last executing test programs: 9m5.469889402s ago: executing program 1 (id=4696): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000000)=ANY=[], 0x48) 9m5.365680194s ago: executing program 1 (id=4698): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff00800", 0x0, 0x104, 0x6000000000000000, 0xe9, 0x0, &(0x7f0000000540)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce", 0x0}, 0x50) 9m5.346791404s ago: executing program 1 (id=4699): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) 9m5.267727556s ago: executing program 1 (id=4700): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 9m5.152409609s ago: executing program 1 (id=4702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 9m4.926104754s ago: executing program 1 (id=4705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000007, r1}, 0x38) 8m49.65719327s ago: executing program 32 (id=4705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000007, r1}, 0x38) 14.018863123s ago: executing program 3 (id=7405): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)='%ps \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000009c0)={r6, &(0x7f0000000780)="c2fe8c33892148665589054dfc90f645a863907a7e1902f2ee209fc9e343c620a09b01852b544b2a5f1d1723c7c6b7d1f0f2cf9d58798e0a5621b43f286f71db9fb94464d4281c225f85549e95a1c27263b05bd805fc40f8fbc43464ddf96e83ace31a59f17df1256a8ab358e03358f06ca38ba881094ca0d6fd85b96d", &(0x7f0000000900)=""/189}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57}, 0x94) socketpair(0x1a, 0x0, 0x1, &(0x7f0000000100)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = gettid() r10 = socket$kcm(0x2, 0x3, 0x2) r11 = socket$kcm(0x11, 0xa, 0x300) sendmsg$kcm(r11, &(0x7f0000002d40)={&(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x80, 0x0}, 0x4000) sendmsg$inet(r10, 0x0, 0x200040c4) syz_open_procfs$namespace(r9, &(0x7f0000000080)='ns/pid\x00') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r12, &(0x7f0000000240)={&(0x7f0000000140)={0x2d, 0x4001, @multicast2}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f00000006c0)={0x4, 0x80, 0x1, 0x7, 0x1, 0x20, 0x0, 0x7fffffffffffffff, 0x5008, 0x37d227e0e6384d28, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000002c0), 0x3}, 0x3048, 0x3, 0xed6b, 0x0, 0x5, 0x3b382a1e, 0x2, 0x0, 0x0, 0x0, 0xbe2c}, r9, 0x3, r3, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x0, 0x63, 0xe9, &(0x7f0000000340)="e134a80b8d59794f9fe7b59fa74c413e1e86d59da62f56eebf27a674e8b479e8bfd72a2f91e1231b8ac43ea16416d464b2afa336f6c888f76d542c8aaedeecc126aee4559de188fee13b240691520894389ea2cbac9d09f37d78cb7ff8c350521b0502", &(0x7f0000000a00)=""/233, 0x3, 0x0, 0xb0, 0x0, &(0x7f0000000b00)="b1d98895cde088947f9a129334cb605337895768de989342a56065282f74fd6678f33dde6368bf610dacf817124ce815d037980c7e55129212d2100e5497617886911689a81384f692797dd8b76c6e47540d7da053a285fb624b1a1e9cf1eb9c01809cefbd18cbf2f2626dab69cd433e72b9a690d289678eaee9ff2cad9c74c1ad4626ad250acb8dc306d82e12fdd9f7b053f88d77bec0d28ac75871254456c5b0097b3f810e79e0639f8c24590a9281", 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$kcm(r0, &(0x7f0000002d40)={&(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x80, 0x0}, 0x4000) 13.650371642s ago: executing program 3 (id=7408): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db440000041296a1180002000000000000000e1208000f0100810401a80035002000", 0x2e}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080002000700020006", 0x2d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg(r0, &(0x7f0000000c40)={&(0x7f0000000300)=@isdn={0x22, 0x4, 0x7f, 0x38, 0x6}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000380)="24c49a62aba7099379e190c0c26e1db35f3b657f95998c32a234771c405c60", 0x1f}, {0x0}, {&(0x7f0000000480)="8466efe727a25dbc0f020f1561430f27d1bbe66a388ac9edc9192e906e0e94a0883f013faca6846c51e31b4c747aa339be89aaf2b9cd51ead1b52baa2d02d5fe4d3709a8f159cf2c8eb207cfbf8d5dfbc06d62b4d0044da1d1e668083d8f23a3a81a457f44c04326186f106c63882fe3613e2aabe2e7c5c9046ee860fd4dffa6c20f057c5880984af05c5d619858a02b93a6319f7ad3bd59d1ed9fee0ca47618", 0xa0}, {&(0x7f0000000540)="a7a069a3eb11f7c3105b082bc5a268688e71a3a9ffadea395e1406b2391e22fea60c9f078087df02ab56234ed78f9492eb8f9905ae44aba0fa680c66c5517c00bb96c9fc714bcc050c57df69fee60a5b542f7bb1b6c0afb785e05fcbd5e92aefbc4f", 0x62}, {&(0x7f00000005c0)="bf4045b108865dc15b19e2db0d0e5ed46c92c4dd88a2713cb0e3f047b0bfcbc05054ac8bbe8b2477e27025c447a777b9e43f9939a2789dac8050ca33f571be77c1697d385d79607339e58c0016f3de3fcf297fbdb84351bf415b2032b7bb6a3598", 0x61}, {&(0x7f0000000640)="b7933be22957571edd19fb36ae8664e2fe288746d3c25bd46e1e99b88d21ec77aacb9e0b455dac33cc3ba1b7275551416ef44ab86bcb01257ac7ec4bcf2faecf1293cbef36679af8412d9c45208813046cbc3d655ff4202252049432de6f892e897a5c5c2eb960d1427c392e7f4b033e2fd636f6af6e5ce1975d635a", 0x7c}, {&(0x7f0000000740)="ed55316c8fe589ff38297ae6e92081d598c6074fd4993fd33c21d5fedc8b2ffd17822200081bbdb231398c8facbf3fd3c462bb23c275f702a7b337b67c5f5aeea887e7e2af3d2f62ac6c3bd04ec64cad55530dbfd272bbad116e7a27de1e5a9cadb2841043e7cdfa671042dce5eb57737c93dcbd89d44c8a62d8873af91b32d9969017a3a369c37d67962a411a3a694b0348afeb36433afc681466d48d25abe138ce04489018485fcbeabdd32dd2e443f99abfd6cf5f4a2d00702a11cb0f3519149e89e146069b28549e22517afa83bb713400b15d849a82c80d4ad54adf13e3304a5872ee2e3cd7d8a8562dc42214d992714502fe4b", 0xf6}, {&(0x7f0000000840)="b168bc435e2c2ed61fe38a055938a33b693e3c95f81bf9627f190ff53256c6af1b1ac197a9ec4126ec73930d60beb7b6ac469a458402e9e1571c5ca381b969338204c0851d7db7952ee0f3813cd66b3c8c4038cc703d9abdd207a49af28eeea4088d6e870a3182469693067666ad9dd668c69904f81a904b3317660e6b6f14cd2a6b164a048510009e805367557258d0bf85ba0634bcea01ebe2591297b37be8339750bce127b41a33f77efdca0f2932cfaf5e16bbc2f102c1e208b44d56adbec00adf2631661722", 0xc8}, {&(0x7f0000000940)="5f49bca65cbad0fc544849649860a1c7111d3d92d8c3fa03e9d85edd5eb8f42c5c5fea9486f5fa05dd4106ea24687f698f8757be2c1c638468086dc35f092c9e99f22dfa943370d9eadcecebb50c0fc7d8561d4133a1559eb9a125a4591a749143b2a8e710c9d030d8098e69948b83c265e6525cb18f41edfc6855c5765e74083d365f40e2327617be52355c556e2bb3ce631b27c79d142af5f1662befee3e968923f1c7181eee768e08dfc9484de5689fb639eabeac67a22533f531136d341f82cc1da14d5aba18d58ad84a72bcc142c95f581a0c0876021a61226571e8cd919642fa60e72403e517098e7d0727", 0xee}, {&(0x7f0000000a40)="b9782098adf68e7d71586fa386d225f08247bebe019cf0cb7ea5e3aaff26adc3abd31f7ee3f4c9178621dff5b0034530d49aa5280205153d522361250da32b6f965b52a8edca882b88233fb929b01081d7e623a8e9f091574c4b665e1fdffbfee4202e6abf453be920f5018a3eee56cd737f72df55f3d0993c5d96d859ccd215dd3571f55a9e1a0febedbeb3edfe72f0a2be2b0407bc050f1042e736bc607353e99e27f24beeb976ea800c7c39f9300c0607569005d9aa2210ebc9aa09fe33c8e0e9a1e232e0851f7b4a05b6bce1f3c95d6eef970446ac26281cd7882fcad7a03c365023521a3f3553416d7853af427e", 0xf0}], 0xa, &(0x7f0000000c00)}, 0x400c840) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 12.999344297s ago: executing program 3 (id=7411): socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1100000004"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x5}, 0x110c0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 12.556578677s ago: executing program 3 (id=7413): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x1a00}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x19}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 12.347798292s ago: executing program 3 (id=7414): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) recvmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000100), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)=""/33, 0x21}], 0x1, &(0x7f00000005c0)}, 0x12020) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 8.58753803s ago: executing program 3 (id=7418): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db440000041296a1180002000000000000000e1208000f0100810401a80035002000", 0x2e}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080002000700020006", 0x2d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg(r0, &(0x7f0000000c40)={&(0x7f0000000300)=@isdn={0x22, 0x4, 0x7f, 0x38, 0x6}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000380)="24c49a62aba7099379e190c0c26e1db35f3b657f95998c32a234771c405c60", 0x1f}, {0x0}, {&(0x7f0000000480)="8466efe727a25dbc0f020f1561430f27d1bbe66a388ac9edc9192e906e0e94a0883f013faca6846c51e31b4c747aa339be89aaf2b9cd51ead1b52baa2d02d5fe4d3709a8f159cf2c8eb207cfbf8d5dfbc06d62b4d0044da1d1e668083d8f23a3a81a457f44c04326186f106c63882fe3613e2aabe2e7c5c9046ee860fd4dffa6c20f057c5880984af05c5d619858a02b93a6319f7ad3bd59d1ed9fee0ca47618", 0xa0}, {&(0x7f0000000540)="a7a069a3eb11f7c3105b082bc5a268688e71a3a9ffadea395e1406b2391e22fea60c9f078087df02ab56234ed78f9492eb8f9905ae44aba0fa680c66c5517c00bb96c9fc714bcc050c57df69fee60a5b542f7bb1b6c0afb785e05fcbd5e92aefbc4f", 0x62}, {&(0x7f00000005c0)="bf4045b108865dc15b19e2db0d0e5ed46c92c4dd88a2713cb0e3f047b0bfcbc05054ac8bbe8b2477e27025c447a777b9e43f9939a2789dac8050ca33f571be77c1697d385d79607339e58c0016f3de3fcf297fbdb84351bf415b2032b7bb6a3598", 0x61}, {&(0x7f0000000640)="b7933be22957571edd19fb36ae8664e2fe288746d3c25bd46e1e99b88d21ec77aacb9e0b455dac33cc3ba1b7275551416ef44ab86bcb01257ac7ec4bcf2faecf1293cbef36679af8412d9c45208813046cbc3d655ff4202252049432de6f892e897a5c5c2eb960d1427c392e7f4b033e2fd636f6af6e5ce1975d635a", 0x7c}, {&(0x7f0000000740)="ed55316c8fe589ff38297ae6e92081d598c6074fd4993fd33c21d5fedc8b2ffd17822200081bbdb231398c8facbf3fd3c462bb23c275f702a7b337b67c5f5aeea887e7e2af3d2f62ac6c3bd04ec64cad55530dbfd272bbad116e7a27de1e5a9cadb2841043e7cdfa671042dce5eb57737c93dcbd89d44c8a62d8873af91b32d9969017a3a369c37d67962a411a3a694b0348afeb36433afc681466d48d25abe138ce04489018485fcbeabdd32dd2e443f99abfd6cf5f4a2d00702a11cb0f3519149e89e146069b28549e22517afa83bb713400b15d849a82c80d4ad54adf13e3304a5872ee2e3cd7d8a8562dc42214d992714502fe4b", 0xf6}, {&(0x7f0000000840)="b168bc435e2c2ed61fe38a055938a33b693e3c95f81bf9627f190ff53256c6af1b1ac197a9ec4126ec73930d60beb7b6ac469a458402e9e1571c5ca381b969338204c0851d7db7952ee0f3813cd66b3c8c4038cc703d9abdd207a49af28eeea4088d6e870a3182469693067666ad9dd668c69904f81a904b3317660e6b6f14cd2a6b164a048510009e805367557258d0bf85ba0634bcea01ebe2591297b37be8339750bce127b41a33f77efdca0f2932cfaf5e16bbc2f102c1e208b44d56adbec00adf2631661722", 0xc8}, {&(0x7f0000000940)="5f49bca65cbad0fc544849649860a1c7111d3d92d8c3fa03e9d85edd5eb8f42c5c5fea9486f5fa05dd4106ea24687f698f8757be2c1c638468086dc35f092c9e99f22dfa943370d9eadcecebb50c0fc7d8561d4133a1559eb9a125a4591a749143b2a8e710c9d030d8098e69948b83c265e6525cb18f41edfc6855c5765e74083d365f40e2327617be52355c556e2bb3ce631b27c79d142af5f1662befee3e968923f1c7181eee768e08dfc9484de5689fb639eabeac67a22533f531136d341f82cc1da14d5aba18d58ad84a72bcc142c95f581a0c0876021a61226571e8cd919642fa60e72403e517098e7d0727", 0xee}, {&(0x7f0000000a40)="b9782098adf68e7d71586fa386d225f08247bebe019cf0cb7ea5e3aaff26adc3abd31f7ee3f4c9178621dff5b0034530d49aa5280205153d522361250da32b6f965b52a8edca882b88233fb929b01081d7e623a8e9f091574c4b665e1fdffbfee4202e6abf453be920f5018a3eee56cd737f72df55f3d0993c5d96d859ccd215dd3571f55a9e1a0febedbeb3edfe72f0a2be2b0407bc050f1042e736bc607353e99e27f24beeb976ea800c7c39f9300c0607569005d9aa2210ebc9aa09fe33c8e0e9a1e232e0851f7b4a05b6bce1f3c95d6eef970446ac26281cd7882fcad7a03c365023521a3f3553416d7853af427e", 0xf0}], 0xa, &(0x7f0000000c00)}, 0x400c840) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x40) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2.830775354s ago: executing program 4 (id=7442): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, @perf_config_ext={0x8000000000000001, 0x9}, 0x104111, 0x10000000000005, 0x0, 0x1, 0x6, 0x4, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000080)={0xd2b2bea6a9c4bae0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x8, 0x3}, 0x0, 0x0, 0x7ff, 0x7, 0xf, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000440), 0x4) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) 2.820627464s ago: executing program 2 (id=7443): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xffffffac, &(0x7f0000000000), 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 2.687587107s ago: executing program 0 (id=7444): r0 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, &(0x7f0000000140), 0x16) 2.655711638s ago: executing program 2 (id=7445): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001c40)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) (async) close(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) close(r1) (async) close(r1) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001c40)) (async) 2.512218812s ago: executing program 0 (id=7446): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg(r0, &(0x7f0000000c40)={&(0x7f0000000300)=@isdn={0x22, 0x4, 0x7f, 0x38, 0x6}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000380)="24c49a62aba7099379e190c0c26e1db35f3b657f95998c32a234771c405c60", 0x1f}, {&(0x7f00000003c0)="51b8bac492f089dec29ff42a6555a9f59a3ed39c6f9a27fec4233b837f13a8d8dec84eacceca54f302158ab0995a923edb70bb4c605ddacfec680b10424917555eb0d2e614cffdcfb70ba11213828257819480724842912576af9d9c493eaccd0ad27ea2ff1e2a8b4b62b35534d41f0d68d124", 0x73}, {&(0x7f0000000480)="8466efe727a25dbc0f020f1561430f27d1bbe66a388ac9edc9192e906e0e94a0883f013faca6846c51e31b4c747aa339be89aaf2b9cd51ead1b52baa2d02d5fe4d3709a8f159cf2c8eb207cfbf8d5dfbc06d62b4d0044da1d1e668083d8f23a3a81a457f44c04326186f106c63882fe3613e2aabe2e7c5c9046ee860fd4dffa6c20f057c5880984af05c5d619858a02b93a6319f7ad3bd59d1ed9fee0c", 0x9d}, {&(0x7f0000000540)="a7a069a3eb11f7c3105b082bc5a268688e71a3a9ffadea395e1406b2391e22fea60c9f078087df02ab56234ed78f9492eb8f9905ae44aba0fa680c66c5517c00bb96c9fc714bcc050c57df69fee60a5b542f7bb1b6c0afb785e05fcbd5e92aefbc4f", 0x62}, {&(0x7f00000005c0)="bf4045b108865dc15b19e2db0d0e5ed46c92c4dd88a2713cb0e3f047b0bfcbc05054ac8bbe8b2477e27025c447a777b9e43f9939a2789dac8050", 0x3a}, {0x0}, {&(0x7f0000000740)="ed55316c8fe589ff38297ae6e92081d598c6074fd4993fd33c21d5fedc8b2ffd17822200081bbdb231398c8facbf3fd3c462bb23c275f702a7b337b67c5f5aeea887e7e2af3d2f62ac6c3bd04ec64cad55530dbfd272bbad116e7a27de1e5a9cadb2841043e7cdfa671042dce5eb57737c93dcbd89d44c8a62d8873af91b32d9969017a3a369c37d67962a411a3a694b0348afeb36433afc681466d48d25abe138ce04489018485fcbeabdd32dd2e443f99abfd6cf5f4a2d00", 0xb9}, {&(0x7f0000000840)="b168bc435e2c2ed61fe38a055938a33b693e3c95f81bf9627f190ff53256c6af1b1ac197a9ec4126ec73930d60beb7b6ac469a458402e9e1571c5ca381b969338204c0851d7db7952ee0f3813cd66b3c8c4038cc703d9abdd207a49af28eeea4088d6e870a3182469693067666ad9dd668c69904f81a904b3317660e6b6f14cd2a6b164a048510009e805367557258d0bf85ba0634bcea01ebe2591297b37be8339750bce127b41a33f77efdca0f2932cfaf5e16bbc2f102c1e208b44d56adbec00adf2631661722", 0xc8}, {0x0}], 0x9, &(0x7f0000000c00)}, 0x400c840) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e", 0x48}], 0x2}, 0x0) 2.392980225s ago: executing program 4 (id=7447): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='a\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000184380da4535c4cbd9b50de24dec268420b00ed98c1caa76fc93ff9afd0872ecce91a39b3f3824156b769b321b544b66539836f8bfa154a884a214335c60bcdf9a236fe7", @ANYBLOB="0200000003000000020000000a00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x400c844) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x78, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)}, {&(0x7f0000002b40)="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", 0x1b2}], 0x2}, 0x8400) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)}, {&(0x7f0000000640)}], 0x2}, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_devices(r1, 0x0, 0x8) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) socket$kcm(0x10, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800002, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000440)="e0b9547e841fd74eabc89b6f5b32", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.392870814s ago: executing program 2 (id=7448): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', @random="440000001000"}) 2.176305059s ago: executing program 0 (id=7449): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db440000041296a1180002000000000000000e1208000f0100810401a80035002000014003", 0x31}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg(r0, &(0x7f0000000c40)={&(0x7f0000000300)=@isdn={0x22, 0x4, 0x7f, 0x38, 0x6}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000380)="24c49a62aba7099379e190c0c26e1db35f3b657f95998c32a234771c405c60", 0x1f}, {&(0x7f00000003c0)="51b8bac492f089dec29ff42a6555a9f59a3ed39c6f9a27fec4233b837f13a8d8dec84eacceca54f302158ab0995a923edb70bb4c605ddacfec680b10424917555eb0d2e614cffdcfb70ba11213828257819480724842912576af9d9c493eaccd0ad27ea2ff1e2a8b4b62b35534d41f0d68d124cfc125b1931442a1471a667982f624819edc294bd398dd52a7f065e9cc7ea248cad7a6212618", 0x99}, {&(0x7f0000000480)="8466efe727a25dbc0f020f1561430f27d1bbe66a388ac9edc9192e906e0e94a0883f013faca6846c51e31b4c747aa339be89aaf2b9cd51ead1b52baa2d02d5fe4d3709a8f159cf2c8eb207cfbf8d5dfbc06d62b4d0044da1d1e668083d8f23a3a81a457f44c04326186f106c63882fe3613e2aabe2e7c5c9046ee860fd4dffa6c20f057c5880984af05c5d619858a02b93a6319f7ad3bd59d1ed9fee0ca476188ffa", 0xa2}, {&(0x7f0000000540)="a7a069a3eb11f7c3105b082bc5a268688e71a3a9ffadea395e1406b2391e22fea60c9f078087df02ab56234ed78f9492eb8f9905ae44aba0fa680c66c5517c00bb96c9fc714bcc050c57df69fee60a5b542f7bb1b6c0afb785e05fcbd5e92aefbc4f", 0x62}, {&(0x7f00000005c0)="bf4045b108865dc15b19e2db0d0e5ed46c92c4dd88a2713cb0e3f047b0bfcbc05054ac8bbe8b2477e27025c447a777b9e43f9939a2789dac8050ca33f571be77c1697d385d79607339e58c0016f3de3fcf297fbdb84351bf415b2032b7bb6a3598", 0x61}, {&(0x7f0000000640)="b7933be22957571edd19fb36ae8664e2fe288746d3c25bd46e1e99b88d21ec77aacb9e0b455dac33cc3ba1b7275551416ef44ab86bcb01257ac7ec4bcf2faecf1293cbef36679af8412d9c45208813046cbc3d655ff4202252049432de6f892e897a5c5c2eb960d1427c392e7f4b033e2fd636f6af6e5ce1975d635aa246c02baa0166f9042dedbb08f627d7403735101d9929815444bb2e3a434baf8577ba5997f4e24e2c6bbe702e988dbf8636f0e34d51c4098f66eb607d0c2c895fb7f57833bd76914a19b4151672e47d5365974ed2d9f29efad994a66223d1c28d7c1debe092de8779fff313fecc17df9ed9fcd2dae2df505b6087e9", 0xf8}, {&(0x7f0000000740)="ed55316c8fe589ff38297ae6e92081d598c6074fd4993fd33c21d5fedc8b2ffd17822200081bbdb231398c8facbf3fd3c462bb23c275f702a7b337b67c5f5aeea887e7e2af3d2f62ac6c3bd04ec64cad55530dbfd272bbad116e7a27de1e5a9cadb2841043e7cdfa671042dce5eb57737c93dcbd89d44c8a62d8873af91b32d9969017a3a369c37d67962a411a3a694b0348afeb36433afc681466d48d25abe138ce04489018485fcbeabdd32dd2e443f99abfd6cf5f4a2d00702a11cb0f3519149e89e146069b28549e22517afa83bb713400b15d849a82c80d4ad54adf13e3304a5872ee2e3cd7d8a8562dc42214d992714502fe4b", 0xf6}, {0x0}, {&(0x7f0000000940)="5f49bca65cbad0fc544849649860a1c7111d3d92d8c3fa03e9d85edd5eb8f42c5c5fea9486f5fa05dd4106ea24687f698f8757be2c1c638468086dc35f092c9e99f22dfa943370d9eadcecebb50c0fc7d8561d4133a1559eb9a125a4591a749143b2a8e710c9d030d8098e69948b83c265e6525c", 0x74}, {&(0x7f0000000a40)="b9782098adf68e7d71586fa386d225f08247bebe019cf0cb7ea5e3aaff26adc3abd31f7ee3f4c9178621dff5b0034530d49aa5280205153d522361250da32b6f965b52a8edca882b88233fb929b01081d7e623a8e9f091574c4b665e1fdffbfee4202e6abf453be920f5018a3eee56cd737f72df55f3d0993c5d96d859ccd215dd3571f55a9e1a0febedbeb3edfe72f0a2be2b0407bc050f1042e736bc607353e99e27f24beeb976ea800c7c39f9300c0607569005d9aa2210ebc9aa09fe33c8e0e9a1e232e0851f7b4a05b6bce1f3c95d6eef970446ac26281cd7882fcad7a03c365023521a3f3553416d7853", 0xed}], 0xa, &(0x7f0000000c00)}, 0x400c840) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722", 0x6f}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 1.908265426s ago: executing program 4 (id=7450): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYBLOB="36b7e31f83cf55ebd1c3f1fac84ee72e6fd8ee6b5c698b753e1adbd74a08a551425d69a209e10986af8b398d0f68559e4d611422e65818bdac3869fb6668a9d3269533a97f63173131528fc0197a48f0f1ab060a36d19fe4c978f13212de168456bf0e7e83f5c6229e0db99f35354f0fa2955bc15d2e5150f96e43752c0bf5b540956b5baebb48db3b2c145b503943915502f23393ec32456ea07bd2b61a259b6a9a51bd189219437edfff134b6af9e09a6ac0db3c9eb554cfb14ad43160b1d4036c763122d091120b0f8702220c32d38e0832e99faede740b048c57eb247953df9dfd0e6f7b682e46", @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000800000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff94, 0xfffffffffffffff8}, 0x126a0, 0x1000, 0x0, 0x0, 0x736, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0x4000, 0x0, 0x1a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0x4a, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000180)='GPL\x00', 0x40, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000010000)={0x1, 0x80, 0x0, 0x5, 0x81, 0x0, 0x0, 0x5c32, 0xae073155cfd213b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x5, 0xfffffffd, 0x8, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0xb) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x53) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$kcm(0x23, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000380), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000631120000021a199b2dd94c8f9940000008510000002000000850000000800000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) write$cgroup_int(r4, &(0x7f0000000040)=0x2c, 0x1) 1.795493868s ago: executing program 2 (id=7451): socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x5, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1100000004"], 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x5}, 0x110c0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000200), 0x4) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0xfffff801}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.2837136s ago: executing program 0 (id=7452): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffbf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) close(0xffffffffffffffff) recvmsg(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000d80)}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r4 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r4, 0x110, 0x2, &(0x7f0000000140), 0x16) 1.222603632s ago: executing program 4 (id=7453): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='a\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000184380da4535c4cbd9b50de24dec268420b00ed98c1caa76fc93ff9afd0872ecce91a39b3f3824156b769b321b544b66539836f8bfa154a884a214335c60bcdf9a236fe7", @ANYBLOB="0200000003000000020000000a00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x400c844) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x78, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)}, {&(0x7f0000002b40)="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", 0x1b2}], 0x2}, 0x8400) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)}, {&(0x7f0000000640)}], 0x2}, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_devices(r1, 0x0, 0x8) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.070409905s ago: executing program 2 (id=7454): r0 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, &(0x7f0000000140), 0x16) 764.263663ms ago: executing program 2 (id=7455): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20006, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000100)='a\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000000000000000000000000000000000000184380da4535c4cbd9b50de24dec268420b00ed98c1caa76fc93ff9afd0872ecce91a39b3f3824156b769b321b544b66539836f8bfa154a884a214335c60bcdf9a236fe7", @ANYBLOB="0200000003000000020000000a00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x400c844) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x78, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)}, {&(0x7f0000002b40)="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", 0x1b2}], 0x2}, 0x8400) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)}, {&(0x7f0000000640)}], 0x2}, 0x0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_devices(r1, 0x0, 0x8) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800002, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa}, 0x94) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 409.649ms ago: executing program 0 (id=7456): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x7400}, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg(r0, &(0x7f0000000c40)={&(0x7f0000000300)=@isdn={0x22, 0x4, 0x7f, 0x38, 0x6}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000380)="24c49a62aba7099379e190c0c26e1db35f3b657f95998c32a234771c405c60", 0x1f}, {&(0x7f00000003c0)="51b8bac492f089dec29ff42a6555a9f59a3ed39c6f9a27fec4233b837f13a8d8dec84eacceca54f302158ab0995a923edb70bb4c605ddacfec680b10424917555eb0d2e614cffdcfb70ba11213828257819480724842912576af9d9c493eaccd0ad27ea2ff1e2a8b4b62b35534d41f0d68d124", 0x73}, {&(0x7f0000000480)="8466efe727a25dbc0f020f1561430f27d1bbe66a388ac9edc9192e906e0e94a0883f013faca6846c51e31b4c747aa339be89aaf2b9cd51ead1b52baa2d02d5fe4d3709a8f159cf2c8eb207cfbf8d5dfbc06d62b4d0044da1d1e668083d8f23a3a81a457f44c04326186f106c63882fe3613e2aabe2e7c5c9046ee860fd4dffa6c20f057c5880984af05c5d619858a02b93a6319f7ad3bd59d1ed9fee0c", 0x9d}, {&(0x7f0000000540)="a7a069a3eb11f7c3105b082bc5a268688e71a3a9ffadea395e1406b2391e22fea60c9f078087df02ab56234ed78f9492eb8f9905ae44aba0fa680c66c5517c00bb96c9fc714bcc050c57df69fee60a5b542f7bb1b6c0afb785e05fcbd5e92aefbc4f", 0x62}, {&(0x7f00000005c0)="bf4045b108865dc15b19e2db0d0e5ed46c92c4dd88a2713cb0e3f047b0bfcbc05054ac8bbe8b2477e27025c447a777b9e43f9939a2789dac8050", 0x3a}, {0x0}, {&(0x7f0000000740)="ed55316c8fe589ff38297ae6e92081d598c6074fd4993fd33c21d5fedc8b2ffd17822200081bbdb231398c8facbf3fd3c462bb23c275f702a7b337b67c5f5aeea887e7e2af3d2f62ac6c3bd04ec64cad55530dbfd272bbad116e7a27de1e5a9cadb2841043e7cdfa671042dce5eb57737c93dcbd89d44c8a62d8873af91b32d9969017a3a369c37d67962a411a3a694b0348afeb36433afc681466d48d25abe138ce04489018485fcbeabdd32dd2e443f99abfd6cf5f4a2d00", 0xb9}, {&(0x7f0000000840)="b168bc435e2c2ed61fe38a055938a33b693e3c95f81bf9627f190ff53256c6af1b1ac197a9ec4126ec73930d60beb7b6ac469a458402e9e1571c5ca381b969338204c0851d7db7952ee0f3813cd66b3c8c4038cc703d9abdd207a49af28eeea4088d6e870a3182469693067666ad9dd668c69904f81a904b3317660e6b6f14cd2a6b164a048510009e805367557258d0bf85ba0634bcea01ebe2591297b37be8339750bce127b41a33f77efdca0f2932cfaf5e16bbc2f102c1e208b44d56adbec00adf2631661722", 0xc8}, {0x0}], 0x9, &(0x7f0000000c00)}, 0x400c840) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) r4 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e", 0x48}], 0x2}, 0x0) 405.445241ms ago: executing program 4 (id=7463): r0 = socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, &(0x7f0000000140), 0x16) 548.08µs ago: executing program 0 (id=7457): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, @perf_config_ext={0x8000000000000001, 0x9}, 0x104111, 0x10000000000005, 0x0, 0x1, 0x6, 0x4, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f0000000080)={0xd2b2bea6a9c4bae0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x8, 0x3}, 0x0, 0x0, 0x7ff, 0x7, 0xf, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000440), 0x4) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) 0s ago: executing program 4 (id=7458): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000050000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000280)={r3, 0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) bpf$ENABLE_STATS(0x20, &(0x7f0000000300)={0x2}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x432100, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', @broadcast}) kernel console output (not intermixed with test programs): k: 'syz.2.6695': attribute type 28 has an invalid length. [ 1737.213213][T27877] netlink: 'syz.0.6694': attribute type 10 has an invalid length. [ 1737.352798][T27885] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6696'. [ 1738.380018][T27889] team0: Device wg1 is of different type [ 1738.949237][T27910] FAULT_INJECTION: forcing a failure. [ 1738.949237][T27910] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.981845][T27910] CPU: 1 PID: 27910 Comm: syz.0.6705 Not tainted syzkaller #0 [ 1738.990473][T27910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1739.001189][T27910] Call Trace: [ 1739.004667][T27910] [ 1739.008230][T27910] dump_stack_lvl+0x18c/0x250 [ 1739.013181][T27910] ? show_regs_print_info+0x20/0x20 [ 1739.018999][T27910] ? load_image+0x420/0x420 [ 1739.023602][T27910] ? __might_sleep+0xe0/0xe0 [ 1739.029856][T27910] ? __lock_acquire+0x7d80/0x7d80 [ 1739.035586][T27910] should_fail_ex+0x394/0x4c0 [ 1739.041558][T27910] should_failslab+0x9/0x20 [ 1739.046589][T27910] slab_pre_alloc_hook+0x59/0x300 [ 1739.052037][T27910] ? __dev_change_flags+0x1e8/0x6a0 [ 1739.057437][T27910] ? dev_change_flags+0x7c/0x1a0 [ 1739.063928][T27910] ? dev_ioctl+0x7b4/0x1140 [ 1739.068717][T27910] ? kvmalloc_node+0x70/0x180 [ 1739.073773][T27910] ? kvmalloc_node+0x70/0x180 [ 1739.078623][T27910] __kmem_cache_alloc_node+0x53/0x250 [ 1739.084597][T27910] ? kvmalloc_node+0x70/0x180 [ 1739.089579][T27910] __kmalloc_node+0xa6/0x240 [ 1739.094574][T27910] kvmalloc_node+0x70/0x180 [ 1739.099231][T27910] pfifo_fast_init+0x10d/0x6a0 [ 1739.104125][T27910] qdisc_create_dflt+0x11e/0x430 [ 1739.109246][T27910] dev_activate+0x396/0x1160 [ 1739.115498][T27910] __dev_open+0x347/0x430 [ 1739.123239][T27910] ? dev_open+0x190/0x190 [ 1739.129014][T27910] __dev_change_flags+0x1e8/0x6a0 [ 1739.135504][T27910] ? dev_load+0x21/0x1f0 [ 1739.141257][T27910] ? __lock_acquire+0x7d80/0x7d80 [ 1739.146551][T27910] ? dev_get_flags+0x1c0/0x1c0 [ 1739.152054][T27910] ? full_name_hash+0x92/0xe0 [ 1739.157248][T27910] dev_change_flags+0x7c/0x1a0 [ 1739.163974][T27910] dev_ioctl+0x7b4/0x1140 [ 1739.169783][T27910] sock_do_ioctl+0x239/0x310 [ 1739.176106][T27910] ? sock_show_fdinfo+0xb0/0xb0 [ 1739.181214][T27910] sock_ioctl+0x5be/0x7e0 [ 1739.185867][T27910] ? sock_poll+0x3e0/0x3e0 [ 1739.190593][T27910] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1739.195941][T27910] ? security_file_ioctl+0x80/0xa0 [ 1739.201092][T27910] ? sock_poll+0x3e0/0x3e0 [ 1739.205570][T27910] __se_sys_ioctl+0xfd/0x170 [ 1739.210271][T27910] do_syscall_64+0x55/0xb0 [ 1739.214707][T27910] ? clear_bhb_loop+0x40/0x90 [ 1739.219664][T27910] ? clear_bhb_loop+0x40/0x90 [ 1739.224455][T27910] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1739.230988][T27910] RIP: 0033:0x7f51a859e0d9 [ 1739.235516][T27910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1739.256201][T27910] RSP: 002b:00007f51a954b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1739.264755][T27910] RAX: ffffffffffffffda RBX: 00007f51a8825fa0 RCX: 00007f51a859e0d9 [ 1739.272750][T27910] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 1739.280884][T27910] RBP: 00007f51a954b090 R08: 0000000000000000 R09: 0000000000000000 [ 1739.290432][T27910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1739.298607][T27910] R13: 00007f51a8826038 R14: 00007f51a8825fa0 R15: 00007ffe6daa0518 [ 1739.307177][T27910] [ 1739.335176][T27910] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1739.344613][T27910] syzkaller0: entered promiscuous mode [ 1739.350808][T27910] syzkaller0: entered allmulticast mode [ 1739.521186][T27915] validate_nla: 2 callbacks suppressed [ 1739.521206][T27915] netlink: 'syz.4.6707': attribute type 10 has an invalid length. [ 1739.772151][T27925] __nla_validate_parse: 2 callbacks suppressed [ 1739.772244][T27925] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6711'. [ 1739.818828][T27923] netlink: 'syz.3.6710': attribute type 10 has an invalid length. [ 1739.907407][T27923] team0: Device wg1 is of different type [ 1740.234186][T27944] netlink: 'syz.4.6717': attribute type 2 has an invalid length. [ 1740.276009][T27944] netlink: 'syz.4.6717': attribute type 8 has an invalid length. [ 1740.301766][T27944] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6717'. [ 1740.314244][T27941] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6716'. [ 1740.395627][T27944] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.6717'. [ 1740.948597][T27961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6722'. [ 1740.970795][T27955] netlink: 'syz.2.6721': attribute type 10 has an invalid length. [ 1741.656175][T27980] netlink: 'syz.4.6729': attribute type 10 has an invalid length. [ 1741.747472][T27980] team0: Device wg1 is of different type [ 1741.984652][T27985] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6731'. [ 1742.149077][T27988] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6732'. [ 1742.597603][T27995] netlink: 'syz.4.6734': attribute type 10 has an invalid length. [ 1743.200158][T28013] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6742'. [ 1743.262195][T28014] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6743'. [ 1743.633595][T28026] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6748'. [ 1744.208735][T28031] netlink: 'syz.4.6750': attribute type 10 has an invalid length. [ 1744.865733][T28049] __nla_validate_parse: 2 callbacks suppressed [ 1744.865774][T28049] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6758'. [ 1745.816303][T28063] netlink: 'syz.4.6763': attribute type 10 has an invalid length. [ 1745.930915][T28074] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6765'. [ 1745.972848][T28072] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6767'. [ 1746.276614][T28076] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6768'. [ 1746.282914][T28079] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6769'. [ 1746.501185][T28085] netlink: 'syz.4.6772': attribute type 2 has an invalid length. [ 1746.516645][T28085] netlink: 1045 bytes leftover after parsing attributes in process `syz.4.6772'. [ 1746.971392][T28104] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6776'. [ 1747.022357][T28099] netlink: 'syz.2.6777': attribute type 10 has an invalid length. [ 1747.096310][T28105] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6779'. [ 1747.228405][T28108] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6780'. [ 1747.630153][T28117] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1748.039869][T28114] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1748.166858][T28114] syzkaller1: linktype set to 769 [ 1748.413201][T28130] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6788'. [ 1748.792188][T28138] netlink: 'syz.4.6790': attribute type 10 has an invalid length. [ 1749.696697][T28159] netlink: 'syz.0.6798': attribute type 21 has an invalid length. [ 1749.716560][T28159] netlink: 'syz.0.6798': attribute type 4 has an invalid length. [ 1749.726966][T28159] netlink: 'syz.0.6798': attribute type 3 has an invalid length. [ 1749.996362][T28170] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1750.024522][T28165] __nla_validate_parse: 2 callbacks suppressed [ 1750.024708][T28165] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6801'. [ 1750.109053][T28168] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6802'. [ 1750.330831][T28171] netlink: 'syz.0.6803': attribute type 10 has an invalid length. [ 1750.439301][T28167] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1750.462681][T28167] syzkaller1: linktype set to 769 [ 1751.416785][T28196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6812'. [ 1751.582285][T28195] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6813'. [ 1754.760379][T28205] netlink: 'syz.3.6814': attribute type 10 has an invalid length. [ 1754.779288][T28209] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1754.791109][T28204] netlink: 'syz.0.6815': attribute type 41 has an invalid length. [ 1754.944620][T28210] netlink: 'syz.2.6818': attribute type 9 has an invalid length. [ 1754.979813][T28210] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6818'. [ 1755.553357][T28227] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6823'. [ 1755.585041][T28226] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6824'. [ 1756.009200][T28232] netlink: 'syz.2.6827': attribute type 10 has an invalid length. [ 1756.425847][T28252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6834'. [ 1756.554075][T28256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1756.737719][T28263] netlink: 'syz.4.6835': attribute type 9 has an invalid length. [ 1756.753345][T28260] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6837'. [ 1756.784104][T28263] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6835'. [ 1757.308461][T28276] netlink: 'syz.0.6839': attribute type 12 has an invalid length. [ 1757.337952][T28276] netlink: 'syz.0.6839': attribute type 11 has an invalid length. [ 1757.412319][T28276] netlink: 188816 bytes leftover after parsing attributes in process `syz.0.6839'. [ 1757.475960][T28274] netlink: 'syz.3.6842': attribute type 10 has an invalid length. [ 1757.764601][T28283] FAULT_INJECTION: forcing a failure. [ 1757.764601][T28283] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.803333][T28283] CPU: 0 PID: 28283 Comm: syz.4.6843 Not tainted syzkaller #0 [ 1757.810976][T28283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1757.821867][T28283] Call Trace: [ 1757.825542][T28283] [ 1757.828870][T28283] dump_stack_lvl+0x18c/0x250 [ 1757.833717][T28283] ? show_regs_print_info+0x20/0x20 [ 1757.839159][T28283] ? load_image+0x420/0x420 [ 1757.843889][T28283] ? __might_sleep+0xe0/0xe0 [ 1757.848710][T28283] ? __lock_acquire+0x7d80/0x7d80 [ 1757.854072][T28283] should_fail_ex+0x394/0x4c0 [ 1757.859027][T28283] should_failslab+0x9/0x20 [ 1757.863688][T28283] slab_pre_alloc_hook+0x59/0x300 [ 1757.869301][T28283] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1757.875911][T28283] kmem_cache_alloc_node+0x5e/0x310 [ 1757.881526][T28283] ? __alloc_skb+0x103/0x2c0 [ 1757.886371][T28283] __alloc_skb+0x103/0x2c0 [ 1757.891001][T28283] sctp_packet_transmit+0x2ef/0x2950 [ 1757.898061][T28283] ? sctp_v4_get_saddr+0x9d/0xf0 [ 1757.903362][T28283] ? sctp_packet_append_chunk+0xafa/0x1040 [ 1757.909306][T28283] sctp_packet_singleton+0x230/0x330 [ 1757.914640][T28283] ? sctp_outq_select_transport+0x590/0x590 [ 1757.920838][T28283] ? sctp_outq_select_transport+0x480/0x590 [ 1757.926764][T28283] ? sctp_transport_burst_limited+0x197/0x280 [ 1757.932961][T28283] sctp_outq_flush+0x4fc/0x32e0 [ 1757.938036][T28283] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1757.943974][T28283] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1757.949903][T28283] ? _raw_spin_unlock+0x40/0x40 [ 1757.954783][T28283] ? rcu_is_watching+0x15/0xb0 [ 1757.959846][T28283] ? sctp_outq_tail+0x8a0/0x8a0 [ 1757.964749][T28283] ? sctp_outq_uncork+0x4d/0xa0 [ 1757.969829][T28283] sctp_do_sm+0x53c4/0x5af0 [ 1757.974406][T28283] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 1757.980345][T28283] ? mark_lock+0x94/0x320 [ 1757.984750][T28283] ? __sk_mem_raise_allocated+0x97b/0x11e0 [ 1757.990869][T28283] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1757.996550][T28283] sctp_sendmsg_to_asoc+0x1009/0x17f0 [ 1758.001976][T28283] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 1758.007819][T28283] ? __sctp_connect+0xd80/0xd80 [ 1758.012882][T28283] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1758.018480][T28283] ? security_sctp_bind_connect+0x89/0xb0 [ 1758.024405][T28283] sctp_sendmsg+0x1afa/0x27b0 [ 1758.029215][T28283] ? sctp_getsockopt+0xb60/0xb60 [ 1758.034385][T28283] ? aa_af_perm+0x330/0x330 [ 1758.039085][T28283] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1758.045552][T28283] ? sock_rps_record_flow+0x19/0x3f0 [ 1758.050911][T28283] ? inet_sendmsg+0xce/0x2a0 [ 1758.055806][T28283] ? inet_send_prepare+0x250/0x250 [ 1758.061126][T28283] ____sys_sendmsg+0x61b/0x980 [ 1758.065939][T28283] ? __asan_memset+0x22/0x40 [ 1758.070685][T28283] ? __sys_sendmsg_sock+0x30/0x30 [ 1758.076361][T28283] ? __import_iovec+0x5f2/0x850 [ 1758.081693][T28283] ? import_iovec+0x73/0xa0 [ 1758.086234][T28283] ___sys_sendmsg+0x2a6/0x360 [ 1758.091123][T28283] ? __sys_sendmsg+0x2b0/0x2b0 [ 1758.096032][T28283] ? ktime_get+0x7f/0x280 [ 1758.100780][T28283] __se_sys_sendmsg+0x1d0/0x2c0 [ 1758.105713][T28283] ? __x64_sys_sendmsg+0x80/0x80 [ 1758.110972][T28283] ? lockdep_hardirqs_on+0x98/0x150 [ 1758.116259][T28283] do_syscall_64+0x55/0xb0 [ 1758.121424][T28283] ? clear_bhb_loop+0x40/0x90 [ 1758.126503][T28283] ? clear_bhb_loop+0x40/0x90 [ 1758.131309][T28283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1758.137347][T28283] RIP: 0033:0x7f802ed9e0d9 [ 1758.141967][T28283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.162997][T28283] RSP: 002b:00007f802fc41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1758.171452][T28283] RAX: ffffffffffffffda RBX: 00007f802f025fa0 RCX: 00007f802ed9e0d9 [ 1758.179658][T28283] RDX: 00000000000040f0 RSI: 0000200000000240 RDI: 0000000000000007 [ 1758.187741][T28283] RBP: 00007f802fc41090 R08: 0000000000000000 R09: 0000000000000000 [ 1758.195742][T28283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1758.203743][T28283] R13: 00007f802f026038 R14: 00007f802f025fa0 R15: 00007ffc9099c228 [ 1758.211843][T28283] [ 1758.465140][T28288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6846'. [ 1758.671636][T28297] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6848'. [ 1758.863446][T28301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1758.914249][T28303] FAULT_INJECTION: forcing a failure. [ 1758.914249][T28303] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.957543][T28303] CPU: 1 PID: 28303 Comm: syz.4.6851 Not tainted syzkaller #0 [ 1758.965181][T28303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1758.975531][T28303] Call Trace: [ 1758.979099][T28303] [ 1758.982220][T28303] dump_stack_lvl+0x18c/0x250 [ 1758.986941][T28303] ? show_regs_print_info+0x20/0x20 [ 1758.992167][T28303] ? load_image+0x420/0x420 [ 1758.996879][T28303] should_fail_ex+0x394/0x4c0 [ 1759.001593][T28303] should_failslab+0x9/0x20 [ 1759.006207][T28303] slab_pre_alloc_hook+0x59/0x300 [ 1759.011263][T28303] kmem_cache_alloc+0x5a/0x2c0 [ 1759.016045][T28303] ? skb_clone+0x1eb/0x370 [ 1759.020487][T28303] skb_clone+0x1eb/0x370 [ 1759.024836][T28303] __netlink_deliver_tap+0x411/0x7f0 [ 1759.030334][T28303] ? netlink_deliver_tap+0x2e/0x1b0 [ 1759.035623][T28303] netlink_deliver_tap+0x19c/0x1b0 [ 1759.040863][T28303] netlink_dump+0x95b/0xec0 [ 1759.045544][T28303] ? netlink_lookup+0x200/0x200 [ 1759.050695][T28303] ? ns_capable+0x89/0xe0 [ 1759.055229][T28303] ? __inet_diag_dump_start+0x886/0x9f0 [ 1759.060985][T28303] __netlink_dump_start+0x57c/0x7a0 [ 1759.066677][T28303] inet_diag_rcv_msg_compat+0x215/0x440 [ 1759.072420][T28303] ? __inet_diag_dump+0x380/0x380 [ 1759.077496][T28303] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 1759.082827][T28303] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 1759.088588][T28303] ? inet_diag_dump_start_compat+0x20/0x20 [ 1759.094501][T28303] ? inet_diag_dump+0x50/0x50 [ 1759.099233][T28303] ? __inet_diag_dump+0x380/0x380 [ 1759.104525][T28303] sock_diag_rcv_msg+0x3d3/0x5f0 [ 1759.109556][T28303] netlink_rcv_skb+0x235/0x4c0 [ 1759.115744][T28303] ? sock_diag_bind+0xb0/0xb0 [ 1759.120486][T28303] ? netlink_ack+0x1160/0x1160 [ 1759.125767][T28303] ? __lock_acquire+0x7d80/0x7d80 [ 1759.130918][T28303] ? netlink_deliver_tap+0x2e/0x1b0 [ 1759.136576][T28303] sock_diag_rcv+0x2a/0x40 [ 1759.141108][T28303] netlink_unicast+0x7b1/0x930 [ 1759.146461][T28303] netlink_sendmsg+0x8d0/0xbf0 [ 1759.151559][T28303] ? netlink_getsockopt+0x590/0x590 [ 1759.156804][T28303] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1759.162559][T28303] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1759.168303][T28303] ? security_socket_sendmsg+0x80/0xa0 [ 1759.173771][T28303] ? netlink_getsockopt+0x590/0x590 [ 1759.178996][T28303] ____sys_sendmsg+0x61b/0x980 [ 1759.183877][T28303] ? __asan_memset+0x22/0x40 [ 1759.188518][T28303] ? __sys_sendmsg_sock+0x30/0x30 [ 1759.193584][T28303] ? __import_iovec+0x5f2/0x850 [ 1759.198475][T28303] ? import_iovec+0x73/0xa0 [ 1759.203003][T28303] ___sys_sendmsg+0x2a6/0x360 [ 1759.207710][T28303] ? get_pid_task+0x20/0x1e0 [ 1759.212342][T28303] ? __sys_sendmsg+0x2b0/0x2b0 [ 1759.217155][T28303] ? __lock_acquire+0x7d80/0x7d80 [ 1759.222227][T28303] __se_sys_sendmsg+0x1d0/0x2c0 [ 1759.227358][T28303] ? __x64_sys_sendmsg+0x80/0x80 [ 1759.232327][T28303] ? lockdep_hardirqs_on+0x98/0x150 [ 1759.237549][T28303] do_syscall_64+0x55/0xb0 [ 1759.241982][T28303] ? clear_bhb_loop+0x40/0x90 [ 1759.246675][T28303] ? clear_bhb_loop+0x40/0x90 [ 1759.251371][T28303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1759.257375][T28303] RIP: 0033:0x7f802ed9e0d9 [ 1759.261811][T28303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1759.281887][T28303] RSP: 002b:00007f802fc41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1759.290434][T28303] RAX: ffffffffffffffda RBX: 00007f802f025fa0 RCX: 00007f802ed9e0d9 [ 1759.298602][T28303] RDX: ff0f000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1759.306818][T28303] RBP: 00007f802fc41090 R08: 0000000000000000 R09: 0000000000000000 [ 1759.314831][T28303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1759.323710][T28303] R13: 00007f802f026038 R14: 00007f802f025fa0 R15: 00007ffc9099c228 [ 1759.331822][T28303] [ 1759.372198][T28305] netlink: 'syz.3.6852': attribute type 9 has an invalid length. [ 1759.380195][T28305] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6852'. [ 1759.559502][T28306] netlink: 'syz.2.6853': attribute type 10 has an invalid length. [ 1760.278308][T28328] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6858'. [ 1760.580746][T28327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6860'. [ 1760.765480][T28331] netlink: 'syz.3.6861': attribute type 41 has an invalid length. [ 1761.554933][T28342] netlink: 'syz.0.6864': attribute type 10 has an invalid length. [ 1761.596125][T28347] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.6867'. [ 1761.631836][T28347] netlink: 21068 bytes leftover after parsing attributes in process `syz.4.6867'. [ 1761.648165][T28347] tipc: Started in network mode [ 1761.654006][T28347] tipc: Node identity b, cluster identity 57 [ 1761.660257][T28347] tipc: Node number set to 11 [ 1762.062699][T28356] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6869'. [ 1762.337913][T28358] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6871'. [ 1762.742535][T28372] netlink: 'syz.4.6878': attribute type 10 has an invalid length. [ 1763.319360][T28386] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6882'. [ 1763.635491][T28390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6884'. [ 1763.872130][T23515] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1764.384285][T28404] netlink: 'syz.2.6890': attribute type 10 has an invalid length. [ 1764.666072][T28417] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6894'. [ 1764.728263][T28421] netlink: 'syz.0.6896': attribute type 9 has an invalid length. [ 1764.736634][T28421] netlink: 65228 bytes leftover after parsing attributes in process `syz.0.6896'. [ 1764.958216][T28425] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6897'. [ 1764.993778][T28425] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1765.057446][T28425] CPU: 1 PID: 28425 Comm: syz.3.6897 Not tainted syzkaller #0 [ 1765.065466][T28425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1765.076595][T28425] Call Trace: [ 1765.080005][T28425] [ 1765.083159][T28425] dump_stack_lvl+0x18c/0x250 [ 1765.088523][T28425] ? show_regs_print_info+0x20/0x20 [ 1765.093887][T28425] ? load_image+0x420/0x420 [ 1765.099046][T28425] sysfs_warn_dup+0x8e/0xa0 [ 1765.103799][T28425] sysfs_do_create_link_sd+0xc0/0x110 [ 1765.109788][T28425] device_add_class_symlinks+0x1cf/0x240 [ 1765.115731][T28425] device_add+0x4f9/0xc40 [ 1765.122082][T28425] wiphy_register+0x1d99/0x2ac0 [ 1765.129538][T28425] ? cfg80211_event_work+0x40/0x40 [ 1765.136338][T28425] ? minstrel_ht_alloc+0x88a/0x990 [ 1765.142137][T28425] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1765.148870][T28425] ieee80211_register_hw+0x2dd8/0x3b30 [ 1765.155341][T28425] ? ieee80211_register_hw+0xf01/0x3b30 [ 1765.161093][T28425] ? ieee80211_tasklet_handler+0x20/0x20 [ 1765.166809][T28425] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1765.172853][T28425] ? __debug_object_init+0xec/0x450 [ 1765.178200][T28425] ? __asan_memset+0x22/0x40 [ 1765.182846][T28425] ? __hrtimer_init+0x189/0x270 [ 1765.188107][T28425] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1765.193931][T28425] ? mac80211_hwsim_free+0x220/0x220 [ 1765.199523][T28425] ? rcu_is_watching+0x15/0xb0 [ 1765.204384][T28425] ? kstrndup+0xbd/0x140 [ 1765.208890][T28425] hwsim_new_radio_nl+0xdad/0x1a70 [ 1765.214066][T28425] ? __nla_validate+0x50/0x50 [ 1765.218833][T28425] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1765.226088][T28425] ? __nla_parse+0x40/0x50 [ 1765.230607][T28425] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1765.237567][T28425] genl_family_rcv_msg_doit+0x21a/0x310 [ 1765.243184][T28425] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1765.249324][T28425] ? bpf_lsm_capable+0x9/0x10 [ 1765.254055][T28425] ? security_capable+0x89/0xb0 [ 1765.259844][T28425] genl_rcv_msg+0x611/0x7a0 [ 1765.264417][T28425] ? genl_bind+0x360/0x360 [ 1765.269141][T28425] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1765.275645][T28425] ? perf_trace_lock+0x303/0x3b0 [ 1765.281163][T28425] ? __kasan_kmalloc_large+0x8b/0xa0 [ 1765.287259][T28425] netlink_rcv_skb+0x235/0x4c0 [ 1765.292481][T28425] ? genl_bind+0x360/0x360 [ 1765.297229][T28425] ? netlink_ack+0x1160/0x1160 [ 1765.302404][T28425] ? __lock_acquire+0x7d80/0x7d80 [ 1765.307659][T28425] ? down_read+0x1ac/0x2e0 [ 1765.312366][T28425] genl_rcv+0x28/0x40 [ 1765.316777][T28425] netlink_unicast+0x7b1/0x930 [ 1765.322455][T28425] netlink_sendmsg+0x8d0/0xbf0 [ 1765.328304][T28425] ? netlink_getsockopt+0x590/0x590 [ 1765.333800][T28425] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1765.339980][T28425] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1765.345985][T28425] ? security_socket_sendmsg+0x80/0xa0 [ 1765.352403][T28425] ? netlink_getsockopt+0x590/0x590 [ 1765.357825][T28425] ____sys_sendmsg+0x61b/0x980 [ 1765.369218][T28425] ? __asan_memset+0x22/0x40 [ 1765.374180][T28425] ? __sys_sendmsg_sock+0x30/0x30 [ 1765.379538][T28425] ? __import_iovec+0x5f2/0x850 [ 1765.385820][T28425] ? import_iovec+0x73/0xa0 [ 1765.391571][T28425] ___sys_sendmsg+0x2a6/0x360 [ 1765.396990][T28425] ? __sys_sendmsg+0x2b0/0x2b0 [ 1765.402582][T28425] __se_sys_sendmsg+0x1d0/0x2c0 [ 1765.407847][T28425] ? __x64_sys_sendmsg+0x80/0x80 [ 1765.413075][T28425] ? lockdep_hardirqs_on+0x98/0x150 [ 1765.418567][T28425] do_syscall_64+0x55/0xb0 [ 1765.423212][T28425] ? clear_bhb_loop+0x40/0x90 [ 1765.428546][T28425] ? clear_bhb_loop+0x40/0x90 [ 1765.433543][T28425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1765.441181][T28425] RIP: 0033:0x7fafbd19e0d9 [ 1765.445675][T28425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1765.466739][T28425] RSP: 002b:00007fafbe0e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1765.475219][T28425] RAX: ffffffffffffffda RBX: 00007fafbd425fa0 RCX: 00007fafbd19e0d9 [ 1765.483233][T28425] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1765.491248][T28425] RBP: 00007fafbd235024 R08: 0000000000000000 R09: 0000000000000000 [ 1765.499256][T28425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1765.507263][T28425] R13: 00007fafbd426038 R14: 00007fafbd425fa0 R15: 00007ffdb011f6b8 [ 1765.515320][T28425] [ 1765.605054][T28434] netlink: 'syz.4.6901': attribute type 3 has an invalid length. [ 1765.639513][T28432] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6900'. [ 1765.839805][T28425] syzkaller0: entered promiscuous mode [ 1765.857840][T28425] syzkaller0: entered allmulticast mode [ 1766.181532][T28446] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6905'. [ 1769.098843][T28447] netlink: 'syz.2.6903': attribute type 10 has an invalid length. [ 1769.275778][T28465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6911'. [ 1769.804518][T28476] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6915'. [ 1770.253490][T28489] netlink: 'syz.2.6920': attribute type 9 has an invalid length. [ 1770.270728][T28489] netlink: 65228 bytes leftover after parsing attributes in process `syz.2.6920'. [ 1770.809579][T28483] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.6918'. [ 1770.820316][T28483] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1770.852146][T28494] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6922'. [ 1771.489151][T28507] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6926'. [ 1771.866368][T28512] syzkaller0: entered promiscuous mode [ 1771.879612][T28512] syzkaller0: entered allmulticast mode [ 1772.526458][T28521] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6932'. [ 1772.806763][T28525] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6942'. [ 1772.808085][T28527] netlink: 'syz.3.6934': attribute type 9 has an invalid length. [ 1772.836481][T28527] netlink: 65228 bytes leftover after parsing attributes in process `syz.3.6934'. [ 1773.365310][T28540] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6937'. [ 1776.582244][T28558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6944'. [ 1776.924793][T28569] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6947'. [ 1777.062384][T28573] FAULT_INJECTION: forcing a failure. [ 1777.062384][T28573] name failslab, interval 1, probability 0, space 0, times 0 [ 1777.111591][T28573] CPU: 0 PID: 28573 Comm: syz.2.6949 Not tainted syzkaller #0 [ 1777.120146][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1777.130691][T28573] Call Trace: [ 1777.134019][T28573] [ 1777.137172][T28573] dump_stack_lvl+0x18c/0x250 [ 1777.142528][T28573] ? show_regs_print_info+0x20/0x20 [ 1777.148055][T28573] ? load_image+0x420/0x420 [ 1777.152791][T28573] ? __might_sleep+0xe0/0xe0 [ 1777.157513][T28573] ? __lock_acquire+0x7d80/0x7d80 [ 1777.162672][T28573] should_fail_ex+0x394/0x4c0 [ 1777.167494][T28573] should_failslab+0x9/0x20 [ 1777.172085][T28573] slab_pre_alloc_hook+0x59/0x300 [ 1777.177254][T28573] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1777.183025][T28573] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1777.188811][T28573] __kmem_cache_alloc_node+0x53/0x250 [ 1777.194332][T28573] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 1777.200109][T28573] __kmalloc+0xa7/0x240 [ 1777.204405][T28573] tomoyo_realpath_from_path+0xe6/0x5c0 [ 1777.210361][T28573] ? tomoyo_domain+0xd6/0x120 [ 1777.215500][T28573] tomoyo_path_number_perm+0x248/0x5e0 [ 1777.221717][T28573] ? tomoyo_path_number_perm+0x217/0x5e0 [ 1777.227574][T28573] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1777.233178][T28573] ? ksys_write+0x1d2/0x260 [ 1777.237746][T28573] ? __fget_files+0x28/0x460 [ 1777.242446][T28573] security_file_ioctl+0x70/0xa0 [ 1777.247598][T28573] __se_sys_ioctl+0x48/0x170 [ 1777.252226][T28573] do_syscall_64+0x55/0xb0 [ 1777.257016][T28573] ? clear_bhb_loop+0x40/0x90 [ 1777.261723][T28573] ? clear_bhb_loop+0x40/0x90 [ 1777.266610][T28573] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1777.272612][T28573] RIP: 0033:0x7f8ded79e0d9 [ 1777.277215][T28573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1777.297539][T28573] RSP: 002b:00007f8dee73a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1777.306585][T28573] RAX: ffffffffffffffda RBX: 00007f8deda26090 RCX: 00007f8ded79e0d9 [ 1777.315027][T28573] RDX: 0000200000000080 RSI: 0000000000008983 RDI: 000000000000000a [ 1777.323316][T28573] RBP: 00007f8dee73a090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.331399][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1777.339574][T28573] R13: 00007f8deda26128 R14: 00007f8deda26090 R15: 00007ffdd3dd3548 [ 1777.348289][T28573] [ 1777.400611][T28573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1778.800167][T28592] netlink: 'syz.2.6956': attribute type 29 has an invalid length. [ 1778.820285][T28594] netlink: 'syz.2.6956': attribute type 29 has an invalid length. [ 1778.850864][T28594] netlink: 'syz.2.6956': attribute type 29 has an invalid length. [ 1778.888325][T28596] netlink: 'syz.2.6956': attribute type 21 has an invalid length. [ 1778.909991][T28596] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6956'. [ 1779.320341][T28602] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6959'. [ 1779.926949][T28618] netlink: 'syz.3.6963': attribute type 3 has an invalid length. [ 1779.942163][T28618] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.6963'. [ 1779.942941][T28615] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1779.988254][T28615] syzkaller1: linktype set to 769 [ 1780.454757][T28620] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6965'. [ 1780.951031][T28628] netlink: 'syz.3.6968': attribute type 29 has an invalid length. [ 1780.976691][T28628] netlink: 'syz.3.6968': attribute type 29 has an invalid length. [ 1780.981828][T28629] netlink: 'syz.3.6968': attribute type 29 has an invalid length. [ 1781.094457][T28628] netlink: 'syz.3.6968': attribute type 21 has an invalid length. [ 1781.112721][T28628] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6968'. [ 1781.362165][T28636] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6971'. [ 1781.370819][T28634] netlink: 'syz.4.6970': attribute type 10 has an invalid length. [ 1781.391915][T28634] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6970'. [ 1781.500652][T28634] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1781.533809][T28634] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1781.601068][T28634] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1781.836254][T28643] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6976'. [ 1782.080316][T28647] sit0: entered allmulticast mode [ 1782.326599][T28649] sit0: entered promiscuous mode [ 1782.568433][T28654] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.6978'. [ 1782.821832][T28659] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1782.852313][T28659] syzkaller1: linktype set to 769 [ 1783.167802][T28670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6982'. [ 1783.553711][T28677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6988'. [ 1783.608085][T28679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6987'. [ 1783.691142][T28679] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1783.699543][T28679] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1783.732007][T28679] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1783.760936][T21804] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 1783.769477][T21804] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1783.788564][T28682] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6986'. [ 1784.253993][T28695] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6993'. [ 1787.213624][T28702] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6994'. [ 1787.656797][T28710] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6999'. [ 1787.894863][T28720] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1787.907697][T28720] syzkaller1: linktype set to 769 [ 1787.986067][T28712] validate_nla: 6 callbacks suppressed [ 1787.986115][T28712] netlink: 'syz.2.7000': attribute type 3 has an invalid length. [ 1788.015899][T28712] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.7000'. [ 1788.024495][T28719] netlink: 'syz.3.7003': attribute type 10 has an invalid length. [ 1788.052162][T28719] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7003'. [ 1788.215721][T28719] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1788.315495][T28719] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1788.420950][T28719] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1788.866073][T28733] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7008'. [ 1788.964532][T28740] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7011'. [ 1789.108760][T28742] FAULT_INJECTION: forcing a failure. [ 1789.108760][T28742] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.170556][T28742] CPU: 1 PID: 28742 Comm: syz.0.7012 Not tainted syzkaller #0 [ 1789.178131][T28742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1789.188227][T28742] Call Trace: [ 1789.191528][T28742] [ 1789.194581][T28742] dump_stack_lvl+0x18c/0x250 [ 1789.199320][T28742] ? show_regs_print_info+0x20/0x20 [ 1789.204574][T28742] ? load_image+0x420/0x420 [ 1789.209147][T28742] ? __might_sleep+0xe0/0xe0 [ 1789.213793][T28742] ? __lock_acquire+0x7d80/0x7d80 [ 1789.218986][T28742] ? __mutex_trylock_common+0x160/0x270 [ 1789.224585][T28742] should_fail_ex+0x394/0x4c0 [ 1789.229413][T28742] should_failslab+0x9/0x20 [ 1789.233970][T28742] slab_pre_alloc_hook+0x59/0x300 [ 1789.236859][T28751] FAULT_INJECTION: forcing a failure. [ 1789.236859][T28751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1789.239025][T28742] ? trace_contention_end+0x39/0xe0 [ 1789.257598][T28742] ? strset_prepare_data+0x43f/0xa60 [ 1789.263252][T28742] ? strset_prepare_data+0x43f/0xa60 [ 1789.268621][T28742] __kmem_cache_alloc_node+0x53/0x250 [ 1789.274116][T28742] ? strset_prepare_data+0x43f/0xa60 [ 1789.279687][T28742] __kmalloc+0xa7/0x240 [ 1789.283901][T28742] strset_prepare_data+0x43f/0xa60 [ 1789.289374][T28742] ? strset_parse_request+0x720/0x720 [ 1789.295555][T28742] ethnl_default_dumpit+0x33c/0x8a0 [ 1789.301364][T28742] genl_dumpit+0xff/0x1a0 [ 1789.306357][T28742] netlink_dump+0x738/0xec0 [ 1789.311108][T28742] ? netlink_lookup+0x200/0x200 [ 1789.316352][T28742] ? genl_start+0x571/0x6c0 [ 1789.321674][T28742] __netlink_dump_start+0x57c/0x7a0 [ 1789.327006][T28742] genl_family_rcv_msg_dumpit+0x214/0x310 [ 1789.332926][T28742] ? genl_rcv_msg+0x7a0/0x7a0 [ 1789.338051][T28742] ? genl_get_cmd+0x693/0x930 [ 1789.343236][T28742] ? genl_family_rcv_msg_doit+0x310/0x310 [ 1789.349989][T28742] ? genl_start+0x6c0/0x6c0 [ 1789.354707][T28742] ? genl_dumpit+0x1a0/0x1a0 [ 1789.359794][T28742] ? mark_lock+0x94/0x320 [ 1789.364179][T28742] genl_rcv_msg+0x5de/0x7a0 [ 1789.368938][T28742] ? genl_bind+0x360/0x360 [ 1789.373867][T28742] ? ethnl_default_doit+0xba0/0xba0 [ 1789.379212][T28742] ? ethnl_default_start+0x560/0x560 [ 1789.384695][T28742] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 1789.390133][T28742] ? lockdep_hardirqs_on+0x98/0x150 [ 1789.395555][T28742] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1789.401834][T28742] netlink_rcv_skb+0x235/0x4c0 [ 1789.406636][T28742] ? genl_bind+0x360/0x360 [ 1789.411517][T28742] ? netlink_ack+0x1160/0x1160 [ 1789.416484][T28742] ? __lock_acquire+0x7d80/0x7d80 [ 1789.421593][T28742] ? down_read+0x1ac/0x2e0 [ 1789.426555][T28742] genl_rcv+0x28/0x40 [ 1789.430670][T28742] netlink_unicast+0x7b1/0x930 [ 1789.435720][T28742] netlink_sendmsg+0x8d0/0xbf0 [ 1789.440509][T28742] ? netlink_getsockopt+0x590/0x590 [ 1789.445729][T28742] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1789.451747][T28742] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1789.457074][T28742] ? security_socket_sendmsg+0x80/0xa0 [ 1789.462730][T28742] ? netlink_getsockopt+0x590/0x590 [ 1789.468047][T28742] ____sys_sendmsg+0x61b/0x980 [ 1789.472934][T28742] ? __asan_memset+0x22/0x40 [ 1789.477550][T28742] ? __sys_sendmsg_sock+0x30/0x30 [ 1789.482675][T28742] ? __import_iovec+0x5f2/0x850 [ 1789.487586][T28742] ? import_iovec+0x73/0xa0 [ 1789.492129][T28742] ___sys_sendmsg+0x2a6/0x360 [ 1789.497527][T28742] ? get_pid_task+0x20/0x1e0 [ 1789.502231][T28742] ? __sys_sendmsg+0x2b0/0x2b0 [ 1789.507309][T28742] ? __lock_acquire+0x7d80/0x7d80 [ 1789.512780][T28742] __se_sys_sendmsg+0x1d0/0x2c0 [ 1789.517657][T28742] ? perf_trace_preemptirq_template+0x269/0x330 [ 1789.523938][T28742] ? __x64_sys_sendmsg+0x80/0x80 [ 1789.529118][T28742] ? lockdep_hardirqs_on+0x98/0x150 [ 1789.535586][T28742] do_syscall_64+0x55/0xb0 [ 1789.540587][T28742] ? clear_bhb_loop+0x40/0x90 [ 1789.545590][T28742] ? clear_bhb_loop+0x40/0x90 [ 1789.550556][T28742] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1789.556584][T28742] RIP: 0033:0x7f51a859e0d9 [ 1789.561200][T28742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1789.581518][T28742] RSP: 002b:00007f51a954b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1789.590394][T28742] RAX: ffffffffffffffda RBX: 00007f51a8825fa0 RCX: 00007f51a859e0d9 [ 1789.598823][T28742] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 1789.607155][T28742] RBP: 00007f51a954b090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.615662][T28742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1789.623755][T28742] R13: 00007f51a8826038 R14: 00007f51a8825fa0 R15: 00007ffe6daa0518 [ 1789.632049][T28742] [ 1789.641759][T28751] CPU: 0 PID: 28751 Comm: syz.4.7016 Not tainted syzkaller #0 [ 1789.649655][T28751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1789.659754][T28751] Call Trace: [ 1789.663155][T28751] [ 1789.666303][T28751] dump_stack_lvl+0x18c/0x250 [ 1789.671155][T28751] ? show_regs_print_info+0x20/0x20 [ 1789.676689][T28751] ? load_image+0x420/0x420 [ 1789.681506][T28751] ? __lock_acquire+0x7d80/0x7d80 [ 1789.686606][T28751] ? snprintf+0xe9/0x140 [ 1789.690897][T28751] should_fail_ex+0x394/0x4c0 [ 1789.695717][T28751] _copy_to_user+0x2f/0xa0 [ 1789.697547][T28746] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7014'. [ 1789.700175][T28751] simple_read_from_buffer+0xe7/0x150 [ 1789.700208][T28751] proc_fail_nth_read+0x1e8/0x260 [ 1789.700242][T28751] ? proc_fault_inject_write+0x360/0x360 [ 1789.700275][T28751] ? fsnotify_perm+0x271/0x5e0 [ 1789.700303][T28751] ? proc_fault_inject_write+0x360/0x360 [ 1789.700333][T28751] vfs_read+0x298/0x990 [ 1789.700367][T28751] ? kernel_read+0x1e0/0x1e0 [ 1789.700396][T28751] ? __fget_files+0x28/0x460 [ 1789.700424][T28751] ? __fget_files+0x3fc/0x460 [ 1789.700460][T28751] ? __fdget_pos+0x2a3/0x330 [ 1789.760068][T28751] ? ksys_read+0x74/0x260 [ 1789.764582][T28751] ksys_read+0x151/0x260 [ 1789.768852][T28751] ? vfs_write+0x9a0/0x9a0 [ 1789.773387][T28751] ? lockdep_hardirqs_on+0x98/0x150 [ 1789.778630][T28751] do_syscall_64+0x55/0xb0 [ 1789.783184][T28751] ? clear_bhb_loop+0x40/0x90 [ 1789.788704][T28751] ? clear_bhb_loop+0x40/0x90 [ 1789.793648][T28751] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1789.800026][T28751] RIP: 0033:0x7f802ed5e90e [ 1789.804678][T28751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1789.825454][T28751] RSP: 002b:00007f802fc40fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1789.833993][T28751] RAX: ffffffffffffffda RBX: 00007f802fc416c0 RCX: 00007f802ed5e90e [ 1789.843061][T28751] RDX: 000000000000000f RSI: 00007f802fc410a0 RDI: 0000000000000005 [ 1789.851944][T28751] RBP: 00007f802fc41090 R08: 0000000000000000 R09: 0000000000000000 [ 1789.860047][T28751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1789.868329][T28751] R13: 00007f802f026038 R14: 00007f802f025fa0 R15: 00007ffc9099c228 [ 1789.876878][T28751] [ 1790.205793][T28761] netlink: 'syz.0.7019': attribute type 10 has an invalid length. [ 1790.214857][T28761] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7019'. [ 1790.252597][T28761] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1790.259461][T28761] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1790.292729][T28761] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1790.499786][T28766] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7023'. [ 1790.677669][T28768] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7022'. [ 1790.706487][T28773] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1790.744745][T28773] syzkaller1: linktype set to 769 [ 1790.882532][T28770] netlink: 'syz.0.7021': attribute type 3 has an invalid length. [ 1791.901094][T28802] wlan1: mtu greater than device maximum [ 1794.909688][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1795.677833][T28827] __nla_validate_parse: 4 callbacks suppressed [ 1795.677872][T28827] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7045'. [ 1795.747780][T28832] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.7047'. [ 1795.961263][T28836] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7048'. [ 1795.996053][T28842] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.7050'. [ 1796.006088][T28842] netlink: 'syz.4.7050': attribute type 1 has an invalid length. [ 1796.015199][T28842] netlink: 16520 bytes leftover after parsing attributes in process `syz.4.7050'. [ 1796.123222][T28846] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.7050'. [ 1797.518194][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.526539][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1799.497743][T28864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7057'. [ 1799.891033][T28873] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7066'. [ 1800.610309][T28876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7060'. [ 1802.890536][T28892] netlink: 'syz.0.7064': attribute type 10 has an invalid length. [ 1802.948993][T28892] team0: Device veth1_vlan failed to register rx_handler [ 1803.115885][T28893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7065'. [ 1803.317432][T28900] netlink: 'syz.3.7063': attribute type 3 has an invalid length. [ 1803.354875][T28900] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.7063'. [ 1803.436145][T28899] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1803.449180][T28899] syzkaller1: linktype set to 769 [ 1803.536479][T28902] netlink: 'syz.0.7068': attribute type 39 has an invalid length. [ 1803.749057][T28908] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7070'. [ 1804.027822][T28917] netlink: 'syz.4.7074': attribute type 10 has an invalid length. [ 1804.054106][T28915] netlink: 'syz.2.7072': attribute type 9 has an invalid length. [ 1804.064540][T28915] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7072'. [ 1804.107498][T28921] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7075'. [ 1804.138961][T28914] netlink: 'syz.3.7073': attribute type 2 has an invalid length. [ 1804.148627][T28914] netlink: 'syz.3.7073': attribute type 8 has an invalid length. [ 1804.157187][T28914] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7073'. [ 1804.427138][T28926] netlink: 'syz.3.7077': attribute type 10 has an invalid length. [ 1807.628448][T28926] team0: Device veth1_vlan failed to register rx_handler [ 1807.788347][T28933] FAULT_INJECTION: forcing a failure. [ 1807.788347][T28933] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.883491][T28933] CPU: 0 PID: 28933 Comm: syz.4.7079 Not tainted syzkaller #0 [ 1807.891137][T28933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1807.901768][T28933] Call Trace: [ 1807.905101][T28933] [ 1807.908085][T28933] dump_stack_lvl+0x18c/0x250 [ 1807.910436][T28936] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7082'. [ 1807.912798][T28933] ? show_regs_print_info+0x20/0x20 [ 1807.912831][T28933] ? load_image+0x420/0x420 [ 1807.912854][T28933] ? __lock_acquire+0x7d80/0x7d80 [ 1807.912880][T28933] ? verify_lock_unused+0x140/0x140 [ 1807.912909][T28933] should_fail_ex+0x394/0x4c0 [ 1807.912941][T28933] should_failslab+0x9/0x20 [ 1807.912969][T28933] slab_pre_alloc_hook+0x59/0x300 [ 1807.913001][T28933] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 1807.913029][T28933] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 1807.913053][T28933] __kmem_cache_alloc_node+0x53/0x250 [ 1807.913087][T28933] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 1807.913111][T28933] __kmalloc+0xa7/0x240 [ 1807.913142][T28933] bpf_prog_test_run_skb+0x242/0x18f0 [ 1807.913171][T28933] ? __fget_files+0x28/0x460 [ 1807.913199][T28933] ? __fget_files+0x3fc/0x460 [ 1807.913237][T28933] ? cpu_online+0x60/0x60 [ 1807.913263][T28933] bpf_prog_test_run+0x31f/0x390 [ 1807.913291][T28933] __sys_bpf+0x49d/0x890 [ 1807.913317][T28933] ? bpf_link_show_fdinfo+0x390/0x390 [ 1807.913357][T28933] ? lock_chain_count+0x20/0x20 [ 1807.913389][T28933] __x64_sys_bpf+0x7c/0x90 [ 1807.913413][T28933] do_syscall_64+0x55/0xb0 [ 1807.913436][T28933] ? clear_bhb_loop+0x40/0x90 [ 1807.913461][T28933] ? clear_bhb_loop+0x40/0x90 [ 1807.913488][T28933] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1807.913511][T28933] RIP: 0033:0x7f802ed9e0d9 [ 1807.913531][T28933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1807.913550][T28933] RSP: 002b:00007f802fc41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1807.913576][T28933] RAX: ffffffffffffffda RBX: 00007f802f025fa0 RCX: 00007f802ed9e0d9 [ 1807.913592][T28933] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1807.913606][T28933] RBP: 00007f802fc41090 R08: 0000000000000000 R09: 0000000000000000 [ 1807.913621][T28933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1807.913634][T28933] R13: 00007f802f026038 R14: 00007f802f025fa0 R15: 00007ffc9099c228 [ 1807.913675][T28933] [ 1808.077852][T28934] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1808.081232][T28934] syzkaller1: linktype set to 769 [ 1808.231310][T28939] netlink: 'syz.0.7080': attribute type 3 has an invalid length. [ 1808.258075][T28943] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7085'. [ 1808.278847][T28939] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.7080'. [ 1808.556569][T28947] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7086'. [ 1809.459935][T28957] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1809.469432][T28957] syzkaller1: linktype set to 769 [ 1809.538476][T28955] netlink: 'syz.4.7089': attribute type 3 has an invalid length. [ 1809.566654][T28955] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.7089'. [ 1809.775898][T28963] netlink: 'syz.2.7090': attribute type 10 has an invalid length. [ 1809.836639][T28963] team0: Device veth1_vlan failed to register rx_handler [ 1809.980140][T28971] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7093'. [ 1809.986644][T28970] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7094'. [ 1810.046804][T28975] netlink: 'syz.3.7093': attribute type 21 has an invalid length. [ 1810.081721][T28975] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7093'. [ 1810.552994][T28981] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7096'. [ 1811.237547][T28989] netlink: 142516 bytes leftover after parsing attributes in process `syz.4.7101'. [ 1811.693601][T28991] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1811.705715][T28991] syzkaller1: linktype set to 769 [ 1811.791881][T28995] netlink: 'syz.4.7104': attribute type 9 has an invalid length. [ 1811.839738][T28995] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7104'. [ 1811.852632][T28991] netlink: 'syz.3.7103': attribute type 3 has an invalid length. [ 1812.845822][T29015] FAULT_INJECTION: forcing a failure. [ 1812.845822][T29015] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.869274][T29015] CPU: 0 PID: 29015 Comm: syz.4.7111 Not tainted syzkaller #0 [ 1812.877179][T29015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1812.887445][T29015] Call Trace: [ 1812.890755][T29015] [ 1812.893718][T29015] dump_stack_lvl+0x18c/0x250 [ 1812.898625][T29015] ? show_regs_print_info+0x20/0x20 [ 1812.904216][T29015] ? load_image+0x420/0x420 [ 1812.908946][T29015] ? __might_sleep+0xe0/0xe0 [ 1812.913584][T29015] ? __lock_acquire+0x7d80/0x7d80 [ 1812.918922][T29015] should_fail_ex+0x394/0x4c0 [ 1812.923831][T29015] should_failslab+0x9/0x20 [ 1812.928470][T29015] slab_pre_alloc_hook+0x59/0x300 [ 1812.933735][T29015] ? allocate_cgrp_cset_links+0xaa/0x320 [ 1812.939419][T29015] __kmem_cache_alloc_node+0x53/0x250 [ 1812.944862][T29015] ? allocate_cgrp_cset_links+0xaa/0x320 [ 1812.950555][T29015] kmalloc_trace+0x2a/0xe0 [ 1812.955021][T29015] allocate_cgrp_cset_links+0xaa/0x320 [ 1812.960593][T29015] find_css_set+0xa12/0x15c0 [ 1812.965340][T29015] ? cgroup_migrate_prepare_dst+0x610/0x610 [ 1812.971370][T29015] ? mark_lock+0x94/0x320 [ 1812.975933][T29015] cgroup_migrate_prepare_dst+0x118/0x610 [ 1812.981800][T29015] cgroup_attach_task+0x5a6/0x8e0 [ 1812.986872][T29015] ? cgroup_attach_task+0x25d/0x8e0 [ 1812.992112][T29015] ? cgroup_migrate_execute+0xf20/0xf20 [ 1812.997974][T29015] ? get_task_cred+0x23/0x300 [ 1813.002768][T29015] ? get_task_cred+0x2c1/0x300 [ 1813.007837][T29015] ? get_task_cred+0x23/0x300 [ 1813.012645][T29015] __cgroup1_procs_write+0x2ed/0x3e0 [ 1813.018138][T29015] ? cgroup_pidlist_destroy_work_fn+0x1f0/0x1f0 [ 1813.024600][T29015] ? cgroup_pidlist_stop+0xf0/0xf0 [ 1813.030039][T29015] cgroup_file_write+0x2cd/0x6a0 [ 1813.035029][T29015] ? kernfs_fop_write_iter+0x1dc/0x520 [ 1813.041066][T29015] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1813.046492][T29015] ? __virt_addr_valid+0x10c/0x380 [ 1813.051907][T29015] ? __virt_addr_valid+0x10c/0x380 [ 1813.057738][T29015] ? cgroup_seqfile_stop+0xd0/0xd0 [ 1813.063438][T29015] kernfs_fop_write_iter+0x3a4/0x520 [ 1813.068942][T29015] vfs_write+0x474/0x9a0 [ 1813.073419][T29015] ? file_end_write+0x250/0x250 [ 1813.078314][T29015] ? __fget_files+0x3fc/0x460 [ 1813.083027][T29015] ? __fdget_pos+0x2a3/0x330 [ 1813.087734][T29015] ? ksys_write+0x74/0x260 [ 1813.092201][T29015] ksys_write+0x151/0x260 [ 1813.096643][T29015] ? __ia32_sys_read+0x90/0x90 [ 1813.101600][T29015] ? lockdep_hardirqs_on+0x98/0x150 [ 1813.106910][T29015] do_syscall_64+0x55/0xb0 [ 1813.111346][T29015] ? clear_bhb_loop+0x40/0x90 [ 1813.116089][T29015] ? clear_bhb_loop+0x40/0x90 [ 1813.120812][T29015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1813.126902][T29015] RIP: 0033:0x7f802ed9e0d9 [ 1813.131516][T29015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1813.151152][T29015] RSP: 002b:00007f802fc41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1813.159674][T29015] RAX: ffffffffffffffda RBX: 00007f802f025fa0 RCX: 00007f802ed9e0d9 [ 1813.167661][T29015] RDX: 0000000000000012 RSI: 0000200000000380 RDI: 0000000000000006 [ 1813.175655][T29015] RBP: 00007f802fc41090 R08: 0000000000000000 R09: 0000000000000000 [ 1813.183637][T29015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1813.191622][T29015] R13: 00007f802f026038 R14: 00007f802f025fa0 R15: 00007ffc9099c228 [ 1813.199710][T29015] [ 1813.567498][T29024] __nla_validate_parse: 4 callbacks suppressed [ 1813.567522][T29024] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7115'. [ 1814.341116][T29033] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7119'. [ 1814.575649][T29044] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7121'. [ 1814.781238][T29046] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7123'. [ 1817.249669][T29052] FAULT_INJECTION: forcing a failure. [ 1817.249669][T29052] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.268853][T29052] CPU: 0 PID: 29052 Comm: syz.3.7126 Not tainted syzkaller #0 [ 1817.276952][T29052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1817.288029][T29052] Call Trace: [ 1817.291365][T29052] [ 1817.294515][T29052] dump_stack_lvl+0x18c/0x250 [ 1817.299341][T29052] ? sctp_sendmsg+0x1519/0x27b0 [ 1817.304370][T29052] ? ___sys_sendmsg+0x2a6/0x360 [ 1817.310436][T29052] ? show_regs_print_info+0x20/0x20 [ 1817.316149][T29052] ? load_image+0x420/0x420 [ 1817.320916][T29052] should_fail_ex+0x394/0x4c0 [ 1817.326581][T29052] should_failslab+0x9/0x20 [ 1817.331322][T29052] slab_pre_alloc_hook+0x59/0x300 [ 1817.336836][T29052] ? sctp_add_bind_addr+0x8c/0x360 [ 1817.342016][T29052] __kmem_cache_alloc_node+0x53/0x250 [ 1817.347564][T29052] ? sctp_add_bind_addr+0x8c/0x360 [ 1817.352998][T29052] kmalloc_trace+0x2a/0xe0 [ 1817.357666][T29052] sctp_add_bind_addr+0x8c/0x360 [ 1817.362953][T29052] sctp_copy_local_addr_list+0x31b/0x4e0 [ 1817.368811][T29052] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 1817.374834][T29052] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 1817.381617][T29052] ? sctp_v4_is_any+0x35/0x60 [ 1817.382595][T29056] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7125'. [ 1817.387119][T29052] ? sctp_copy_one_addr+0x8c/0x350 [ 1817.387201][T29052] sctp_bind_addr_copy+0xb3/0x3c0 [ 1817.387230][T29052] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1817.413702][T29052] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1817.419400][T29052] ? __sctp_connect+0xd80/0xd80 [ 1817.424417][T29052] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1817.429950][T29052] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1817.435667][T29052] ? security_sctp_bind_connect+0x89/0xb0 [ 1817.441813][T29052] sctp_sendmsg+0x1519/0x27b0 [ 1817.446923][T29052] ? sctp_getsockopt+0xb60/0xb60 [ 1817.452120][T29052] ? aa_af_perm+0x330/0x330 [ 1817.457207][T29052] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1817.463913][T29052] ? sock_rps_record_flow+0x19/0x3f0 [ 1817.469278][T29052] ? inet_sendmsg+0xce/0x2a0 [ 1817.474340][T29052] ? inet_send_prepare+0x250/0x250 [ 1817.479621][T29052] ____sys_sendmsg+0x61b/0x980 [ 1817.484700][T29052] ? __asan_memset+0x22/0x40 [ 1817.489508][T29052] ? __sys_sendmsg_sock+0x30/0x30 [ 1817.494746][T29052] ? __import_iovec+0x5f2/0x850 [ 1817.500690][T29052] ? import_iovec+0x73/0xa0 [ 1817.505353][T29052] ___sys_sendmsg+0x2a6/0x360 [ 1817.510128][T29052] ? __sys_sendmsg+0x2b0/0x2b0 [ 1817.515225][T29052] ? __lock_acquire+0x7d80/0x7d80 [ 1817.520417][T29052] __se_sys_sendmsg+0x1d0/0x2c0 [ 1817.525472][T29052] ? __x64_sys_sendmsg+0x80/0x80 [ 1817.531187][T29052] ? lockdep_hardirqs_on+0x98/0x150 [ 1817.537230][T29052] do_syscall_64+0x55/0xb0 [ 1817.542298][T29052] ? clear_bhb_loop+0x40/0x90 [ 1817.547384][T29052] ? clear_bhb_loop+0x40/0x90 [ 1817.553081][T29052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1817.559282][T29052] RIP: 0033:0x7fafbd19e0d9 [ 1817.563998][T29052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.588505][T29052] RSP: 002b:00007fafbe0e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1817.598131][T29052] RAX: ffffffffffffffda RBX: 00007fafbd425fa0 RCX: 00007fafbd19e0d9 [ 1817.607581][T29052] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1817.616216][T29052] RBP: 00007fafbe0e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1817.625206][T29052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1817.634096][T29052] R13: 00007fafbd426038 R14: 00007fafbd425fa0 R15: 00007ffdb011f6b8 [ 1817.643696][T29052] [ 1818.279523][T29065] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7131'. [ 1818.666553][T29074] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1818.681029][T29074] syzkaller1: linktype set to 769 [ 1818.764394][T29073] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7134'. [ 1818.878647][T29067] netlink: 'syz.2.7132': attribute type 3 has an invalid length. [ 1818.934688][T29067] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.7132'. [ 1818.957683][T29079] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.7136'. [ 1819.057704][T29081] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7137'. [ 1820.067505][T29101] FAULT_INJECTION: forcing a failure. [ 1820.067505][T29101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1820.105529][T29101] CPU: 0 PID: 29101 Comm: syz.4.7146 Not tainted syzkaller #0 [ 1820.114292][T29101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1820.125185][T29101] Call Trace: [ 1820.128473][T29101] [ 1820.131629][T29101] dump_stack_lvl+0x18c/0x250 [ 1820.136785][T29101] ? show_regs_print_info+0x20/0x20 [ 1820.142142][T29101] ? load_image+0x420/0x420 [ 1820.147582][T29101] ? __might_fault+0xaa/0x120 [ 1820.152387][T29101] ? __lock_acquire+0x7d80/0x7d80 [ 1820.157454][T29101] should_fail_ex+0x394/0x4c0 [ 1820.162356][T29101] _copy_from_iter+0x1cd/0x1290 [ 1820.167241][T29101] ? rep_movs_alternative+0x4a/0x90 [ 1820.172498][T29101] ? copyout_mc+0x70/0x70 [ 1820.176915][T29101] ? copyout_mc+0x70/0x70 [ 1820.181480][T29101] ? __virt_addr_valid+0x10c/0x380 [ 1820.186993][T29101] ? page_copy_sane+0x16a/0x270 [ 1820.191966][T29101] copy_page_from_iter+0x7b/0x100 [ 1820.197369][T29101] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 1820.203220][T29101] tun_get_user+0xc84/0x3d70 [ 1820.208145][T29101] ? trace_event_raw_event_lock+0x1d0/0x240 [ 1820.214143][T29101] ? aa_file_perm+0x3e3/0xee0 [ 1820.218855][T29101] ? rcu_read_unlock+0xa0/0xa0 [ 1820.223823][T29101] ? tun_get+0x1c/0x2e0 [ 1820.228258][T29101] ? __lock_acquire+0x7d80/0x7d80 [ 1820.233314][T29101] ? tun_get+0x1c/0x2e0 [ 1820.237505][T29101] tun_chr_write_iter+0x119/0x200 [ 1820.242735][T29101] vfs_write+0x474/0x9a0 [ 1820.247132][T29101] ? file_end_write+0x250/0x250 [ 1820.252021][T29101] ? __fget_files+0x3fc/0x460 [ 1820.257184][T29101] ? __fdget_pos+0x1d8/0x330 [ 1820.261887][T29101] ? ksys_write+0x74/0x260 [ 1820.266329][T29101] ksys_write+0x151/0x260 [ 1820.270689][T29101] ? __ia32_sys_read+0x90/0x90 [ 1820.275493][T29101] ? lockdep_hardirqs_on+0x98/0x150 [ 1820.281240][T29101] do_syscall_64+0x55/0xb0 [ 1820.285762][T29101] ? clear_bhb_loop+0x40/0x90 [ 1820.291971][T29101] ? clear_bhb_loop+0x40/0x90 [ 1820.296701][T29101] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1820.303328][T29101] RIP: 0033:0x7f802ed9e0d9 [ 1820.307815][T29101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1820.328593][T29101] RSP: 002b:00007f802fc41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1820.337211][T29101] RAX: ffffffffffffffda RBX: 00007f802f025fa0 RCX: 00007f802ed9e0d9 [ 1820.345849][T29101] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1820.355068][T29101] RBP: 00007f802fc41090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.363408][T29101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1820.371506][T29101] R13: 00007f802f026038 R14: 00007f802f025fa0 R15: 00007ffc9099c228 [ 1820.380442][T29101] [ 1820.539656][T29107] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7148'. [ 1820.964064][T29121] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7152'. [ 1821.374968][T29123] netlink: 'syz.0.7154': attribute type 3 has an invalid length. [ 1821.454771][T29123] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.7154'. [ 1822.165279][T29134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7160'. [ 1822.216364][T29136] netlink: 'syz.3.7159': attribute type 30 has an invalid length. [ 1823.650872][T29155] FAULT_INJECTION: forcing a failure. [ 1823.650872][T29155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1823.695754][T29155] CPU: 0 PID: 29155 Comm: syz.2.7168 Not tainted syzkaller #0 [ 1823.703738][T29155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1823.714624][T29155] Call Trace: [ 1823.717946][T29155] [ 1823.720918][T29155] dump_stack_lvl+0x18c/0x250 [ 1823.725652][T29155] ? show_regs_print_info+0x20/0x20 [ 1823.731259][T29155] ? load_image+0x420/0x420 [ 1823.733728][T29159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7170'. [ 1823.736320][T29155] ? __lock_acquire+0x7d80/0x7d80 [ 1823.736362][T29155] should_fail_ex+0x394/0x4c0 [ 1823.736396][T29155] _copy_to_user+0x2f/0xa0 [ 1823.736422][T29155] simple_read_from_buffer+0xe7/0x150 [ 1823.736450][T29155] proc_fail_nth_read+0x1e8/0x260 [ 1823.772295][T29155] ? proc_fault_inject_write+0x360/0x360 [ 1823.778752][T29155] ? fsnotify_perm+0x271/0x5e0 [ 1823.783949][T29155] ? proc_fault_inject_write+0x360/0x360 [ 1823.790264][T29155] vfs_read+0x298/0x990 [ 1823.794769][T29155] ? kernel_read+0x1e0/0x1e0 [ 1823.799871][T29155] ? __fget_files+0x28/0x460 [ 1823.805357][T29155] ? __fget_files+0x3fc/0x460 [ 1823.810160][T29155] ? __fdget_pos+0x2a3/0x330 [ 1823.814958][T29155] ? ksys_read+0x74/0x260 [ 1823.819661][T29155] ksys_read+0x151/0x260 [ 1823.824801][T29155] ? vfs_write+0x9a0/0x9a0 [ 1823.829338][T29155] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1823.836127][T29155] do_syscall_64+0x55/0xb0 [ 1823.840768][T29155] ? clear_bhb_loop+0x40/0x90 [ 1823.845839][T29155] ? clear_bhb_loop+0x40/0x90 [ 1823.850720][T29155] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1823.857207][T29155] RIP: 0033:0x7f8ded75e90e [ 1823.862368][T29155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1823.883528][T29155] RSP: 002b:00007f8dee75afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1823.892936][T29155] RAX: ffffffffffffffda RBX: 00007f8dee75b6c0 RCX: 00007f8ded75e90e [ 1823.901034][T29155] RDX: 000000000000000f RSI: 00007f8dee75b0a0 RDI: 0000000000000008 [ 1823.909227][T29155] RBP: 00007f8dee75b090 R08: 0000000000000000 R09: 0000000000000000 [ 1823.917488][T29155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1823.925564][T29155] R13: 00007f8deda26038 R14: 00007f8deda25fa0 R15: 00007ffdd3dd3548 [ 1823.933831][T29155] [ 1824.133043][T29162] FAULT_INJECTION: forcing a failure. [ 1824.133043][T29162] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.206997][T29162] CPU: 0 PID: 29162 Comm: syz.0.7171 Not tainted syzkaller #0 [ 1824.214588][T29162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1824.224761][T29162] Call Trace: [ 1824.228295][T29162] [ 1824.231250][T29162] dump_stack_lvl+0x18c/0x250 [ 1824.235975][T29162] ? show_regs_print_info+0x20/0x20 [ 1824.241443][T29162] ? load_image+0x420/0x420 [ 1824.246234][T29162] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1824.252437][T29162] should_fail_ex+0x394/0x4c0 [ 1824.257356][T29162] should_failslab+0x9/0x20 [ 1824.261898][T29162] slab_pre_alloc_hook+0x59/0x300 [ 1824.267401][T29162] kmem_cache_alloc+0x5a/0x2c0 [ 1824.272276][T29162] ? skb_clone+0x1eb/0x370 [ 1824.276810][T29162] skb_clone+0x1eb/0x370 [ 1824.281463][T29162] __netlink_deliver_tap+0x411/0x7f0 [ 1824.287375][T29162] ? netlink_deliver_tap+0x2e/0x1b0 [ 1824.292699][T29162] netlink_deliver_tap+0x19c/0x1b0 [ 1824.298116][T29162] netlink_dump+0x95b/0xec0 [ 1824.303097][T29162] ? netlink_lookup+0x200/0x200 [ 1824.309057][T29162] ? netlink_lookup+0x30/0x200 [ 1824.314333][T29162] ? netlink_lookup+0x30/0x200 [ 1824.319222][T29162] __netlink_dump_start+0x57c/0x7a0 [ 1824.324699][T29162] rtnetlink_rcv_msg+0xe19/0xf90 [ 1824.330058][T29162] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1824.335367][T29162] ? neigh_get+0xd20/0xd20 [ 1824.340063][T29162] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1824.346125][T29162] ? rtnetlink_bind+0x80/0x80 [ 1824.351122][T29162] ? perf_trace_preemptirq_template+0x269/0x330 [ 1824.357615][T29162] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1824.364512][T29162] ? lock_chain_count+0x20/0x20 [ 1824.369650][T29162] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1824.375226][T29162] ? lockdep_hardirqs_on+0x98/0x150 [ 1824.381547][T29162] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1824.387280][T29162] ? _local_bh_enable+0xa0/0xa0 [ 1824.392763][T29162] ? __dev_queue_xmit+0x275/0x3640 [ 1824.398344][T29162] ? __dev_queue_xmit+0x1bc2/0x3640 [ 1824.403740][T29162] ? __dev_queue_xmit+0x275/0x3640 [ 1824.408965][T29162] ? neigh_get+0xd20/0xd20 [ 1824.413573][T29162] ? ref_tracker_free+0x686/0x830 [ 1824.418618][T29162] netlink_rcv_skb+0x235/0x4c0 [ 1824.423404][T29162] ? rtnetlink_bind+0x80/0x80 [ 1824.428111][T29162] ? netlink_ack+0x1160/0x1160 [ 1824.433074][T29162] ? __lock_acquire+0x7d80/0x7d80 [ 1824.438126][T29162] ? netlink_deliver_tap+0x2e/0x1b0 [ 1824.443920][T29162] netlink_unicast+0x7b1/0x930 [ 1824.448792][T29162] netlink_sendmsg+0x8d0/0xbf0 [ 1824.453579][T29162] ? netlink_getsockopt+0x590/0x590 [ 1824.458894][T29162] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1824.464458][T29162] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1824.470444][T29162] ? security_socket_sendmsg+0x80/0xa0 [ 1824.476033][T29162] ? netlink_getsockopt+0x590/0x590 [ 1824.481679][T29162] ____sys_sendmsg+0x61b/0x980 [ 1824.486636][T29162] ? __asan_memset+0x22/0x40 [ 1824.491355][T29162] ? __sys_sendmsg_sock+0x30/0x30 [ 1824.497048][T29162] ? __import_iovec+0x5f2/0x850 [ 1824.502727][T29162] ? import_iovec+0x73/0xa0 [ 1824.507741][T29162] ___sys_sendmsg+0x2a6/0x360 [ 1824.512632][T29162] ? __sys_sendmsg+0x2b0/0x2b0 [ 1824.517487][T29162] __se_sys_sendmsg+0x1d0/0x2c0 [ 1824.522551][T29162] ? __x64_sys_sendmsg+0x80/0x80 [ 1824.527525][T29162] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1824.534185][T29162] do_syscall_64+0x55/0xb0 [ 1824.538715][T29162] ? clear_bhb_loop+0x40/0x90 [ 1824.543498][T29162] ? clear_bhb_loop+0x40/0x90 [ 1824.548548][T29162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1824.554485][T29162] RIP: 0033:0x7f51a859e0d9 [ 1824.559178][T29162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.579170][T29162] RSP: 002b:00007f51a954b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1824.588866][T29162] RAX: ffffffffffffffda RBX: 00007f51a8825fa0 RCX: 00007f51a859e0d9 [ 1824.597690][T29162] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1824.606558][T29162] RBP: 00007f51a954b090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.615736][T29162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1824.624820][T29162] R13: 00007f51a8826038 R14: 00007f51a8825fa0 R15: 00007ffe6daa0518 [ 1824.634514][T29162] [ 1824.836939][T29174] netlink: 'syz.4.7174': attribute type 3 has an invalid length. [ 1824.887564][T29174] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.7174'. [ 1824.935603][T29171] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.7175'. [ 1825.175639][T29179] netlink: 'syz.0.7186': attribute type 3 has an invalid length. [ 1825.212377][T29179] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.7186'. [ 1825.278383][T29184] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7179'. [ 1825.365198][T29186] netlink: 'syz.4.7178': attribute type 3 has an invalid length. [ 1825.411952][T29186] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.7178'. [ 1825.595276][T29188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7180'. [ 1825.735529][T29190] netlink: 'syz.2.7181': attribute type 10 has an invalid length. [ 1826.028451][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1826.202687][T29209] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7190'. [ 1826.239723][T29212] syzkaller0: entered promiscuous mode [ 1826.249887][T29212] syzkaller0: entered allmulticast mode [ 1826.273798][T29212] syzkaller0: mtu greater than device maximum [ 1826.323118][T29208] netlink: 'syz.4.7191': attribute type 3 has an invalid length. [ 1826.333430][T29208] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.7191'. [ 1826.550083][T29216] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7193'. [ 1827.317138][T29236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7201'. [ 1827.514695][T11320] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1827.525622][T11320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1827.535409][T11320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1827.591998][T11320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1827.600382][T11320] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1827.609977][T11320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1827.918378][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.077944][T29263] netlink: 'syz.0.7206': attribute type 3 has an invalid length. [ 1828.158304][T29255] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1828.171813][T29255] syzkaller1: linktype set to 769 [ 1828.199605][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.313735][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.849638][T29239] chnl_net:caif_netlink_parms(): no params data found [ 1828.952044][ T48] tipc: Left network mode [ 1829.188591][T29292] netlink: 'syz.2.7216': attribute type 3 has an invalid length. [ 1829.672038][T11320] Bluetooth: hci1: command tx timeout [ 1830.052348][T29318] __nla_validate_parse: 6 callbacks suppressed [ 1830.052373][T29318] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7222'. [ 1830.101713][T29321] netlink: 'syz.0.7220': attribute type 3 has an invalid length. [ 1830.122942][T29239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.137915][T29321] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.7220'. [ 1830.149456][T29239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.190552][T29239] bridge_slave_0: entered allmulticast mode [ 1830.216776][T29239] bridge_slave_0: entered promiscuous mode [ 1830.228941][T29239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.237930][T29239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.246208][T29239] bridge_slave_1: entered allmulticast mode [ 1830.254893][T29239] bridge_slave_1: entered promiscuous mode [ 1830.448605][T29317] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1830.462942][T29317] syzkaller1: linktype set to 769 [ 1830.472794][T29309] delete_channel: no stack [ 1830.595483][T29239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1830.638403][T29239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1830.778097][T29331] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7225'. [ 1830.846219][T29332] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7226'. [ 1831.048201][T29239] team0: Port device team_slave_0 added [ 1831.072149][T29239] team0: Port device team_slave_1 added [ 1831.181073][T29338] netlink: 'syz.2.7228': attribute type 10 has an invalid length. [ 1831.331038][T29239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1831.351636][T29239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1831.390135][T29239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1831.478014][T29346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7231'. [ 1831.500705][T29239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1831.511029][T29239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1831.542199][T29239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1831.680257][T29355] FAULT_INJECTION: forcing a failure. [ 1831.680257][T29355] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.700285][T29355] CPU: 1 PID: 29355 Comm: syz.2.7234 Not tainted syzkaller #0 [ 1831.707925][T29355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1831.718201][T29355] Call Trace: [ 1831.721527][T29355] [ 1831.724593][T29355] dump_stack_lvl+0x18c/0x250 [ 1831.729513][T29355] ? show_regs_print_info+0x20/0x20 [ 1831.734858][T29355] ? load_image+0x420/0x420 [ 1831.739418][T29355] ? __might_sleep+0xe0/0xe0 [ 1831.744063][T29355] ? __lock_acquire+0x7d80/0x7d80 [ 1831.749238][T29355] should_fail_ex+0x394/0x4c0 [ 1831.754056][T29355] should_failslab+0x9/0x20 [ 1831.758938][T29355] slab_pre_alloc_hook+0x59/0x300 [ 1831.764191][T29355] ? __get_vm_area_node+0x125/0x370 [ 1831.769421][T29355] __kmem_cache_alloc_node+0x53/0x250 [ 1831.774921][T29355] ? __get_vm_area_node+0x125/0x370 [ 1831.780697][T29355] kmalloc_node_trace+0x26/0xe0 [ 1831.785582][T29355] __get_vm_area_node+0x125/0x370 [ 1831.790643][T29355] __vmalloc_node_range+0x36f/0x1320 [ 1831.796150][T29355] ? netlink_sendmsg+0x602/0xbf0 [ 1831.801144][T29355] ? netlink_insert+0x1094/0x1390 [ 1831.806741][T29355] ? netlink_insert+0x2ba/0x1390 [ 1831.812052][T29355] ? free_vm_area+0x50/0x50 [ 1831.816669][T29355] ? netlink_sendmsg+0x602/0xbf0 [ 1831.821723][T29355] vmalloc+0x79/0x90 [ 1831.825853][T29355] ? netlink_sendmsg+0x602/0xbf0 [ 1831.830943][T29355] netlink_sendmsg+0x602/0xbf0 [ 1831.835941][T29355] ? netlink_getsockopt+0x590/0x590 [ 1831.841740][T29355] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1831.847557][T29355] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1831.853064][T29355] ? security_socket_sendmsg+0x80/0xa0 [ 1831.858747][T29355] sock_write_iter+0x2dc/0x420 [ 1831.863559][T29355] ? sock_read_iter+0x3f0/0x3f0 [ 1831.868549][T29355] ? common_file_perm+0x198/0x1f0 [ 1831.874126][T29355] vfs_write+0x474/0x9a0 [ 1831.878568][T29355] ? file_end_write+0x250/0x250 [ 1831.883532][T29355] ? __fget_files+0x3fc/0x460 [ 1831.888350][T29355] ? __fdget_pos+0x1d8/0x330 [ 1831.893241][T29355] ? ksys_write+0x74/0x260 [ 1831.897813][T29355] ksys_write+0x151/0x260 [ 1831.902217][T29355] ? __ia32_sys_read+0x90/0x90 [ 1831.907415][T29355] ? lockdep_hardirqs_on+0x98/0x150 [ 1831.912909][T29355] do_syscall_64+0x55/0xb0 [ 1831.917345][T29355] ? clear_bhb_loop+0x40/0x90 [ 1831.922054][T29355] ? clear_bhb_loop+0x40/0x90 [ 1831.926872][T29355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1831.932819][T29355] RIP: 0033:0x7f8ded79e0d9 [ 1831.937262][T29355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.957060][T29355] RSP: 002b:00007f8dee75b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1831.965605][T29355] RAX: ffffffffffffffda RBX: 00007f8deda25fa0 RCX: 00007f8ded79e0d9 [ 1831.973896][T29355] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1831.981895][T29355] RBP: 00007f8dee75b090 R08: 0000000000000000 R09: 0000000000000000 [ 1831.990121][T29355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1831.998567][T29355] R13: 00007f8deda26038 R14: 00007f8deda25fa0 R15: 00007ffdd3dd3548 [ 1832.006750][T29355] [ 1832.034667][T11320] Bluetooth: hci1: command tx timeout [ 1832.046103][T29355] syz.2.7234: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1832.060779][T29355] CPU: 1 PID: 29355 Comm: syz.2.7234 Not tainted syzkaller #0 [ 1832.068706][T29355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1832.079077][T29355] Call Trace: [ 1832.082398][T29355] [ 1832.085367][T29355] dump_stack_lvl+0x18c/0x250 [ 1832.090102][T29355] ? show_regs_print_info+0x20/0x20 [ 1832.095341][T29355] ? load_image+0x420/0x420 [ 1832.099895][T29355] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1832.106460][T29355] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1832.110332][T29357] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7236'. [ 1832.113030][T29355] warn_alloc+0x246/0x340 [ 1832.113057][T29355] ? __get_vm_area_node+0x125/0x370 [ 1832.113087][T29355] ? zone_watermark_ok_safe+0x230/0x230 [ 1832.113108][T29355] ? rcu_is_watching+0x15/0xb0 [ 1832.113140][T29355] ? __get_vm_area_node+0x356/0x370 [ 1832.113174][T29355] __vmalloc_node_range+0x394/0x1320 [ 1832.113201][T29355] ? netlink_insert+0x1094/0x1390 [ 1832.113239][T29355] ? netlink_insert+0x2ba/0x1390 [ 1832.113267][T29355] ? free_vm_area+0x50/0x50 [ 1832.113303][T29355] ? netlink_sendmsg+0x602/0xbf0 [ 1832.113325][T29355] vmalloc+0x79/0x90 [ 1832.113351][T29355] ? netlink_sendmsg+0x602/0xbf0 [ 1832.113372][T29355] netlink_sendmsg+0x602/0xbf0 [ 1832.113403][T29355] ? netlink_getsockopt+0x590/0x590 [ 1832.113427][T29355] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1832.113452][T29355] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1832.113478][T29355] ? security_socket_sendmsg+0x80/0xa0 [ 1832.113502][T29355] sock_write_iter+0x2dc/0x420 [ 1832.113531][T29355] ? sock_read_iter+0x3f0/0x3f0 [ 1832.113567][T29355] ? common_file_perm+0x198/0x1f0 [ 1832.113598][T29355] vfs_write+0x474/0x9a0 [ 1832.113750][T29355] ? file_end_write+0x250/0x250 [ 1832.113784][T29355] ? __fget_files+0x3fc/0x460 [ 1832.113823][T29355] ? __fdget_pos+0x1d8/0x330 [ 1832.113848][T29355] ? ksys_write+0x74/0x260 [ 1832.113878][T29355] ksys_write+0x151/0x260 [ 1832.113909][T29355] ? __ia32_sys_read+0x90/0x90 [ 1832.113949][T29355] ? lockdep_hardirqs_on+0x98/0x150 [ 1832.113982][T29355] do_syscall_64+0x55/0xb0 [ 1832.114005][T29355] ? clear_bhb_loop+0x40/0x90 [ 1832.114028][T29355] ? clear_bhb_loop+0x40/0x90 [ 1832.114054][T29355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1832.114079][T29355] RIP: 0033:0x7f8ded79e0d9 [ 1832.114102][T29355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1832.114128][T29355] RSP: 002b:00007f8dee75b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1832.114152][T29355] RAX: ffffffffffffffda RBX: 00007f8deda25fa0 RCX: 00007f8ded79e0d9 [ 1832.114166][T29355] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000003 [ 1832.114180][T29355] RBP: 00007f8dee75b090 R08: 0000000000000000 R09: 0000000000000000 [ 1832.114194][T29355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1832.114207][T29355] R13: 00007f8deda26038 R14: 00007f8deda25fa0 R15: 00007ffdd3dd3548 [ 1832.114241][T29355] [ 1832.211835][T29355] Mem-Info: [ 1832.426100][T29239] hsr_slave_0: entered promiscuous mode [ 1832.444020][T29355] active_anon:6371 inactive_anon:0 isolated_anon:0 [ 1832.444020][T29355] active_file:19300 inactive_file:40640 isolated_file:0 [ 1832.444020][T29355] unevictable:768 dirty:159 writeback:0 [ 1832.444020][T29355] slab_reclaimable:11333 slab_unreclaimable:97218 [ 1832.444020][T29355] mapped:24997 shmem:1379 pagetables:644 [ 1832.444020][T29355] sec_pagetables:0 bounce:0 [ 1832.444020][T29355] kernel_misc_reclaimable:0 [ 1832.444020][T29355] free:1343400 free_pcp:3640 free_cma:0 [ 1832.503269][T29355] Node 0 active_anon:25484kB inactive_anon:0kB active_file:77200kB inactive_file:162360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99988kB dirty:632kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10552kB pagetables:2576kB sec_pagetables:0kB all_unreclaimable? no [ 1832.505884][T29239] hsr_slave_1: entered promiscuous mode [ 1832.572477][T29355] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1832.610152][T29239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1832.626688][T29239] Cannot create hsr debugfs directory [ 1832.638334][T29355] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1832.691480][T29355] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1832.701502][T29355] Node 0 DMA32 free:1453556kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25420kB inactive_anon:0kB active_file:77200kB inactive_file:161532kB unevictable:1536kB writepending:628kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:6508kB local_pcp:2516kB free_cma:0kB [ 1832.770158][T29355] lowmem_reserve[]: 0 0 0 0 0 [ 1832.792046][T29355] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1832.877511][T29355] lowmem_reserve[]: 0 0 0 0 0 [ 1832.891551][T29355] Node 1 Normal free:3904824kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:9216kB local_pcp:0kB free_cma:0kB [ 1832.952014][T29355] lowmem_reserve[]: 0 0 0 0 0 [ 1832.956850][T29355] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1832.978135][T29355] Node 0 DMA32: 934*4kB (UME) 950*8kB (UM) 1005*16kB (UME) 3861*32kB (UME) 2011*64kB (UM) 634*128kB (UM) 286*256kB (UME) 112*512kB (UME) 56*1024kB (UME) 16*2048kB (UM) 213*4096kB (M) = 1453944kB [ 1833.055057][T29355] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1833.067205][T29355] Node 1 Normal: 242*4kB (UME) 58*8kB (UME) 42*16kB (UME) 234*32kB (UME) 81*64kB (UE) 19*128kB (UME) 2*256kB (U) 2*512kB (UM) 1*1024kB (U) 1*2048kB (U) 948*4096kB (ME) = 3904824kB [ 1833.112547][T29355] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1833.168113][T29355] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1833.180016][T29355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1833.222033][T29355] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1833.243746][T29355] 61319 total pagecache pages [ 1833.248490][T29355] 0 pages in swap cache [ 1833.261458][T29355] Free swap = 124996kB [ 1833.276853][T29355] Total swap = 124996kB [ 1833.303126][T29355] 2097051 pages RAM [ 1833.315762][T29355] 0 pages HighMem/MovableOnly [ 1833.322285][T29355] 416959 pages reserved [ 1833.346182][T29355] 0 pages cma reserved [ 1833.799649][T29391] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7243'. [ 1834.072864][T11320] Bluetooth: hci1: command tx timeout [ 1834.228550][T29397] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7245'. [ 1834.278795][T29386] netlink: 'syz.3.7241': attribute type 46 has an invalid length. [ 1834.557774][ T48] bond0: (slave wlan1): Releasing backup interface [ 1835.082748][T29239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1835.141093][ T48] hsr_slave_0: left promiscuous mode [ 1835.161020][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.172005][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.184544][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1835.198333][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1835.208388][ T48] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1835.220839][ T48] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1835.233915][ T48] bridge0: port 3(dummy0) entered disabled state [ 1835.252024][ T48] bridge_slave_1: left allmulticast mode [ 1835.260774][ T48] bridge_slave_1: left promiscuous mode [ 1835.262180][T29422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7252'. [ 1835.285842][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.296680][ T48] bridge_slave_0: left allmulticast mode [ 1835.302746][ T48] bridge_slave_0: left promiscuous mode [ 1835.308832][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.350017][ T48] veth1_vlan: left promiscuous mode [ 1835.359166][ T48] veth0_vlan: left promiscuous mode [ 1835.675086][T29432] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7255'. [ 1836.151599][T11320] Bluetooth: hci1: command tx timeout [ 1836.228470][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1836.307431][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1836.371363][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1836.927569][ T48] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1836.937039][ T48] bond0 (unregistering): Released all slaves [ 1837.057727][T29239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1837.093178][T29239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1837.126765][T29239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1837.478970][T29436] netlink: 'syz.0.7256': attribute type 10 has an invalid length. [ 1837.530991][T29239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1837.581676][T29239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1837.614462][T23505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.621999][T23505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1837.696622][T23508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1837.704340][T23508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1837.986721][T29451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7260'. [ 1838.390008][T29465] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7263'. [ 1838.479014][T29239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1838.578342][T29474] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7264'. [ 1839.144910][T29239] veth0_vlan: entered promiscuous mode [ 1839.197484][T29239] veth1_vlan: entered promiscuous mode [ 1839.303815][T29239] veth0_macvtap: entered promiscuous mode [ 1839.350581][T29239] veth1_macvtap: entered promiscuous mode [ 1839.508746][T29239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1839.547020][T29239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.568069][T29239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1839.612456][T29239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.646851][T29239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1839.694092][T29239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.736696][T29239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1839.774546][T29239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1839.795890][T29239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.816864][T29239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1839.834941][T29239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.858385][T29239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1839.875186][T29239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1839.923214][T29239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1840.008252][T29239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.034768][T29239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.060873][T29239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.072414][T29239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.352134][T29507] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7270'. [ 1840.377688][T23508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1840.403556][T23508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1840.456711][T23502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1840.481053][T23502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1840.772422][T29518] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7273'. [ 1840.953430][T29524] netlink: 'syz.4.7197': attribute type 10 has an invalid length. [ 1840.980924][T29524] veth0_macvtap: left promiscuous mode [ 1842.104388][T29546] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7277'. [ 1842.172863][T29546] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1842.299355][T21804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1842.334288][T21804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1842.350986][T21804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1842.363586][T21804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1842.382777][T21804] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1842.390444][T21804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1842.584003][T29564] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7281'. [ 1842.662054][T23515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.897984][T23515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.096791][T23515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.395085][T29590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7289'. [ 1843.424710][T23515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1843.462096][T29587] netlink: 'syz.0.7287': attribute type 10 has an invalid length. [ 1843.588694][T29554] chnl_net:caif_netlink_parms(): no params data found [ 1844.393675][T29554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.416637][T29554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.436942][T29554] bridge_slave_0: entered allmulticast mode [ 1844.446609][T29554] bridge_slave_0: entered promiscuous mode [ 1844.458018][T29554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.466738][T29554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.481608][T21804] Bluetooth: hci3: command tx timeout [ 1844.491835][T29554] bridge_slave_1: entered allmulticast mode [ 1844.499091][T29554] bridge_slave_1: entered promiscuous mode [ 1844.631088][T29621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7298'. [ 1845.384825][T29554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1845.403395][T29554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1845.668092][T29554] team0: Port device team_slave_0 added [ 1845.740234][T29554] team0: Port device team_slave_1 added [ 1845.772769][T29628] netlink: 'syz.3.7301': attribute type 10 has an invalid length. [ 1845.939922][T29554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1845.963486][T29554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1846.004623][T29554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1846.097780][T29554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1846.108641][T29554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1846.302522][T29554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1846.551806][T21804] Bluetooth: hci3: command tx timeout [ 1846.684141][T29659] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7309'. [ 1846.975373][T29554] hsr_slave_0: entered promiscuous mode [ 1847.023825][T29554] hsr_slave_1: entered promiscuous mode [ 1847.072277][T29554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1847.093797][T29554] Cannot create hsr debugfs directory [ 1848.631639][T21804] Bluetooth: hci3: command tx timeout [ 1848.679990][T29684] netlink: 'syz.3.7314': attribute type 10 has an invalid length. [ 1849.159737][T29696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7317'. [ 1849.950829][T29713] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7325'. [ 1850.673121][T29554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1850.714050][T21804] Bluetooth: hci3: command tx timeout [ 1850.838914][T29554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1850.889917][T29554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1850.998560][T23515] hsr_slave_0: left promiscuous mode [ 1851.012978][T23515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1851.021248][T23515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1851.039709][T23515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1851.048865][T23515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1851.093044][T23515] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1851.100343][T23515] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1851.119543][T23515] batadv0: left allmulticast mode [ 1851.127306][T23515] batadv0: left promiscuous mode [ 1851.147505][T23515] bridge0: port 4(batadv0) entered disabled state [ 1851.186625][T23515] bridge0: port 3(dummy0) entered disabled state [ 1851.441590][T23515] bridge_slave_1: left allmulticast mode [ 1851.447458][T23515] bridge_slave_1: left promiscuous mode [ 1851.456497][T23515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1851.473871][T23515] bridge_slave_0: left allmulticast mode [ 1851.492438][T23515] bridge_slave_0: left promiscuous mode [ 1851.511078][T23515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1851.616039][T23515] veth0_vlan: left promiscuous mode [ 1851.923500][T23515] team0 (unregistering): Port device geneve1 removed [ 1852.668768][T23515] team0 (unregistering): Port device team_slave_1 removed [ 1852.727390][T23515] team0 (unregistering): Port device team_slave_0 removed [ 1852.786924][T23515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1852.847178][T23515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1853.301779][T23515] bond0 (unregistering): Released all slaves [ 1853.409650][T29729] netlink: 'syz.0.7323': attribute type 21 has an invalid length. [ 1853.418144][T29729] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7323'. [ 1853.431602][T29554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1853.442923][T29739] netlink: 'syz.4.7324': attribute type 10 has an invalid length. [ 1853.773376][T29760] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7329'. [ 1853.932392][T29554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1853.939993][T29751] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7328'. [ 1854.057717][T29554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1854.107109][T23508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.115184][T23508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1854.187275][T23508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.194844][T23508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1855.175558][T29554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1855.335540][T29554] veth0_vlan: entered promiscuous mode [ 1855.399657][T29554] veth1_vlan: entered promiscuous mode [ 1855.500825][T29554] veth0_macvtap: entered promiscuous mode [ 1855.545290][T29554] veth1_macvtap: entered promiscuous mode [ 1855.599390][T29554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1855.651550][T29554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.676521][T29554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1855.697258][T29554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.717535][T29554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1855.781561][T29554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.805702][T29554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1855.847216][T29791] netlink: 'syz.3.7336': attribute type 10 has an invalid length. [ 1855.886632][T29554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1855.930565][T29554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.955992][T29554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1855.975985][T29554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.000470][T29554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1856.021755][T29554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.045613][T29554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1856.105027][T29554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.136270][T29554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.168776][T29554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.216148][T29554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.498702][T29815] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7338'. [ 1856.653744][T29817] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7339'. [ 1856.680018][T23478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.721717][T23478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1856.778554][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1856.796723][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1857.624416][T29837] netlink: 'syz.4.7345': attribute type 10 has an invalid length. [ 1857.697830][T29830] netlink: 'syz.2.7276': attribute type 46 has an invalid length. [ 1858.368731][T29853] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7350'. [ 1858.869759][T29859] FAULT_INJECTION: forcing a failure. [ 1858.869759][T29859] name failslab, interval 1, probability 0, space 0, times 0 [ 1858.899978][T29859] CPU: 0 PID: 29859 Comm: syz.4.7352 Not tainted syzkaller #0 [ 1858.907865][T29859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1858.918441][T29859] Call Trace: [ 1858.921786][T29859] [ 1858.924780][T29859] dump_stack_lvl+0x18c/0x250 [ 1858.929553][T29859] ? show_regs_print_info+0x20/0x20 [ 1858.934941][T29859] ? load_image+0x420/0x420 [ 1858.939526][T29859] ? __might_sleep+0xe0/0xe0 [ 1858.944197][T29859] ? __lock_acquire+0x7d80/0x7d80 [ 1858.949316][T29859] ? trace_event_raw_event_lock+0x240/0x240 [ 1858.955290][T29859] should_fail_ex+0x394/0x4c0 [ 1858.960071][T29859] should_failslab+0x9/0x20 [ 1858.964653][T29859] slab_pre_alloc_hook+0x59/0x300 [ 1858.969764][T29859] ? sk_prot_alloc+0xe7/0x210 [ 1858.974518][T29859] ? sk_prot_alloc+0xe7/0x210 [ 1858.979274][T29859] __kmem_cache_alloc_node+0x53/0x250 [ 1858.984741][T29859] ? sk_prot_alloc+0xe7/0x210 [ 1858.989493][T29859] __kmalloc+0xa7/0x240 [ 1858.993740][T29859] sk_prot_alloc+0xe7/0x210 [ 1858.998527][T29859] ? sk_alloc+0x24/0x350 [ 1859.003185][T29859] sk_alloc+0x3a/0x350 [ 1859.007523][T29859] ? bpf_ctx_init+0x154/0x190 [ 1859.012631][T29859] bpf_prog_test_run_skb+0x371/0x18f0 [ 1859.018174][T29859] ? __fget_files+0x28/0x460 [ 1859.022857][T29859] ? __fget_files+0x3fc/0x460 [ 1859.027674][T29859] ? cpu_online+0x60/0x60 [ 1859.032376][T29859] bpf_prog_test_run+0x31f/0x390 [ 1859.037425][T29859] __sys_bpf+0x49d/0x890 [ 1859.041916][T29859] ? bpf_link_show_fdinfo+0x390/0x390 [ 1859.047378][T29859] ? lock_chain_count+0x20/0x20 [ 1859.052561][T29859] __x64_sys_bpf+0x7c/0x90 [ 1859.057307][T29859] do_syscall_64+0x55/0xb0 [ 1859.061875][T29859] ? clear_bhb_loop+0x40/0x90 [ 1859.066952][T29859] ? clear_bhb_loop+0x40/0x90 [ 1859.072022][T29859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1859.078252][T29859] RIP: 0033:0x7f9079f9e0d9 [ 1859.082818][T29859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1859.103732][T29859] RSP: 002b:00007f90781f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1859.113069][T29859] RAX: ffffffffffffffda RBX: 00007f907a225fa0 RCX: 00007f9079f9e0d9 [ 1859.121135][T29859] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a [ 1859.129362][T29859] RBP: 00007f90781f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1859.137684][T29859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1859.145988][T29859] R13: 00007f907a226038 R14: 00007f907a225fa0 R15: 00007ffc4c5904b8 [ 1859.154216][T29859] [ 1859.258578][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1859.269747][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1859.289520][T29863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1859.313970][T29863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1859.324088][T29863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1859.359239][T29863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1859.367634][T29863] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1859.375777][T29863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1859.839154][T23508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.870049][T29868] netlink: 'syz.2.7355': attribute type 10 has an invalid length. [ 1859.902371][T29868] veth0_macvtap: left promiscuous mode [ 1860.147947][T23508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.205762][T29878] tun0: tun_chr_ioctl cmd 1074025675 [ 1860.214152][T29878] tun0: persist enabled [ 1860.238733][T29878] tun0: tun_chr_ioctl cmd 1074025675 [ 1860.245742][T29878] tun0: persist disabled [ 1860.251188][T29878] netlink: 'syz.4.7359': attribute type 10 has an invalid length. [ 1860.259648][T29878] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7359'. [ 1860.280128][T29878] bond0: entered promiscuous mode [ 1860.287850][T29878] bond_slave_0: entered promiscuous mode [ 1860.301914][T29878] bond_slave_1: entered promiscuous mode [ 1860.308420][T29878] bridge0: port 3(bond0) entered blocking state [ 1860.326769][T29878] bridge0: port 3(bond0) entered disabled state [ 1860.342168][T29878] bond0: entered allmulticast mode [ 1860.347937][T29878] bond_slave_0: entered allmulticast mode [ 1860.361544][T29878] bond_slave_1: entered allmulticast mode [ 1860.375715][T29878] bridge0: port 3(bond0) entered blocking state [ 1860.383337][T29878] bridge0: port 3(bond0) entered forwarding state [ 1860.528477][T23508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.720464][T29882] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7360'. [ 1860.964292][T23508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.345223][T29890] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7368'. [ 1861.442150][T21804] Bluetooth: hci4: command tx timeout [ 1861.604346][T29861] chnl_net:caif_netlink_parms(): no params data found [ 1862.257938][T29906] netlink: 'syz.4.7363': attribute type 10 has an invalid length. [ 1862.641615][T29906] bridge0: port 3(bond0) entered disabled state [ 1862.712354][T29906] bond0: left allmulticast mode [ 1862.719201][T29906] bond_slave_0: left allmulticast mode [ 1862.727007][T29906] bond_slave_1: left allmulticast mode [ 1862.735885][T29906] bond0: left promiscuous mode [ 1862.742396][T29906] bond_slave_0: left promiscuous mode [ 1862.758551][T29906] bond_slave_1: left promiscuous mode [ 1862.778662][T29906] bridge0: port 3(bond0) entered disabled state [ 1863.063218][T29906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1863.124677][T29906] team0: Port device bond0 added [ 1863.373256][T29930] FAULT_INJECTION: forcing a failure. [ 1863.373256][T29930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1863.392677][T29861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.400920][T29861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1863.411892][T29861] bridge_slave_0: entered allmulticast mode [ 1863.420896][T29930] CPU: 1 PID: 29930 Comm: syz.2.7367 Not tainted syzkaller #0 [ 1863.422979][T29861] bridge_slave_0: entered promiscuous mode [ 1863.429490][T29930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1863.429505][T29930] Call Trace: [ 1863.449085][T29930] [ 1863.452144][T29930] dump_stack_lvl+0x18c/0x250 [ 1863.456895][T29930] ? show_regs_print_info+0x20/0x20 [ 1863.462241][T29930] ? load_image+0x420/0x420 [ 1863.466802][T29930] ? __lock_acquire+0x7d80/0x7d80 [ 1863.471895][T29930] should_fail_ex+0x394/0x4c0 [ 1863.476638][T29930] _copy_from_user+0x2f/0xe0 [ 1863.481263][T29930] bpf_prog_test_run_skb+0x267/0x18f0 [ 1863.486704][T29930] ? __fget_files+0x28/0x460 [ 1863.491498][T29930] ? __fget_files+0x3fc/0x460 [ 1863.496208][T29930] ? cpu_online+0x60/0x60 [ 1863.500577][T29930] bpf_prog_test_run+0x31f/0x390 [ 1863.505828][T29930] __sys_bpf+0x49d/0x890 [ 1863.510359][T29930] ? bpf_link_show_fdinfo+0x390/0x390 [ 1863.515936][T29930] ? lock_chain_count+0x20/0x20 [ 1863.520819][T29930] __x64_sys_bpf+0x7c/0x90 [ 1863.525486][T29930] do_syscall_64+0x55/0xb0 [ 1863.530181][T29930] ? clear_bhb_loop+0x40/0x90 [ 1863.534985][T29930] ? clear_bhb_loop+0x40/0x90 [ 1863.539767][T29930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1863.545855][T29930] RIP: 0033:0x7ff34c59e0d9 [ 1863.550458][T29930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1863.570602][T29930] RSP: 002b:00007ff34d448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1863.579174][T29930] RAX: ffffffffffffffda RBX: 00007ff34c825fa0 RCX: 00007ff34c59e0d9 [ 1863.587368][T29930] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 1863.595475][T29930] RBP: 00007ff34d448090 R08: 0000000000000000 R09: 0000000000000000 [ 1863.604108][T29930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1863.612919][T29930] R13: 00007ff34c826038 R14: 00007ff34c825fa0 R15: 00007ffee9f0d568 [ 1863.621051][T29930] [ 1863.673159][T21804] Bluetooth: hci4: command tx timeout [ 1863.856642][T29861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.903553][T29861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.961860][T29861] bridge_slave_1: entered allmulticast mode [ 1864.033634][T29861] bridge_slave_1: entered promiscuous mode [ 1864.358327][T29861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1864.384849][T29861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1864.781120][T29943] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7371'. [ 1864.942242][T29861] team0: Port device team_slave_0 added [ 1864.965642][T29861] team0: Port device team_slave_1 added [ 1865.147795][T29951] netlink: 'syz.4.7373': attribute type 10 has an invalid length. [ 1865.752755][T21804] Bluetooth: hci4: command tx timeout [ 1866.086145][T29861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1866.122191][T29861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1866.226766][T29861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1866.452926][T29861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1866.551621][T29861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1866.595137][T29979] netlink: 'syz.3.7378': attribute type 3 has an invalid length. [ 1866.651660][T29861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1866.666994][T29979] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.7378'. [ 1866.969486][T29861] hsr_slave_0: entered promiscuous mode [ 1867.064545][T29861] hsr_slave_1: entered promiscuous mode [ 1867.082440][T29989] netlink: 'syz.2.7380': attribute type 3 has an invalid length. [ 1867.093563][T29861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1867.093649][T29861] Cannot create hsr debugfs directory [ 1867.139278][T29989] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.7380'. [ 1867.497237][T29991] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7383'. [ 1867.506090][T29993] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7382'. [ 1867.831717][T21804] Bluetooth: hci4: command tx timeout [ 1868.361734][T30008] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7385'. [ 1869.369720][T30011] netlink: 'syz.3.7386': attribute type 10 has an invalid length. [ 1869.508842][T30008] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7385'. [ 1869.560216][T30021] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7387'. [ 1869.986066][T23508] hsr_slave_0: left promiscuous mode [ 1870.015905][T23508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1870.039016][T23508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1870.047646][T30031] netlink: 'syz.2.7389': attribute type 3 has an invalid length. [ 1870.061630][T30031] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.7389'. [ 1870.074171][T23508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1870.089975][T23508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1870.113500][T23508] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1870.121736][T23508] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1870.152460][T23508] bridge_slave_1: left allmulticast mode [ 1870.158195][T23508] bridge_slave_1: left promiscuous mode [ 1870.178439][T23508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.213218][T30033] netlink: 'syz.4.7391': attribute type 3 has an invalid length. [ 1870.223272][T30033] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.7391'. [ 1870.231080][T23508] bridge_slave_0: left allmulticast mode [ 1870.247423][T23508] bridge_slave_0: left promiscuous mode [ 1870.255020][T23508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.332814][T23508] veth0_vlan: left promiscuous mode [ 1870.795343][T30040] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7394'. [ 1872.402273][T23508] team0 (unregistering): Port device team_slave_1 removed [ 1872.463394][T23508] team0 (unregistering): Port device team_slave_0 removed [ 1873.383776][T29861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1873.412472][T30048] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7403'. [ 1873.427863][T30052] FAULT_INJECTION: forcing a failure. [ 1873.427863][T30052] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.440731][T30052] CPU: 1 PID: 30052 Comm: syz.2.7397 Not tainted syzkaller #0 [ 1873.445211][T29861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1873.448391][T30052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1873.448407][T30052] Call Trace: [ 1873.469102][T30052] [ 1873.472085][T30052] dump_stack_lvl+0x18c/0x250 [ 1873.476826][T30052] ? show_regs_print_info+0x20/0x20 [ 1873.482158][T30052] ? load_image+0x420/0x420 [ 1873.486893][T30052] should_fail_ex+0x394/0x4c0 [ 1873.491625][T30052] should_failslab+0x9/0x20 [ 1873.496200][T30052] slab_pre_alloc_hook+0x59/0x300 [ 1873.501741][T30052] kmem_cache_alloc+0x5a/0x2c0 [ 1873.506825][T30052] ? skb_clone+0x1eb/0x370 [ 1873.511293][T30052] skb_clone+0x1eb/0x370 [ 1873.515662][T30052] bpf_clone_redirect+0x16d/0x4a0 [ 1873.520736][T30052] bpf_prog_169a6ad24ef2d602+0x5e/0x63 [ 1873.526315][T30052] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1873.532428][T30052] ? perf_trace_preemptirq_template+0x269/0x330 [ 1873.539333][T30052] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1873.545536][T30052] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 1873.551123][T30052] ? lock_chain_count+0x20/0x20 [ 1873.556102][T30052] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1873.562498][T30052] ? __local_bh_disable_ip+0x108/0x1a0 [ 1873.568019][T30052] ? __cant_sleep+0x220/0x220 [ 1873.573024][T30052] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1873.579596][T30052] ? _local_bh_enable+0xa0/0xa0 [ 1873.584605][T30052] ? bpf_test_timer_continue+0x135/0x380 [ 1873.590385][T30052] ? bpf_test_run+0x174/0x870 [ 1873.595213][T30052] bpf_test_run+0x2df/0x870 [ 1873.599966][T30052] ? bpf_test_run+0x174/0x870 [ 1873.604800][T30052] ? dst_hold+0x70/0x70 [ 1873.610052][T30052] ? eth_get_headlen+0x210/0x210 [ 1873.615204][T30052] ? slab_build_skb+0x25a/0x3e0 [ 1873.620171][T30052] ? convert___skb_to_skb+0x3d/0x590 [ 1873.625523][T30052] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 1873.631162][T30052] ? cpu_online+0x60/0x60 [ 1873.635708][T30052] bpf_prog_test_run+0x31f/0x390 [ 1873.640955][T30052] __sys_bpf+0x49d/0x890 [ 1873.645549][T30052] ? bpf_link_show_fdinfo+0x390/0x390 [ 1873.651670][T30052] ? lock_chain_count+0x20/0x20 [ 1873.657161][T30052] __x64_sys_bpf+0x7c/0x90 [ 1873.662041][T30052] do_syscall_64+0x55/0xb0 [ 1873.666855][T30052] ? clear_bhb_loop+0x40/0x90 [ 1873.671718][T30052] ? clear_bhb_loop+0x40/0x90 [ 1873.676540][T30052] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1873.682750][T30052] RIP: 0033:0x7ff34c59e0d9 [ 1873.687201][T30052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1873.707194][T30052] RSP: 002b:00007ff34d448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1873.715647][T30052] RAX: ffffffffffffffda RBX: 00007ff34c825fa0 RCX: 00007ff34c59e0d9 [ 1873.723958][T30052] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 1873.732001][T30052] RBP: 00007ff34d448090 R08: 0000000000000000 R09: 0000000000000000 [ 1873.740024][T30052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1873.748237][T30052] R13: 00007ff34c826038 R14: 00007ff34c825fa0 R15: 00007ffee9f0d568 [ 1873.756490][T30052] [ 1873.870429][T29861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1874.211261][T29861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1875.203608][T30058] netlink: 'syz.2.7399': attribute type 3 has an invalid length. [ 1875.222827][T30058] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.7399'. [ 1875.228371][T29861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1875.240861][T30067] netlink: 'syz.3.7401': attribute type 3 has an invalid length. [ 1875.261550][T30067] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.7401'. [ 1875.337384][T29861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1875.391083][T23515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1875.398497][T23515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1875.477439][T23515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1875.484943][T23515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1876.285178][T30093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7408'. [ 1876.608306][T29861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1876.816487][T29861] veth0_vlan: entered promiscuous mode [ 1876.931254][T30104] netlink: 'syz.3.7411': attribute type 3 has an invalid length. [ 1876.945607][T29861] veth1_vlan: entered promiscuous mode [ 1876.961923][T30104] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.7411'. [ 1877.104530][T29861] veth0_macvtap: entered promiscuous mode [ 1877.127817][T29861] veth1_macvtap: entered promiscuous mode [ 1877.206816][T29861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1877.235674][T29861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1877.261482][T29861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1877.291860][T29861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1877.324303][T29861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1877.351083][T29861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1877.383271][T29861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1877.405085][T29861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1877.429780][T29861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1877.450133][T29861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1877.488504][T29861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1877.512675][T29861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1877.561696][T29861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1877.607117][T29861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1877.656713][T29861] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.710955][T29861] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.746134][T29861] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.787318][T29861] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1881.115316][T23502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1881.138058][T23502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1881.251903][T23511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1881.332414][T23511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1881.415383][T30160] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7418'. [ 1881.552455][T30162] netlink: 'syz.4.7419': attribute type 9 has an invalid length. [ 1881.784307][T30168] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7348'. [ 1882.073376][T30166] netlink: 'syz.2.7420': attribute type 3 has an invalid length. [ 1882.231581][T30166] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.7420'. [ 1883.122158][T29863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1883.140456][T29863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1883.158809][T29863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1883.186394][T29863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1883.211485][T29863] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1883.220124][T29863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1883.618908][T30195] chnl_net:caif_netlink_parms(): no params data found [ 1883.805832][T30195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1883.827138][T30195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1883.841884][T30195] bridge_slave_0: entered allmulticast mode [ 1883.858879][T30195] bridge_slave_0: entered promiscuous mode [ 1883.893306][T30195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1883.920355][T30195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1883.935925][T30195] bridge_slave_1: entered allmulticast mode [ 1883.961185][T30195] bridge_slave_1: entered promiscuous mode [ 1884.271935][T30225] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7429'. [ 1884.327671][T30195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1884.354472][T30195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1884.566288][T30195] team0: Port device team_slave_0 added [ 1885.299993][T23511] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.325893][T30195] team0: Port device team_slave_1 added [ 1885.339848][T30230] netlink: 'syz.0.7432': attribute type 10 has an invalid length. [ 1885.389537][T30230] team0: Port device wlan1 added [ 1885.504453][T23511] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.545088][T30195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1885.571246][T30195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1885.606670][T30195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1885.682583][T30195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1885.689694][T30195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1885.845334][T30195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1886.071548][T21804] Bluetooth: hci0: command tx timeout [ 1886.105047][T23511] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.272959][T30251] netlink: 'syz.4.7438': attribute type 10 has an invalid length. [ 1886.292632][T30251] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7438'. [ 1886.594180][T30260] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7440'. [ 1886.617434][T23511] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.688847][T30195] hsr_slave_0: entered promiscuous mode [ 1886.712262][T30195] hsr_slave_1: entered promiscuous mode [ 1887.965774][T30282] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7449'. [ 1888.162405][T21804] Bluetooth: hci0: command tx timeout [ 1888.297942][T30289] netlink: 'syz.2.7451': attribute type 3 has an invalid length. [ 1888.332079][T30289] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.7451'. [ 1889.098479][T30304] netlink: 'syz.4.7453': attribute type 10 has an invalid length. [ 1889.385003][T30310] netlink: 'syz.2.7455': attribute type 10 has an invalid length. [ 1889.721641][ C1] [ 1889.721651][ C1] ================================ [ 1889.721657][ C1] WARNING: inconsistent lock state [ 1889.721662][ C1] syzkaller #0 Not tainted [ 1889.721671][ C1] -------------------------------- [ 1889.721676][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 1889.721683][ C1] syz.4.7458/30316 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 1889.721703][ C1] ffff888077898020 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 1889.721749][ C1] {INITIAL USE} state was registered at: [ 1889.721755][ C1] lock_acquire+0x19e/0x420 [ 1889.721772][ C1] _raw_spin_lock+0x2e/0x40 [ 1889.721789][ C1] htab_lock_bucket+0x17d/0x300 [ 1889.721804][ C1] htab_map_update_elem+0x237/0x1270 [ 1889.721819][ C1] bpf_map_update_value+0x64b/0x710 [ 1889.721833][ C1] generic_map_update_batch+0x5de/0x800 [ 1889.721848][ C1] bpf_map_do_batch+0x3f2/0x600 [ 1889.721865][ C1] __sys_bpf+0x381/0x890 [ 1889.721881][ C1] __x64_sys_bpf+0x7c/0x90 [ 1889.721895][ C1] do_syscall_64+0x55/0xb0 [ 1889.721912][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1889.721931][ C1] irq event stamp: 1004 [ 1889.721937][ C1] hardirqs last enabled at (1003): [] syscall_enter_from_user_mode+0x25/0x80 [ 1889.721966][ C1] hardirqs last disabled at (1004): [] exc_debug+0x73/0x140 [ 1889.721989][ C1] softirqs last enabled at (952): [] bpf_prog_load+0x1204/0x1610 [ 1889.722010][ C1] softirqs last disabled at (950): [] bpf_ksym_add+0x2c/0x330 [ 1889.722031][ C1] [ 1889.722031][ C1] other info that might help us debug this: [ 1889.722037][ C1] Possible unsafe locking scenario: [ 1889.722037][ C1] [ 1889.722042][ C1] CPU0 [ 1889.722045][ C1] ---- [ 1889.722049][ C1] lock(&htab->lockdep_key); [ 1889.722061][ C1] [ 1889.722065][ C1] lock(&htab->lockdep_key); [ 1889.722075][ C1] [ 1889.722075][ C1] *** DEADLOCK *** [ 1889.722075][ C1] [ 1889.722080][ C1] no locks held by syz.4.7458/30316. [ 1889.722087][ C1] [ 1889.722087][ C1] stack backtrace: [ 1889.722093][ C1] CPU: 1 PID: 30316 Comm: syz.4.7458 Not tainted syzkaller #0 [ 1889.722111][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1889.722120][ C1] Call Trace: [ 1889.722127][ C1] <#DB> [ 1889.722134][ C1] dump_stack_lvl+0x18c/0x250 [ 1889.722154][ C1] ? show_regs_print_info+0x20/0x20 [ 1889.722185][ C1] ? print_usage_bug+0x43d/0x6a0 [ 1889.722206][ C1] ? verify_lock_unused+0x15/0x140 [ 1889.722227][ C1] lock_acquire+0x2c2/0x420 [ 1889.722248][ C1] ? htab_lock_bucket+0x17d/0x300 [ 1889.722269][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1889.722292][ C1] _raw_spin_lock+0x2e/0x40 [ 1889.722307][ C1] ? htab_lock_bucket+0x17d/0x300 [ 1889.722325][ C1] htab_lock_bucket+0x17d/0x300 [ 1889.722346][ C1] ? htab_lru_map_delete_node+0x770/0x770 [ 1889.722368][ C1] ? kvm_guest_state+0xb7/0xf0 [ 1889.722388][ C1] ? jhash+0x3c3/0x740 [ 1889.722405][ C1] htab_map_delete_elem+0x19f/0x640 [ 1889.722424][ C1] ? htab_map_update_elem+0x1270/0x1270 [ 1889.722441][ C1] ? perf_callchain+0x220/0x220 [ 1889.722461][ C1] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 1889.722482][ C1] bpf_overflow_handler+0x1fc/0x510 [ 1889.722508][ C1] ? bpf_overflow_handler+0xde/0x510 [ 1889.722531][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 1889.722557][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 1889.722575][ C1] __perf_event_overflow+0x461/0x660 [ 1889.722595][ C1] perf_swevent_event+0x319/0x570 [ 1889.722613][ C1] ? perf_tp_event+0x1550/0x1550 [ 1889.722629][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 1889.722652][ C1] perf_bp_event+0x319/0x430 [ 1889.722672][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 1889.722694][ C1] ? rep_movs_alternative+0x15/0x90 [ 1889.722723][ C1] ? lock_acquire+0x2c2/0x420 [ 1889.722744][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 1889.722770][ C1] notifier_call_chain+0x18f/0x380 [ 1889.722793][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 1889.722815][ C1] atomic_notifier_call_chain+0xda/0x180 [ 1889.722837][ C1] notify_die+0x145/0x1a0 [ 1889.722860][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 1889.722885][ C1] ? rcu_is_watching+0x15/0xb0 [ 1889.722909][ C1] notify_debug+0x2e/0x50 [ 1889.722953][ C1] exc_debug+0xde/0x140 [ 1889.722974][ C1] asm_exc_debug+0x1e/0x40 [ 1889.722993][ C1] RIP: 0010:rep_movs_alternative+0x15/0x90 [ 1889.723016][ C1] Code: 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 [ 1889.723031][ C1] RSP: 0018:ffffc9000371fd50 EFLAGS: 00040202 [ 1889.723046][ C1] RAX: ffffffff8433b502 RBX: 0000000000000004 RCX: 0000000000000004 [ 1889.723058][ C1] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc9000371fdc0 [ 1889.723070][ C1] RBP: ffffc9000371fee8 R08: ffffc9000371fdc3 R09: 1ffff920006e3fb8 [ 1889.723083][ C1] R10: dffffc0000000000 R11: fffff520006e3fb9 R12: 0000200000000304 [ 1889.723095][ C1] R13: 0000000000000004 R14: ffffc9000371fdc0 R15: 0000200000000300 [ 1889.723111][ C1] ? rcuref_put_slowpath+0x112/0x150 [ 1889.723136][ C1] [ 1889.723142][ C1] [ 1889.723163][ C1] _copy_from_user+0x8b/0xe0 [ 1889.723184][ C1] __sys_bpf+0x23e/0x890 [ 1889.723203][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 1889.723229][ C1] ? lock_chain_count+0x20/0x20 [ 1889.723253][ C1] __x64_sys_bpf+0x7c/0x90 [ 1889.723272][ C1] do_syscall_64+0x55/0xb0 [ 1889.723291][ C1] ? clear_bhb_loop+0x40/0x90 [ 1889.723309][ C1] ? clear_bhb_loop+0x40/0x90 [ 1889.723330][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1889.723349][ C1] RIP: 0033:0x7f9079f9e0d9 [ 1889.723362][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1889.723376][ C1] RSP: 002b:00007f90781f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1889.723392][ C1] RAX: ffffffffffffffda RBX: 00007f907a225fa0 RCX: 00007f9079f9e0d9 [ 1889.723404][ C1] RDX: 0000000000000004 RSI: 0000200000000300 RDI: 0000000000000020 [ 1889.723416][ C1] RBP: 00007f907a035024 R08: 0000000000000000 R09: 0000000000000000 [ 1889.723427][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1889.723437][ C1] R13: 00007f907a226038 R14: 00007f907a225fa0 R15: 00007ffc4c5904b8 [ 1889.723456][ C1] [ 1890.375992][T21804] Bluetooth: hci0: command tx timeout [ 1890.419430][T30195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1890.430699][T30195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1890.445314][T30195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1890.458998][T30195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1890.615101][T30195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1890.691289][T30195] 8021q: adding VLAN 0 to HW filter on device team0 [ 1890.738550][T23502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.745966][T23502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1890.827408][T23502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1890.835545][T23502] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1891.105752][T23511] bond0: (slave wlan1): Releasing backup interface [ 1891.114262][T23511] mac80211_hwsim hwsim42 wlan1 (unregistering): left promiscuous mode [ 1891.122801][T23511] mac80211_hwsim hwsim42 wlan1 (unregistering): left allmulticast mode [ 1891.154868][T30195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1891.253477][T30195] veth0_vlan: entered promiscuous mode [ 1891.268772][T30195] veth1_vlan: entered promiscuous mode [ 1891.310693][T23511] hsr_slave_0: left promiscuous mode [ 1891.317705][T23511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1891.326422][T23511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1891.335445][T23511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1891.343243][T23511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1891.358496][T23511] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1891.366255][T23511] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1891.374605][T23511] bond0: left allmulticast mode [ 1891.379645][T23511] bond_slave_1: left allmulticast mode [ 1891.385614][T23511] team0: left allmulticast mode [ 1891.390555][T23511] team_slave_0: left allmulticast mode [ 1891.396360][T23511] team_slave_1: left allmulticast mode [ 1891.402312][T23511] bridge0: port 4(bond0) entered disabled state [ 1891.410696][T23511] bridge0: port 3(dummy0) entered disabled state [ 1891.419424][T23511] bridge_slave_1: left allmulticast mode [ 1891.425388][T23511] bridge_slave_1: left promiscuous mode [ 1891.432427][T23511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.442829][T23511] bridge_slave_0: left allmulticast mode [ 1891.448590][T23511] bridge_slave_0: left promiscuous mode [ 1891.454806][T23511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.468457][T23511] veth0_vlan: left promiscuous mode [ 1891.731232][T23511] team_slave_1 (unregistering): left promiscuous mode [ 1891.738743][T23511] team0 (unregistering): Port device team_slave_1 removed [ 1891.780920][T23511] team_slave_0 (unregistering): left promiscuous mode [ 1891.788888][T23511] team0 (unregistering): Port device team_slave_0 removed [ 1891.824294][T23511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1891.833975][T23511] bond_slave_1 (unregistering): left promiscuous mode [ 1892.026056][T23511] bond0 (unregistering): (slave team0): Releasing backup interface [ 1892.039753][T23511] team0 (unregistering): left promiscuous mode [ 1892.058498][T23511] bond0 (unregistering): Released all slaves [ 1892.136060][T30195] veth0_macvtap: entered promiscuous mode [ 1892.148222][T30195] veth1_macvtap: entered promiscuous mode [ 1892.170273][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1892.181854][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.192970][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1892.203699][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.213945][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1892.224870][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.237910][T30195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1892.272552][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1892.293106][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.303404][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1892.314917][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.325015][T30195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1892.336212][T30195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1892.348973][T30195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1892.377342][T30195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.388997][T30195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.398370][T21804] Bluetooth: hci0: command tx timeout [ 1892.404483][T30195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.413377][T30195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1892.487309][T30195] ieee80211 phy76: Selected rate control algorithm 'minstrel_ht' [ 1892.508270][T23508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.509872][T30195] ieee80211 phy77: Selected rate control algorithm 'minstrel_ht' [ 1892.521229][T23508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1892.561319][T23508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1892.571264][T23508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50