprecated]: syz.2.2034 (pid 11688) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.636112][T11688] Use struct sctp_sack_info instead [ 421.703914][T11686] sctp: [Deprecated]: syz.1.2033 (pid 11686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.703914][T11686] Use struct sctp_sack_info instead [ 422.528583][T11703] sctp: [Deprecated]: syz.2.2038 (pid 11703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 422.528583][T11703] Use struct sctp_sack_info instead [ 422.946136][T11714] FAULT_INJECTION: forcing a failure. [ 422.946136][T11714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.984165][T11714] CPU: 0 PID: 11714 Comm: syz.2.2043 Not tainted syzkaller #0 [ 422.993418][T11714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 423.004737][T11714] Call Trace: [ 423.008330][T11714] [ 423.012098][T11714] dump_stack_lvl+0x18c/0x250 [ 423.017169][T11714] ? show_regs_print_info+0x20/0x20 [ 423.022490][T11714] ? load_image+0x420/0x420 [ 423.027819][T11714] ? __lock_acquire+0x7d40/0x7d40 [ 423.033409][T11714] ? snprintf+0xe9/0x140 [ 423.038428][T11714] should_fail_ex+0x39d/0x4d0 [ 423.043743][T11714] _copy_to_user+0x2f/0xa0 [ 423.048746][T11714] simple_read_from_buffer+0xe7/0x150 [ 423.054795][T11714] proc_fail_nth_read+0x1e8/0x260 [ 423.060129][T11714] ? proc_fault_inject_write+0x360/0x360 [ 423.066139][T11714] ? fsnotify_perm+0x271/0x5e0 [ 423.071663][T11714] ? proc_fault_inject_write+0x360/0x360 [ 423.078268][T11714] vfs_read+0x28b/0x970 [ 423.083662][T11714] ? kernel_read+0x1e0/0x1e0 [ 423.088992][T11714] ? __fget_files+0x28/0x4b0 [ 423.095881][T11714] ? __fget_files+0x28/0x4b0 [ 423.101238][T11714] ? __fget_files+0x43d/0x4b0 [ 423.106473][T11714] ? __fdget_pos+0x2a3/0x330 [ 423.112079][T11714] ? ksys_read+0x75/0x260 [ 423.116787][T11714] ksys_read+0x150/0x260 [ 423.122055][T11714] ? vfs_write+0x990/0x990 [ 423.127724][T11714] ? lockdep_hardirqs_on+0x98/0x150 [ 423.133863][T11714] do_syscall_64+0x55/0xa0 [ 423.138560][T11714] ? clear_bhb_loop+0x40/0x90 [ 423.143516][T11714] ? clear_bhb_loop+0x40/0x90 [ 423.150216][T11714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 423.157781][T11714] RIP: 0033:0x7f5cac95d60e [ 423.163185][T11714] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 423.185371][T11714] RSP: 002b:00007f5cad7bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.196036][T11714] RAX: ffffffffffffffda RBX: 00007f5cad7be6c0 RCX: 00007f5cac95d60e [ 423.204483][T11714] RDX: 000000000000000f RSI: 00007f5cad7be0a0 RDI: 0000000000000004 [ 423.213368][T11714] RBP: 00007f5cad7be090 R08: 0000000000000000 R09: 0000000000000000 [ 423.221758][T11714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.230198][T11714] R13: 00007f5cacc16038 R14: 00007f5cacc15fa0 R15: 00007ffe6d379058 [ 423.239242][T11714] [ 423.449950][T11722] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2046'. [ 423.451448][T11726] sctp: [Deprecated]: syz.0.2048 (pid 11726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.451448][T11726] Use struct sctp_sack_info instead [ 423.470585][T11724] sctp: [Deprecated]: syz.3.2047 (pid 11724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.470585][T11724] Use struct sctp_sack_info instead [ 423.917589][T11734] sctp: [Deprecated]: syz.2.2050 (pid 11734) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.917589][T11734] Use struct sctp_sack_info instead [ 424.467145][T11751] FAULT_INJECTION: forcing a failure. [ 424.467145][T11751] name failslab, interval 1, probability 0, space 0, times 0 [ 424.522743][T11751] CPU: 0 PID: 11751 Comm: syz.0.2055 Not tainted syzkaller #0 [ 424.530539][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.542375][T11751] Call Trace: [ 424.545890][T11751] [ 424.550084][T11751] dump_stack_lvl+0x18c/0x250 [ 424.555552][T11751] ? show_regs_print_info+0x20/0x20 [ 424.561149][T11751] ? load_image+0x420/0x420 [ 424.566128][T11751] ? __might_sleep+0xe0/0xe0 [ 424.570859][T11751] ? __lock_acquire+0x7d40/0x7d40 [ 424.576385][T11751] ? mark_lock+0x94/0x320 [ 424.580951][T11751] should_fail_ex+0x39d/0x4d0 [ 424.585977][T11751] should_failslab+0x9/0x20 [ 424.591034][T11751] slab_pre_alloc_hook+0x59/0x310 [ 424.596624][T11751] ? __get_vm_area_node+0x125/0x370 [ 424.602213][T11751] __kmem_cache_alloc_node+0x53/0x250 [ 424.607989][T11751] ? __get_vm_area_node+0x125/0x370 [ 424.613581][T11751] kmalloc_node_trace+0x26/0xe0 [ 424.618661][T11751] __get_vm_area_node+0x125/0x370 [ 424.624223][T11751] __vmalloc_node_range+0x36e/0x1330 [ 424.630332][T11751] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 424.636093][T11751] ? mark_lock+0x94/0x320 [ 424.640640][T11751] ? __lock_acquire+0x1347/0x7d40 [ 424.646318][T11751] ? verify_lock_unused+0x140/0x140 [ 424.651885][T11751] ? free_vm_area+0x50/0x50 [ 424.656998][T11751] ? end_current_label_crit_section+0x170/0x170 [ 424.665123][T11751] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 424.670978][T11751] __vmalloc+0x7a/0x90 [ 424.675518][T11751] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 424.681174][T11751] bpf_prog_alloc_no_stats+0x47/0x440 [ 424.686796][T11751] ? bpf_prog_alloc+0x2b/0x1a0 [ 424.691699][T11751] bpf_prog_alloc+0x3d/0x1a0 [ 424.696416][T11751] bpf_prog_load+0x6eb/0x1670 [ 424.701755][T11751] ? map_freeze+0x420/0x420 [ 424.706551][T11751] ? __might_fault+0xaa/0x120 [ 424.711294][T11751] ? __lock_acquire+0x7d40/0x7d40 [ 424.716430][T11751] ? file_end_write+0x159/0x250 [ 424.721550][T11751] ? __might_fault+0xaa/0x120 [ 424.726748][T11751] ? __might_fault+0xc6/0x120 [ 424.731433][T11751] ? __might_fault+0xaa/0x120 [ 424.736371][T11751] ? bpf_lsm_bpf+0x9/0x10 [ 424.740710][T11751] ? security_bpf+0x7e/0xa0 [ 424.745215][T11751] __sys_bpf+0x5ba/0x890 [ 424.749559][T11751] ? bpf_link_show_fdinfo+0x390/0x390 [ 424.755389][T11751] ? lock_chain_count+0x20/0x20 [ 424.760601][T11751] __x64_sys_bpf+0x7c/0x90 [ 424.765210][T11751] do_syscall_64+0x55/0xa0 [ 424.770550][T11751] ? clear_bhb_loop+0x40/0x90 [ 424.775630][T11751] ? clear_bhb_loop+0x40/0x90 [ 424.780491][T11751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.786502][T11751] RIP: 0033:0x7ff08c59cdd9 [ 424.790930][T11751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.812360][T11751] RSP: 002b:00007ff08d476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 424.821199][T11751] RAX: ffffffffffffffda RBX: 00007ff08c815fa0 RCX: 00007ff08c59cdd9 [ 424.829624][T11751] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 424.839350][T11751] RBP: 00007ff08d476090 R08: 0000000000000000 R09: 0000000000000000 [ 424.847686][T11751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.855858][T11751] R13: 00007ff08c816038 R14: 00007ff08c815fa0 R15: 00007fffda460c28 [ 424.863952][T11751] [ 424.872988][T11751] warn_alloc: 1 callbacks suppressed [ 424.873005][T11751] syz.0.2055: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 424.903529][T11751] CPU: 1 PID: 11751 Comm: syz.0.2055 Not tainted syzkaller #0 [ 424.911495][T11751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 424.922891][T11751] Call Trace: [ 424.926374][T11751] [ 424.929335][T11751] dump_stack_lvl+0x18c/0x250 [ 424.934046][T11751] ? show_regs_print_info+0x20/0x20 [ 424.939445][T11751] ? load_image+0x420/0x420 [ 424.944483][T11751] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 424.950944][T11751] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 424.957565][T11751] warn_alloc+0x246/0x340 [ 424.962351][T11751] ? __get_vm_area_node+0x125/0x370 [ 424.968950][T11751] ? zone_watermark_ok_safe+0x230/0x230 [ 424.977561][T11751] ? rcu_is_watching+0x15/0xb0 [ 424.983404][T11751] ? __get_vm_area_node+0x356/0x370 [ 424.990215][T11751] __vmalloc_node_range+0x393/0x1330 [ 424.995868][T11751] ? mark_lock+0x94/0x320 [ 425.000464][T11751] ? __lock_acquire+0x1347/0x7d40 [ 425.006464][T11751] ? verify_lock_unused+0x140/0x140 [ 425.011703][T11751] ? free_vm_area+0x50/0x50 [ 425.016342][T11751] ? end_current_label_crit_section+0x170/0x170 [ 425.023079][T11751] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 425.028739][T11751] __vmalloc+0x7a/0x90 [ 425.032816][T11751] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 425.038739][T11751] bpf_prog_alloc_no_stats+0x47/0x440 [ 425.044391][T11751] ? bpf_prog_alloc+0x2b/0x1a0 [ 425.049532][T11751] bpf_prog_alloc+0x3d/0x1a0 [ 425.054170][T11751] bpf_prog_load+0x6eb/0x1670 [ 425.059055][T11751] ? map_freeze+0x420/0x420 [ 425.063651][T11751] ? __might_fault+0xaa/0x120 [ 425.068654][T11751] ? __lock_acquire+0x7d40/0x7d40 [ 425.073909][T11751] ? file_end_write+0x159/0x250 [ 425.078975][T11751] ? __might_fault+0xaa/0x120 [ 425.084045][T11751] ? __might_fault+0xc6/0x120 [ 425.089298][T11751] ? __might_fault+0xaa/0x120 [ 425.094289][T11751] ? bpf_lsm_bpf+0x9/0x10 [ 425.098806][T11751] ? security_bpf+0x7e/0xa0 [ 425.103775][T11751] __sys_bpf+0x5ba/0x890 [ 425.108486][T11751] ? bpf_link_show_fdinfo+0x390/0x390 [ 425.114350][T11751] ? lock_chain_count+0x20/0x20 [ 425.119301][T11751] __x64_sys_bpf+0x7c/0x90 [ 425.124162][T11751] do_syscall_64+0x55/0xa0 [ 425.129320][T11751] ? clear_bhb_loop+0x40/0x90 [ 425.134262][T11751] ? clear_bhb_loop+0x40/0x90 [ 425.139970][T11751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.147432][T11751] RIP: 0033:0x7ff08c59cdd9 [ 425.152344][T11751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.173802][T11751] RSP: 002b:00007ff08d476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.182521][T11751] RAX: ffffffffffffffda RBX: 00007ff08c815fa0 RCX: 00007ff08c59cdd9 [ 425.191038][T11751] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 425.199468][T11751] RBP: 00007ff08d476090 R08: 0000000000000000 R09: 0000000000000000 [ 425.207996][T11751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.217808][T11751] R13: 00007ff08c816038 R14: 00007ff08c815fa0 R15: 00007fffda460c28 [ 425.226783][T11751] [ 425.260068][T11751] Mem-Info: [ 425.263767][T11751] active_anon:9009 inactive_anon:0 isolated_anon:0 [ 425.263767][T11751] active_file:19170 inactive_file:40081 isolated_file:0 [ 425.263767][T11751] unevictable:768 dirty:260 writeback:0 [ 425.263767][T11751] slab_reclaimable:10603 slab_unreclaimable:93475 [ 425.263767][T11751] mapped:25212 shmem:1361 pagetables:541 [ 425.263767][T11751] sec_pagetables:0 bounce:0 [ 425.263767][T11751] kernel_misc_reclaimable:0 [ 425.263767][T11751] free:1343146 free_pcp:8958 free_cma:0 [ 425.350809][T11751] Node 0 active_anon:36236kB inactive_anon:0kB active_file:76680kB inactive_file:160120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100948kB dirty:1040kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10224kB pagetables:2264kB sec_pagetables:0kB all_unreclaimable? no [ 425.398806][T11751] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 425.463278][T11751] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.497470][T11751] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 425.539774][T11751] Node 0 DMA32 free:1460656kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35896kB inactive_anon:0kB active_file:76680kB inactive_file:159288kB unevictable:1536kB writepending:1040kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:24268kB local_pcp:7660kB free_cma:0kB [ 425.598919][T11751] lowmem_reserve[]: 0 0 0 0 0 [ 425.604662][T11751] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.643821][T11751] lowmem_reserve[]: 0 0 0 0 0 [ 425.651308][T11751] Node 1 Normal free:3896320kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15008kB local_pcp:3680kB free_cma:0kB [ 425.689794][T11751] lowmem_reserve[]: 0 0 0 0 0 [ 425.695251][T11751] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 425.713974][T11751] Node 0 DMA32: 722*4kB (UME) 685*8kB (UME) 778*16kB (UME) 1825*32kB (UME) 1183*64kB (UME) 583*128kB (UME) 371*256kB (UM) 259*512kB (UME) 178*1024kB (UM) 23*2048kB (UME) 189*4096kB (M) = 1460656kB [ 425.735951][T11751] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 425.749523][T11751] Node 1 Normal: 216*4kB (UME) 48*8kB (UME) 46*16kB (UME) 132*32kB (UME) 25*64kB (UE) 9*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3896320kB [ 425.772761][T11751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 425.783371][T11751] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 425.795379][T11751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 425.806824][T11751] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 425.821174][T11751] 60612 total pagecache pages [ 425.826940][T11751] 0 pages in swap cache [ 425.832811][T11751] Free swap = 124996kB [ 425.840519][T11751] Total swap = 124996kB [ 425.845001][T11751] 2097051 pages RAM [ 425.849581][T11751] 0 pages HighMem/MovableOnly [ 425.854743][T11751] 416927 pages reserved [ 425.868967][T11751] 0 pages cma reserved [ 425.931368][T11764] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2061'. [ 425.965382][T11767] sctp: [Deprecated]: syz.1.2060 (pid 11767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.965382][T11767] Use struct sctp_sack_info instead [ 426.057061][T11770] sctp: [Deprecated]: syz.0.2062 (pid 11770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.057061][T11770] Use struct sctp_sack_info instead [ 426.787355][T11785] netlink: 'syz.0.2069': attribute type 1 has an invalid length. [ 426.796371][T11785] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2069'. [ 426.824039][T11785] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2069'. [ 426.879570][T11792] netlink: 'syz.3.2071': attribute type 10 has an invalid length. [ 426.914423][T11792] team0: Device ipvlan1 failed to register rx_handler [ 427.027515][T11792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2071'. [ 427.091919][T11797] netlink: 'syz.0.2073': attribute type 29 has an invalid length. [ 427.111614][T11797] netlink: 'syz.0.2073': attribute type 29 has an invalid length. [ 427.153432][T11798] netlink: 'syz.0.2073': attribute type 29 has an invalid length. [ 427.173658][T11797] netlink: 'syz.0.2073': attribute type 29 has an invalid length. [ 427.236346][T11798] netlink: 'syz.0.2073': attribute type 29 has an invalid length. [ 427.291540][T11797] netlink: 'syz.0.2073': attribute type 29 has an invalid length. [ 427.317875][T11802] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2074'. [ 427.394892][T11804] FAULT_INJECTION: forcing a failure. [ 427.394892][T11804] name failslab, interval 1, probability 0, space 0, times 0 [ 427.409533][T11804] CPU: 1 PID: 11804 Comm: syz.3.2076 Not tainted syzkaller #0 [ 427.417376][T11804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.428509][T11804] Call Trace: [ 427.431907][T11804] [ 427.434885][T11804] dump_stack_lvl+0x18c/0x250 [ 427.439857][T11804] ? show_regs_print_info+0x20/0x20 [ 427.445306][T11804] ? load_image+0x420/0x420 [ 427.450633][T11804] ? __might_sleep+0xe0/0xe0 [ 427.455831][T11804] ? __lock_acquire+0x7d40/0x7d40 [ 427.461454][T11804] should_fail_ex+0x39d/0x4d0 [ 427.466541][T11804] should_failslab+0x9/0x20 [ 427.471422][T11804] slab_pre_alloc_hook+0x59/0x310 [ 427.476847][T11804] ? kvmalloc_node+0x70/0x180 [ 427.482004][T11804] ? kvmalloc_node+0x70/0x180 [ 427.487318][T11804] __kmem_cache_alloc_node+0x53/0x250 [ 427.494276][T11804] ? kvmalloc_node+0x70/0x180 [ 427.499473][T11804] __kmalloc_node+0xa4/0x230 [ 427.504345][T11804] kvmalloc_node+0x70/0x180 [ 427.509244][T11804] alloc_netdev_mqs+0xa76/0x1040 [ 427.514425][T11804] ppp_ioctl+0x66c/0x1a90 [ 427.518902][T11804] ? ppp_poll+0x250/0x250 [ 427.523614][T11804] ? __fget_files+0x28/0x4b0 [ 427.528491][T11804] ? bpf_lsm_file_ioctl+0x9/0x10 [ 427.534026][T11804] ? security_file_ioctl+0x80/0xa0 [ 427.540531][T11804] ? ppp_poll+0x250/0x250 [ 427.545591][T11804] __se_sys_ioctl+0xfd/0x170 [ 427.550954][T11804] do_syscall_64+0x55/0xa0 [ 427.555401][T11804] ? clear_bhb_loop+0x40/0x90 [ 427.560170][T11804] ? clear_bhb_loop+0x40/0x90 [ 427.564867][T11804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.570871][T11804] RIP: 0033:0x7f5f42d9cdd9 [ 427.575510][T11804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.596202][T11804] RSP: 002b:00007f5f43d28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.605185][T11804] RAX: ffffffffffffffda RBX: 00007f5f43015fa0 RCX: 00007f5f42d9cdd9 [ 427.614425][T11804] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000003 [ 427.623759][T11804] RBP: 00007f5f43d28090 R08: 0000000000000000 R09: 0000000000000000 [ 427.633263][T11804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 427.642680][T11804] R13: 00007f5f43016038 R14: 00007f5f43015fa0 R15: 00007ffcc0c70958 [ 427.653038][T11804] [ 427.712129][T11807] sctp: [Deprecated]: syz.0.2077 (pid 11807) Use of struct sctp_assoc_value in delayed_ack socket option. [ 427.712129][T11807] Use struct sctp_sack_info instead [ 428.192419][T11820] sctp: [Deprecated]: syz.2.2081 (pid 11820) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.192419][T11820] Use struct sctp_sack_info instead [ 428.374560][T11847] FAULT_INJECTION: forcing a failure. [ 428.374560][T11847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.413052][T11847] CPU: 1 PID: 11847 Comm: syz.3.2083 Not tainted syzkaller #0 [ 428.420871][T11847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 428.431486][T11847] Call Trace: [ 428.435098][T11847] [ 428.438330][T11847] dump_stack_lvl+0x18c/0x250 [ 428.443419][T11847] ? show_regs_print_info+0x20/0x20 [ 428.448848][T11847] ? load_image+0x420/0x420 [ 428.453573][T11847] ? __might_fault+0xaa/0x120 [ 428.458650][T11847] ? __lock_acquire+0x7d40/0x7d40 [ 428.464447][T11847] should_fail_ex+0x39d/0x4d0 [ 428.470566][T11847] _copy_from_user+0x2f/0xe0 [ 428.477225][T11847] ip6_tnl_siocdevprivate+0x1d9/0xab0 [ 428.483727][T11847] ? __mutex_lock+0x315/0xcc0 [ 428.489360][T11847] ? ip6_tnl_start_xmit+0x11c0/0x11c0 [ 428.495210][T11847] ? dev_ioctl+0x83c/0x1140 [ 428.499810][T11847] ? __lock_acquire+0x7d40/0x7d40 [ 428.505217][T11847] ? dev_ifsioc+0x958/0xc40 [ 428.510950][T11847] dev_ioctl+0x84c/0x1140 [ 428.515880][T11847] sock_ioctl+0x74c/0x7e0 [ 428.520615][T11847] ? sock_poll+0x3e0/0x3e0 [ 428.525637][T11847] ? bpf_lsm_file_ioctl+0x9/0x10 [ 428.531171][T11847] ? security_file_ioctl+0x80/0xa0 [ 428.536717][T11847] ? sock_poll+0x3e0/0x3e0 [ 428.541706][T11847] __se_sys_ioctl+0xfd/0x170 [ 428.548862][T11847] do_syscall_64+0x55/0xa0 [ 428.553729][T11847] ? clear_bhb_loop+0x40/0x90 [ 428.558766][T11847] ? clear_bhb_loop+0x40/0x90 [ 428.563535][T11847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.569831][T11847] RIP: 0033:0x7f5f42d9cdd9 [ 428.574774][T11847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.596129][T11847] RSP: 002b:00007f5f43d28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.605535][T11847] RAX: ffffffffffffffda RBX: 00007f5f43015fa0 RCX: 00007f5f42d9cdd9 [ 428.614492][T11847] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000006 [ 428.623604][T11847] RBP: 00007f5f43d28090 R08: 0000000000000000 R09: 0000000000000000 [ 428.633010][T11847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.641650][T11847] R13: 00007f5f43016038 R14: 00007f5f43015fa0 R15: 00007ffcc0c70958 [ 428.651576][T11847] [ 428.675588][T11860] netlink: 'syz.0.2084': attribute type 10 has an invalid length. [ 428.700680][T11860] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2084'. [ 428.738031][T11860] caif0: entered promiscuous mode [ 428.744417][T11860] caif0: entered allmulticast mode [ 428.757483][T11860] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.897767][T11870] sctp: [Deprecated]: syz.3.2085 (pid 11870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.897767][T11870] Use struct sctp_sack_info instead [ 429.131234][T11880] netlink: 'syz.0.2088': attribute type 13 has an invalid length. [ 429.144945][T11880] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2088'. [ 429.168706][T11880] erspan0: refused to change device tx_queue_len [ 429.184102][T11872] bridge0: port 4(dummy0) entered blocking state [ 429.185442][T11880] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2088'. [ 429.192688][T11872] bridge0: port 4(dummy0) entered forwarding state [ 429.212421][T11872] bridge0: port 3(bond0) entered blocking state [ 429.220613][T11872] bridge0: port 3(bond0) entered forwarding state [ 429.228327][T11872] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.235776][T11872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.285439][T11872] team0: Port device bridge0 added [ 429.313169][T11882] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2090'. [ 429.648509][T11888] sctp: [Deprecated]: syz.1.2092 (pid 11888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.648509][T11888] Use struct sctp_sack_info instead [ 429.750448][T11892] sctp: [Deprecated]: syz.0.2094 (pid 11892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.750448][T11892] Use struct sctp_sack_info instead [ 429.775412][T11890] sctp: [Deprecated]: syz.2.2093 (pid 11890) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.775412][T11890] Use struct sctp_sack_info instead [ 430.282834][T11899] sctp: [Deprecated]: syz.3.2096 (pid 11899) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.282834][T11899] Use struct sctp_sack_info instead [ 430.509460][T11904] C: renamed from team_slave_0 [ 430.519715][T11904] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2098'. [ 431.151489][T11918] sctp: [Deprecated]: syz.1.2111 (pid 11918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.151489][T11918] Use struct sctp_sack_info instead [ 431.434609][T11924] sctp: [Deprecated]: syz.0.2103 (pid 11924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.434609][T11924] Use struct sctp_sack_info instead [ 431.532753][T11926] sctp: [Deprecated]: syz.3.2105 (pid 11926) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.532753][T11926] Use struct sctp_sack_info instead [ 432.500348][T11940] sctp: [Deprecated]: syz.0.2109 (pid 11940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.500348][T11940] Use struct sctp_sack_info instead [ 432.942048][T11949] sctp: [Deprecated]: syz.1.2113 (pid 11949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 432.942048][T11949] Use struct sctp_sack_info instead [ 433.373740][T11953] validate_nla: 2 callbacks suppressed [ 433.374364][T11953] netlink: 'syz.2.2115': attribute type 4 has an invalid length. [ 433.418449][T11953] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2115'. [ 433.665754][T11953] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 434.101818][T11965] sctp_setsockopt_delayed_ack: 2 callbacks suppressed [ 434.101853][T11965] sctp: [Deprecated]: syz.1.2119 (pid 11965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 434.101853][T11965] Use struct sctp_sack_info instead [ 434.587625][T11967] netlink: 'syz.2.2118': attribute type 21 has an invalid length. [ 434.764960][T11967] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2118'. [ 435.331348][T11983] FAULT_INJECTION: forcing a failure. [ 435.331348][T11983] name failslab, interval 1, probability 0, space 0, times 0 [ 435.347470][T11983] CPU: 1 PID: 11983 Comm: syz.1.2123 Not tainted syzkaller #0 [ 435.356892][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 435.369112][T11983] Call Trace: [ 435.373375][T11983] [ 435.377702][T11983] dump_stack_lvl+0x18c/0x250 [ 435.384197][T11983] ? show_regs_print_info+0x20/0x20 [ 435.390798][T11983] ? load_image+0x420/0x420 [ 435.397802][T11983] ? __local_bh_enable_ip+0x13a/0x1c0 [ 435.404253][T11983] ? lockdep_hardirqs_on+0x98/0x150 [ 435.410857][T11983] should_fail_ex+0x39d/0x4d0 [ 435.416794][T11983] should_failslab+0x9/0x20 [ 435.421903][T11983] slab_pre_alloc_hook+0x59/0x310 [ 435.427890][T11983] ? tipc_conn_lookup+0x1e6/0x270 [ 435.434360][T11983] ? tipc_topsrv_queue_evt+0xef/0x2d0 [ 435.440791][T11983] __kmem_cache_alloc_node+0x53/0x250 [ 435.446879][T11983] ? tipc_topsrv_queue_evt+0xef/0x2d0 [ 435.453624][T11983] kmalloc_trace+0x2a/0xe0 [ 435.459889][T11983] tipc_topsrv_queue_evt+0xef/0x2d0 [ 435.467175][T11983] tipc_sub_report_overlap+0x4b8/0x8a0 [ 435.475602][T11983] tipc_nametbl_remove_publ+0xcd5/0x1ac0 [ 435.484909][T11983] ? tipc_nametbl_withdraw+0x7c/0x280 [ 435.493168][T11983] tipc_nametbl_withdraw+0x8d/0x280 [ 435.501258][T11983] ? tipc_group_self+0x26/0x1c0 [ 435.507758][T11983] tipc_sk_leave+0x453/0x4e0 [ 435.513802][T11983] ? __tipc_shutdown+0x1530/0x1530 [ 435.519773][T11983] ? _local_bh_enable+0xa0/0xa0 [ 435.526150][T11983] tipc_release+0x328/0x2160 [ 435.532187][T11983] ? ima_get_current_hash_algo+0x10/0x10 [ 435.538904][T11983] ? tipc_sock_destruct+0x180/0x180 [ 435.545464][T11983] ? down_write+0x16e/0x200 [ 435.551828][T11983] ? down_read_killable+0x340/0x340 [ 435.559217][T11983] sock_close+0xbd/0x230 [ 435.564874][T11983] ? sock_mmap+0xa0/0xa0 [ 435.569722][T11983] __fput+0x234/0x970 [ 435.574846][T11983] __se_sys_close+0x15f/0x220 [ 435.579815][T11983] do_syscall_64+0x55/0xa0 [ 435.584517][T11983] ? clear_bhb_loop+0x40/0x90 [ 435.589495][T11983] ? clear_bhb_loop+0x40/0x90 [ 435.594859][T11983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 435.601238][T11983] RIP: 0033:0x7fee7419cdd9 [ 435.606316][T11983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.630555][T11983] RSP: 002b:00007fee74fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 435.640688][T11983] RAX: ffffffffffffffda RBX: 00007fee74415fa0 RCX: 00007fee7419cdd9 [ 435.651775][T11983] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 435.662519][T11983] RBP: 00007fee74fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.671261][T11983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.680377][T11983] R13: 00007fee74416038 R14: 00007fee74415fa0 R15: 00007ffc6b863b08 [ 435.688977][T11983] [ 436.024084][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2125'. [ 436.050097][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 436.082408][T11992] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2125'. [ 436.093360][T11992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2125'. [ 436.104592][T11992] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2125'. [ 436.346558][T11999] netlink: 'syz.3.2128': attribute type 10 has an invalid length. [ 436.459915][T12004] sctp: [Deprecated]: syz.2.2129 (pid 12004) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.459915][T12004] Use struct sctp_sack_info instead [ 436.626123][T11999] team0: Port device geneve1 added [ 436.903428][T12013] sctp: [Deprecated]: syz.0.2131 (pid 12013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.903428][T12013] Use struct sctp_sack_info instead [ 436.993207][T12015] netlink: 'syz.3.2132': attribute type 33 has an invalid length. [ 437.001632][T12015] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2132'. [ 437.309389][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2134'. [ 437.327800][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'. [ 437.352756][T12024] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2134'. [ 437.579649][T12025] netlink: 'syz.3.2135': attribute type 4 has an invalid length. [ 437.648338][T12025] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 437.694492][T12030] netlink: 'syz.2.2136': attribute type 21 has an invalid length. [ 437.715525][T12030] netlink: 'syz.2.2136': attribute type 4 has an invalid length. [ 437.870521][T12038] netlink: 'syz.1.2138': attribute type 33 has an invalid length. [ 438.026940][T12047] netlink: 'syz.3.2142': attribute type 10 has an invalid length. [ 438.030435][T12043] sctp: [Deprecated]: syz.2.2141 (pid 12043) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.030435][T12043] Use struct sctp_sack_info instead [ 438.129424][T12045] netlink: 'syz.1.2143': attribute type 10 has an invalid length. [ 438.211274][T12045] team0: Port device veth0_to_hsr added [ 438.587702][T12061] sctp: [Deprecated]: syz.2.2147 (pid 12061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 438.587702][T12061] Use struct sctp_sack_info instead [ 439.356464][T12070] netlink: 'syz.0.2149': attribute type 4 has an invalid length. [ 439.385698][T12070] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 439.515313][T12081] netlink: 'syz.3.2153': attribute type 33 has an invalid length. [ 439.656561][T12087] sctp: [Deprecated]: syz.2.2155 (pid 12087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.656561][T12087] Use struct sctp_sack_info instead [ 440.028899][T12096] __nla_validate_parse: 22 callbacks suppressed [ 440.028921][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'. [ 440.056482][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 440.077843][T12096] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2157'. [ 440.092076][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'. [ 440.104209][T12096] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2157'. [ 440.225811][T12104] sctp: [Deprecated]: syz.0.2160 (pid 12104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.225811][T12104] Use struct sctp_sack_info instead [ 440.310599][T12106] netlink: 'syz.3.2162': attribute type 10 has an invalid length. [ 440.345530][T12106] veth1_macvtap: left promiscuous mode [ 440.448115][T12110] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2163'. [ 440.698402][T12116] netlink: 'syz.3.2165': attribute type 4 has an invalid length. [ 440.777978][T12118] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2166'. [ 440.859286][T12121] sctp: [Deprecated]: syz.3.2168 (pid 12121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 440.859286][T12121] Use struct sctp_sack_info instead [ 440.894938][T12122] netlink: 'syz.2.2167': attribute type 33 has an invalid length. [ 440.904187][T12122] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2167'. [ 440.930456][T12122] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 440.963437][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.971083][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.180099][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 441.202432][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2169'. [ 442.328221][T12156] netlink: 'syz.0.2178': attribute type 33 has an invalid length. [ 442.581564][T12160] sctp: [Deprecated]: syz.0.2179 (pid 12160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.581564][T12160] Use struct sctp_sack_info instead [ 442.720609][T12166] sctp: [Deprecated]: syz.2.2182 (pid 12166) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.720609][T12166] Use struct sctp_sack_info instead [ 443.057611][T12167] netlink: 'syz.1.2181': attribute type 1 has an invalid length. [ 443.081670][T12168] netlink: 'syz.1.2181': attribute type 10 has an invalid length. [ 443.114922][T12168] team0: Device hsr_slave_0 failed to register rx_handler [ 444.546696][T12203] sctp: [Deprecated]: syz.1.2193 (pid 12203) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.546696][T12203] Use struct sctp_sack_info instead [ 444.889956][T12207] sctp: [Deprecated]: syz.3.2194 (pid 12207) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.889956][T12207] Use struct sctp_sack_info instead [ 445.214751][T12212] __nla_validate_parse: 24 callbacks suppressed [ 445.214774][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2195'. [ 445.245531][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'. [ 445.259380][T12212] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2195'. [ 445.279589][T12212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2195'. [ 445.291450][T12212] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2195'. [ 445.563707][T12217] netlink: 'syz.2.2196': attribute type 10 has an invalid length. [ 445.755157][T12217] team0: Port device veth0_to_hsr added [ 445.954299][T12223] FAULT_INJECTION: forcing a failure. [ 445.954299][T12223] name failslab, interval 1, probability 0, space 0, times 0 [ 445.979858][T12223] CPU: 0 PID: 12223 Comm: syz.1.2198 Not tainted syzkaller #0 [ 445.989135][T12223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 445.999744][T12223] Call Trace: [ 446.003416][T12223] [ 446.003844][T12227] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2200'. [ 446.006864][T12223] dump_stack_lvl+0x18c/0x250 [ 446.006911][T12223] ? show_regs_print_info+0x20/0x20 [ 446.006937][T12223] ? load_image+0x420/0x420 [ 446.006962][T12223] ? __might_sleep+0xe0/0xe0 [ 446.006984][T12223] ? __lock_acquire+0x7d40/0x7d40 [ 446.007011][T12223] should_fail_ex+0x39d/0x4d0 [ 446.047789][T12223] should_failslab+0x9/0x20 [ 446.052696][T12223] slab_pre_alloc_hook+0x59/0x310 [ 446.057931][T12223] ? __get_vm_area_node+0x125/0x370 [ 446.063236][T12223] __kmem_cache_alloc_node+0x53/0x250 [ 446.068864][T12223] ? __get_vm_area_node+0x125/0x370 [ 446.075145][T12223] kmalloc_node_trace+0x26/0xe0 [ 446.080654][T12223] __get_vm_area_node+0x125/0x370 [ 446.085987][T12223] __vmalloc_node_range+0x36e/0x1330 [ 446.091808][T12223] ? netlink_sendmsg+0x602/0xbf0 [ 446.097955][T12223] ? netlink_insert+0x109f/0x13a0 [ 446.103927][T12223] ? netlink_data_ready+0x10/0x10 [ 446.110325][T12223] ? free_vm_area+0x50/0x50 [ 446.116460][T12223] ? netlink_sendmsg+0x602/0xbf0 [ 446.122684][T12223] vmalloc+0x79/0x90 [ 446.128564][T12223] ? netlink_sendmsg+0x602/0xbf0 [ 446.135052][T12223] netlink_sendmsg+0x602/0xbf0 [ 446.141842][T12223] ? lockdep_hardirqs_on+0x98/0x150 [ 446.147982][T12223] ? netlink_getsockopt+0x590/0x590 [ 446.153950][T12223] ? aa_sock_msg_perm+0x94/0x150 [ 446.159283][T12223] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 446.165319][T12223] ? security_socket_sendmsg+0x80/0xa0 [ 446.171708][T12223] sock_write_iter+0x2df/0x420 [ 446.176698][T12223] ? sock_read_iter+0x3e0/0x3e0 [ 446.183694][T12223] ? common_file_perm+0x198/0x1f0 [ 446.189424][T12223] vfs_write+0x46c/0x990 [ 446.194767][T12223] ? file_end_write+0x250/0x250 [ 446.200578][T12223] ? __fget_files+0x43d/0x4b0 [ 446.205363][T12223] ? __fdget_pos+0x1d8/0x330 [ 446.210134][T12223] ? ksys_write+0x75/0x260 [ 446.214727][T12223] ksys_write+0x150/0x260 [ 446.219154][T12223] ? __ia32_sys_read+0x90/0x90 [ 446.224051][T12223] ? lockdep_hardirqs_on+0x98/0x150 [ 446.229343][T12223] do_syscall_64+0x55/0xa0 [ 446.234152][T12223] ? clear_bhb_loop+0x40/0x90 [ 446.239130][T12223] ? clear_bhb_loop+0x40/0x90 [ 446.244203][T12223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.250478][T12223] RIP: 0033:0x7fee7419cdd9 [ 446.255209][T12223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.276244][T12223] RSP: 002b:00007fee74fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 446.285113][T12223] RAX: ffffffffffffffda RBX: 00007fee74415fa0 RCX: 00007fee7419cdd9 [ 446.293271][T12223] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000009 [ 446.301526][T12223] RBP: 00007fee74fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 446.309784][T12223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.317901][T12223] R13: 00007fee74416038 R14: 00007fee74415fa0 R15: 00007ffc6b863b08 [ 446.325926][T12223] [ 446.350472][T12223] syz.1.2198: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 446.369171][T12223] CPU: 0 PID: 12223 Comm: syz.1.2198 Not tainted syzkaller #0 [ 446.377385][T12223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.387891][T12223] Call Trace: [ 446.391166][T12223] [ 446.394229][T12223] dump_stack_lvl+0x18c/0x250 [ 446.399015][T12223] ? show_regs_print_info+0x20/0x20 [ 446.404399][T12223] ? load_image+0x420/0x420 [ 446.409175][T12223] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 446.415777][T12223] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 446.422569][T12223] warn_alloc+0x246/0x340 [ 446.427014][T12223] ? __get_vm_area_node+0x125/0x370 [ 446.432409][T12223] ? zone_watermark_ok_safe+0x230/0x230 [ 446.437998][T12223] ? rcu_is_watching+0x15/0xb0 [ 446.442982][T12223] ? __get_vm_area_node+0x356/0x370 [ 446.448316][T12223] __vmalloc_node_range+0x393/0x1330 [ 446.453606][T12223] ? netlink_insert+0x109f/0x13a0 [ 446.459143][T12223] ? netlink_data_ready+0x10/0x10 [ 446.464290][T12223] ? free_vm_area+0x50/0x50 [ 446.468810][T12223] ? netlink_sendmsg+0x602/0xbf0 [ 446.473859][T12223] vmalloc+0x79/0x90 [ 446.477760][T12223] ? netlink_sendmsg+0x602/0xbf0 [ 446.483577][T12223] netlink_sendmsg+0x602/0xbf0 [ 446.488713][T12223] ? lockdep_hardirqs_on+0x98/0x150 [ 446.494277][T12223] ? netlink_getsockopt+0x590/0x590 [ 446.500800][T12223] ? aa_sock_msg_perm+0x94/0x150 [ 446.506101][T12223] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 446.511857][T12223] ? security_socket_sendmsg+0x80/0xa0 [ 446.517538][T12223] sock_write_iter+0x2df/0x420 [ 446.523673][T12223] ? sock_read_iter+0x3e0/0x3e0 [ 446.528915][T12223] ? common_file_perm+0x198/0x1f0 [ 446.534497][T12223] vfs_write+0x46c/0x990 [ 446.539226][T12223] ? file_end_write+0x250/0x250 [ 446.544494][T12223] ? __fget_files+0x43d/0x4b0 [ 446.549702][T12223] ? __fdget_pos+0x1d8/0x330 [ 446.554739][T12223] ? ksys_write+0x75/0x260 [ 446.559256][T12223] ksys_write+0x150/0x260 [ 446.563890][T12223] ? __ia32_sys_read+0x90/0x90 [ 446.568772][T12223] ? lockdep_hardirqs_on+0x98/0x150 [ 446.574159][T12223] do_syscall_64+0x55/0xa0 [ 446.578832][T12223] ? clear_bhb_loop+0x40/0x90 [ 446.583625][T12223] ? clear_bhb_loop+0x40/0x90 [ 446.588502][T12223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.594690][T12223] RIP: 0033:0x7fee7419cdd9 [ 446.599204][T12223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.620392][T12223] RSP: 002b:00007fee74fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 446.629776][T12223] RAX: ffffffffffffffda RBX: 00007fee74415fa0 RCX: 00007fee7419cdd9 [ 446.638906][T12223] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000009 [ 446.648500][T12223] RBP: 00007fee74fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 446.656819][T12223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.665058][T12223] R13: 00007fee74416038 R14: 00007fee74415fa0 R15: 00007ffc6b863b08 [ 446.673319][T12223] [ 446.698385][T12224] __sock_release: fasync list not empty! [ 446.705679][T12223] Mem-Info: [ 446.715479][T12223] active_anon:8978 inactive_anon:0 isolated_anon:0 [ 446.715479][T12223] active_file:19170 inactive_file:40089 isolated_file:0 [ 446.715479][T12223] unevictable:768 dirty:258 writeback:0 [ 446.715479][T12223] slab_reclaimable:10739 slab_unreclaimable:92474 [ 446.715479][T12223] mapped:25154 shmem:1361 pagetables:509 [ 446.715479][T12223] sec_pagetables:0 bounce:0 [ 446.715479][T12223] kernel_misc_reclaimable:0 [ 446.715479][T12223] free:1342188 free_pcp:4406 free_cma:0 [ 446.821659][T12223] Node 0 active_anon:36088kB inactive_anon:0kB active_file:76680kB inactive_file:160160kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100732kB dirty:1040kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11468kB pagetables:2148kB sec_pagetables:0kB all_unreclaimable? no [ 446.896618][T12223] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 446.928871][T12223] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.028597][T12223] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 447.034609][T12223] Node 0 DMA32 free:1456064kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:36048kB inactive_anon:0kB active_file:76680kB inactive_file:159328kB unevictable:1536kB writepending:1040kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:20108kB local_pcp:2636kB free_cma:0kB [ 447.102723][T12223] lowmem_reserve[]: 0 0 0 0 0 [ 447.110259][T12223] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.144726][T12223] lowmem_reserve[]: 0 0 0 0 0 [ 447.153977][T12223] Node 1 Normal free:3896576kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14752kB local_pcp:3680kB free_cma:0kB [ 447.207441][T12223] lowmem_reserve[]: 0 0 0 0 0 [ 447.212677][T12223] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 447.228121][T12223] Node 0 DMA32: 2940*4kB (UM) 1475*8kB (UME) 1929*16kB (UME) 1479*32kB (UME) 1215*64kB (UME) 608*128kB (UME) 381*256kB (UME) 271*512kB (UME) 204*1024kB (UM) 19*2048kB (UME) 180*4096kB (UM) = 1478712kB [ 447.250955][T12223] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 447.287303][T12223] Node 1 Normal: 216*4kB (UME) 48*8kB (UME) 46*16kB (UME) 138*32kB (UME) 26*64kB (UE) 9*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3896576kB [ 447.306278][T12223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.316172][T12223] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.327490][T12223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.363753][T12223] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.374037][T12223] 60622 total pagecache pages [ 447.379168][T12223] 0 pages in swap cache [ 447.383477][T12223] Free swap = 124996kB [ 447.393629][T12223] Total swap = 124996kB [ 447.409234][T12223] 2097051 pages RAM [ 447.413238][T12223] 0 pages HighMem/MovableOnly [ 447.425636][T12247] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2215'. [ 447.428325][T12223] 416927 pages reserved [ 447.440226][T12249] sctp: [Deprecated]: syz.3.2207 (pid 12249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.440226][T12249] Use struct sctp_sack_info instead [ 447.463781][T12223] 0 pages cma reserved [ 447.773694][T12253] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2217'. [ 448.000196][T12259] netlink: 'syz.3.2209': attribute type 21 has an invalid length. [ 448.010848][T12259] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2209'. [ 448.021515][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2209'. [ 448.146391][T12264] netlink: 'syz.2.2212': attribute type 21 has an invalid length. [ 448.199967][T12266] netlink: 'syz.0.2210': attribute type 10 has an invalid length. [ 448.389008][T12276] sctp: [Deprecated]: syz.0.2219 (pid 12276) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.389008][T12276] Use struct sctp_sack_info instead [ 448.822330][T12283] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 448.848531][T12283] CPU: 0 PID: 12283 Comm: syz.1.2218 Not tainted syzkaller #0 [ 448.856156][T12283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 448.866785][T12283] Call Trace: [ 448.870275][T12283] [ 448.873249][T12283] dump_stack_lvl+0x18c/0x250 [ 448.878014][T12283] ? show_regs_print_info+0x20/0x20 [ 448.883985][T12283] ? load_image+0x420/0x420 [ 448.889078][T12283] sysfs_warn_dup+0x8e/0xa0 [ 448.894534][T12283] sysfs_do_create_link_sd+0xc0/0x110 [ 448.900481][T12283] device_add_class_symlinks+0x1cf/0x240 [ 448.906604][T12283] device_add+0x507/0xc20 [ 448.911114][T12283] wiphy_register+0x1dad/0x2ae0 [ 448.916262][T12283] ? cfg80211_event_work+0x40/0x40 [ 448.921852][T12283] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 448.928342][T12283] ieee80211_register_hw+0x3464/0x4250 [ 448.934297][T12283] ? ieee80211_tasklet_handler+0x20/0x20 [ 448.940252][T12283] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 448.946200][T12283] ? __debug_object_init+0xec/0x450 [ 448.951815][T12283] ? __asan_memset+0x22/0x40 [ 448.956641][T12283] ? __hrtimer_init+0x186/0x270 [ 448.962685][T12283] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 448.969178][T12283] ? mac80211_hwsim_free+0x220/0x220 [ 448.975417][T12283] ? rcu_is_watching+0x15/0xb0 [ 448.980413][T12283] ? kstrndup+0xbd/0x140 [ 448.984816][T12283] hwsim_new_radio_nl+0xdc9/0x1a90 [ 448.990064][T12283] ? __nla_validate+0x50/0x50 [ 448.995059][T12283] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 449.001966][T12283] ? __nla_parse+0x40/0x50 [ 449.006510][T12283] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 449.013303][T12283] genl_family_rcv_msg_doit+0x211/0x310 [ 449.018985][T12283] ? end_current_label_crit_section+0x170/0x170 [ 449.026022][T12283] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 449.032299][T12283] ? bpf_lsm_capable+0x9/0x10 [ 449.037196][T12283] ? security_capable+0x89/0xb0 [ 449.042117][T12283] genl_rcv_msg+0x619/0x7a0 [ 449.047132][T12283] ? genl_bind+0x360/0x360 [ 449.051590][T12283] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 449.057963][T12283] ? lockdep_hardirqs_on+0x98/0x150 [ 449.063215][T12283] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 449.069943][T12283] netlink_rcv_skb+0x241/0x4d0 [ 449.075285][T12283] ? genl_bind+0x360/0x360 [ 449.079826][T12283] ? netlink_ack+0x1180/0x1180 [ 449.085173][T12283] ? __lock_acquire+0x7d40/0x7d40 [ 449.090272][T12283] ? down_read+0x1ac/0x2e0 [ 449.094929][T12283] genl_rcv+0x28/0x40 [ 449.099382][T12283] netlink_unicast+0x751/0x8d0 [ 449.104641][T12283] netlink_sendmsg+0x8d0/0xbf0 [ 449.110057][T12283] ? netlink_getsockopt+0x590/0x590 [ 449.115797][T12283] ? aa_sock_msg_perm+0x94/0x150 [ 449.121503][T12283] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 449.127254][T12283] ? security_socket_sendmsg+0x80/0xa0 [ 449.132934][T12283] ? netlink_getsockopt+0x590/0x590 [ 449.138527][T12283] ____sys_sendmsg+0x5ba/0x960 [ 449.143668][T12283] ? __asan_memset+0x22/0x40 [ 449.148670][T12283] ? __sys_sendmsg_sock+0x30/0x30 [ 449.154086][T12283] ? __import_iovec+0x5f2/0x850 [ 449.159422][T12283] ? import_iovec+0x73/0xa0 [ 449.164291][T12283] ___sys_sendmsg+0x2a6/0x360 [ 449.169158][T12283] ? __sys_sendmsg+0x2a0/0x2a0 [ 449.174294][T12283] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 449.181182][T12283] __se_sys_sendmsg+0x1c2/0x2b0 [ 449.186084][T12283] ? __x64_sys_sendmsg+0x80/0x80 [ 449.191339][T12283] ? lockdep_hardirqs_on+0x98/0x150 [ 449.197177][T12283] do_syscall_64+0x55/0xa0 [ 449.201679][T12283] ? clear_bhb_loop+0x40/0x90 [ 449.206600][T12283] ? clear_bhb_loop+0x40/0x90 [ 449.212173][T12283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.218602][T12283] RIP: 0033:0x7fee7419cdd9 [ 449.223106][T12283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.244913][T12283] RSP: 002b:00007fee74f94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.254284][T12283] RAX: ffffffffffffffda RBX: 00007fee74416180 RCX: 00007fee7419cdd9 [ 449.262463][T12283] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 449.270943][T12283] RBP: 00007fee74232d69 R08: 0000000000000000 R09: 0000000000000000 [ 449.279720][T12283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.288037][T12283] R13: 00007fee74416218 R14: 00007fee74416180 R15: 00007ffc6b863b08 [ 449.296456][T12283] [ 449.476089][T12290] sctp: [Deprecated]: syz.0.2221 (pid 12290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.476089][T12290] Use struct sctp_sack_info instead [ 449.601423][T12292] netlink: 'syz.3.2224': attribute type 21 has an invalid length. [ 449.651734][T12292] FAULT_INJECTION: forcing a failure. [ 449.651734][T12292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.707545][T12292] CPU: 0 PID: 12292 Comm: syz.3.2224 Not tainted syzkaller #0 [ 449.715308][T12292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 449.725944][T12292] Call Trace: [ 449.729606][T12292] [ 449.732755][T12292] dump_stack_lvl+0x18c/0x250 [ 449.738005][T12292] ? show_regs_print_info+0x20/0x20 [ 449.743693][T12292] ? load_image+0x420/0x420 [ 449.749389][T12292] ? __lock_acquire+0x7d40/0x7d40 [ 449.755676][T12292] ? snprintf+0xe9/0x140 [ 449.761124][T12292] should_fail_ex+0x39d/0x4d0 [ 449.768225][T12292] _copy_to_user+0x2f/0xa0 [ 449.772714][T12292] simple_read_from_buffer+0xe7/0x150 [ 449.778493][T12292] proc_fail_nth_read+0x1e8/0x260 [ 449.783938][T12292] ? proc_fault_inject_write+0x360/0x360 [ 449.789803][T12292] ? fsnotify_perm+0x271/0x5e0 [ 449.794960][T12292] ? proc_fault_inject_write+0x360/0x360 [ 449.801073][T12292] vfs_read+0x28b/0x970 [ 449.806010][T12292] ? kernel_read+0x1e0/0x1e0 [ 449.810820][T12292] ? __fget_files+0x28/0x4b0 [ 449.815638][T12292] ? __fget_files+0x28/0x4b0 [ 449.820554][T12292] ? __fget_files+0x43d/0x4b0 [ 449.825804][T12292] ? __fdget_pos+0x2a3/0x330 [ 449.831389][T12292] ? ksys_read+0x75/0x260 [ 449.835950][T12292] ksys_read+0x150/0x260 [ 449.840575][T12292] ? vfs_write+0x990/0x990 [ 449.845306][T12292] ? lockdep_hardirqs_on+0x98/0x150 [ 449.850653][T12292] do_syscall_64+0x55/0xa0 [ 449.855712][T12292] ? clear_bhb_loop+0x40/0x90 [ 449.860429][T12292] ? clear_bhb_loop+0x40/0x90 [ 449.865969][T12292] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 449.872234][T12292] RIP: 0033:0x7f5f42d5d60e [ 449.872260][T12292] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 449.872273][T12292] RSP: 002b:00007f5f43d27fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 449.872293][T12292] RAX: ffffffffffffffda RBX: 00007f5f43d286c0 RCX: 00007f5f42d5d60e [ 449.872310][T12292] RDX: 000000000000000f RSI: 00007f5f43d280a0 RDI: 0000000000000005 [ 449.872321][T12292] RBP: 00007f5f43d28090 R08: 0000000000000000 R09: 0000000000000000 [ 449.872333][T12292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.872344][T12292] R13: 00007f5f43016038 R14: 00007f5f43015fa0 R15: 00007ffcc0c70958 [ 449.872372][T12292] [ 449.974161][T12297] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 449.982757][T12297] CPU: 1 PID: 12297 Comm: syz.2.2223 Not tainted syzkaller #0 [ 449.990438][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 450.001856][T12297] Call Trace: [ 450.005162][T12297] [ 450.008740][T12297] dump_stack_lvl+0x18c/0x250 [ 450.013740][T12297] ? show_regs_print_info+0x20/0x20 [ 450.019618][T12297] ? load_image+0x420/0x420 [ 450.024275][T12297] sysfs_warn_dup+0x8e/0xa0 [ 450.030161][T12297] sysfs_do_create_link_sd+0xc0/0x110 [ 450.036202][T12297] device_add_class_symlinks+0x1cf/0x240 [ 450.042527][T12297] device_add+0x507/0xc20 [ 450.047188][T12297] wiphy_register+0x1dad/0x2ae0 [ 450.052293][T12297] ? cfg80211_event_work+0x40/0x40 [ 450.057562][T12297] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 450.063853][T12297] ieee80211_register_hw+0x3464/0x4250 [ 450.069737][T12297] ? ieee80211_tasklet_handler+0x20/0x20 [ 450.076727][T12297] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 450.083561][T12297] ? __debug_object_init+0xec/0x450 [ 450.089606][T12297] ? __asan_memset+0x22/0x40 [ 450.094873][T12297] ? __hrtimer_init+0x186/0x270 [ 450.100184][T12297] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 450.107264][T12297] ? mac80211_hwsim_free+0x220/0x220 [ 450.113923][T12297] ? kstrndup+0xf2/0x140 [ 450.118384][T12297] hwsim_new_radio_nl+0xdc9/0x1a90 [ 450.123779][T12297] ? __nla_validate+0x50/0x50 [ 450.129366][T12297] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 450.136932][T12297] ? kasan_save_alloc_info+0xb/0x30 [ 450.142442][T12297] ? __nla_parse+0x40/0x50 [ 450.147659][T12297] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 450.155070][T12297] genl_family_rcv_msg_doit+0x211/0x310 [ 450.160838][T12297] ? end_current_label_crit_section+0x170/0x170 [ 450.167563][T12297] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 450.174023][T12297] ? bpf_lsm_capable+0x9/0x10 [ 450.179343][T12297] ? security_capable+0x89/0xb0 [ 450.185644][T12297] genl_rcv_msg+0x619/0x7a0 [ 450.190599][T12297] ? genl_bind+0x360/0x360 [ 450.195193][T12297] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 450.202085][T12297] netlink_rcv_skb+0x241/0x4d0 [ 450.207330][T12297] ? genl_bind+0x360/0x360 [ 450.211882][T12297] ? netlink_ack+0x1180/0x1180 [ 450.217137][T12297] ? __lock_acquire+0x7d40/0x7d40 [ 450.222622][T12297] ? down_read+0x1ac/0x2e0 [ 450.227248][T12297] genl_rcv+0x28/0x40 [ 450.231313][T12297] netlink_unicast+0x751/0x8d0 [ 450.236298][T12297] netlink_sendmsg+0x8d0/0xbf0 [ 450.241439][T12297] ? netlink_getsockopt+0x590/0x590 [ 450.247031][T12297] ? aa_sock_msg_perm+0x94/0x150 [ 450.252696][T12297] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 450.258271][T12297] ? security_socket_sendmsg+0x80/0xa0 [ 450.264067][T12297] ? netlink_getsockopt+0x590/0x590 [ 450.269409][T12297] ____sys_sendmsg+0x5ba/0x960 [ 450.274465][T12297] ? __asan_memset+0x22/0x40 [ 450.279340][T12297] ? __sys_sendmsg_sock+0x30/0x30 [ 450.284555][T12297] ? __import_iovec+0x5f2/0x850 [ 450.290248][T12297] ? import_iovec+0x73/0xa0 [ 450.295103][T12297] ___sys_sendmsg+0x2a6/0x360 [ 450.299801][T12297] ? __sys_sendmsg+0x2a0/0x2a0 [ 450.305111][T12297] ? trace_call_bpf+0xc3/0x6c0 [ 450.309976][T12297] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 450.316619][T12297] __se_sys_sendmsg+0x1c2/0x2b0 [ 450.321697][T12297] ? __x64_sys_sendmsg+0x80/0x80 [ 450.327006][T12297] ? lockdep_hardirqs_on+0x98/0x150 [ 450.332347][T12297] do_syscall_64+0x55/0xa0 [ 450.336882][T12297] ? clear_bhb_loop+0x40/0x90 [ 450.341953][T12297] ? clear_bhb_loop+0x40/0x90 [ 450.347438][T12297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 450.353967][T12297] RIP: 0033:0x7f5cac99cdd9 [ 450.358817][T12297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.380114][T12297] RSP: 002b:00007f5cad77c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.389437][T12297] RAX: ffffffffffffffda RBX: 00007f5cacc16180 RCX: 00007f5cac99cdd9 [ 450.397554][T12297] RDX: 0000000008000000 RSI: 0000200000000000 RDI: 000000000000000d [ 450.406699][T12297] RBP: 00007f5caca32d69 R08: 0000000000000000 R09: 0000000000000000 [ 450.415313][T12297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.424150][T12297] R13: 00007f5cacc16218 R14: 00007f5cacc16180 R15: 00007ffe6d379058 [ 450.432688][T12297] [ 451.111563][T11849] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 451.330120][T12321] __nla_validate_parse: 7 callbacks suppressed [ 451.330159][T12321] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2231'. [ 451.875555][T12331] sctp: [Deprecated]: syz.3.2234 (pid 12331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 451.875555][T12331] Use struct sctp_sack_info instead [ 452.100872][T12340] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2237'. [ 452.219240][T12343] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2238'. [ 452.275504][T12344] netlink: 'syz.2.2238': attribute type 29 has an invalid length. [ 452.311637][T12344] netlink: 'syz.2.2238': attribute type 29 has an invalid length. [ 452.314609][T12348] FAULT_INJECTION: forcing a failure. [ 452.314609][T12348] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.338151][T12348] CPU: 1 PID: 12348 Comm: syz.1.2239 Not tainted syzkaller #0 [ 452.346111][T12348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 452.356889][T12348] Call Trace: [ 452.360199][T12348] [ 452.363256][T12348] dump_stack_lvl+0x18c/0x250 [ 452.367956][T12348] ? show_regs_print_info+0x20/0x20 [ 452.373240][T12348] ? load_image+0x420/0x420 [ 452.378455][T12348] ? __lock_acquire+0x7d40/0x7d40 [ 452.383997][T12348] ? _copy_from_iter+0x161/0x12e0 [ 452.389323][T12348] should_fail_ex+0x39d/0x4d0 [ 452.395080][T12348] prepare_alloc_pages+0x1e2/0x5f0 [ 452.401426][T12348] __alloc_pages+0x134/0x460 [ 452.406682][T12348] ? zone_statistics+0x170/0x170 [ 452.412294][T12348] ? _raw_spin_lock_irqsave+0x100/0x100 [ 452.418925][T12348] ? copy_page_from_iter+0xe8/0x100 [ 452.425294][T12348] pipe_write+0x62b/0x1b10 [ 452.430277][T12348] ? pipe_read+0x1310/0x1310 [ 452.435221][T12348] ? end_current_label_crit_section+0x149/0x170 [ 452.441778][T12348] ? common_file_perm+0x198/0x1f0 [ 452.447148][T12348] vfs_write+0x46c/0x990 [ 452.452177][T12348] ? file_end_write+0x250/0x250 [ 452.457799][T12348] ? __fget_files+0x43d/0x4b0 [ 452.463303][T12348] ? __fdget_pos+0x1d8/0x330 [ 452.468557][T12348] ? ksys_write+0x75/0x260 [ 452.473376][T12348] ksys_write+0x150/0x260 [ 452.477918][T12348] ? __ia32_sys_read+0x90/0x90 [ 452.483240][T12348] ? lockdep_hardirqs_on+0x98/0x150 [ 452.489153][T12348] do_syscall_64+0x55/0xa0 [ 452.493672][T12348] ? clear_bhb_loop+0x40/0x90 [ 452.498913][T12348] ? clear_bhb_loop+0x40/0x90 [ 452.504321][T12348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.511064][T12348] RIP: 0033:0x7fee7419cdd9 [ 452.515658][T12348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.537038][T12348] RSP: 002b:00007fee74fd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.546446][T12348] RAX: ffffffffffffffda RBX: 00007fee74415fa0 RCX: 00007fee7419cdd9 [ 452.554954][T12348] RDX: 000000000000fe3a RSI: 00002000000001c0 RDI: 0000000000000000 [ 452.563280][T12348] RBP: 00007fee74fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 452.571425][T12348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.580358][T12348] R13: 00007fee74416038 R14: 00007fee74415fa0 R15: 00007ffc6b863b08 [ 452.588605][T12348] [ 452.796225][T12357] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2241'. [ 452.939203][T12360] netlink: 'syz.3.2243': attribute type 10 has an invalid length. [ 452.983500][T12360] bridge0: port 4(dummy0) entered disabled state [ 452.992672][T12360] bridge0: port 3(bond0) entered disabled state [ 453.000381][T12360] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.008966][T12360] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.359028][T12374] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2248'. [ 454.201274][T12389] sctp: [Deprecated]: syz.1.2252 (pid 12389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 454.201274][T12389] Use struct sctp_sack_info instead [ 454.633439][T12396] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2254'. [ 454.851899][T12403] netlink: 'syz.3.2257': attribute type 21 has an invalid length. [ 454.861996][T12403] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2257'. [ 454.903154][T12403] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2257'. [ 454.955407][T12405] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2260'. [ 455.123752][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2259'. [ 455.582515][T12416] ªªªªªª: renamed from vlan0 (while UP) [ 456.197567][T12421] netlink: 'syz.1.2263': attribute type 10 has an invalid length. [ 456.219771][T12421] batman_adv: batadv0: Adding interface: virt_wifi0 [ 456.247901][T12421] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.294924][T12421] batman_adv: batadv0: Interface activated: virt_wifi0 [ 456.546391][T12433] sctp: [Deprecated]: syz.2.2268 (pid 12433) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.546391][T12433] Use struct sctp_sack_info instead [ 456.841787][T12437] sctp: [Deprecated]: syz.1.2270 (pid 12437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.841787][T12437] Use struct sctp_sack_info instead [ 456.901775][T12438] __nla_validate_parse: 5 callbacks suppressed [ 456.901816][T12438] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2269'. [ 458.042267][T12454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2273'. [ 458.088774][T12454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2273'. [ 458.183885][T12454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2273'. [ 458.249818][T12454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2273'. [ 458.333418][T12459] netlink: 1039 bytes leftover after parsing attributes in process `syz.3.2275'. [ 458.822570][T12471] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2280'. [ 459.022394][T12475] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2279'. [ 459.139250][T12479] netlink: 'syz.2.2281': attribute type 10 has an invalid length. [ 459.447879][T12482] sctp: [Deprecated]: syz.2.2282 (pid 12482) Use of struct sctp_assoc_value in delayed_ack socket option. [ 459.447879][T12482] Use struct sctp_sack_info instead [ 459.848602][T12486] bridge0: entered allmulticast mode [ 460.368689][T12500] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2290'. [ 464.245116][T12532] sctp: [Deprecated]: syz.3.2298 (pid 12532) Use of struct sctp_assoc_value in delayed_ack socket option. [ 464.245116][T12532] Use struct sctp_sack_info instead [ 465.073021][T12515] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2294'. [ 465.085863][T12514] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2293'. [ 465.147628][T12535] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2299'. [ 465.211216][T12540] netlink: 'syz.2.2301': attribute type 3 has an invalid length. [ 465.224940][T12540] netlink: 'syz.2.2301': attribute type 1 has an invalid length. [ 465.238142][T12540] netlink: 'syz.2.2301': attribute type 6 has an invalid length. [ 465.248020][T12540] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.2301'. [ 465.419675][T12553] netlink: 'syz.3.2303': attribute type 39 has an invalid length. [ 466.300012][T12574] netlink: 'syz.1.2310': attribute type 1 has an invalid length. [ 466.524027][T12576] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2311'. [ 467.059155][T12594] netlink: 'syz.2.2316': attribute type 1 has an invalid length. [ 467.100069][T12594] netlink: 'syz.2.2316': attribute type 3 has an invalid length. [ 467.138060][T12599] netlink: 'syz.2.2316': attribute type 10 has an invalid length. [ 467.168537][T12594] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2316'. [ 467.200306][T12599] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2316'. [ 467.229579][T12600] netlink: 'syz.2.2316': attribute type 4 has an invalid length. [ 467.297705][T12600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2316'. [ 467.575492][T12608] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2321'. [ 467.661550][T12613] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2322'. [ 468.647760][T12632] netlink: 'syz.3.2328': attribute type 21 has an invalid length. [ 469.594955][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 469.610288][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 469.620867][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 469.664287][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 469.676953][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 469.697654][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 470.102249][T11844] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.220449][T11844] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.283966][T12654] chnl_net:caif_netlink_parms(): no params data found [ 470.330796][T11844] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.383081][T11844] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 470.393965][T11844] bridge0: port 2(netdevsim0) entered disabled state [ 470.405787][T11844] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.449018][T12654] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.456802][T12654] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.466553][T12654] bridge_slave_0: entered allmulticast mode [ 470.475216][T12654] bridge_slave_0: entered promiscuous mode [ 470.493222][T12654] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.508821][T12654] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.516249][T12654] bridge_slave_1: entered allmulticast mode [ 470.524658][T12654] bridge_slave_1: entered promiscuous mode [ 470.556209][T12654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.569306][T12654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.635501][T12654] team0: Port device team_slave_0 added [ 470.692092][T12654] team0: Port device team_slave_1 added [ 470.717035][T12654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.734855][T12654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.764712][T12654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.780583][T12654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.787969][T12654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.817492][T12654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.830261][T11844] tipc: Left network mode [ 470.883578][T12654] hsr_slave_0: entered promiscuous mode [ 470.891166][T12654] hsr_slave_1: entered promiscuous mode [ 470.897803][T12654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.906119][T12654] Cannot create hsr debugfs directory [ 471.351094][T12680] __nla_validate_parse: 1 callbacks suppressed [ 471.351131][T12680] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2339'. [ 471.757396][ T5781] Bluetooth: hci4: command tx timeout [ 471.853217][T12701] netlink: 'syz.1.2340': attribute type 10 has an invalid length. [ 472.385074][T12711] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2343'. [ 472.727448][T12718] netlink: 1039 bytes leftover after parsing attributes in process `syz.1.2344'. [ 472.756813][T12654] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 472.833819][T12654] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 472.972753][T12720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'. [ 473.018927][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2347'. [ 473.057922][T12720] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2347'. [ 473.070539][T12720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2347'. [ 473.092798][T12720] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2347'. [ 473.146209][T12654] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 473.190308][T12654] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 473.477329][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2356'. [ 473.537853][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 473.636215][T11844] hsr_slave_0: left promiscuous mode [ 473.671698][T11844] hsr_slave_1: left promiscuous mode [ 473.705963][T11844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.728349][T11844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.813940][T11844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.837416][ T5781] Bluetooth: hci4: command tx timeout [ 473.839032][T11844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.887514][T11844] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 473.895652][T11844] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 473.923385][T11844] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 473.952249][T11844] batman_adv: batadv0: Removing interface: virt_wifi0 [ 473.974248][T11844] bridge0: port 3(batadv0) entered disabled state [ 474.005438][T11844] bridge_slave_0: left promiscuous mode [ 474.013118][T11844] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.061308][T11844] veth1_macvtap: left promiscuous mode [ 474.075683][T11844] veth0_macvtap: left promiscuous mode [ 474.085232][T11844] veth1_vlan: left promiscuous mode [ 475.923286][ T5781] Bluetooth: hci4: command tx timeout [ 476.231209][T12654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.315919][T12654] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.364121][T11858] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.372836][T11858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.465784][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.473412][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.512864][T12775] __nla_validate_parse: 4 callbacks suppressed [ 476.512903][T12775] netlink: 1039 bytes leftover after parsing attributes in process `syz.2.2357'. [ 476.563498][T12776] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2364'. [ 476.754890][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2359'. [ 476.808109][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2359'. [ 476.820195][T12786] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2359'. [ 476.830382][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2359'. [ 476.857105][T12786] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2359'. [ 477.931915][T12654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.003383][ T5781] Bluetooth: hci4: command tx timeout [ 478.195701][T12845] FAULT_INJECTION: forcing a failure. [ 478.195701][T12845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.304767][T12845] CPU: 1 PID: 12845 Comm: syz.2.2365 Not tainted syzkaller #0 [ 478.314220][T12845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.325115][T12845] Call Trace: [ 478.330273][T12845] [ 478.333829][T12845] dump_stack_lvl+0x18c/0x250 [ 478.338655][T12845] ? show_regs_print_info+0x20/0x20 [ 478.344765][T12845] ? load_image+0x420/0x420 [ 478.350298][T12845] ? __might_fault+0xaa/0x120 [ 478.355850][T12845] should_fail_ex+0x39d/0x4d0 [ 478.361280][T12845] copyin+0x1a/0x90 [ 478.365377][T12845] _copy_from_iter+0x404/0x12e0 [ 478.370654][T12845] ? slab_post_alloc_hook+0x8a/0x4b0 [ 478.376230][T12845] ? __virt_addr_valid+0x18c/0x540 [ 478.381992][T12845] ? __lock_acquire+0x7d40/0x7d40 [ 478.387228][T12845] ? copyout_mc+0x70/0x70 [ 478.391847][T12845] ? __virt_addr_valid+0x18c/0x540 [ 478.397444][T12845] ? __virt_addr_valid+0x18c/0x540 [ 478.402988][T12845] ? __virt_addr_valid+0x469/0x540 [ 478.408403][T12845] ? __check_object_size+0x506/0xa20 [ 478.414245][T12845] netlink_sendmsg+0x76b/0xbf0 [ 478.419511][T12845] ? netlink_getsockopt+0x590/0x590 [ 478.426325][T12845] ? aa_sock_msg_perm+0x94/0x150 [ 478.432330][T12845] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 478.438028][T12845] ? security_socket_sendmsg+0x80/0xa0 [ 478.443772][T12845] ? netlink_getsockopt+0x590/0x590 [ 478.449367][T12845] ____sys_sendmsg+0x5ba/0x960 [ 478.454449][T12845] ? __asan_memset+0x22/0x40 [ 478.459156][T12845] ? __sys_sendmsg_sock+0x30/0x30 [ 478.464465][T12845] ? __import_iovec+0x3fa/0x850 [ 478.469436][T12845] ? import_iovec+0x73/0xa0 [ 478.474938][T12845] ___sys_sendmsg+0x2a6/0x360 [ 478.479910][T12845] ? get_pid_task+0x20/0x1e0 [ 478.484895][T12845] ? __sys_sendmsg+0x2a0/0x2a0 [ 478.489976][T12845] ? __lock_acquire+0x7d40/0x7d40 [ 478.495669][T12845] __se_sys_sendmsg+0x1c2/0x2b0 [ 478.500737][T12845] ? __x64_sys_sendmsg+0x80/0x80 [ 478.505788][T12845] ? lockdep_hardirqs_on+0x98/0x150 [ 478.511395][T12845] do_syscall_64+0x55/0xa0 [ 478.516028][T12845] ? clear_bhb_loop+0x40/0x90 [ 478.521197][T12845] ? clear_bhb_loop+0x40/0x90 [ 478.526786][T12845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 478.534040][T12845] RIP: 0033:0x7f5cac99cdd9 [ 478.538657][T12845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 478.559935][T12845] RSP: 002b:00007f5cad7be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.570127][T12845] RAX: ffffffffffffffda RBX: 00007f5cacc15fa0 RCX: 00007f5cac99cdd9 [ 478.578486][T12845] RDX: 0000000004000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 478.587268][T12845] RBP: 00007f5cad7be090 R08: 0000000000000000 R09: 0000000000000000 [ 478.595537][T12845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.605045][T12845] R13: 00007f5cacc16038 R14: 00007f5cacc15fa0 R15: 00007ffe6d379058 [ 478.614608][T12845] [ 478.828177][T12860] FAULT_INJECTION: forcing a failure. [ 478.828177][T12860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.842799][T12654] veth0_vlan: entered promiscuous mode [ 478.854579][T12860] CPU: 1 PID: 12860 Comm: syz.1.2366 Not tainted syzkaller #0 [ 478.862719][T12860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 478.873619][T12860] Call Trace: [ 478.877297][T12860] [ 478.880436][T12860] dump_stack_lvl+0x18c/0x250 [ 478.885774][T12860] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 478.892235][T12860] ? show_regs_print_info+0x20/0x20 [ 478.897837][T12860] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 478.904825][T12860] ? dump_stack+0x9/0x20 [ 478.909211][T12860] should_fail_ex+0x39d/0x4d0 [ 478.914309][T12860] _copy_from_iter+0x1d9/0x12e0 [ 478.919733][T12860] ? slab_post_alloc_hook+0x8a/0x4b0 [ 478.925164][T12860] ? __virt_addr_valid+0x18c/0x540 [ 478.930683][T12860] ? __lock_acquire+0x7d40/0x7d40 [ 478.936108][T12860] ? rcu_is_watching+0x15/0xb0 [ 478.941264][T12860] ? copyout_mc+0x70/0x70 [ 478.945856][T12860] ? __virt_addr_valid+0x18c/0x540 [ 478.951270][T12860] ? __virt_addr_valid+0x18c/0x540 [ 478.956588][T12860] ? __virt_addr_valid+0x469/0x540 [ 478.962242][T12860] ? __check_object_size+0x506/0xa20 [ 478.968083][T12860] netlink_sendmsg+0x76b/0xbf0 [ 478.973176][T12860] ? lockdep_hardirqs_on+0x98/0x150 [ 478.978678][T12860] ? netlink_getsockopt+0x590/0x590 [ 478.984138][T12860] ? aa_sock_msg_perm+0x94/0x150 [ 478.989479][T12860] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 478.995215][T12860] ? security_socket_sendmsg+0x80/0xa0 [ 479.000919][T12860] ? netlink_getsockopt+0x590/0x590 [ 479.006556][T12860] ____sys_sendmsg+0x5ba/0x960 [ 479.011613][T12860] ? __asan_memset+0x22/0x40 [ 479.016222][T12860] ? __sys_sendmsg_sock+0x30/0x30 [ 479.021628][T12860] ? __import_iovec+0x5f2/0x850 [ 479.026517][T12860] ? import_iovec+0x73/0xa0 [ 479.031853][T12860] ___sys_sendmsg+0x2a6/0x360 [ 479.036542][T12860] ? __sys_sendmsg+0x2a0/0x2a0 [ 479.041430][T12860] __se_sys_sendmsg+0x1c2/0x2b0 [ 479.046281][T12860] ? __x64_sys_sendmsg+0x80/0x80 [ 479.051337][T12860] do_syscall_64+0x55/0xa0 [ 479.056088][T12860] ? clear_bhb_loop+0x40/0x90 [ 479.061034][T12860] ? clear_bhb_loop+0x40/0x90 [ 479.065740][T12860] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.071941][T12860] RIP: 0033:0x7fee7419cdd9 [ 479.076636][T12860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.098636][T12860] RSP: 002b:00007fee74fd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.108831][T12860] RAX: ffffffffffffffda RBX: 00007fee74415fa0 RCX: 00007fee7419cdd9 [ 479.117805][T12860] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000008 [ 479.128126][T12860] RBP: 00007fee74fd6090 R08: 0000000000000000 R09: 0000000000000000 [ 479.138572][T12860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.147704][T12860] R13: 00007fee74416038 R14: 00007fee74415fa0 R15: 00007ffc6b863b08 [ 479.156782][T12860] [ 479.200740][T12654] veth1_vlan: entered promiscuous mode [ 479.374762][T12654] veth0_macvtap: entered promiscuous mode [ 479.401786][T12654] veth1_macvtap: entered promiscuous mode [ 479.590131][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.647410][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.703477][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.725819][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.754186][T12654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.848869][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.904210][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.948772][T12654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.058780][T12654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.132980][T12654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.244934][T12654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.333707][T12654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.406561][T12654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.451571][T12654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.506491][T12906] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2368'. [ 480.586911][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2369'. [ 480.602630][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2369'. [ 480.806965][T11836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.827596][T12912] sctp: [Deprecated]: syz.2.2370 (pid 12912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.827596][T12912] Use struct sctp_sack_info instead [ 480.856786][T11836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.954194][T11823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.982441][T11823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.696148][T12929] __nla_validate_parse: 8 callbacks suppressed [ 481.696190][T12929] netlink: 1039 bytes leftover after parsing attributes in process `syz.0.2372'. [ 482.138820][T11849] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 483.407109][T12955] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2381'. [ 483.775870][T12960] netlink: 'syz.3.2383': attribute type 10 has an invalid length. [ 485.473402][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 485.488453][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 485.499195][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 485.511941][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 485.523088][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 485.532481][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 486.391468][T12981] chnl_net:caif_netlink_parms(): no params data found [ 486.567681][T12993] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2393'. [ 486.702286][T12981] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.736651][T12981] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.776747][T12981] bridge_slave_0: entered allmulticast mode [ 486.800766][T12981] bridge_slave_0: entered promiscuous mode [ 486.830161][T12981] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.892811][T12981] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.929835][T12981] bridge_slave_1: entered allmulticast mode [ 486.968860][T12981] bridge_slave_1: entered promiscuous mode [ 487.041586][T13001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2394'. [ 487.160130][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2395'. [ 487.208918][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2395'. [ 487.300860][T13003] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2395'. [ 487.378224][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2395'. [ 487.410277][T13003] netlink: 33 bytes leftover after parsing attributes in process `syz.2.2395'. [ 487.468648][T12981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.492175][T12981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.597343][ T5781] Bluetooth: hci2: command tx timeout [ 487.645732][T12981] team0: Port device team_slave_0 added [ 487.675119][T12981] team0: Port device team_slave_1 added [ 487.786350][T12981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.817406][T12981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.929730][T12981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.986287][T12981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.027062][T12981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.146116][T12981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.365746][T12981] hsr_slave_0: entered promiscuous mode [ 488.399287][T12981] hsr_slave_1: entered promiscuous mode [ 488.426578][T12981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.448486][T12981] Cannot create hsr debugfs directory [ 489.042611][T12981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.122131][T13028] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2402'. [ 489.369965][T12981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.678452][ T5781] Bluetooth: hci2: command tx timeout [ 489.759192][T12981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.789774][T13034] sctp: [Deprecated]: syz.0.2404 (pid 13034) Use of int in maxseg socket option. [ 489.789774][T13034] Use struct sctp_assoc_value instead [ 489.919636][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2405'. [ 489.973123][T13037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2405'. [ 490.017416][T13037] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2405'. [ 490.234713][T12981] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 490.262839][T12981] bridge0: port 2(netdevsim0) entered disabled state [ 490.298716][T12981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.441975][T13044] netlink: 'syz.0.2407': attribute type 10 has an invalid length. [ 490.530544][T13045] netlink: zone id is out of range [ 490.593634][T13045] netlink: zone id is out of range [ 490.637959][T13045] netlink: zone id is out of range [ 490.677920][T13045] netlink: zone id is out of range [ 490.715732][T13045] netlink: zone id is out of range [ 490.748016][T13045] netlink: zone id is out of range [ 490.797570][T13045] netlink: zone id is out of range [ 490.847310][T13045] netlink: zone id is out of range [ 490.853216][T13045] netlink: zone id is out of range [ 491.019700][T13045] netlink: zone id is out of range [ 491.152935][T13044] team0: Port device wlan1 added [ 491.510631][T12981] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 491.542850][T12981] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 491.566145][T12981] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 491.604819][T12981] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 491.757368][ T5781] Bluetooth: hci2: command tx timeout [ 491.850174][T12981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.886858][T12981] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.912206][T11823] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.921048][T11823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.991495][T11823] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.999067][T11823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.614902][T12981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.618098][T13069] __nla_validate_parse: 5 callbacks suppressed [ 492.618117][T13069] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2414'. [ 492.774291][T13069] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2414'. [ 492.842630][T13070] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2414'. [ 492.917733][T12981] veth0_vlan: entered promiscuous mode [ 492.989134][T12981] veth1_vlan: entered promiscuous mode [ 493.094467][T13069] mac80211_hwsim hwsim25 ..ãc¤±: renamed from wlan1 (while UP) [ 493.246353][T12981] veth0_macvtap: entered promiscuous mode [ 493.274907][T12981] veth1_macvtap: entered promiscuous mode [ 493.335435][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.390676][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.403833][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.415147][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.446245][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.470735][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.516726][T12981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 493.544922][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.587345][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.619138][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.641695][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.673198][T12981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.705651][T12981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.729398][T12981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.758265][T13078] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2414'. [ 493.798321][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2417'. [ 493.823633][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 493.841922][ T5781] Bluetooth: hci2: command tx timeout [ 493.858669][T13080] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2417'. [ 493.885536][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 493.897588][T13080] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2417'. [ 493.936555][T12981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.977743][T12981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.986824][T12981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.016617][T12981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.361138][T13092] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2419'. [ 496.917573][T13088] netlink: 'syz.3.2419': attribute type 10 has an invalid length. [ 496.931699][T13088] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 496.944235][T13088] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 496.993302][T13088] team0: Port device wlan1 added [ 497.157692][T11844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.177341][T11844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.237017][T11844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.257333][T11844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.395469][T13106] sctp: [Deprecated]: syz.1.2385 (pid 13106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.395469][T13106] Use struct sctp_sack_info instead [ 497.828557][T13113] __nla_validate_parse: 5 callbacks suppressed [ 497.828596][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2427'. [ 497.869137][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2427'. [ 497.908738][T13113] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2427'. [ 497.946757][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2427'. [ 497.977549][T13113] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2427'. [ 498.426833][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 498.437077][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 498.446446][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.456104][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.473183][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 498.481089][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.545652][T13123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2429'. [ 498.558846][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2429'. [ 498.608596][T13123] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2429'. [ 498.648650][T13123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2429'. [ 498.670836][T13123] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2429'. [ 498.690136][T13130] netlink: 'syz.3.2431': attribute type 22 has an invalid length. [ 498.945037][T13133] netlink: 'syz.1.2432': attribute type 10 has an invalid length. [ 498.963251][T13137] netlink: 'syz.3.2433': attribute type 21 has an invalid length. [ 499.026835][T13133] team0: Port device wlan1 added [ 499.080658][T13139] net_ratelimit: 170 callbacks suppressed [ 499.080680][T13139] netlink: zone id is out of range [ 499.184523][T13139] netlink: zone id is out of range [ 499.324405][T13139] netlink: zone id is out of range [ 499.377489][T13139] netlink: zone id is out of range [ 499.382692][T13139] netlink: zone id is out of range [ 499.416620][T13124] chnl_net:caif_netlink_parms(): no params data found [ 499.427484][T13139] netlink: zone id is out of range [ 499.465236][T13139] netlink: zone id is out of range [ 499.471614][T13139] netlink: zone id is out of range [ 499.481311][T13139] netlink: zone id is out of range [ 499.508936][T13139] netlink: zone id is out of range [ 499.585976][T13124] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.594759][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.604302][T13124] bridge_slave_0: entered allmulticast mode [ 499.604789][T13133] syz.1.2432 (13133) used greatest stack depth: 18472 bytes left [ 499.614843][T13124] bridge_slave_0: entered promiscuous mode [ 499.628043][T13151] sctp: [Deprecated]: syz.3.2435 (pid 13151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 499.628043][T13151] Use struct sctp_sack_info instead [ 499.633083][T13124] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.659027][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.666960][T13124] bridge_slave_1: entered allmulticast mode [ 499.675737][T13124] bridge_slave_1: entered promiscuous mode [ 499.714224][T13124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.766311][T11849] wlan1: Trigger new scan to find an IBSS to join [ 499.770124][T13124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.892892][T13124] team0: Port device team_slave_0 added [ 499.930831][T13124] team0: Port device team_slave_1 added [ 500.000612][T13124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.012663][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.045959][T13124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.085256][T13124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.092402][T13124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.197347][T13124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.453093][T13124] hsr_slave_0: entered promiscuous mode [ 500.471787][T13124] hsr_slave_1: entered promiscuous mode [ 500.492033][T13124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.502668][T13124] Cannot create hsr debugfs directory [ 500.557715][ T5787] Bluetooth: hci1: command tx timeout [ 500.892728][T13124] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.051148][T13124] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.230234][T13124] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.363258][T13124] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.682022][T13124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 501.729326][T13124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 501.770818][T13124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 501.783305][T13124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 501.796564][T13183] netlink: 'syz.3.2445': attribute type 2 has an invalid length. [ 501.898345][T13185] sctp: [Deprecated]: syz.0.2446 (pid 13185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.898345][T13185] Use struct sctp_sack_info instead [ 502.024507][T13124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.086896][T13124] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.149732][T11859] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.159076][T11859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.235700][T11823] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.245878][T11823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.414578][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.421765][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.640802][ T5787] Bluetooth: hci1: command tx timeout [ 502.703760][T13124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.798413][T11823] wlan1: Trigger new scan to find an IBSS to join [ 502.798476][T13124] veth0_vlan: entered promiscuous mode [ 502.839481][T13124] veth1_vlan: entered promiscuous mode [ 502.915658][T13124] veth0_macvtap: entered promiscuous mode [ 502.969221][T13124] veth1_macvtap: entered promiscuous mode [ 502.992879][T13209] netlink: 'syz.0.2453': attribute type 10 has an invalid length. [ 503.099968][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.136049][T13209] bridge_slave_1: left allmulticast mode [ 503.143926][T13209] bridge_slave_1: left promiscuous mode [ 503.157045][T13209] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.412573][T13209] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 503.452204][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.466225][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.486145][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.501014][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.511870][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.534588][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.545683][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.556933][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.600740][T13124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.634678][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.678229][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.697538][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.711680][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.764717][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.806690][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.877612][T13124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.914545][T13124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.979721][T13124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.030854][T13221] netlink: 'syz.0.2455': attribute type 10 has an invalid length. [ 504.113915][T13124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.160575][T13124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.207309][T13124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.237318][T13124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.524754][T13228] netlink: 'syz.3.2457': attribute type 29 has an invalid length. [ 504.554133][T13228] netlink: 'syz.3.2457': attribute type 29 has an invalid length. [ 504.577001][T13229] netlink: 'syz.3.2457': attribute type 29 has an invalid length. [ 504.583104][T13232] sctp: [Deprecated]: syz.1.2458 (pid 13232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 504.583104][T13232] Use struct sctp_sack_info instead [ 504.594030][T13228] netlink: 'syz.3.2457': attribute type 29 has an invalid length. [ 504.634480][T11859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.649761][T11859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.701681][T11844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.721559][ T5787] Bluetooth: hci1: command tx timeout [ 504.746493][T11844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.896824][T13235] __nla_validate_parse: 22 callbacks suppressed [ 504.896857][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2459'. [ 504.927503][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2459'. [ 504.941398][T13235] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2459'. [ 504.955565][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2459'. [ 505.015859][T13235] netlink: 33 bytes leftover after parsing attributes in process `syz.0.2459'. [ 505.036935][T13237] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2460'. [ 505.056024][T13240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2426'. [ 505.081092][T13243] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2462'. [ 505.106074][T13240] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2426'. [ 505.149613][T13245] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2426'. [ 505.214823][T13240] mac80211_hwsim hwsim29 ..ãc¤±: renamed from wlan1 (while UP) [ 506.562273][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 506.574876][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 506.588285][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 506.620438][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 506.629426][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 506.642200][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.729079][T13267] FAULT_INJECTION: forcing a failure. [ 506.729079][T13267] name failslab, interval 1, probability 0, space 0, times 0 [ 506.758834][T13267] CPU: 1 PID: 13267 Comm: syz.1.2469 Not tainted syzkaller #0 [ 506.767239][T13267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 506.777970][T13267] Call Trace: [ 506.781282][T13267] [ 506.784259][T13267] dump_stack_lvl+0x18c/0x250 [ 506.789078][T13267] ? show_regs_print_info+0x20/0x20 [ 506.794407][T13267] ? load_image+0x420/0x420 [ 506.799282][T13267] ? __lock_acquire+0x7d40/0x7d40 [ 506.804560][T13267] ? mark_lock+0x94/0x320 [ 506.809202][T13267] should_fail_ex+0x39d/0x4d0 [ 506.814184][T13267] should_failslab+0x9/0x20 [ 506.818763][T13267] slab_pre_alloc_hook+0x59/0x310 [ 506.824298][T13267] ? ip6_setup_cork+0x1d6/0xfe0 [ 506.829373][T13267] __kmem_cache_alloc_node+0x53/0x250 [ 506.835242][T13267] ? ip6_setup_cork+0x1d6/0xfe0 [ 506.841105][T13267] kmalloc_trace+0x2a/0xe0 [ 506.846212][T13267] ip6_setup_cork+0x1d6/0xfe0 [ 506.851379][T13267] ip6_append_data+0x220/0x350 [ 506.856478][T13267] ? rawv6_send_hdrinc+0x1640/0x1640 [ 506.862859][T13267] rawv6_sendmsg+0x1264/0x1770 [ 506.869171][T13267] ? compat_rawv6_ioctl+0x70/0x70 [ 506.875316][T13267] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 506.882435][T13267] ? lockdep_hardirqs_on+0x98/0x150 [ 506.889592][T13267] ? compat_rawv6_ioctl+0x70/0x70 [ 506.895125][T13267] ? inet_sendmsg+0x18a/0x2f0 [ 506.899813][T13267] ? inet_sendmsg+0x7c/0x2f0 [ 506.904545][T13267] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 506.910025][T13267] ? security_socket_sendmsg+0x80/0xa0 [ 506.915666][T13267] ? inet_send_prepare+0x260/0x260 [ 506.921153][T13267] ____sys_sendmsg+0x5ba/0x960 [ 506.926210][T13267] ? __lock_acquire+0x7d40/0x7d40 [ 506.931637][T13267] ? __sys_sendmsg_sock+0x30/0x30 [ 506.936814][T13267] ? __import_iovec+0x3fa/0x850 [ 506.942144][T13267] ? import_iovec+0x73/0xa0 [ 506.947668][T13267] ___sys_sendmsg+0x2a6/0x360 [ 506.952823][T13267] ? get_pid_task+0x20/0x1e0 [ 506.958117][T13267] ? __sys_sendmsg+0x2a0/0x2a0 [ 506.963191][T13267] ? __lock_acquire+0x7d40/0x7d40 [ 506.968597][T13267] __se_sys_sendmsg+0x1c2/0x2b0 [ 506.973490][T13267] ? __x64_sys_sendmsg+0x80/0x80 [ 506.978712][T13267] ? lockdep_hardirqs_on+0x98/0x150 [ 506.984283][T13267] do_syscall_64+0x55/0xa0 [ 506.989681][T13267] ? clear_bhb_loop+0x40/0x90 [ 506.994665][T13267] ? clear_bhb_loop+0x40/0x90 [ 506.999534][T13267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.005724][T13267] RIP: 0033:0x7f290bf9cdd9 [ 507.010547][T13267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.030700][T13267] RSP: 002b:00007f290cf20028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.039135][T13267] RAX: ffffffffffffffda RBX: 00007f290c215fa0 RCX: 00007f290bf9cdd9 [ 507.047646][T13267] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 507.055711][T13267] RBP: 00007f290cf20090 R08: 0000000000000000 R09: 0000000000000000 [ 507.065515][T13267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.075548][T13267] R13: 00007f290c216038 R14: 00007f290c215fa0 R15: 00007ffd8885d4b8 [ 507.086251][T13267] [ 507.104364][T11838] wlan1: Trigger new scan to find an IBSS to join [ 507.108573][ T5781] Bluetooth: hci1: command tx timeout [ 507.273398][T11823] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.391758][T13273] sctp: [Deprecated]: syz.1.2470 (pid 13273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.391758][T13273] Use struct sctp_sack_info instead [ 507.412417][T11823] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.605594][T11823] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.755195][T11823] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.977861][T13288] mac80211_hwsim hwsim27 ..ãc¤±: renamed from wlan1 (while UP) [ 508.031523][T11838] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 508.063174][T13268] chnl_net:caif_netlink_parms(): no params data found [ 508.722414][ T5781] Bluetooth: hci0: command tx timeout [ 508.834295][T13268] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.842787][T13268] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.851197][T13268] bridge_slave_0: entered allmulticast mode [ 508.858890][T13268] bridge_slave_0: entered promiscuous mode [ 508.928770][T13268] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.949834][T13268] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.957626][T13268] bridge_slave_1: entered allmulticast mode [ 508.965312][T13268] bridge_slave_1: entered promiscuous mode [ 509.065895][T13268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.262580][T13268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.434275][T13313] netlink: 'syz.1.2478': attribute type 10 has an invalid length. [ 509.473016][T13313] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.512150][T13313] bridge_slave_1: left allmulticast mode [ 509.518693][T13313] bridge_slave_1: left promiscuous mode [ 509.525552][T13313] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.541763][T13313] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 509.562469][T13268] team0: Port device team_slave_0 added [ 509.642676][T13268] team0: Port device team_slave_1 added [ 509.970824][T13268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 510.008162][T13268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.141510][T13268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.358479][T13268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.395865][T13268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.507754][T13268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.797579][ T5781] Bluetooth: hci0: command tx timeout [ 510.927038][T13268] hsr_slave_0: entered promiscuous mode [ 510.935656][T13268] hsr_slave_1: entered promiscuous mode [ 510.948361][T13268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.956266][T13268] Cannot create hsr debugfs directory [ 511.336100][T13351] __nla_validate_parse: 6 callbacks suppressed [ 511.336135][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'. [ 511.385483][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'. [ 511.426258][T13351] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2485'. [ 511.471655][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'. [ 511.497827][T13351] netlink: 33 bytes leftover after parsing attributes in process `syz.1.2485'. [ 511.558899][T13360] FAULT_INJECTION: forcing a failure. [ 511.558899][T13360] name failslab, interval 1, probability 0, space 0, times 0 [ 511.591017][T13360] CPU: 0 PID: 13360 Comm: syz.0.2494 Not tainted syzkaller #0 [ 511.598888][T13360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 511.610091][T13360] Call Trace: [ 511.613903][T13360] [ 511.617010][T13360] dump_stack_lvl+0x18c/0x250 [ 511.621979][T13360] ? show_regs_print_info+0x20/0x20 [ 511.627633][T13360] ? load_image+0x420/0x420 [ 511.633906][T13360] ? __might_sleep+0xe0/0xe0 [ 511.640196][T13360] ? __lock_acquire+0x7d40/0x7d40 [ 511.646223][T13360] should_fail_ex+0x39d/0x4d0 [ 511.651747][T13360] should_failslab+0x9/0x20 [ 511.657392][T13360] slab_pre_alloc_hook+0x59/0x310 [ 511.663048][T13360] kmem_cache_alloc_node+0x60/0x320 [ 511.668750][T13360] ? __alloc_skb+0x103/0x2c0 [ 511.673949][T13360] __alloc_skb+0x103/0x2c0 [ 511.680342][T13360] pfkey_sendmsg+0x1a8/0x10e0 [ 511.685581][T13360] ? __might_sleep+0xe0/0xe0 [ 511.690650][T13360] ? mark_lock+0x94/0x320 [ 511.695555][T13360] ? __lock_acquire+0x1273/0x7d40 [ 511.700956][T13360] ? pfkey_release+0x320/0x320 [ 511.705993][T13360] ? aa_sk_perm+0x83c/0x970 [ 511.710629][T13360] ? aa_af_perm+0x330/0x330 [ 511.716468][T13360] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 511.723863][T13360] ? aa_sock_msg_perm+0x94/0x150 [ 511.729446][T13360] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 511.734978][T13360] ? security_socket_sendmsg+0x80/0xa0 [ 511.740992][T13360] ? pfkey_release+0x320/0x320 [ 511.746067][T13360] ____sys_sendmsg+0x5ba/0x960 [ 511.750968][T13360] ? __asan_memset+0x22/0x40 [ 511.755910][T13360] ? __sys_sendmsg_sock+0x30/0x30 [ 511.761398][T13360] ? __import_iovec+0x5f2/0x850 [ 511.766358][T13360] ? import_iovec+0x73/0xa0 [ 511.771529][T13360] ___sys_sendmsg+0x2a6/0x360 [ 511.776409][T13360] ? get_pid_task+0x20/0x1e0 [ 511.781548][T13360] ? __sys_sendmsg+0x2a0/0x2a0 [ 511.786636][T13360] ? __lock_acquire+0x7d40/0x7d40 [ 511.792327][T13360] __se_sys_sendmsg+0x1c2/0x2b0 [ 511.797762][T13360] ? __x64_sys_sendmsg+0x80/0x80 [ 511.802826][T13360] ? lockdep_hardirqs_on+0x98/0x150 [ 511.808957][T13360] do_syscall_64+0x55/0xa0 [ 511.813932][T13360] ? clear_bhb_loop+0x40/0x90 [ 511.819445][T13360] ? clear_bhb_loop+0x40/0x90 [ 511.824858][T13360] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 511.830870][T13360] RIP: 0033:0x7fc5ffb9cdd9 [ 511.835401][T13360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.858951][T13360] RSP: 002b:00007fc600977028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.868977][T13360] RAX: ffffffffffffffda RBX: 00007fc5ffe15fa0 RCX: 00007fc5ffb9cdd9 [ 511.880407][T13360] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000004 [ 511.891548][T13360] RBP: 00007fc600977090 R08: 0000000000000000 R09: 0000000000000000 [ 511.901020][T13360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.910153][T13360] R13: 00007fc5ffe16038 R14: 00007fc5ffe15fa0 R15: 00007ffee6371c78 [ 511.918589][T13360] [ 512.244977][T11823] [ 512.247587][T11823] ====================================================== [ 512.255756][T11823] WARNING: possible circular locking dependency detected [ 512.263158][T11823] syzkaller #0 Not tainted [ 512.267679][T11823] ------------------------------------------------------ [ 512.275682][T11823] kworker/u4:11/11823 is trying to acquire lock: [ 512.282803][T11823] ffff88807bec8d00 (team->team_lock_key#3){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 512.294144][T11823] [ 512.294144][T11823] but task is already holding lock: [ 512.302753][T11823] ffff888078928768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 512.314141][T11823] [ 512.314141][T11823] which lock already depends on the new lock. [ 512.314141][T11823] [ 512.324818][T11823] [ 512.324818][T11823] the existing dependency chain (in reverse order) is: [ 512.334372][T11823] [ 512.334372][T11823] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 512.342419][T11823] __mutex_lock+0x136/0xcc0 [ 512.348078][T11823] ieee80211_open+0x144/0x200 [ 512.353484][T11823] __dev_open+0x2cb/0x430 [ 512.358540][T11823] dev_open+0xab/0x190 [ 512.363282][T11823] team_add_slave+0x75f/0x29a0 [ 512.370060][T11823] do_setlink+0xdfe/0x4130 [ 512.376524][T11823] rtnl_newlink+0x17da/0x20a0 [ 512.383209][T11823] rtnetlink_rcv_msg+0x869/0xfa0 [ 512.389224][T11823] netlink_rcv_skb+0x241/0x4d0 [ 512.395006][T11823] netlink_unicast+0x751/0x8d0 [ 512.400859][T11823] netlink_sendmsg+0x8d0/0xbf0 [ 512.406860][T11823] ____sys_sendmsg+0x5ba/0x960 [ 512.412564][T11823] ___sys_sendmsg+0x2a6/0x360 [ 512.418120][T11823] __se_sys_sendmsg+0x1c2/0x2b0 [ 512.423513][T11823] do_syscall_64+0x55/0xa0 [ 512.428812][T11823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.435641][T11823] [ 512.435641][T11823] -> #0 (team->team_lock_key#3){+.+.}-{3:3}: [ 512.444084][T11823] __lock_acquire+0x2df1/0x7d40 [ 512.450878][T11823] lock_acquire+0x19e/0x420 [ 512.456167][T11823] __mutex_lock+0x136/0xcc0 [ 512.461491][T11823] team_del_slave+0x32/0x1c0 [ 512.466874][T11823] team_device_event+0x28d/0xa20 [ 512.472958][T11823] notifier_call_chain+0x197/0x380 [ 512.478825][T11823] unregister_netdevice_many_notify+0x100d/0x1900 [ 512.487996][T11823] unregister_netdevice_queue+0x32c/0x370 [ 512.494987][T11823] _cfg80211_unregister_wdev+0x16b/0x580 [ 512.501290][T11823] ieee80211_remove_interfaces+0x49e/0x690 [ 512.508320][T11823] ieee80211_unregister_hw+0x5d/0x2a0 [ 512.514925][T11823] mac80211_hwsim_del_radio+0x289/0x480 [ 512.521443][T11823] hwsim_exit_net+0x58d/0x650 [ 512.527396][T11823] cleanup_net+0x70a/0xbb0 [ 512.532886][T11823] process_scheduled_works+0xa5d/0x15d0 [ 512.539670][T11823] worker_thread+0xa55/0xfc0 [ 512.545102][T11823] kthread+0x2fa/0x390 [ 512.550088][T11823] ret_from_fork+0x48/0x80 [ 512.555520][T11823] ret_from_fork_asm+0x11/0x20 [ 512.560918][T11823] [ 512.560918][T11823] other info that might help us debug this: [ 512.560918][T11823] [ 512.571833][T11823] Possible unsafe locking scenario: [ 512.571833][T11823] [ 512.579980][T11823] CPU0 CPU1 [ 512.585774][T11823] ---- ---- [ 512.591303][T11823] lock(&rdev->wiphy.mtx); [ 512.596613][T11823] lock(team->team_lock_key#3); [ 512.604520][T11823] lock(&rdev->wiphy.mtx); [ 512.612087][T11823] lock(team->team_lock_key#3); [ 512.617778][T11823] [ 512.617778][T11823] *** DEADLOCK *** [ 512.617778][T11823] [ 512.628864][T11823] 5 locks held by kworker/u4:11/11823: [ 512.637034][T11823] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 512.654068][T11823] #1: ffffc90004727d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 512.668014][T11823] #2: ffffffff8e3b5a90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 512.678679][T11823] #3: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 512.692396][T11823] #4: ffff888078928768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 512.706777][T11823] [ 512.706777][T11823] stack backtrace: [ 512.713507][T11823] CPU: 1 PID: 11823 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 512.722295][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 512.734290][T11823] Workqueue: netns cleanup_net [ 512.739337][T11823] Call Trace: [ 512.742786][T11823] [ 512.745736][T11823] dump_stack_lvl+0x18c/0x250 [ 512.750784][T11823] ? load_image+0x420/0x420 [ 512.755548][T11823] ? show_regs_print_info+0x20/0x20 [ 512.760871][T11823] ? print_circular_bug+0x12b/0x1a0 [ 512.766318][T11823] check_noncircular+0x2fc/0x400 [ 512.771608][T11823] ? print_deadlock_bug+0x5d0/0x5d0 [ 512.777010][T11823] ? lockdep_lock+0xf5/0x230 [ 512.782162][T11823] ? __lock_acquire+0x1273/0x7d40 [ 512.787374][T11823] ? _find_first_zero_bit+0xd3/0x100 [ 512.793041][T11823] __lock_acquire+0x2df1/0x7d40 [ 512.798697][T11823] ? verify_lock_unused+0x140/0x140 [ 512.803996][T11823] ? verify_lock_unused+0x140/0x140 [ 512.809577][T11823] lock_acquire+0x19e/0x420 [ 512.814567][T11823] ? team_del_slave+0x32/0x1c0 [ 512.820221][T11823] ? __might_sleep+0xe0/0xe0 [ 512.825160][T11823] ? read_lock_is_recursive+0x20/0x20 [ 512.830881][T11823] __mutex_lock+0x136/0xcc0 [ 512.835470][T11823] ? team_del_slave+0x32/0x1c0 [ 512.841088][T11823] ? __lock_acquire+0x7d40/0x7d40 [ 512.846470][T11823] ? rcu_is_watching+0x15/0xb0 [ 512.851351][T11823] ? trace_contention_end+0x39/0xe0 [ 512.857037][T11823] ? __mutex_lock+0x315/0xcc0 [ 512.861818][T11823] ? team_del_slave+0x32/0x1c0 [ 512.866583][T11823] ? mutex_lock_nested+0x20/0x20 [ 512.871618][T11823] ? bond_netdev_event+0xeb/0xf20 [ 512.877069][T11823] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 512.884156][T11823] team_del_slave+0x32/0x1c0 [ 512.890172][T11823] team_device_event+0x28d/0xa20 [ 512.896195][T11823] notifier_call_chain+0x197/0x380 [ 512.902989][T11823] unregister_netdevice_many_notify+0x100d/0x1900 [ 512.911043][T11823] ? lock_chain_count+0x20/0x20 [ 512.916745][T11823] ? unregister_netdevice_many+0x20/0x20 [ 512.922746][T11823] ? kernfs_remove_by_name_ns+0x117/0x150 [ 512.929106][T11823] ? __lock_acquire+0x7d40/0x7d40 [ 512.934798][T11823] unregister_netdevice_queue+0x32c/0x370 [ 512.941425][T11823] ? list_netdevice+0x730/0x730 [ 512.946498][T11823] ? kernfs_remove_by_name_ns+0x117/0x150 [ 512.952757][T11823] _cfg80211_unregister_wdev+0x16b/0x580 [ 512.958678][T11823] ieee80211_remove_interfaces+0x49e/0x690 [ 512.966781][T11823] ? ieee80211_do_stop+0x1e20/0x1e20 [ 512.972713][T11823] ? rcu_is_watching+0x15/0xb0 [ 512.978015][T11823] ieee80211_unregister_hw+0x5d/0x2a0 [ 512.984556][T11823] mac80211_hwsim_del_radio+0x289/0x480 [ 512.990305][T11823] ? rhashtable_remove_fast+0xc00/0xc00 [ 512.995876][T11823] hwsim_exit_net+0x58d/0x650 [ 513.000810][T11823] ? hwsim_init_net+0x90/0x90 [ 513.005752][T11823] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 513.012360][T11823] cleanup_net+0x70a/0xbb0 [ 513.016912][T11823] ? ops_free_list+0x3b0/0x3b0 [ 513.022286][T11823] ? _raw_spin_unlock_irq+0x23/0x50 [ 513.027904][T11823] ? process_scheduled_works+0x96f/0x15d0 [ 513.033916][T11823] ? process_scheduled_works+0x96f/0x15d0 [ 513.040107][T11823] process_scheduled_works+0xa5d/0x15d0 [ 513.046555][T11823] ? worker_attach_to_pool+0x380/0x380 [ 513.052393][T11823] ? assign_work+0x3d2/0x5d0 [ 513.057112][T11823] worker_thread+0xa55/0xfc0 [ 513.062427][T11823] kthread+0x2fa/0x390 [ 513.067033][T11823] ? pr_cont_work+0x560/0x560 [ 513.072156][T11823] ? kthread_blkcg+0xd0/0xd0 [ 513.076859][T11823] ret_from_fork+0x48/0x80 [ 513.082264][T11823] ? kthread_blkcg+0xd0/0xd0 [ 513.087120][T11823] ret_from_fork_asm+0x11/0x20 [ 513.091971][T11823] [ 513.132042][ T5781] Bluetooth: hci0: command tx timeout [ 513.233954][T11823] team0: Port device wlan1 removed [ 513.314255][T13377] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2496'. [ 513.714704][T13380] netlink: 'syz.2.2487': attribute type 10 has an invalid length. [ 513.745916][T13380] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.772803][T13380] bridge_slave_1: left allmulticast mode [ 513.778922][T13380] bridge_slave_1: left promiscuous mode [ 513.785689][T13380] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.801703][T13380] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 513.895333][T11823] bridge0: port 4(dummy0) entered disabled state [ 513.908595][T11823] bond0: left allmulticast mode [ 513.913859][T11823] bond_slave_1: left allmulticast mode [ 513.938434][T11823] bridge0: port 3(bond0) entered disabled state [ 513.953717][T11823] bridge_slave_1: left allmulticast mode [ 513.961804][T11823] bridge_slave_1: left promiscuous mode [ 513.970901][T11823] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.982071][T11823] bridge_slave_0: left promiscuous mode [ 513.988650][T11823] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.002479][T11823] veth1_vlan: left promiscuous mode [ 514.008594][T11823] veth0_vlan: left promiscuous mode [ 514.109586][T11823] team0 (unregistering): Port device geneve1 removed [ 514.272033][T11823] team0 (unregistering): Port device hsr_slave_0 removed [ 514.349605][T11823] team0 (unregistering): Port device team_slave_1 removed [ 514.444676][T11823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.456416][T11823] bond_slave_1 (unregistering): left promiscuous mode [ 514.618232][T11823] team0 (unregistering): Port device bridge0 removed [ 514.635375][T11823] bond0 (unregistering): Released all slaves [ 515.000864][T13268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 515.025064][T13268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 515.036159][T13268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 515.060153][T13268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 515.166225][T13268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.186026][T13268] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.201711][ T5781] Bluetooth: hci0: command tx timeout [ 515.211366][T11855] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.221365][T11855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.236278][T11849] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.244041][T11849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.474390][T13268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.534274][T13268] veth0_vlan: entered promiscuous mode [ 515.552332][T13268] veth1_vlan: entered promiscuous mode [ 515.591040][T13268] veth0_macvtap: entered promiscuous mode [ 515.602156][T13268] veth1_macvtap: entered promiscuous mode [ 515.626813][T13268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.641765][T13268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.654409][T13268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.666854][T13268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.678723][T13268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.692730][T13268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.704709][T13268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.719463][T13268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.730733][T13268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.743382][T13268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.756134][T13268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.771423][T13268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.783670][T13268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.796036][T13268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.810937][T13268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.823517][T13268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.839186][T13268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.851103][T13268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.863083][T13268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.873657][T13268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.886442][T13268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.902127][T13268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.932871][T13268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.942901][T13268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.956610][T13268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.966677][T13268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.013715][T13268] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 516.056231][T13268] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 516.057392][T11859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.087908][T11859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.120546][T11859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.149522][T11859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50